Revolut Exposed Passports and Bitcoin Records After Fake Government Request: Report

On-chain investigator ZachXBT revealed earlier today that Revolut had disclosed highly sensitive personal and financial information belonging to certain customers after receiving what appeared to be an authentic government request.

The company sent emails to the affected users, admitting that the exposed records included passports, verification selfies, addresses, and complete Bitcoin transaction history.

What Was Exposed

In the email sent to customers and revealed by ZachXBT on his Telegram page, Revolut explained that it received a request for information that appeared to originate from a legitimate government agency. The sender was not merely spoofing an address that looked official. The request came from an unauthorized email account using the government agency’s actual email domain and carried valid domain authentication credentials, the company added.

Revolut fulfilled the request under the belief that it was legit. The disclosed information potentially included certain customers’ full names, dates of birth, occupations, home addresses, email addresses, and phone numbers. More sensitive material included copies of passports and/or driver’s licenses and the selfie images clients had supplied during the verification process. The good news, according to the company, is that biometric facial telemetry itself was not compromised.

… Continue reading the full article at the original source below.