Revolut Gave Customer Passports, Bitcoin Records to Fraudulent Government Request

This is a data-governance failure, not a crypto-specific one: the exposure vector was the bank's compliance process, and the bitcoin records were collateral. The detail that matters is that a spoofed government domain was enough to unlock identity documents plus a full transaction history — meaning the verification step that is supposed to gate law-enforcement requests did not hold. Anyone whose KYC data sits with a digital bank is implicated, not just crypto users. The open question is whether regulators treat this as an isolated lapse or as evidence that request-authentication standards across digital banks need tightening.