PrivacyByDesign

A recent security incident involving Revolut raises a question that goes far beyond one company or one financial institution: how can we reliably verify in the digital world not only where a request for sensitive data comes from, but also who is actually sending it, whether that person is authorized to make the request, and which data they are entitled to access? The case shows that a communication channel can appear legitimate without necessarily proving the identity and authority of the person on the other side.