Key Insights:
- Revolut crypto scam notices list identity records, IBANs, statements, and Bitcoin transaction histories.
- Revolut says systems, account credentials, and customer funds remain unaffected by the incident.
- ZachXBT says the limited exposure may have focused on high-net-worth customers.
Revolut says a sophisticated impersonation attack led it to disclose customer information in response to a fraudulent government data request. The reported Revolut crypto scam surfaced after blockchain investigator ZachXBT shared customer notification texts.
Those notices say the request arrived through a legitimate government agency domain with valid authentication credentials.
ZachXBT described the disclosure through his Investigations channel. His post included email language describing information released to an unauthorized party. The report did not identify individual customers.
Revolut says it blocked the sender after identifying the request as fraudulent. It alerted the agency, police, financial regulators, and data protection authorities. The company says a limited number of customers received notices, while no funds left users’ accounts.
Revolut Crypto Scam Claim Centers on a Fraudulent Data Request
According to Revolut, an unauthorized third party used a genuine government agency email domain. The sender used it to submit information requests that appeared authentic. Revolut says its review later identified the correspondence as an external impersonation attack.
Email domain authentication confirms that a message is authorized to use a domain. It does not prove that the person issuing the request can seek customer records. That distinction is central to the reported Revolut crypto scam.
The company has not named the agency involved, citing a live police investigation. That leaves the route behind the fraudulent message unresolved. Revolut has not said whether an agency mailbox was compromised or another actor accessed its email system.
A Revolut spokesperson said the firm stopped accepting requests from the sender once it found the issue. The firm also said its systems and customer funds were unaffected. The reported Revolut crypto scam, therefore, concerns data disclosure rather than an identified account takeover.
Customer Notices Detail Records Released to the Impersonator
Customer notices shared by ZachXBT list full names, birth dates, occupations, and postal addresses. They also mention email addresses and telephone numbers. Identification records include copies of passports or driving licenses and verification selfies.
The notices also cite account statements, IBANs, withdrawal records, and complete transaction histories. Those histories include Bitcoin deposits and withdrawals. The notices specifically exclude biometric facial telemetry, which differs from a verification selfie.
The disclosed fields pair identity details with bank and crypto activity. That data set differs from basic contact information or a single account record. The notices identify both conventional banking information and Bitcoin transfer activity. They do not quantify the Bitcoin activity in those records.
Revolut team says that passcodes, login details, and biometric data were not exposed. However, notice the text shared by ZachXBT lists verification selfies while excluding facial telemetry. A selfie is a photo, while facial telemetry is a system-generated biometric template.
Revolut Crypto Scam Raises Phishing Risks for Affected Users
ZachXBT said the group appears limited but may have been selected for its wealth. He described the incident as likely targeted at high-net-worth users. The reported Revolut crypto scam has not established the total number of affected accounts.
ZachXBT has not released a complete list of affected accounts. He said several victims had already received official emails from Revolut. The company describes the number affected as limited.
The scope matters beyond account balances. Names, contact details, and financial records can support tailored phishing attempts. Bitcoin transaction histories could expose activity patterns to criminals running a crypto scam or similar fraud.
Revolut says it has contacted customers who received notices directly. It says the exposed records did not include account passcodes or login details. The firm has not publicly named the government agency’s domain while the police inquiry continues.
Be the first to comment