Revolut and the sharp rise in fraud via Telegram

One of the largest European neobanks, Revolut, has published a detailed report for January–February 2026 warning about a rapid increase in fraudulent schemes carried out through the messenger Telegram. According to the company, the dynamics of attacks have become among the most aggressive in recent years.

According to analysis by Revolut’s security team, the number of phishing attempts and social engineering attacks via Telegram has increased 3–4 times compared to the same period in 2025. This includes not only mass mailings but also targeted schemes in which criminals adapt the scenario to a specific user — taking into account age, profession, geography, and even interests.

Main trend — job scams

The most widespread type of attack at the beginning of 2026 has been so-called job scams — fraud disguised as employment offers. A potential victim is offered “remote work” with high pay and minimal requirements: app testing, ad evaluation, “order management,” or a “financial assistant” role.

The scenario then develops according to several typical models:

• the user is asked to install a third-party application or visit a fake platform;
• they are requested to make a “guarantee payment” or send funds “to activate the account”;
• they are required to pay for “training” or a “license”;
• they are asked to provide bank card details or confirmation codes.

After receiving money or confidential information, the criminals disappear and, in some cases, use the obtained data for further unauthorized transactions.

Other popular schemes

In addition to “job” offers, Revolut specialists identify several persistent fraud directions:

Fake bank support services.
Fraudsters create accounts visually copying official bank profiles and contact clients, reporting a “suspicious transaction.” Under the pretext of protecting the account, they extract confirmation codes or initiate fund transfers.

Pseudo-investments in cryptocurrency.
Users are promised “guaranteed returns,” shown fake profit charts and testimonials. Closed Telegram groups with numerous bots are often used to create the illusion of an active community. After a deposit is made, communication with the “analysts” ceases.

False winnings and compensations.
The victim is informed about winning a lottery, receiving a grant, or obtaining a refund. To “process the payment,” they must pay a tax, fee, or insurance charge — after transferring the money, the fraudsters disappear.

Why Telegram specifically?

The report emphasizes that Telegram has become one of the most convenient tools for criminal schemes for several reasons:

• high level of anonymity;
• ability to create a large number of bots;
• scalable mass messaging;
• difficulty of quickly blocking channels and groups;
• use of disposable accounts and virtual numbers.

In addition, fraudsters actively use secret chat features, auto-deletion of messages, and rapid migration between groups in case of bans.

Statistics and scale

According to Revolut, in January–February 2026 alone, the company blocked more than 1.2 million suspicious links and transactions related to fraudulent activity. This is 280% more than in the same period a year earlier.

A separate trend noted is the growth in average losses per affected client — criminals are increasingly targeting larger sums rather than small mass transfers.

Response measures

Revolut has strengthened internal algorithms for detecting suspicious operations, introduced additional behavioral filters, and expanded its cybersecurity teams. The company also announced expanded cooperation with Telegram to accelerate the blocking of fraudulent accounts and channels.

The neobank’s mobile application is gradually introducing:

• intelligent warnings when transferring funds to suspicious details;
• enhanced fraud risk notifications;
• automatic analysis of transaction context.

Recommendations for users

Revolut experts urge clients to follow basic digital hygiene rules:

– do not click on links from unfamiliar chats and groups;
– do not install applications recommended by unknown individuals;
– verify bank and service contacts only through official websites;
– never share confirmation codes with third parties;
– enable two-factor authentication;
– activate notifications for all transactions.

It is also recommended to treat offers of “guaranteed returns” and overly attractive job conditions with skepticism — if income appears unrealistically high, it is almost always a fraudulent scheme.

Overall trend

The rise in fraud via Telegram reflects a broader trend — the migration of financial crimes into messengers and closed digital ecosystems. As banking filters become more robust, criminals shift their focus to psychological pressure and social engineering.

Revolut emphasizes that combating fraud requires not only technological solutions but also improved financial literacy among users. In an era of rapid digitalization of financial services, security increasingly depends not only on algorithms but also on the attentiveness of the client.