A hacking group contacts Revolut demanding $3 million in Monero and gives the company 24 hours to pay, while also threatening to sell or leak customer data, according to reports.

The attackers reportedly say they selected victims by looking at blockchain activity, targeting Revolut users with significant crypto holdings. CoinDesk and Decrypt both describe the demand as a ransom paid in Monero and include threats related to customer information.

While both outlets focus on the amount, payment method, and short deadline, they differ slightly in how they describe the selection process and the nature of the threatened data. Both accounts nonetheless attribute the allegations to the hackers’ communication and present the ransom demand as a conditional threat aimed at pressuring Revolut.