{"id":78283,"date":"2026-09-17T06:18:18","date_gmt":"2026-09-17T06:18:18","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/hackers-demand-3-million-in-monero-from-revolut-after-data-disclosure\/"},"modified":"2026-09-17T06:18:18","modified_gmt":"2026-09-17T06:18:18","slug":"hackers-demand-3-million-in-monero-from-revolut-after-data-disclosure","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/hackers-demand-3-million-in-monero-from-revolut-after-data-disclosure\/","title":{"rendered":"Hackers Demand $3 Million In Monero From Revolut After Data Disclosure"},"content":{"rendered":"<p><b>(Originally posted on : Crypto News &#8211; iGaming.org )<\/b><br \/>\n<\/p>\n<div>\n<p>A group claiming responsibility for the <a href=\"https:\/\/igaming.org\/crypto\/revolut-customer-data-exposed-after-fake-government-requests\/\">Revolut customer data incident<\/a> has demanded about $3 million in Monero and threatened to sell records tied to hundreds of accounts.<\/p>\n<hr\/>\n<p><strong>Good to Know<\/strong><\/p>\n<ul>\n<li>iamnotavillain demanded 6,000 XMR and set a 24 hour deadline.<\/li>\n<li>Around 680 Revolut customers across Europe were reportedly affected.<\/li>\n<li>Revolut said its internal systems and customer funds remained secure because the data left through fraudulent government information requests.<\/li>\n<\/ul>\n<hr\/>\n<h2><strong>Revolut Faces $3 Million Monero Ransom Demand<\/strong><\/h2>\n<p>iamnotavillain published a ransom demand on Wednesday alongside a countdown clock, according to the Financial Times. The group requested 6,000 XMR, worth around $3 million at the reported price, and threatened to sell Revolut customer records to other criminal groups after 24 hours.<\/p>\n<p>Revolut told Reuters that it had received no direct communication or ransom demand from the alleged attackers. No confirmed negotiations had taken place when the latest reports appeared.<\/p>\n<p>The attackers gave the FT a short screen recording that appeared to show passports, driving licences, identity verification photographs and customer transaction records. Revolut has not independently confirmed that every record displayed by the group came from the incident.<\/p>\n<p>Reports put the affected group at around 680 customers across several European countries. Revolut has publicly referred only to a limited number of affected customers.<\/p>\n<h2><strong>Fake Government Requests Led To Data Disclosure<\/strong><\/h2>\n<p>The attackers did not need to enter Revolut infrastructure directly.<\/p>\n<p>Instead, fraudulent customer information requests came through an email account using a legitimate government agency domain. Revolut accepted the requests as authentic and supplied customer information before detecting the impersonation scheme.<\/p>\n<p>Revolut later blocked the relevant address and contacted law enforcement, regulators and the government body involved. The company described the incident as a sophisticated external impersonation scam.<\/p>\n<p>Potentially exposed information included names, dates of birth, addresses, phone numbers, email addresses, passports, driving licences and verification selfies. Account statements could also include IBANs, withdrawal records and full transaction histories, including Bitcoin activity.<\/p>\n<p>Revolut said biometric facial telemetry was not exposed. Reports also do not identify passwords, private keys, security codes or complete card details among the compromised records.<\/p>\n<p>The group told the FT that blockchain analysis helped it identify customers with large cryptocurrency holdings. Earlier reporting indicated that many affected customers lived in Switzerland and France, although records from customers across more than 30 European countries were involved.<\/p>\n<p>That targeting method adds another security concern. Identity documents, home addresses and crypto transaction histories can provide criminals with information about both financial holdings and the people associated with them.<\/p>\n<hr\/>\n<h2><strong>FAQ<\/strong><\/h2>\n<h3><strong>How much are the Revolut hackers demanding?<\/strong><\/h3>\n<p>iamnotavillain demanded 6,000 Monero, worth roughly $3 million at the value cited when the demand appeared.<\/p>\n<h3><strong>How many Revolut customers were affected?<\/strong><\/h3>\n<p>Reports put the number at around 680 accounts. Revolut has described the affected population as a limited portion of its customer base.<\/p>\n<h3><strong>Did hackers break into Revolut systems?<\/strong><\/h3>\n<p>Revolut says no. The attackers allegedly used a legitimate government agency email domain to send fraudulent information requests that Revolut processed as authentic.<\/p>\n<h3><strong>Was cryptocurrency stolen from Revolut customers?<\/strong><\/h3>\n<p>No theft of customer funds has been confirmed. Revolut said customer funds and internal systems remained secure. The exposed records reportedly included Bitcoin transaction information for some customers.<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/igaming.org\/crypto\/revolut-hackers-demand-3-million-after-customer-data-exposure\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Crypto News &#8211; iGaming.org ) A group claiming responsibility for the Revolut customer data incident has demanded about $3 million in Monero and threatened to sell records tied to hundreds of accounts. Good to Know iamnotavillain demanded 6,000 XMR and set a 24 hour deadline. Around 680 Revolut customers across Europe [&hellip;]<\/p>\n","protected":false},"author":44,"featured_media":78284,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[34],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/78283"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=78283"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/78283\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/78284"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=78283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=78283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=78283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}