Revolut Hackers Want $3M in Monero or Your Crypto Data Gets Sold
A hacker group is holding Revolut's customer data hostage and demanding $3 million in Monero, the privacy coin that makes payments nearly impossible to trace.
The group issued a 24-hour ultimatum, threatening to sell the stolen data if Revolut doesn't pay. Most alarming: the attackers claim they deliberately targeted customers with significant crypto holdings, meaning this isn't random. They went after the accounts most worth targeting.
Why Monero? That's the Tell.
The ransom demand isn't just a number. It's a signal. Monero is the coin of choice when hackers want to vanish. Unlike Bitcoin, Monero transactions are private by design, shielding the sender, receiver, and amount from public view. Demanding Monero means these attackers know exactly what they're doing and have likely done it before.
Revolut, the London-based fintech with over 45 million customers globally, is one of the most widely used platforms for buying and holding crypto in Europe. If the attackers genuinely have access to high-balance account data, the downstream risk is serious. Think SIM swap attacks, phishing campaigns built from verified customer profiles, and targeted social engineering using real account details.
What Data Could Be at Risk
The group hasn't published a sample of the data yet, which is a classic pressure tactic. Attackers typically wait, letting anxiety do the work. If the data is real and includes verified identity documents, wallet addresses, and transaction histories, it becomes a roadmap for follow-on attacks against Revolut's most financially active users.
Revolut has not publicly confirmed the breach or the ransom demand as of this writing. That silence is its own kind of information.
The Bigger Pattern Nobody Is Talking About
This is the third major crypto-linked fintech threat in recent months. Hackers are no longer just draining protocols. They're going after the customer data sitting inside regulated, KYC-verified platforms because that data is worth more on dark markets than most people realize. Your verified identity plus your crypto balance is a premium asset.
What Crypto Holders Should Do Right Now
If you hold crypto on Revolut, treat this as an active threat until Revolut issues a clear denial with specifics. Move significant holdings to a self-custody wallet immediately. Enable all available 2FA options on your account and any linked email addresses. Watch for phishing emails referencing your Revolut account in the coming days, especially ones that seem unusually personalized.
The $3 million demand is the headline. The real story is that high-value crypto holders inside regulated apps are now the target. Act accordingly.