alt Hacker NewsIn the countries you are licensed in you are legally required to reply to law enforcement requests. In most places there is no official channel for this. It is literally stuff like [email protected]. Emails come from all over and random domains that appear official-ish. Most official domains do not have DKIM or SPIF setup, very easy to spoof. LE by and large do not take security seriously, they do not take data transfer seriously.
Most requests are digitally signed PDFs that come via email, require a response sent to another email.
Yeah the secure thing is to ignore all requests from domains without DKIM, but that would mean ignoring a lot of legitimate requests which is illegal.
Revolut are known to be a bit shady but in this case they're damned if they do and damned if they don't