Revolut Exposed Crypto Data in Fake Govt Request

Revolut said it exposed customer information after fulfilling a fraudulent request that appeared to come from a government agency’s own email domain. The request led the company to release passport details and full cryptocurrency transaction histories for a limited number of users, according to the context provided.

The episode underscores a familiar operational risk in financial technology: even strong digital controls can fail when attackers exploit trusted communication channels. In this case, the apparent use of an authentic government domain likely increased the request’s credibility and reduced the chance of immediate detection.

For crypto users, the disclosure is especially sensitive because transaction histories can reveal wallet behavior, exchange activity and broader financial patterns. Combined with identity documents, such records can increase the risk of fraud, account takeover attempts and targeted social engineering.

The incident also adds pressure on regulated platforms to harden verification procedures for law enforcement and public-sector requests. Firms that store both identity documents and digital asset records face a higher standard of care because a single process failure can expose both personal and financial data.

Investors are unlikely to treat this as a direct market-moving event for Bitcoin or the broader crypto complex. Still, it may reinforce a cautious view of custodial and consumer-fintech risk, particularly for firms that handle sensitive compliance data at scale.