【A Fake Government Email Stole Customers’ Bitcoin Transaction Records 🔓】
Join X Mr.’s fan chat group on the homepage 🔥
European digital bank Revolut has admitted that an email impersonating a government department passed its verification. It handed over customers’ data without noticing anything unusual throughout the process. The platform has registered users exceeding 80 million, but the company didn’t say exactly how many people were affected. The leaked list includes passport copies, bank statements, as well as Bitcoin wallet IDs and complete on-chain transaction records.
First, sort out what exactly was leaked this time. Leaked names and addresses at most mean more nuisance calls. This time, no private keys, login passwords, or full card numbers were taken—somewhat of a buffer amid the bad news. But Bitcoin wallet IDs together with transaction records are a different story. On-chain transfers were originally only visible by address; you couldn’t tell who the person was. This document matches addresses to real identities.
What’s truly worth looking at is how it succeeded. The sender didn’t use a fake domain—it used the real domain of a government agency. It got through verification due to a configuration error, and it also obtained valid credentials. Internal company reviewers saw these and treated them as official requests to be handled. On September 11, on-chain investigator ZachXBT posted a customer notification, saying the scope seemed limited and it might have targeted accounts with money. The UK Information Commissioner’s Office reminded that qualifying leaks must be reported within 72 hours, and it’s still unclear whether the platform has reported it. The perimeter wasn’t breached—its process simply left the door open.
For crypto, wallet addresses have always been that thin layer of protection. A public ledger allows everyone to check transfers, but you can’t see who the transfer actually came from or belongs to. Once addresses and identity dossiers are packaged and sent out, that protection is gone. The people who were robbed haven’t even shown up yet, but the targets are already on the list. Revolut has just received preliminary approval for a U.S. banking license and has also issued its own euro stablecoin. Its实名档案 will only keep getting thicker. In the future, if you want to swap for large amounts, you’ll have to weigh whether the other side recognizes you first.
Do you think this leak was an accidental failure in bank procedures, or is the cost of identity registration something that will be paid sooner or later? Discuss in the comments.
Join X Mr.’s fan chat group on the homepage 🔥
European digital bank Revolut has admitted that an email impersonating a government department passed its verification. It handed over customers’ data without noticing anything unusual throughout the process. The platform has registered users exceeding 80 million, but the company didn’t say exactly how many people were affected. The leaked list includes passport copies, bank statements, as well as Bitcoin wallet IDs and complete on-chain transaction records.
First, sort out what exactly was leaked this time. Leaked names and addresses at most mean more nuisance calls. This time, no private keys, login passwords, or full card numbers were taken—somewhat of a buffer amid the bad news. But Bitcoin wallet IDs together with transaction records are a different story. On-chain transfers were originally only visible by address; you couldn’t tell who the person was. This document matches addresses to real identities.
What’s truly worth looking at is how it succeeded. The sender didn’t use a fake domain—it used the real domain of a government agency. It got through verification due to a configuration error, and it also obtained valid credentials. Internal company reviewers saw these and treated them as official requests to be handled. On September 11, on-chain investigator ZachXBT posted a customer notification, saying the scope seemed limited and it might have targeted accounts with money. The UK Information Commissioner’s Office reminded that qualifying leaks must be reported within 72 hours, and it’s still unclear whether the platform has reported it. The perimeter wasn’t breached—its process simply left the door open.
For crypto, wallet addresses have always been that thin layer of protection. A public ledger allows everyone to check transfers, but you can’t see who the transfer actually came from or belongs to. Once addresses and identity dossiers are packaged and sent out, that protection is gone. The people who were robbed haven’t even shown up yet, but the targets are already on the list. Revolut has just received preliminary approval for a U.S. banking license and has also issued its own euro stablecoin. Its实名档案 will only keep getting thicker. In the future, if you want to swap for large amounts, you’ll have to weigh whether the other side recognizes you first.
Do you think this leak was an accidental failure in bank procedures, or is the cost of identity registration something that will be paid sooner or later? Discuss in the comments.
