Revolut confirms passport and bitcoin data leaked to fake email

Revolut has officially confirmed that its internal teams fell victim to a deceptive request, resulting in the unauthorized transfer of sensitive client records. The company admitted that a fake email address, masquerading as a government entity, successfully requested and received private user files. These files reportedly contained high value information, including passport scans and transaction logs related to Bitcoin holdings.

This security failure serves as a stark reminder of the vulnerabilities present in modern financial institutions. While the company has made strides in integrating crypto services, the administrative side of the business appears to have failed to verify the legitimacy of the requestor. Accessing passport information and crypto transaction histories provides attackers with a roadmap to target high net worth individuals.

Data privacy advocates are calling for an immediate review of how these institutions handle information requests. In 2026, the intersection of traditional banking and digital assets requires a higher standard of security than what was acceptable in previous years. If a firm cannot distinguish between a legitimate legal request and a fraudulent email, the trust of the user base is severely compromised.

Victims of this leak should monitor their accounts for signs of suspicious activity or targeted social engineering attempts. Attackers who know your passport details and your history of Bitcoin accumulation are well positioned to craft convincing scams. It is essential to update passwords and, where possible, enable hardware based two factor authentication to mitigate the risks.

Looking forward, Revolut must address these systemic weaknesses to maintain its standing in the market. The loss of customer confidence is often more expensive than the cost of implementing automated verification systems. Investors and account holders are watching closely to see what changes are made to prevent such a lapse from occurring again in the future.