Revolut Handed Customer Bitcoin Data to Fake Law Enforcement

Revolut turned over customer passports, selfies, home addresses, and Bitcoin transaction records to scammers after mistaking a forged government request for a legitimate legal order.

The digital bank confirmed the breach on Saturday. Attackers duped the firm's compliance team using a fraudulent law enforcement request. Sensitive identity files and crypto history walked out the door. Revolut reported that no customer funds were compromised, at least.

Fraudulent requests target compliance weak spots

Criminals are increasingly targeting the fast-track channels banks set up for emergency law enforcement inquiries. These requests routinely bypass standard court oversight. It worked. Attackers walked away with a complete identity package for the affected users.

Why it matters

Hold crypto on a centralized platform, and your privacy hinges on whether a compliance worker spots a fake badge. Pair a home address and passport with detailed Bitcoin activity, and you create a real threat. It gives bad actors an exact blueprint for targeted extortion or physical harm. Custodial apps don't just put your balance at risk—they pin a target on your front door.