TREE NEWS reports: Revolut disclosed customer passports and full bitcoin transaction histories to a third party that used a real government email domain to pose as an official authority. The fraudulent request was honored by the digital bank, handing over identity documents and complete bitcoin transaction records. The incident was reported on the same day.
Revolut Gave Customer Passports, Bitcoin Records to Fraudulent Government Request
This is a data-governance failure, not a crypto-specific one: the exposure vector was the bank's compliance process, and the bitcoin records were collateral. The detail that matters is that a spoofed government domain was enough to unlock identity documents plus a full transaction history — meaning the verification step that is supposed to gate law-enforcement requests did not hold. Anyone whose KYC data sits with a digital bank is implicated, not just crypto users. The open question is whether regulators treat this as an isolated lapse or as evidence that request-authentication standards across digital banks need tightening.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.