What happened to @Revolut is the evidence of what we told the @Europarl_EN in 2022 and 2023, while the AMLR was being adopted: state data requests to financial institutions will be weaponized, because nothing in the rules obliges anyone to check whether the requesting state is legitimate. Our recommendations were rejected in the trilogue by the @EUCouncil and the @EU_Commission . The Commission's AML unit at DG FISMA, called our testimony "false positives". For those who think zero-knowledge tech solves this: it does not. ZK changes what a bank stores, not what it must hand over. @FATFNews rules oblige financial (and not only) institutions to keep passports, selfies and full transaction records and to disclose them promptly to any state request, with fines for delay and none for over-compliance. Whatever they are required to keep, they give away. This is a fault of AML regulation and it must be fixed, now. In the EU, for instance, it can be done while AMLA writes its technical standards and centralises even more data. Back then our evidence was dismissed as „false positives” (!). Now it reaches every EU citizen. Will anyone at the Commission be held accountable for ignoring it? Will it urgently propose remedies and real protections for EU citizens? The remedies proposed by the @oscepa resolution adopted in The Hague in July 2026. Implementation is the next step.