Revolut Discloses Bitcoin Records to Fraudulent Government Email Address

Revolut formally confirmed sending customer passports and bitcoin transaction records to a fraudulent government email address, exposing verification vulnerabilities as macro liquidity pressures digital banking platforms. The incident occurred after company compliance channels responded to an illegitimate statutory data demand. Attackers mimicked official law enforcement communications, successfully extracting sensitive user verification files alongside ledger-level crypto transaction histories.

Phishing Law Enforcement Channels

Spoofed domain vectors targeted the compliance verification desk directly. Attackers forged judicial credentials to submit an emergency data request, a legal mechanism typically reserved for urgent criminal proceedings. Revolut processed the disclosure without detecting the falsified agency origin. Transferred payloads contained high-resolution passport scans paired directly with external wallet addresses, transfer amounts, and historical transaction timestamps. For retail holders, linked transaction records strip away pseudonymous protections across public blockchains. Tracing tools easily associate exposed external wallet addresses with individual identity files once a centralized exchange ledger leaks.

Bitcoin Market Metrics and Activity

Network activity remained steady despite the disclosure confirmation. CoinGecko recorded BTC at $77,359 at 14:00 UTC on September 12, 2026, rising 0.48% across the daily trading window. The digital asset maintains a total market capitalization of $1.55 trillion, supported by a 24-hour aggregate exchange volume of $32.45 billion. The 7-day price trajectory reflects ongoing consolidation following early-week dips below the $77,000 threshold.

Scrutiny on Custodial Compliance Protocols

The breach emphasizes structural risks within centralized crypto operations handling identity information. Law enforcement disclosure abuse has surfaced across major technology and financial platforms using manual intake systems. Centralized platforms face heightened operational friction as compliance teams balance expedited legal requests against phishing risks. Attackers continue to target these off-chain data repositories rather than private cryptographic keys. Traders will monitor whether regulatory authorities impose reporting sanctions or tighten verification mandates on third-party crypto custodians before the close of the current calendar year.