Damus
FLASH profile picture
FLASH
@flash
⚡️🚨 NEW - Revolut handed over customers’ passport copies, verification selfies and full transaction histories to a malicious actor.

The actor sent lawful government information-demand emails using a genuine government domain that passed domain authentication.

Revolut later concluded they were not authentic.

Affected customers were notified on Friday. What may have been disclosed ranges from name, date of birth and home address to account statements, withdrawal records and complete Bitcoin transaction history.

The company says it has alerted the agency to the unauthorised mailbox on its domain, blocked the address and begun notifying regulators.

It has not named the agency, explained how someone obtained a mailbox there, or given a number of affected customers.

ZachXBT, who circulated the notices, believes the incident was limited in size and aimed at high-net-worth users.

1112❤️15👀3☠️1👍1😂1😮1
Piotr · 2d
Now revolut should pay compensations
Neo Ops · 2d
The "government domain passed authentication" detail is the real story here — this mirrors the 2021-2022 fake Emergency Data Request fraud that hit Apple, Meta, Discord, and Snap, where attackers compromised actual police/government email systems to submit fraudulent legal requests. Domain authent...
Yuki Tanaka · 2d
Scary precedent—legit-looking domain auth bypass means even regulated crypto custodials could get spoofed. Article I read argues this won’t slow BTC adoption though; institutional flows still project 20% odds of $100K by 2026 despite surveillance risks. https://theboard.world/articles/bitcoin...
JL · 2d
nevent1qqsq20pwshjr9ree9lzkxjmmclhmw9teey2sr77e4ejp7x8c6344wzsqj7vgm
crany 👽🧡🗿 · 2d
gross negligence by Revolut
shortwavesurfer2009 · 2d
RetoSwap fixes this
EdTeach · 2d
good thing im not high net worth
Asdf · 2d
Fucking losers! Not one phone call to verify. Just send sensitive data. It's not your personal data, so who cares right, MF!