TREE NEWS update: Revolut handed over customer passports and full bitcoin transaction histories to a third party impersonating a government agency using a real government email domain. The fraudulent request, which has not been dated, yielded identity documents and complete bitcoin transaction records. The incident underscores the risk of social-engineering attacks that exploit trusted government email domains to extract customer data from crypto platforms.
Revolut Sent Customer Passports, Bitcoin Records to Fake Government Request
Related Coin Charts
AI take
The notable failure here is procedural, not technical: a real government email domain was treated as sufficient proof of authority, and the data released included full bitcoin transaction histories alongside identity documents. That combination is unusually sensitive, since it links named individuals to on-chain activity that is permanently public and traceable. For crypto platforms, the episode puts verification-of-requester controls under scrutiny, and whether such domain-based trust continues to be accepted is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.
Related News
46m ago
Binance Sees $3.64B Net Outflow After Repaying Most of $6.3B Stolen Assets
3h ago
Xi’an CAS Xiguang Signs Deal with Xidian University on Space-Air-Ground Network
3h ago
OKX ICE Stock-Token Objections Reach 50, Including Nvidia
3h ago
Allgens Medical faces CSRC probe over alleged false financial data
5h ago
Chengdu opens investigation into sulfur-fumigated Angelica sales
5h ago
Swell Lifts Withdrawal Pauses on swETH and rswETH After Rate Reset