Revolut Users Warned After Fraudulent Data Request Exposes Financial and Bitcoin Records

Revolut has confirmed that identity documents, account statements and complete Bitcoin transaction histories were handed over to an unauthorised party after the fintech company was deceived by a forged government request. This type of attack, sometimes called a fraudulent 'emergency data request', exploits trust in official-looking law enforcement paperwork rather than a technical flaw in Revolut's systems.

Affected customers may find that sensitive financial details, including cryptocurrency transaction records, are now in the hands of criminals who could use them for identity theft, phishing or targeted scams. Revolut is advising users to check their accounts for unusual activity and to be alert to follow-up scam attempts referencing their real account details, which can make phishing messages appear more convincing.

While this incident centres on a consumer fintech platform, it is a reminder for small businesses that rely on similar services for payments or crypto transactions that third-party providers can be a weak link, even when a business's own systems are secure.