Just 6 Records, But the no-replyrevolut.com Leak Is a Banking Red Flag

In July 2026, HEROIC analysts found a very small combolist file circulating on Telegram, tied to the domain no-replyrevolut.com. The file contained just 6 records pairing email addresses with plaintext passwords, along with the associated URLs.

Why the no-replyrevolut.com Leak Is Dangerous

Six records is a tiny number compared to major breaches, but the domain name itself is a warning sign: a no-reply address styled after a financial app strongly suggests these credentials are tied to banking or payment notifications. Because the passwords are stored in plaintext, whoever holds this file can read each one directly and attempt to log in with no extra effort.

What Was Exposed in This Leak

• Email addresses
• Plaintext passwords
• URLs linked to each set of credentials

Why This Matters Even for Just 6 Accounts

A financial services related leak, even a small one, carries outsized risk because the accounts involved may be directly tied to money movement. If any of the 6 people in this file reused their password on their banking app, email, or elsewhere, they face a real risk of account takeover and financial fraud, not just a compromised login on some unrelated site.

How a Small Financial Combolist Like This Gets Built

A combolist is a plain text file pairing usernames or emails with passwords, usually pulled from older breaches, phishing pages, or malware infections and repackaged for distribution. Small batches tied to a specific domain, like this one referencing a financial notification address, often come from a phishing campaign or a narrow slice of a larger stolen dataset, then get shared on Telegram in pieces.

Check If You Are Affected

If you use a banking or payment app and think your email address could be part of this leak or any other combolist, HEROIC's free breach scanner checks your information against a database of more than 400 billion exposed records. Run a scan now to see whether your credentials have appeared in this leak, and change any reused passwords right away.