Revolut Gave Customer Passports, Bitcoin Records to Fraudulent Government Request

This incident exposes a structural risk in how regulated crypto platforms handle law-enforcement data requests: verification of the requesting authority, not just the domain, is the weak point. The exposure is not a hack of Revolut's systems but a social-engineering failure, and it affects customers whose identity and on-chain history are now in unknown hands. For the wider market, it sharpens scrutiny on data-handling standards at exchanges and neobanks that custody both fiat identity records and crypto activity. Whether regulators treat this as a compliance failure or an isolated lapse will shape how firms authenticate government requests going forward.