A reported extortion attempt targeting Revolut has drawn fresh attention to the security risks tied to centralized stores of customer identity data. Revolut said only “a limited number” of customers were affected after criminals allegedly posed as a government agency and sought personal information, including details linked to bitcoin transactions.
International Cyber Digest reported that attackers had already published sensitive customer data online and demanded a ransom to prevent further disclosures. The outlet said the leaked material included information connected to tennis player Alexander Shevchenko and Felix Römer, chief executive of Gamdom and Skinscom.
Leak claims and ransom demand
According to the report cited by the source article, the attackers threatened to release more customer information unless Revolut paid. The same report said the criminals also claimed to hold “insights into how the Revolut team operates.”
The source article said Bitcoin.com News contacted Revolut for comment on those additional claims and would update its story if the company responded. At the time of publication, the confirmed public position from Revolut remained that the incident affected only a limited number of users.
Another reported exposure in the same week
The Revolut case was presented alongside a separate disclosure from Swiss Bitcoin Pay, a bitcoin payment processing company. On the same day, Swiss Bitcoin Pay said it believed someone may have accessed customer email addresses, bitcoin addresses and IBANs, transaction history, and hashed passwords.
Taken together, the two incidents were used to highlight the broader risks that can emerge when financial or crypto-related services collect and retain personal information for identity verification purposes.
Why KYC data is viewed as especially sensitive
The article argued that breaches involving crypto users can carry consequences beyond ordinary spam or phishing. Previously leaked personal information has, it said, been linked to thefts and even physical attacks against people known to hold digital assets.
As previously reported, onchain investigator ZachXBT estimated that the Revolut incident appeared relatively small and targeted high-net-worth individuals. Even so, the article said such leaks can become a resource for criminals seeking to identify and pressure more victims.
Services promoted as lower-exposure alternatives
The source article pointed to non-KYC tools and platforms that some bitcoin users rely on to reduce the amount of personal data they hand over. It referenced Kycnot.me, a six-year-old project created by developer pluja that catalogs hundreds of services across categories including exchanges, VPNs, marketplaces, SIM cards, payment cards, and hosting.
At the same time, the article stressed caution. Kycnot.me warns that some listings were added by the community, may not be verified, and in some cases have turned out to be scams. It also noted that service policies can change, meaning users still need to check whether a platform’s KYC requirements remain the same over time.
Examples named in the article included peer-to-peer bitcoin exchanges such as Bisq, Hodl Hodl, RoboSats, and Vexl; VPN services including Mullvad, NymVPN, and Obscura VPN; hosting providers Private Alps and Servers Guru; and shopping or marketplace options such as Stealths and Shopstr. The article also noted caveats around some services, including account suspension risk, closed-source software, weak customer support, or the possibility that data could still be shared with authorities.
The broader policy question
The article did not argue that non-KYC services are universally superior. It noted that regulated platforms can offer better pricing, broader product selection, stronger customer support, and a transaction record that some users may find useful for tax reporting.
Its broader conclusion was that repeated breaches are intensifying debate over whether the costs and risks of mandatory identity collection outweigh the benefits. As one point of context, the article cited the Basel Institute’s 2025 Global Money Laundering Index, which it said barely moved despite higher worldwide spending on anti-money-laundering efforts. For now, the next confirmed step is any further comment from Revolut on the reported ransom and leak claims.
Source: news.bitcoin.com