In recent weeks, a shadowy hacking collective has set its sights on Revolut, the popular financial‑technology platform that offers banking, currency exchange, and cryptocurrency services to millions of users worldwide. According to the group’s public statements, they are demanding a ransom of three million US dollars, to be paid exclusively in Monero, a privacy‑focused cryptocurrency that makes tracing transactions extremely difficult. The hackers have warned that if their demands are not met within a strict 24‑hour window, they will begin to sell or otherwise disclose the personal data of Revolut’s customers, with a particular focus on those who hold sizable crypto‑asset portfolios. The threat appears to be part of a broader trend in which cyber‑criminals target financial service providers not merely to steal money directly, but to leverage the sensitive information they hold as a bargaining chip.
By demanding payment in Monero, the attackers are exploiting the anonymity that the digital currency provides, hoping to evade law‑enforcement scrutiny and increase the likelihood of a successful payout. Monero’s stealth features—such as ring signatures, stealth addresses, and confidential transactions—make it a favored choice for illicit actors seeking to conceal the flow of illicit funds. Revolut, which has rapidly expanded from a simple money‑transfer app to a full‑featured banking alternative, has publicly responded to the allegations.
In a statement released through its official channels, the company said it has not received any direct communication from the individuals or group behind the alleged extortion. Revolut emphasized that it continuously monitors its security infrastructure and works closely with cybersecurity experts and law‑enforcement agencies to protect its users’ data and assets. The firm also reassured customers that there has been no evidence of a breach affecting account balances or personal information at this time. The group’s claim that they have targeted “customers with significant crypto holdings” adds another layer of complexity to the situation.
Revolut offers a range of cryptocurrency services, allowing users to buy, sell, and hold assets such as Bitcoin, Ethereum, and a handful of other tokens. While the platform does not currently support direct transfers of crypto to external wallets, it does store users’ crypto balances in custodial accounts. This custodial model means that Revolut holds the private keys on behalf of its users, making the platform a potentially attractive target for attackers seeking to leverage large crypto‑rich accounts.
Industry analysts note that the threat of data leakage can be as damaging as a direct theft of funds. Personal data—including names, email addresses, phone numbers, and transaction histories—can be used for a variety of malicious purposes, from phishing attacks to identity theft.
Moreover, the exposure of a user’s crypto holdings could make them a target for further extortion attempts, especially if the attackers are able to link specific accounts to substantial digital‑asset portfolios. Cyber‑security experts advise users to adopt a layered approach to protection. First, enabling two‑factor authentication (2FA) on all accounts, especially those linked to financial services, adds an extra barrier that can thwart unauthorized access. Second, users should remain vigilant for any unsolicited communications that request personal information or ask for payments in cryptocurrency.
Legitimate companies, including Revolut, typically do not demand payments in obscure digital currencies for resolving security incidents. In the broader context, the incident underscores the growing intersection between traditional fintech services and the cryptocurrency ecosystem. As more mainstream platforms incorporate crypto features, they inherit both the opportunities and the risks associated with digital assets.
Regulators worldwide are beginning to scrutinize how these services store and protect user data, and incidents like the current threat to Revolut may accelerate calls for stricter compliance standards. For Revolut customers, the immediate takeaway is to stay informed and cautious.
While the company has not confirmed any breach, the possibility that a third party claims to possess sensitive data should prompt users to review their account security settings. Updating passwords regularly, reviewing recent activity, and ensuring that recovery email addresses and phone numbers are current can help mitigate potential fallout.
If you suspect that your account may have been compromised, it is advisable to contact Revolut’s support team directly through the official app or website. Do not respond to unsolicited messages that claim to represent the hacking group or demand payment.
Law‑enforcement agencies typically advise against paying ransoms, as doing so can encourage further criminal activity and does not guarantee that the stolen data will be destroyed or that the attackers will refrain from future attacks. In summary, a cyber‑criminal group has issued a bold ultimatum to Revolut, demanding three million dollars in Monero and threatening to publicize or sell the personal data of users, particularly those with large cryptocurrency holdings. Revolut denies having been contacted directly and asserts that its systems remain secure. The episode highlights the evolving threat landscape facing fintech firms that blend traditional banking with crypto services, and it serves as a reminder for users to adopt robust security practices, stay alert to potential scams, and rely on official communication channels for any concerns about account safety.