Revolut Allegedly Disclosed User Data After Fraudulent Government Request, ZachXBT

Fintech company Revolut allegedly disclosed sensitive customer information after treating a fraudulent government information request as legitimate, according to an alert issued by on-chain investigator ZachXBT.

The reported incident could have exposed extensive financial and identity-related records, including information belonging to customers involved in cryptocurrency transactions. ZachXBT said the number of potentially affected accounts appears limited so far, while raising concerns that the incident may have specifically targeted high-net-worth individuals.

ZachXBT Details Scope of Alleged Revolut Data Exposure

According to information published by @WuBlockchain citing ZachXBT’s alert, the compromised data reportedly includes customers’ full names, contact information, copies of identity documents and verification selfies.

The information allegedly disclosed also extends to financial records, including IBAN numbers, bank account statements, withdrawal records and complete transaction histories. Bitcoin transfers were reportedly among the transaction data potentially exposed.

The alleged disclosure appears to have resulted from Revolut mistakenly treating a fraudulent request purportedly originating from a government authority as a legitimate information demand. The claim has not been independently established by Hokanews, and the precise circumstances surrounding the alleged incident remain subject to clarification.

Several affected users have reportedly received official notification emails from Revolut, according to ZachXBT.

Potential Impact on Crypto Users and High-Net-Worth Customers

The reported scope of the information is significant because the alleged exposure goes beyond basic contact information. Identity documents combined with banking records and transaction histories can provide a detailed picture of an individual's financial activity.

For cryptocurrency users, the reported inclusion of Bitcoin transfer histories could create additional privacy and security concerns. Blockchain transactions are publicly visible at the network level, but linking wallet activity to verified personal and banking information can materially increase the sensitivity of that data.

The allegation also highlights the importance of authentication procedures surrounding law-enforcement and government information requests. Financial institutions routinely handle sensitive customer information under regulatory and legal obligations, making the verification of external requests a critical control.

ZachXBT said the number of affected accounts appears limited at this stage but suggested the incident may have disproportionately involved high-net-worth customers. That aspect could make the investigation particularly significant if further affected accounts are identified.

Revolut Notifications and Outstanding Questions

The reported customer notifications indicate that at least some users have been informed about the alleged disclosure. However, key details remain unresolved, including the number of affected customers, the exact nature of the fraudulent request, how the request was authenticated and whether any unauthorized parties gained access markets to the information after it was disclosed.

The next important development will be further clarification from Revolut regarding the alleged incident, its scope and the safeguards being reviewed or strengthened in response.

Writer: Victoria Hale
Technology & Blockchain Writer

Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.

She prioritises clarity and accuracy when explaining technical developments to a general audience.