Revolut Leaks Passports and Bitcoin Transaction Histories to Fake Government Request

The notable part is the vector: a forged request from a genuine government domain, which turns institutional trust in official email into an attack surface rather than a technical exploit. For crypto users, the exposure is unusually deep — identity documents paired with complete transaction histories create a link between a legal name and on-chain activity that persists regardless of wallet hygiene. Whether such domain-spoofed requests become a recurring pattern across regulated platforms is the open question worth watching.