Digital bank Revolut mistakenly disclosed passport scans and customers’ Bitcoin transaction histories after responding to a fraudulent data request that appeared to come from law enforcement, according to a report detailing the security lapse. Attackers allegedly spoofed official credentials to request sensitive know-your-customer documents and blockchain activity records. Revolut staff reportedly complied without verifying the authenticity of the request through additional channels or internal escalation procedures. The incident intensifies scrutiny of Revolut’s compliance controls and data protection standards. Regulators, privacy advocates, and affected users are expected to demand investigations, clearer disclosure, and stronger verification processes for government information requests.
This update represents a notable development in the Crypto sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.