If you hold a Gnosis Pay-branded crypto card, some of your personal details may now be in a criminal's hands, even though your money was not touched. Gnosis Pay says it detected unauthorized access to the legacy system behind its branded cards on November 3. For some customers, the exposed data reportedly included a home address and a card number. That is the kind of material scammers use to write messages that look convincing, so the next few weeks are the time to be careful.
What Gnosis Pay has said
According to The Block, Gnosis Pay disclosed the breach after spotting unauthorized access to the legacy system that powers its own-brand debit cards. The company says it contained the incident within two hours, replaced the compromised security credentials and fixed the vulnerability. It also says customer funds were not affected and that its enterprise platform, which runs white-label card programs for other businesses, was not touched.
As a precaution, Gnosis Pay has made 3D Secure verification mandatory for online card payments. This stays in place until the affected system is retired on December 20. Protos adds that the company had already planned to shut down this system at the end of the year.
What data may have been exposed
Not everyone received the same notice. Protos reported that, according to Gnosis Pay's message, different users had different amounts of information exposed. The list it quotes covers the name printed on the card, the shipping address and the Gnosis Pay account reference.
Some customers heard more. Protos says Lefteris Karapetsas, founder of Rotki, reported that his email said the breached data included his full home address, name, card number and all wallet addresses linked to his account. Protos contacted Gnosis Pay for comment and had not received an immediate reply.
So the first thing to do is read the email Gnosis Pay sent you carefully. It should tell you which of your details were involved.
Why "funds unaffected" is not the end of it
It is good news that nobody's balance was drained. But a name, a postal address and a card number are enough for a believable scam. Three risks stand out.
- Targeted phishing. A scammer who knows you use Gnosis Pay can send a fake "security alert" or "card replacement" message that quotes your real name or address. The detail makes it feel genuine.
- Card misuse attempts. A leaked card number is a reason to watch your statements and keep the extra payment verification switched on.
- Linked wallet addresses. Wallet addresses are public on the blockchain. If a criminal can connect your name and home address to an address, they may be able to see what it holds and what it has done. That is a privacy problem and, for some people, a personal safety one.
What this means for you: a practical checklist
You do not need to panic, but you should act. Work through these steps in order.
- Find the official email. Open Gnosis Pay's notice and note exactly which details it says were exposed. Reach it by opening the app or typing the website address yourself, not by clicking links in any message.
- Expect the 3D Secure prompts. Online card payments now need that extra verification until December 20. If a payment asks for confirmation you did not start, decline it.
- Treat every follow-up message as suspect. That includes email, SMS, social media direct messages and phone calls about "the breach". No genuine support team needs your seed phrase, wallet password or full card details by message.
- Check your card activity. Look through recent transactions and report anything you do not recognise through the official app.
- Ask about your card. If your card number was in the exposed data, contact Gnosis Pay through its official channels and ask whether replacing the card is advisable.
- Review the wallets linked to the account. Know which addresses are connected, and consider whether you want that link to stay in place. Do not move funds in a hurry because of a message you received.
- Be discreet offline. If your home address was exposed, avoid advertising that you hold crypto, and be wary of unexpected parcels or visitors asking about it.
- Secure your email. Use a unique password and two-factor authentication on the email account tied to your card, since it is the easiest route for a scammer to reset other accounts.
This is part of a pattern
The Block notes that crypto card providers lean more and more on third-party infrastructure and older systems, and that these can create weak points. It lists several recent incidents. They differ in what was lost, and the table below sets them side by side.
| Incident | When | What happened | Funds |
|---|---|---|---|
| Rain (Solana card infrastructure) | August | A vulnerability allowed unauthorized withdrawals from card balances of Tria and Avici users | Affected |
| Based (Visa card program) | October 5 | An attacker accessed an internal management dashboard and some customer data was exposed | Attacker reportedly failed to reach deposits |
| Gnosis Pay (legacy card system) | November 3 | Unauthorized access exposed certain customer information; 3D Secure now mandatory | Not affected, according to the company |
| Gnosis Pay legacy system retirement | December 20 | The affected system is due to be shut down | Not applicable |
The Block also reports that Revolut said an unauthorized third party used a fraudulent request from a legitimate government email domain to obtain sensitive customer information. This potentially included account statements, identity documents and Bitcoin transaction histories. Revolut said customer funds and systems were unaffected.
The lesson is the same across all of these cases. A card connected to crypto is also a data trail, and a company can protect your balance well while still losing your personal details.
Keeping the risk in proportion
Gnosis Pay says it responded quickly, and the affected system is already due to be retired. That limits one door, but it does not take back data that has already been copied. Information from a breach can be used months later, so stay cautious beyond December 20. A message that arrives weeks from now and mentions your Gnosis Pay card deserves the same suspicion as one that arrives today.
FAQ
Did the Gnosis Pay breach put my crypto at risk?
Gnosis Pay says customer funds were not affected, and that its enterprise platform for white-label card programs was untouched. The exposure concerned personal information, not balances. The risk now is scams that use that information.
What personal data was exposed in the Gnosis Pay breach?
It varied by customer. Protos reported that the company's notice mentioned the name on the card, the shipping address and the account reference. One customer, Rotki founder Lefteris Karapetsas, said his email listed his full home address, name, card number and all linked wallet addresses. Check your own notice to see what applies to you.
How can I tell whether a message about the breach is real?
Do not judge it by how much it knows about you, since scammers may now know your name and address. Skip any links, open the official app or website yourself and look for the same notice there. Never share your seed phrase or passwords with anyone who contacts you first.
Sources
- The Block: Gnosis Pay data breach exposes customer info; funds unaffected
- Decrypt: Crypto Card Provider Gnosis Pay Says Hackers Accessed Customer Data
- Protos (hacks, scams, investigations): Gnosis Pay breach exposes customer addresses
Photo: Mikhail Nilov / Pexels
I'm an Italian creator who builds apps, games and websites. I run Crypto Radar Daily with the help of AI tools: every article starts from the sources linked above, and I check what goes out. I'm not a doctor, a lawyer or a financial adviser. Spotted a mistake or have an idea? Write to me.
Instagram @spartaco_94_My websiteWrite to meAbout this blog