Revolut Gave Customer Passports, Bitcoin Records to Fraudulent Government Request

The core issue is not the forgery itself but that a real government domain was treated as sufficient proof of authority, collapsing the distinction between official letterhead and verified legal process. For crypto users, the exposure is compounded: passports tie identities to wallet histories, turning an identity leak into a permanent, linkable on-chain record. The unanswered questions — scale and timing — are precisely what determine whether this was a narrow lapse or a systemic gap in how custodial platforms validate data demands. Whether regulators treat domain-based verification as inadequate is the point to watch.