Former Revolut Employee Accused of Seeking Crypto Ransom Over KYC Data

Revolut, a UK-based fintech company offering banking and payment services through its mobile app, has a large customer base that makes any alleged data exposure a significant cybersecurity concern. Listings of financial records on dark-web forums can raise the risk of fraud and identity theft, while also testing customer confidence and drawing scrutiny of a company’s data-protection controls.

As of Aug. 3, 2026, a hacker claimed to be selling 75 million purported Revolut customer records on the dark web for $500. Revolut said it compared and validated the material and found no evidence that its systems had suffered a data breach. The company concluded that the dataset was highly likely to have been fabricated rather than obtained from genuine customer records.

Revolut disclosed sensitive customer records to an unauthorized third party after treating a fraudulent information demand as a legitimate government request. The incident is significant because the files linked customers’ real-world identities — including passports, verification selfies and home addresses — with IBANs, account statements and complete Bitcoin transaction histories, creating risks ranging from identity theft and targeted phishing to physical threats against cryptocurrency holders.

Revolut began notifying affected customers on Sept. 11, 2026, and the incident became public the following day after posts by on-chain investigator ZachXBT and former Mt. Gox CEO Mark Karpelès. The request came from an unauthorized account operating within a government agency’s genuine domain and carried valid authentication credentials. Revolut said it blocked the sender and alerted police and regulators, but has not identified the agency or disclosed how many customers were affected. Login credentials, facial biometric telemetry and customer funds were unaffected, leaving reported financial losses at zero.