Mark Karpelès on the Revolut case: they should not have sent the information
- Karpelès criticizes that Revolut did not first confirm the request with the requesting agency.
- High-profile user data was leaked to alleged bad actors.
The former CEO of the now-defunct bitcoin (BTC) exchange Mt. Gox, Mark Karpelès, lashed out at the neobank Revolut for leaking private data of its clients.
Karpelès criticized the platform for not confirming the request with the requesting agency before processing the mass delivery of confidential information.
The incident was triggered when the financial entity proceeded to deliver records after receiving an allegedly official email, which turned out to be an advanced identity theft that compromised the privacy of its clients.
According to the entrepreneur's statements, the financial institution made a "serious methodological error" by responding to the request immediately and relegating verification to a
Revolut should not have sent customer data (KYC, historical data, etc.) in response to an email just because it came from a government agency.
Mark Karpelès, former CEO of Mt. Gox.
Indeed, high-profile user data from Revolut was leaked to alleged bad actors due to this failure in prior verification protocols.
The transferred information includes personal identification data, such as full names, dates of birth, home addresses, copies of official documents with photographs, bank statements with IBAN, detailed records of withdrawals, and the complete transaction history executed on the platform, as reported by CriptoNoticias.
In addition to personal data, Revolut provided BTC transaction histories of several clients, which increases the risk of phishing attacks against the neobank's users.
In short, Revolut should not have sent customer data (KYC, historical data, etc.) in response to an email just because it came from a government agency. https://t.co/mhEqMmUZjW
--- Mark Karpelès (@MagicalTux) September 13, 2026
"Was Revolut right?"
The legal analysis presented by the former Mt. Gox executive indicates that the argument of acting under a reasonable belief lacks legal backing within the regulations of the European Union.
Karpelès questioned the neobank's stance by publicly asking: "Was Revolut right to disclose information based on an email?".
Unlike U.S. legislation---where provision 18 U.S.C. § 2702(b)(8) contemplates emergency data requests based on the good faith of the provider---the regulatory framework of the countries where Revolut operates imposes strict banking secrecy. Under Article 6.1.c of the GDPR, any data transfer requires a prior legal obligation and does not admit good faith justifications.
In Lithuania ---the country regulating Revolut--- Article 55 of the Banking Law requires written requests transmitted through previously agreed channels and sets a formal legal deadline of up to 20 days to respond.
Similarly, in France, authorities like TRACFIN channel their requests through authenticated platforms like ERMES, and the CNIL's Guide to Authorized Third Parties mandates prior verifications (such as a confirmation call).
For all these reasons, any justification for processing an unauthenticated request immediately is ruled out.
Furthermore, Karpelès emphasized that the practical guidelines from personal data protection agencies clearly specify that entities cannot validate requests based on contextual elements or the mere appearance of the sender.
In fact, the basic protocol for email requests requires direct verification contact with the public institution through independently published official communication numbers or channels.
This case highlights the advancement of social engineering and the increasingly precise tools of hackers and attackers, who have managed to bypass controls and barriers to access privileged information. Hence, the relevance of optimizing security processes through automated tools and artificial intelligence (AI), as specialists have suggested to this medium.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Wyoming: LayerZero Loses State Stablecoin, Chainlink Takes Over

BlackRock Executive: Bitcoin Volatility Halved, Shifting from 'Get-Rich Narrative' to 'Collateral Narrative'

Crypto: The 2026 Ranking of the 36 Most Favorable Countries for Adoption

Ethereum's Next Upgrade May Become the Most Significant Catalyst in History

Web3 Newsletter: Industry Highlights and Must-See Trends This Week

Cryptocurrency Security Guide: How to Identify and Prevent Social Engineering Attacks

Why SBI just put millions behind a Singapore startup’s stablecoin push

Tokenized stocks face 24/7 pricing gap: RedStone COO

Bitcoin Will Hit $1 Million, Says Kevin O’Leary—But There’s a Quantum Catch

Fraud Detection with AI SEON: Signals Rise from 900 to Over 1,100

WEB3 Digital Nomads Don't Need a U Card That Only Allows Payments

How to Spend Crypto on Apple Pay in 2026 (No Selling)

ZEC Coin Nears $1,500 as a Leveraged Short Trader Faces a $7.66 Million Paper Loss
ZEC coin nears $1,500 as two large leveraged short traders face a combined paper loss north of $34 million, the squeeze sits on top of genuine institutional demand through Grayscale's ZCSH.

AMD Stock Soars 5%: Reports Say It's Raising GPU and CPU Prices
AMD stock rose on unconfirmed reports of a 10% price hike on GPUs and chipsets tied to rising TSMC costs, Ryzen CPUs are notably absent from the list.

The US Stock Exchange on Blockchain: 3 Points to Understand the SEC's Major Initiative

AMD Stock Price: Why Free Cash Flow Fell From $2.6B to $1.6B Even as Shares Rally
AMD's free cash flow fell 39% in Q2 as capex nearly tripled and supplier payments got delayed, even as revenue hit a record $11.5 billion.

CLARITY Act needs 3 more senators and a race against the clock for a 2026 revival

Stablecoins Force Banks to Adapt, 24/7 Cross-Border Payments Are Here
![[SCAN 2026 Final Interview] IBarelyKnowHer: ⑱ Blockchain and Cryptography... A Diverse Team of Indian Security Experts](/public-static/15_8b3431959d.png?format=avif)
[SCAN 2026 Final Interview] IBarelyKnowHer: ⑱ Blockchain and Cryptography... A Diverse Team of Indian Security Experts

Can GSTOCK Reach $25M After Its 190x BNB Chain Rally?

Hedera: 3 million Filipino farmers to monetize their carbon

Why risk a smart contract exploit when safe US Treasuries pay better crypto yields?

What Is GSTOCK? How to Buy Gstock After Its 190x BNB Chain Rally

NDV Jason: How My Investment Approach Has Been Changed by the Market and AI from Bitcoin to Global Macro

South Korea to Build a Chain That Only Recognizes Korean Won, Maroo Incorporates Compliance into Infrastructure

Can UNI Reach $10 as Tokenized Stock AMMs Gain Traction?

Helius Co-founder Mert Claims Privacy Mechanism is the Foundation of Zcash's Superiority

Has the Macroeconomic Pricing of BTC Changed? A Nine-Year Review of the Federal Reserve, the Dollar, the Nasdaq, ETFs, and Stablecoins

Crypto in the United States: Brad Garlinghouse (Ripple) remains optimistic










