Revolut confirmed on Sept. 14 that it fulfilled fraudulent customer-data requests submitted by an unauthorized third party using a legitimate government-agency email domain. The disclosure affected a limited number of customers, while Revolut said its systems and customer funds were not compromised.