Fake government email tricks Revolut into leaking IDs and Bitcoin records

Revolut sent customer files to an attacker who emailed from a real government agency's domain, and the message passed its security checks because it looked official. The leaked records included passports, verification selfies, IBANs and full Bitcoin transaction histories. Revolut says no funds were stolen and no systems were hacked, but the exposure hands scammers everything they need for targeted phishing. Investigator ZachXBT says the attack appears aimed at wealthy account holders. The bank has not said how many of its 70 million customers were hit.