Monoup News Digest: Main Updates from Fintech Industry
The global financial services market is evolving faster than ever, and this speed comes with a downside — vulnerability to cyberattacks and social engineering. Today, we break down how scammers managed to trick Revolut and who fell victim to the fintech’s latest data breach. Unsurprisingly, crypto was involved, highlighting another risk factor in modern finance.
At the same time, US regulators are turning their attention toward merchant acquirers and payment processing providers. Nuvei and Humboldt Merchant Services both faced fines following investigations into their relationships with high-risk and fraudulent merchants. One after another, both companies agreed to settlements to avoid trial, though the nature of these investigations suggests they won't be the last in American fintech.
Let’s dive into the key news right now.
Revolut Data Breach Targeted High-Net-Worth Clients
Revolut once again finds itself at the center of a major scandal involving the leak of personal and financial data. The incident was caused by human error and social engineering: compliance department received a request purportedly from an Italian government agency and handed over confidential information to third parties without proper verification. The fraudsters used an authentic government domain, allowing the email to bypass primary security filters.
The dataset handed over to the attackers included a full KYC package: full names, dates of birth, phone numbers, email addresses, physical addresses, as well as passport scans and verification selfies. On top of basic personal data, scammers gained full access to financial statements: IBAN numbers, cash withdrawal histories, and detailed logs of all completed transactions, including cryptocurrency operations.
Revolut representatives attempted to downplay the incident, claiming the leak impacted an “insignificant percentage” of users. However, independent investigations indicate a highly targeted attack. The breach primarily affected wealthy crypto asset holders across the EU, mostly in Switzerland and France. Confirmed victims include former Mt. Gox CEO Mark Karpelès and German entrepreneur Felix Römer.
To make matters worse, the cybercriminals are demanding a ransom of 10,000 BTC from Revolut. To demonstrate their intent, they have already leaked data belonging to a portion of affected clients. Experts note that this incident delivers a heavy blow to the company's reputation ahead of its long-awaited IPO and will inevitably trigger scrutiny from European data protection authorities.
ISO Humboldt Fined for Processing Shell Merchants
US-based payment provider Humboldt Merchant Services came under fire from the Federal Trade Commission (FTC). Operating as an ISO and specializing in high-risk verticals (gambling, nutra, dating), the service was caught processing transactions for fraudulent operations at scale.
According to regulator, Humboldt processed around $100 million in transactions for more than 1,000 fake merchant accounts between 2021 and 2023. Fraudsters routinely set up shell entities and nominee corporate structures to bypass compliance checks and continue accepting payments even after being terminated elsewhere. Provider ignored elevated chargeback rates, helping fraudsters evade monitoring systems, including Mastercard's MATCH list.
To resolve the lawsuit without going to trial, Humboldt agreed to a settlement under which the company will pay $12 million in monetary relief. Additionally, the regulator imposed strict operational restrictions on the provider:
- Complete ban on processing for shell companies, nominee structures, and merchants listed in the MATCH database.
- Strict prohibition on onboarding any business accounts using P.O. Boxes or third-party mail forwarding services as their sole legal or physical address — even if the business operates in a low-risk category.
Humboldt representatives said that blame is on “previous management," stating that current leadership has thoroughly revamped internal compliance procedures and is fully cooperating with authorities.
UPI Network Introduces Merchant Processing Fees
Starting October 15, the Indian government, alongside the National Payments Corporation of India (NPCI), is updating operational framework for UPI, the country's largest instant payment network.
Merchants will now be charged a 0.4% processing fee on transactions, effectively ending a six-year zero-fee policy that helped UPI become the country's dominant payment method.
The new structure does not apply across the board, focusing instead on larger commercial merchant transactions under the following terms:
- Transaction threshold: The 0.4% fee applies strictly to commercial payments exceeding 2,000 Indian rupees ($21).
- Fee cap: The fee is capped at a maximum of 300 rupees per transaction. This means for high-value purchases over 75,000 rupees, the merchant pays a flat fee of 300 rupees.
- Surcharge ban: Regulators explicitly prohibited merchants from passing this cost onto consumers or adding surcharges at checkout. For buyers, transactions remain completely free.
- Exemptions: Person-to-person (P2P) transfers, recurring automated payments, and microtransactions under 2,000 rupees remain free of charge.
Introducing merchant fees allows acquiring banks and fintech platforms to recoup the costs of maintaining UPI’s IT infrastructure, shifting the system from a subsidized state-backed framework toward a self-sustaining commercial model.
Weekly Wrap-Up
This week's developments make it clear that modern fintech has outgrown the “growth at all costs” mentality. Today, key factors for survival and long-term success extend beyond seamless UX and fast settlements — they demand real cybersecurity, uncompromised compliance quality, and sustainable business models.
Revolut breach underscores once again that the most sophisticated cyberattacks target human vulnerabilities rather than technical infrastructure alone. This is why staying informed on industry updates and risk trends is essential for fintech professionals. MonoTalks editorial team helps you stay ahead by publishing regular industry breakdowns, news, and analytical insights. Subscribe to our Telergam channel and follow the updates on this page.
