Revolut Police Email Request

What happened? Revolut received a request for customer information that appeared to come from a legitimate government agency. The request came from an unauthorised email account sent directly using the official government agency's email domain. As the communication carried valid domain authentication credentials, it was fulfilled under the reasonable belief that it was an authentic government agency request. • Identity details: full name, date of birth, occupation • Contact details: postal address, email address, and telephone number • Document and verification data: a copy of your identity document (passport and/or driver's license) and facial verification image (the selfie you provided for verification). Please note that no biometric facial telemetry data was involved or compromised • Financial data: account statements (including IBAN, account status, opening date, wallet reference number), withdrawal records and full transaction history (including Bitcoin)

A screenshot explains that Revolut fulfilled a police-style request for extensive customer information because it came from an unauthorised email account using an official government email domain and valid authentication credentials. The joke is the absurd security failure: a fraudulent request was treated as genuine, exposing identity, contact, document, facial verification, and financial data. It is used as a reaction to suspicious emails, phishing, bureaucratic incompetence, or a disastrously trusting institution.

• @gentoomemes / 21969 2026-09-12