Revolut Leaks Passports, Bitcoin Transaction Histories to Fake Government Request
60-second summary
Revolut complies with a counterfeit government request, mistakenly sending passport scans and complete Bitcoin transaction histories of a limited user group after the request appeared to originate from an official agency email domain; the breach reveals how social‑engineering can bypass verification safeguards, prompting regulators and fintech firms to tighten identity‑verification protocols and prompting market concerns over user privacy and crypto…
The fintech company fulfilled a fraudulent information request sent from a government agency's own email domain, exposing ID documents and full crypto transaction histories for a "limited" number of users.