Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC TechCrunch reported on September 12 that Revolut, a fintech giant that provides banking, lending, investment and cryptocurrency services to more than 80 million customers worldwide, has exposed sensitive customer data to unauthorized third parties. [TAG
The U.K. fintech giant, founded in 2015, announced earlier this month that it had received conditional approval for its U.S. national banking license from the Office of the Comptroller of the Currency (OCC).
Sensitive Revolut user information leaked
TechCrunch quoted a Revolut spokesperson as confirming the data breach and characterizing it as "a sophisticated impersonation scam." The report cited evidence posted by on-chain analyst ZachXBT, which included screenshots of emails Revolut sent to affected customers late Friday.
According to the information disclosed by ZachXBT, the leaked identity-related data includes:
- Full name
- Date of birth
- Occupation
- Postal address
- Email address
- Telephone number
- Copy of identification document (passport and/or driver's license)
- Face Recognition Image (Verification Self-timer)
In addition, the leaked financial data includes:
- Account statement
- IBAN number
- Account status
- Account opening date
- Wallet reference number
- Withdrawal record
- Complete transaction history, Including Bitcoin transaction records
ZachXBT said the incident appears to be mainly targeting high-net-worth users. Revolut said only a small number of customers were affected, but did not disclose the exact number.
How Revolut became a victim of false government requests
Revolut stated that they received fraudulent information query requests from legitimate government agencies 'email domain names. Although the email account from which the request was sent was itself unauthorized, it used the official domain name of a government agency. Revolut mistakenly believed that the request was authentic and valid, so he fulfilled the requirement.
Once aware of the data breach, Revolut immediately blocked the email address and notified affected users, relevant government agencies, law enforcement agencies and relevant regulatory agencies. Revolut emphasized that its systems and client funds were not affected.
Leaked bitcoin transactions could lead criminals to victims 'doorsteps
For cryptocurrency users, the leak is particularly worrying because the attacker now has both their bitcoin transaction history and postal address. In the worst case scenario, this combination could lead to criminals coming directly to the door.
Blockchain analytics company Chainalysis reported last month that violent attacks against cryptocurrency holders have surged in recent years, including home robberies, kidnappings and hostage taking. Criminals know that a single person may hold millions of dollars in assets in a smartphone wallet, and that physical threats can force them to transfer funds immediately.
Reports show that so far this year, violent criminals have successfully extorted more than $30 million from cryptocurrency holders. France, the United States, Brazil and Thailand have recorded the most such incidents since 2023, but cryptocurrency-related violence has risen sharply in France over the past year.
