Revolut disclosed identity documents and complete cryptocurrency transaction histories belonging to a limited number of users after acting on a fraudulent data request. According to Decrypt, the request appeared to come from a government agency because it was sent using the agency’s own email domain. The fintech company fulfilled the request before the fraud was identified, exposing users’ passport information and records of their crypto activity. The incident highlights the risks that financial platforms face when verifying apparently official information requests, although the source material does not provide further details on the affected users, the agency involved, or the value of the transactions. Bitcoin was among the crypto-related data exposed in the incident. The report was published on September 12, 2026.
