Ran an LE request desk for a while and the whole thing was PDFs from .gov-ish email addresses. Only real control we had was calling the agency back on a number we looked up ourselves, not the one on the letterhead.
You say .gov-ish, does this mean compromised gov email accounts, spoofed email addresses or domains that look like government domains?
> Only real control we had was calling the agency back on a number we looked up ourselves
Way to difficult for Revolut, evidently.
I've done that as well and this is what most of those do look like.
Is it uncommon/impossible to ask for the federally-brokered in-person procedure in the US?
(The way I know it: Local court or police officer shows up at our office later that day and hands over a printout matching the request that we had been unable to confirm, on request of federal authority, in turn on request of the authority demanding we hand over some customers data. Those two requests utilizing government agency-internal auth mechanisms we do not need to know or care about.)