Revolut Exposes Customer Data After Falling for Fake Government Request

Digital banking company Revolut disclosed sensitive customer information this week after mistaking a fraudulent government request for a legitimate one. The request carried credentials that passed the company’s internal verification checks, prompting Revolut to hand over personal data before later confirming with the actual agency that the request was fake.

Wide Range of Personal and Financial Data Leaked

The exposed information reportedly included passports or driving licenses, verification selfies, names, birth dates, home addresses, phone numbers, account statements and full transaction histories, including bitcoin activity. Revolut has not disclosed how many customers were affected but confirmed that no funds were lost. The company said it has since notified regulators and affected users and blocked further access from the fraudulent source.

Broader Risks as AI Enables Impersonation

The incident highlights growing concerns about identity verification systems as AI tools make it easier to produce convincing fake documents and official-looking requests. Analysts noted that combining personal identity data with blockchain transaction histories can expose high-net-worth individuals to targeted risks, since bitcoin transactions are public while identifying details are typically held separately by financial institutions. One onchain investigator said the breach appeared limited in scale and may have focused on wealthier account holders.