Revolut Hands Customer Data to Fraudster After Fake Government Request
Revolut disclosed sensitive customer records to an unauthorized third party after treating a fraudulent information demand as a legitimate government request. The incident is significant because the files linked customers’ real-world identities — including passports, verification selfies and home addresses — with IBANs, account statements and complete Bitcoin transaction histories, creating risks ranging from identity theft and targeted phishing to physical threats against cryptocurrency holders.
Revolut began notifying affected customers on Sept. 11, 2026, and the incident became public the following day after posts by on-chain investigator ZachXBT and former Mt. Gox CEO Mark Karpelès. The request came from an unauthorized account operating within a government agency’s genuine domain and carried valid authentication credentials. Revolut said it blocked the sender and alerted police and regulators, but has not identified the agency or disclosed how many customers were affected. Login credentials, facial biometric telemetry and customer funds were unaffected, leaving reported financial losses at zero.
All Coverage
3 original reportsThe Backstory
The history behind this eventRevolut Bitcoin Price Glitch Briefly Shows BTC at Just 2 Cents
Revolut is a UK digital bank that offers crypto trading services. Bitcoin quotes in its app influence how users value their holdings and set order prices. The platform displayed an extremely low price while Bitcoin was trading at about $79,000 globally, raising questions about its pricing source, trade execution and the safety of user assets.
In July 2026, Revolut users reported that the Bitcoin price in the app briefly fell to about $0.02, nearly four million times below the global market price of roughly $79,000 at the time. Reports pointed to a data-provider malfunction, but as of July 19, 2026, it remained unclear whether this was merely a display error or a liquidity problem. Revolut had not formally responded.
Former Revolut Employee Accused of Seeking Crypto Ransom Over KYC Data
Revolut is a fintech company offering cross-border payments, banking and cryptocurrency trading services, and is legally required to retain customer know-your-customer (KYC) data. A trader alleged that a former employee used workplace access to obtain the trader's personal information, then demanded cryptocurrency by threatening to leak the data and harm the trader's family. The case highlights the risks posed by insiders with access to sensitive information.
Revolut confirmed that it had reported the case to law enforcement and launched an internal investigation, stressing that its systems had not been breached by external hackers. As of July 20, 2026, reports had not identified the former employee, specified the type or amount of cryptocurrency demanded, or disclosed the exact dates of the threats and the report to authorities.
Subscribe to Mark Radar Weekly
Every Friday, the week's strongest signals in your inbox. Unsubscribe anytime.
If you search news on Google, you can set Mark Radar as a preferred source—our coverage will show up more often in your results. Set as preferred source on Google →