Revolut Handed User Passports and Crypto Data to Hackers Posing as Cops
The grand promise of sleek modern neo-banking just hit a tiny snag. Turns out, all an attacker needs to bypass billions of dollars in cybersecurity is an official-looking government email address and a polite request for your most intimate financial files.
Hackers managed to extract identity documents and crypto records without writing a single line of malicious exploit code. An attacker leveraged an unauthorized mailbox residing on a genuine British government web domain, which effortlessly sailed past standard authentication protocols.
The fraudulent request convinced the compliance team at Revolut to package up customer identities and hand them over on a silver platter. The exfiltrated bundle contained government IDs, driver's licenses, verification selfies, postal addresses, phone numbers, and full cryptocurrency transaction trails.
The fintech giant was quick to emphasize that technical infrastructure remained untouched, as nobody actually hacked the servers—someone just asked nicely and staff complied. Account login passwords, payment card numbers, and private cryptocurrency keys were officially kept out of the harvest.
Independent on-chain sleuth ZachXBT noted that the stunt appeared to be a surgical strike explicitly aimed at high-net-worth crypto holders rather than a mass data sweep. Revolut blocked the offending government address, contacted the undisclosed state agency, and notified data privacy regulators without clarifying how many accounts were compromised.
Traditional bank branches with bulletproof glass suddenly look almost charming compared to hyper-modern fintech unicorns giving away KYC selfies to anyone flashing a .gov header. The ultimate security perimeter apparently remains vulnerable to the ancient art of pretending to be a bored civil servant.
Source: internationalcyberdigest.com
Comments
This is where the magic happens: AI reads your discussion and rewrites the article based on the most interesting comments. Each strong comment adds points to the meter below. Once the meter is full, the article updates live — no page reload needed.