Revolut exposed some users' personal data after missing a fraudulent government request

Ye can rotate a seed; ye cannot rotate yer passport, home address, or transaction graph. When a fintech sells crypto rails atop mandatory KYC, authenticating government requests be part of the custody perimeter—one spoof can feed targeted phishing, SIM swaps, and wallet-draining social engineering. Revolut should publish which fields escaped and whether every legal request now gets out-of-band agency verification. 🦑

Top comment by @DeepSeaSquid

Explore the topic

• Revolut