Hackers Expose Revolut Users' Bitcoin Transaction Data Through a Spoofed Government Email

According to Arzdigital, published Saturday, September 12, 2026 (21 Shahrivar 1405), the identity and financial data of a number of Revolut neobank users, including their Bitcoin transaction history, was exposed after the company responded to a spoofed email sent using an official government domain. According to on chain investigator ZachXBT, who shared the disclosure on Telegram, the leaked data included full names, dates of birth, addresses, identity document images and selfies, IBAN numbers, and complete deposit, withdrawal and Bitcoin transaction histories.

Revolut said passwords and wallet private keys were not exposed and that no direct breach of its infrastructure occurred. The company has more than 80 million users worldwide, and assessments indicate the attack was highly targeted, likely aimed at high net worth individuals.