Revolut disclosed delicate buyer data to an unauthorized get together after fraudulent information requests arrived from an e-mail tackle on a official authorities area, the corporate confirmed on Saturday, September 12. The uncovered materials could embody id paperwork, verification selfies, account statements, and transaction histories containing Bitcoin exercise.
Revolut advised TechCrunch {that a} restricted variety of prospects had been affected and that its methods and buyer funds remained unaffected. The incident raises privateness considerations as a result of id data and Bitcoin transaction histories could have been disclosed to an unauthorized get together.
So what has occurred? Somebody impersonated a authorities company utilizing an tackle on that company’s personal area, and the request cleared Revolut’s checks earlier than it was recognized as fraudulent. Buyer info was disclosed throughout that interval.
BREAKING: Revolut attackers demand 10,000 BTC ransom, threatening to leak stolen buyer information.
The risk actors who allegedly tricked Revolut into handing over delicate buyer information by posing as a authorities are actually publishing info belonging to high-profile shoppers.… https://t.co/kJi58fAHaa pic.twitter.com/5IIaCHHOYT— Coin Bureau (@coinbureau) September 14, 2026
The notification Revolut emailed to affected prospects listed beginning dates, postal and e-mail addresses, cellphone numbers, and copies of id paperwork comparable to passports and driving licenses. Verification selfies, account statements, and transaction histories may have been disclosed, the financial institution stated.
Revolut stated it blocked the sender’s tackle after detecting the scheme and alerted the federal government company involved, in addition to regulation enforcement, information safety authorities, and monetary regulators. An organization spokesperson characterised the episode as an exterior impersonation rip-off and stated the corporate’s methods and buyer funds had been unaffected.
Commerce XRP on Bybit and Get a Likelihood to Win Our $1,000 USDT Airdrop
ZachXBT Flags Bitcoin Publicity
Crypto investigator ZachXBT publicized the discover in a Telegram publish and added a number of objects Revolut’s personal notification didn’t record: IBANs, withdrawal data, occupations, and transaction historical past protecting Bitcoin. He assessed the incident as restricted in scale and geared toward high-net-worth customers.
Revolut has not disclosed a precise variety of affected prospects. The corporate additionally has not acknowledged that crypto holders or rich prospects had been particularly focused, so the evaluation of the obvious goal group stays separate from Revolut’s major disclosure.
Earn $50 and Enter $300K Prize Draw on EdgeX
What’s Subsequent for Revolut Customers?
Bitcoin’s blockchain data transactions publicly, whereas private particulars comparable to a passport or house tackle sit outdoors the community. Monetary intermediaries can join these various kinds of info by means of the data they gather. This incident illustrates the privateness concern when id paperwork are disclosed alongside Bitcoin transaction histories.
Data that features names, addresses, contact particulars, and transaction histories can create a extra detailed image of an affected buyer than anybody class of information alone. The reporting doesn’t doc a follow-on misuse of the knowledge on this incident, but it surely highlights the sensitivity of data that hyperlink private info with monetary exercise.
that is really insane, all these issues sound inconvenient however they’ll result in house invasions and shedding hundreds of thousands
at this level, it needs to be made actually unlawful to do something however ZK-based KYC if KYC (which doesn't work) have to be completed
we now have the tech https://t.co/Bl80YbFMAR— mert (@mert) September 12, 2026
Revolut’s response included blocking the sender, notifying regulators, and contacting affected prospects immediately. The episode additionally focuses consideration on how monetary establishments assess requests that seem to return from authorities companies and on the scope of data launched when these requests are accepted as official.
For crypto customers who use Revolut or related platforms, the incident is a reminder that crypto privateness can rely upon how intermediaries deal with id paperwork, account data, and transaction histories. Revolut stated buyer funds remained protected, whereas the disclosure reveals that fraud involving an apparently official government-domain e-mail can nonetheless expose delicate buyer information.
Uncover: The Finest Token Presales
The publish Revolut Buyer Information Uncovered: Attackers Demand 10,000 BTC appeared first on Cryptonews.