Revolut Law Enforcement Data Request: Police & Government Guide

How police request Revolut records: UK production orders and the Lithuania (EU) route, KYC and transaction data, freezes, and India's MLAT path.
Revolut is one of Europe’s largest financial-technology companies, with tens of millions of customers across the UK and the EEA using it for everyday banking, card payments, currency exchange and crypto. That scale makes it a frequent subject of financial-crime investigations: authorised-push-payment and investment scams, mule accounts, and money laundering. Crucially for investigators, Revolut is not a US company, so the US Stored Communications Act does not apply. It operates through a UK entity, now a licensed UK bank regulated by the Bank of England’s Prudential Regulation Authority (PRA) and the Financial Conduct Authority (FCA), and through Revolut Bank UAB in Lithuania (licensed via the Bank of Lithuania / ECB and passported across the EEA). A request here concerns financial and account records obtained under UK or EU legal process.
- How to submit: Through Revolut’s law-enforcement / legal-request channel, with valid local process (a UK production order or court order for UK matters; the appropriate EU/Lithuanian instrument for EEA customers). Confirm the current submission address with Revolut’s legal team before serving.
- Identifiers accepted: Registered email, phone, full name and date of birth, the account or IBAN, and specific transaction references.
- What is returned: KYC/onboarding data, transaction history, linked cards/accounts, device and login/IP logs, and in-app crypto activity — scaled to the legal instrument and the entity (UK vs Lithuania) that holds the account.
Identifiers for a data request
Give the registered email and phone, the customer’s full name and date of birth, the account number or IBAN, and the transaction references, amounts and dates at issue. Identify which entity holds the account where you can — UK customers sit under the UK entity, EEA customers under Revolut Bank UAB (Lithuania) — because that determines the correct legal route.
What data Revolut provides
As a regulated financial institution, Revolut discloses records under the appropriate court/production order rather than a US-style content/non-content split:
| Instrument (UK / EU) | Records produced |
|---|---|
| Disclosure for crime prevention/detection (e.g. UK DPA 2018 s. 29; EU equivalent) | Limited subscriber/KYC information where lawful and proportionate |
| Production order / court order (UK PACE 1984; EU/Lithuania court order) | Full KYC/onboarding records, transaction history, linked cards/accounts, device and IP logs, crypto activity within Revolut |
| Cross-border (UK Crime (Overseas Production Orders) Act; MLAT) | The same records, obtained where the requesting authority is in another country |
Financial intelligence: Revolut independently reports suspected money laundering to the relevant financial-intelligence unit (a suspicious-activity report); that is a separate regulatory channel and is not produced to investigators on demand.
User notification: as a bank, Revolut’s disclosure to law enforcement is governed by the applicable data-protection and crime-prevention exemptions; notice to the customer may be withheld where it would prejudice an investigation.
How to submit a request
- Route to the right entity. Serve the UK entity for UK customers; for EEA customers, direct the request to Revolut Bank UAB (Lithuania) through the appropriate national channel.
- Use the correct instrument: a UK production order/court order, or the EU/Lithuanian equivalent. For data held abroad, a UK Overseas Production Order or an MLAT request applies.
- Request preservation/expedited handling where available, and flag any live-fraud freeze as urgent.
Emergency and urgent requests
Where there is a risk to life or an active fraud draining an account, Revolut can act on an expedited basis: provide the account identifiers, articulate the threat or the in-progress fraud, and ask for an immediate freeze/hold and fast disclosure under the urgent provisions of the applicable regime.
For India: legal basis and process
Because Revolut is a UK/EU institution, Indian cross-border requests do not go to the US Department of Justice. The domestic instruments establish authority; the cross-border route runs to the UK or Lithuania.
- IT Act, 2000 — Section 69 and BNSS, 2023 — Section 94 provide the domestic authority to direct production of records.
- MLAT: route the request through the MHA Central Authority to the UK Home Office (UK Central Authority) for the UK entity, or to Lithuania for Revolut Bank UAB, which then compel Revolut under local law — not via US process.
- For fast fund-freezes in a live fraud, report on the national cyber-crime helpline 1930 / cybercrime.gov.in so a lien can be sought, and coordinate through I4C in parallel with the formal records request.
What you’ll need
- The registered email/phone, full name and date of birth, account number/IBAN, and transaction references;
- Which entity holds the account (UK or Lithuania), to pick the correct legal route;
- A UK production order/court order or the EU/Lithuanian equivalent (and an Overseas Production Order or MLAT for cross-border);
- For Indian agencies: an MLAT request through MHA to the UK Home Office or Lithuania, plus an immediate 1930 report for any freeze.
For a full directory of law enforcement request portals across major platforms, visit our LERS portal hub or the platform-by-platform LERS guide.