{
  "id": 7310410,
  "title": "Revolut falls for fake government requests, hands over customer data",
  "url": "https://urgent.news/2026/09/14/revolut-falls-for-fake-government-requests-hands-over-customer-data-7310410",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-14T11:26:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/cyber-crime/2026/09/14/revolut-falls-for-fake-government-requests-hands-over-customer-data/5296118"
  },
  "original_language": "en",
  "account": "British fintech firm Revolut revealed it had exposed sensitive customer data after falling for fraudulent requests from a legitimate government agency. The company disclosed this in a statement to The Register, although it did not specify the number of affected customers or the types of data compromised. ZachXBT, a blockchain investigator, shared Revolut's customer notifications, alleging that the exposed information included Know Your Customer (KYC) data such as passport or driver's license verification, verification selfies, account statements, IBANs, withdrawal records, full transaction histories, including Bitcoin transactions, full names, dates of birth, home and email addresses, phone numbers, and occupations. The company only claims a small proportion of its customers were affected, citing ongoing investigations and confidentiality obligations as reasons for the lack of further details. Revolut confirmed it exposed the data to an unauthorized third party after receiving requests from a genuine government agency's email domain. The company promptly blocked the address and alerted relevant officials, data protection, and financial regulators, but its systems and customer funds remained unaffected. Revolut is seeking support from impacted individuals and is reportedly facing threats to release more data, demanding 10,000 Bitcoin as ransom.",
  "summary": "Passports, selfies, transaction histories exposed as self-proclaimed culprits demand 10,000 Bitcoin",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 5,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Revolut falls for fake government requests, hands over customer data",
        "url": "https://urgent.news/2026/09/14/revolut-falls-for-fake-government-requests-hands-over-customer-data",
        "published": "2026-09-14T11:26:00.000Z"
      },
      {
        "outlet": "RTE News",
        "title": "Revolut customer data breach after fake govt requests",
        "url": "https://urgent.news/2026/09/14/revolut-customer-data-breach-after-fake-govt-requests",
        "published": "2026-09-14T11:59:31.000Z"
      },
      {
        "outlet": "The Record",
        "title": "Revolut handed customer data to fraudsters using government email account",
        "url": "https://urgent.news/2026/09/14/revolut-handed-customer-data-to-fraudsters-using-government-email",
        "published": "2026-09-14T12:00:00.000Z"
      },
      {
        "outlet": "Finextra",
        "title": "Revolut hit by data breach after fake government email scam",
        "url": "https://urgent.news/2026/09/14/revolut-hit-by-data-breach-after-fake-government-email-scam",
        "published": "2026-09-14T13:42:04.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}