Revolut sent identity files after fake government-domain requests
The Register on 15 September 2026 wrote that Revolut honoured bogus requests that arrived through a real public-body hostname, sending identity files rather than balances. The notices named travel documents or licences, face photos taken for checks, IBANs and Bitcoin records. No second news body inside the window was retained. A 10,000 Bitcoin Telegram claim drew no company reply.
Economics & Markets··Midday
A fake request on a real domain
The Register reported that Revolut handed over identity files after bogus official-looking requests. Those messages used a real public-body hostname. What customers were told they had sent included travel documents or licences, face photos taken for checks, IBANs and Bitcoin records. Revolut's spokesperson said the firm cut the address, warned the agency and the regulator, and rang the small set of people touched. It did not give a headcount. For the reader the first result is that the leak is identity files, not account balances. The line that systems and customer funds were unaffected is the company's. There is no second newsroom body.[1]
An 80 million customer line, no 10,000 Bitcoin comment
The same Register text says Revolut's personal-customer base is above 80 million. A Telegram post claiming a 10,000 Bitcoin ransom drew no company reply. The card does not confirm that claim. 80 million is a company scale sentence, not the count of people affected. 10,000 is only the subject of the refused comment. For the reader the second result is that the scale is large and the affected set remains 'limited'. The two figures sit side by side, one a stock, one an allegation. The Register records both and does not equate them.[1]
One technology report
The source is one: The Register. A fake official domain, identity files, unaffected balances, the 80 million customer sentence and a 10,000 Bitcoin comment refusal come from that text. No second independent news body was held inside the window. For the markets desk the meaning is that a fintech firm handed files to a request that looked official. The card does not write a ransom payment. The filing date is 15 September 2026. A 14 April 04:48 UTC BleepingComputer note sits outside the window.[1]
Related columns
For more information on this topic, you can read the related columns.
