律动BlockBeats|9月 12, 2026 06:47
[ZachXBT: Revolut Suspected of Leaking High-Net-Worth User Information Due to Trusting Forged Government Requests]
BlockBeats reported on September 12 that on-chain investigator ZachXBT posted on his personal channel, stating that Revolut allegedly failed to identify a forged government agency information request, resulting in the leakage of some users' personally identifiable information (PII). According to his disclosure, Revolut previously received a request for customer information retrieval that appeared to be from a legitimate government agency and was sent via the agency's official email domain. Since the email contained valid domain authentication information, Revolut deemed the request authentic and responded accordingly.
The potentially affected data includes users' names, dates of birth, occupations, addresses, emails, phone numbers, as well as copies of passports or driver's licenses, identity verification selfies, account statements, IBANs, withdrawal records, and complete transaction histories, including Bitcoin ($BTC) transaction records. In the notification sent to users, Revolut stated that no biometric facial telemetry data was leaked.
ZachXBT noted that the scale of the incident may currently be limited, but based on the situation, it appears to primarily target high-net-worth users. Multiple Revolut users received notifications about the security incident yesterday. Revolut's official team had previously reminded users to verify suspicious information through the in-app customer service and avoid providing personal or financial information.
Share To
HotFlash
APP
X
Telegram
CopyLink