Hackers Impersonate Italian Police to Target Revolut Crypto Whale Records

Cybercriminals reportedly compromised an official Italian government email system to orchestrate a fraudulent request scheme targeting Revolut crypto whale customer accounts. According to reporting from the Financial Times, the malicious actors masqueraded as law enforcement personnel, using legitimate institutional communication channels to solicit sensitive user details from the digital banking platform.

The breach enabled the attackers to exploit standard cross-agency data request workflows by fabricating formal police inquiries. By leveraging authentic government domains, the perpetrators attempted to extract identifying records and portfolio details belonging to high-net-worth digital asset holders, highlighting vulnerabilities in third-party verification procedures between state bodies and financial intermediaries.

This incident underscores the rising sophistication of social engineering tactics aimed at high-profile cryptocurrency investors. As retail and institutional wealth concentrates in digital banking apps, attackers increasingly bypass direct cryptographic defenses, focusing instead on administrative loopholes, legal request mechanisms, and privileged communication channels to identify wealthy targets for secondary extortion or phishing schemes.

Financial institutions and law enforcement agencies face growing scrutiny over their validation standards for sovereign data disclosures. Moving forward, the industry must address how compliance teams verify the cryptographic authenticity of legal subpoenas to prevent fraudulent intelligence gathering against prominent cryptocurrency depositors.