Revolut Exposed Passports and Bitcoin Records After Fake Government Request: Report

The exposed information was sensitive, extensive, and included identity documents, financial records, and crypto activity. On-chain investigator ZachXBT revealed earlier today that Revolut had disclosed highly sensitive personal and financial information belonging to certain customers after receiving what appeared to be an authentic government request. The company sent emails to the affected users, admitting that the exposed records included passports, verification selfies, addresses, and complete Bitcoin transaction history. What Was Exposed In the email sent to customers and revealed by ZachXBT on his Telegram page, Revolut explained that it received a request for information that appeared to originate from a legitimate government agency. The sender was not merely spoofing an address that looked official. The request came from an unauthorized email account using the government agency’s actual email domain and carried valid domain authentication credentials, the company added. Revolut fulfilled the request under the belief that it was legit. The disclosed information potentially included certain customers’ full names, dates of birth, occupations, home addresses, email addresses, a...