Back Sg.Finance.Yahoo

Revolut leak ties Bitcoin wallets to home addresses

Sg.Finance.Yahoo • September 12, 2026

Fintech giant Revolut, which offers banking, lending, investing, and crypto services to more than 80 million customers worldwide, has exposed sensitive customer data to an unauthorized third party, TechCrunch reported on Sep. 12.

Founded in 2015, the British fintech giant announced early this month that it has received conditional approval from the U.S. Office of the Comptroller of the Currency (OCC) for its U.S. national bank charter.

Related: 67,000 more Americans using Trezor exposed to data breach

Sensitive data of Revolut users leaked

TechCrunch said a Revolut spokesperson confirmed the data breach, calling it "a sophisticated external impersonation scam."

The report cited on-chain analyst ZachXBT, who posted the email Revolut sent to affected customers late Friday.

According to ZachXBT , the exposed identity-related data includes the following.

A copy of the identity document (passport and/or driver's license)

Facial recognition image (verification selfie)

The exposed financial data includes the following.

Wallet reference number

Full transaction history, including Bitcoin

ZachXBT said the incident appeared to target high net worth users. Revolut said a limited number of customers were affected but did not disclose how many.

The Street Roundtable reached out to Revolut for more details on affected crypto users but had not received a by the time of publication. We will update this report when the company responds.

Trending on TheStreet Roundtable:

ARK Invest says only two stablecoins have scale

Billionaire who bet against Buffett issues stark dollar warning

'Big Short' Michael Burry buys fine wine to bet against AI threat and USD

How Revolut fell prey to fake government request

Revolut said it received fraudulent information requests sent from a legitimate government agency email domain.

Though the email account itself was unauthorized, it used the government agency's official domain. Revolut fulfilled the request, believing it to be genuine.

Once Revolut became aware of the data leak, it blocked the email address and alerted the affected users, the relevant government agency, law enforcement, and relevant regulators.

Revolut said its systems and customer funds were unaffected.

Leaked Bitcoin transactions can lead bad actors to doorsteps

The Revolut leak is particularly concerning for crypto users because the attacker now has both their Bitcoin transaction histories and their postal addresses. In the worst case, that combination can lead a bad actor to a victim's doorstep.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Revolut Data Breach: Fraudulent Government Email Exposes Customer Information On September 11 and 12, 2026, Revolut disclosed sensitive customer data after falling victim to a sophisticated impersonation scam. An unauthorized party used a legitimate government agency's email domain to submit fraudulent requests for customer information, which Revolut mistakenly treated as valid. The exposed data includes full names, dates of birth, addresses, email addresses, phone numbers, copies of identity documents, verification selfies, IBANs, and complete transaction histories, including Bitcoin activity. Revolut has characterized the incident as limited in scope, primarily affecting high-net-worth individuals, but has not disclosed the exact number of impacted customers. The company has since blocked the fraudulent email address and notified relevant authorities. Importantly, no customer funds or login credentials were compromised. The incident has raised concerns about the security of KYC processes in the fintech sector. 100 sources 53

Extracted Entities

Revolut leak ties Bitcoin wallets to home addresses

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Industries (1)

MITRE ATT&CK (1)