{"id":13150,"date":"2026-09-12T15:30:26","date_gmt":"2026-09-12T15:30:26","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13150"},"modified":"2026-09-12T15:30:26","modified_gmt":"2026-09-12T15:30:26","slug":"revolut-tricked-into-handing-hackers-the-passports-and-bitcoin-histories-of-wealthy-customers","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13150","title":{"rendered":"Revolut tricked into handing hackers the passports and Bitcoin histories of wealthy customers"},"content":{"rendered":"

<\/p>\n

\n

Revolut disclosed customers\u2019 passports, verification selfies and Bitcoin transaction histories after treating a fraudulent government request as legitimate.<\/p>\n

Affected customers were told Friday that the disclosed information could include passport or driver\u2019s license copies, verification selfies, names, dates of birth, occupations, home addresses, phone numbers, IBANs, and account statements. Withdrawal records and complete transaction histories, including Bitcoin activity, may also have been released.<\/p>\n

The request came from an unauthorized mailbox operating inside the domain infrastructure of a genuine government agency and carried valid authentication credentials.<\/p>\n

Revolut subsequently contacted the agency, concluded the request was fraudulent, blocked the address and began notifying customers and regulators. The company has not identified the agency or disclosed how many customers were affected.<\/p>\n

Compliance demands sharpen customer backlash<\/h2>\n

The incident has drawn scrutiny over how much information financial institutions collect from customers and the controls used when governments later seek access to those records.<\/p>\n

Marc Zeller, founder of the Aave Chan Initiative, said the disclosure came shortly after Revolut demanded additional information from him, threatening to close his account.<\/p>\n

\u201cThe infuriating part is that it happens right after Revolut sent me a notification to provide a LOT of data or \u2018we will close your account in 20 days,\u2019\u201d Zeller said. He accused the company of doing the attackers\u2019 work for them after the request fooled him.<\/p>\n

The criticism cuts into a tension created by modern financial compliance. Banks and fintech firms collect extensive identity and transaction records to satisfy know-your-customer and anti-money laundering requirements. Those databases become especially sensitive when they link verified identities and residential information to cryptocurrency activity.<\/p>\n

For Bitcoin holders, the exposed records could give an attacker far more than a financial statement. Bitcoin transactions are recorded on a public blockchain, meaning information tying a known person to specific activity can potentially help map that individual\u2019s wider onchain footprint.<\/p>\n