Revolut Says Fraudulent Government Request Exposed Customer KYC and Bitcoin Transaction Data

Revolut confirmed on Sept. 14 that it fulfilled fraudulent customer-data requests submitted by an unauthorized third party using a legitimate government-agency email domain. The disclosure affected a limited number of customers, while Revolut said its systems and customer funds were not compromised.

Fraudulent government-domain requests

Revolut fulfilled authentic-looking customer-data requests from an unauthorized party using an email address associated with a legitimate government-agency domain, but said the incident did not involve an intrusion into its systems, according to its account reported by TechCrunch.

The company did not disclose the number of affected customers, describing it as limited, and said customer funds were not impacted.

Records potentially exposed

A customer notification shared by blockchain investigator ZachXBT said the potentially exposed material could include identity documents, verification selfies, account statements, IBANs, withdrawal records and full transaction histories, including Bitcoin transactions.

The combination of identity-verification material and financial activity records means the disclosure could encompass both KYC information and details of customers’ banking and crypto transactions. Revolut has not publicly specified which categories of data were exposed for individual affected customers.

Company response and unresolved scope

Revolut said it blocked the fraudulent email address after identifying the impersonation. The company also notified the relevant government agency, law enforcement, data-protection authorities and financial regulators, The Block reported.

Key details remain undisclosed, including the identity of the impersonated government agency, whether the event was confined to one market and the number of customers involved. ZachXBT speculated that the campaign may have targeted high-net-worth users, but Revolut has not confirmed that characterization.

Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.