Revolut Hackers Demand 3 Million in Monero for Stolen Crypto Records

A group of hackers known as 'iamnotavillain' has obtained sensitive information from Revolut, including passports, selfies, addresses, and transaction histories of over 680 high-net-worth cryptocurrency holders.

The attackers posed as Italian law enforcement for months, sending emails to Revolut with requests for the customers' files. The fintech company verified the requests using its protocols for handling police inquiries, unaware that they were dealing with a phishing scam.

The hackers used blockchain analysis to pinpoint accounts with substantial cryptocurrency holdings and then sent targeted emails to Revolut, convincing them to hand over sensitive information. They claim to have 147 gigabytes of data and are demanding 6,000 Monero (worth approximately $3 million) in exchange for not selling the stolen records.

Revolut has confirmed that its core systems, databases, and customer funds remain untouched, but this offers little reassurance to customers. The company is reviewing the situation with UK regulators and has blocked the fraudulent email channel used by the attackers.