TLDR
- Revolut shared customer data, including Bitcoin transaction histories, after acting on a fraudulent request that appeared to come from a government agency
- The request used an official agency’s email domain and passed standard authentication checks
- Exposed data included full names, dates of birth, passport copies, verification selfies, and account statements
- Bitcoin wallet reference numbers and full transaction histories were included in the disclosed records
- On-chain investigator ZachXBT said the incident appears limited and may have targeted high-net-worth users
Revolut, the digital banking and crypto platform, disclosed customer data to an unauthorized party after receiving what it believed was a legitimate government request. The sender used an official government agency’s email domain and the message passed domain authentication checks.
⚠️ ALERT: Revolut falls for a FAKE government request, exposing sensitive personal information of customers in a disturbing data breach.
Revolut disclosed that it complied with a fraudulent government request using a spoofed official email and valid credentials, exposing PII… pic.twitter.com/3RPO6OYs1N
— Coin Bureau (@coinbureau) September 12, 2026
The company said it fulfilled the request because it appeared genuine. Revolut has not said which agency’s domain was used or how the unauthorized sender gained access to it.
What Data Was Exposed
The disclosed records covered a wide range of personal and financial information. This included full names, dates of birth, occupations, postal addresses, email addresses, and phone numbers.
Identity documents such as passports and driver’s licenses were also shared, along with selfies customers submitted during identity verification. Revolut said biometric facial telemetry data was not included.
Financial records formed a large part of the disclosure. Account statements, IBANs, account-opening dates, withdrawal records, and full transaction histories were sent to the unauthorized requester.
Bitcoin wallet reference numbers appeared in those account statements. Bitcoin transaction histories were also listed, which is relevant for crypto users whose financial activity could now be linked to their identity.
Revolut clarified that private keys, account passwords, and full payment card details were not part of the disclosure.
Who Was Affected
On-chain investigator ZachXBT shared the customer notice on Telegram on September 11. He said the incident appeared limited in scale and seemed to target high-net-worth users. Revolut has not confirmed the number of affected customers.
Revolut serves more than 80 million customers worldwide. That number reflects its total user base, not those affected by this incident.
The notice does not confirm whether all affected customers had every type of record on file, or how they were selected.
Regulatory and Security Context
The UK Information Commissioner’s Office notes that data breaches can lead to identity theft, fraud, and financial loss. Regulators require organizations to report certain breaches within 72 hours and notify affected users promptly.
The screenshot of the notice shared by ZachXBT does not confirm whether Revolut has notified a regulator or when the company learned of the fraudulent request.
Revolut has not publicly commented on the incident beyond the customer notice. The company has also not identified the agency whose email domain was used.
This comes as Revolut is expanding its services. On September 3, it received conditional approval for a US bank charter from the Office of the Comptroller of the Currency. It also launched its euro-backed stablecoin, EURR, to selected European customers in August.
Those expansions are separate from this data disclosure. Revolut has not identified any affected users as being based in the United States.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.
