5 takeaways from the #Revolut breach:
1. Banks are not your friend:
First things first: banks care only about making 💲. Because they operate through a legacy fiat structure (regulated, insured, state-approved) and depend on government permission to operate, they have to comply with every legal demand to continue making 💲. They won't risk their license on a simple data request. The state makes the rules of the banking game and following them is mandatory.
2. Banks will always share your data:
Revolut, like #Wise and other neo-banks, is very convenient but remains one of the largest honeypots 🍯 for private financial data out there: passport pictures, selfies, full transaction history (including #Bitcoin), account balances... all shared with threat actors masquerading as government agents. The point of this latest hack is not whether Revolut needs better internal protocols, more robust verification procedures or a better GDPR stance; the real issue is that banks **have to** share this data with the government (+ corporations) in order to operate—survive, even. In the legacy fiat system, your sensitive financial records are handed over by default. What you've seen is just a small error in the enormous information-exchange machine, which is composed of AML agencies, credit bureaus, tax collectors and other state-aligned entities.
3. Banks will always request more data:
As surveillance grows and regulations tighten, banks will request ever more invasive data points from you, their customer. No matter that you've already complied with every prior demand, one single instance of "suspicious" activity and you suddenly become guilty until proven innocent, which leads the bank to ask you for all your information, all over again (even if they already had most of it). You can never be completely "clean" in this Kafkian machine; whitelists require political connections or big money, and are only there because the government turns a (very selective) blind eye to its friends. The trend is clear as day and doesn't show any signs of changing: more requests, more scrutiny, more suspicion. For example, some banking apps are now requiring uninterrupted location access 📍 just to function, with the excuse of combating malicious login attempts.
4. Banks will always end up leaking your data:
Assume all of your banking data will be made public at some point in the future and modify your behavior accordingly. A good rule of thumb is this: would I be embarrassed if someone shouted this information in my town's main square? If not, proceed with the transfer. For sensitive purchases, use cash 💵 in physical stores and #Monero or Lightning ⚡ for online payments. The more you use private money, the less data there is for the machine to swallow. Minimize how much you feed it.
5. Banks will not erase your stolen data:
The consequences of a data breach 🪪 are long-standing. The sensitive records you willingly gave out cannot be deleted afterward—criminals don't honor the "right to be forgotten" and banks are obliged by the state to keep records for eternity at this point. Your legal name, address 🏠 and bank balance are hard to change. In isolation, they don't pose a threat to your safety. However, grouped together in the hands of an attacker, they suddenly become dangerous. Keep this fact in mind and plan around it.