Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Financial technology giant Revolut leaks sensitive customer data for forging government inquiries
Well-known financial technology company Revolut provided malicious attackers with sensitive customer data including copies of passports and complete Bitcoin transaction records after encountering a fraud request disguised as a legitimate government investigation.
According to a customer notification circulated by crypto investigator ZachXBT, Revolut received a request for customer information that appeared to be from a government agency. The request was made from an unauthorized email account using an official domain name. Because the email came with a valid domain name authentication certificate, Revolut mistakenly believed it was authentic and executed the query.
The data leaked this time is extensive. The notice shows that the affected information includes identity details such as name, date of birth and occupation; contact information such as postal address, email and phone number; and documents and verification data such as a copy of a passport or driver's license and facial selfies used for verification.
For cryptocurrency holders, the most worrying thing is the disclosure of financial data. This information includes account statements with IBAN (International Bank Account Number) and wallet reference numbers, withdrawal records, and complete transaction history, including even Bitcoin transaction records. However, Revolut said it did not involve biometric facial telemetry data.
A Revolut spokesperson confirmed the security incident to TechCrunch, describing it as "a complex external impersonation fraud case in which an unauthorized party used emails from a legitimate government agency's domain name to submit false information requests." The company said only a "limited" number of customers had been affected, had blocked relevant email addresses and notified relevant agencies, law enforcement and regulatory agencies. In addition, Revolut emphasized that its systems are operating normally and that no customer funds have been lost. However, the company declined to disclose the specific number of people affected and the names of specific government agencies that were falsely used.
ZachXBT pointed out that the incident seems to be mainly targeting high-net-worth users. In view of the recent frequent violent "wrench attacks" against known cryptocurrency holders, this situation has raised serious concerns. The data breach also drew severe criticism, with multiple users on social media arguing that the incident showed that the "Know Your Customer"(KYC) rule brought risks without producing substantial benefits.
This security breach occurred at a time when many companies that hold personal data of cryptocurrency users are facing severe challenges. Previously, hardware wallet manufacturer Trezor was compromised due to support vendors, resulting in the privacy of tens of thousands of more customers; and social platform X seems to have suffered its own data leakage problem, resulting in a large number of users forced to reset their passwords.
It is reported that Revolut launched the Euro-pegged stable coin EURR this year and is currently considering an initial public offering (IPO).
