Gnosis Pay reported a leak of customer information from its crypto card servicing system. According to the company's statement, user funds were not affected, but cardholders were advised to beware of fake messages from support.
The company reported the incident on November 6. Unauthorized access was discovered on November 3 in an old system servicing cards under the Gnosis Pay brand. A separate platform for partners' card programs, according to the company, was not affected by the breach.
The number of affected customers and the total list of exposed data were not publicly disclosed. The company sent a notification to each affected customer. The specific information obtained from a particular account was indicated in that individual message.
Mandatory additional 3D Secure verification was introduced for all online payments under the affected card program—confirmation of the transaction when paying online. The company also enhanced monitoring of card and wallet activity.
The main risk for customers is fraudulent emails, messages, and calls that may appear convincing due to real personal data or purchase information. Gnosis Pay advises customers to open the official app directly, without following links from unexpected messages.
The company emphasizes that its employees and partners do not request the wallet's secret recovery phrase, private keys, PIN, or full card number. Requests to transfer funds or re-verify identity via email or SMS should also be a red flag.
The closure of the consumer system was planned before the breach was discovered. According to a notice dated September 21, branded cards will stop working on December 20, 2026, at 23:59 UTC. Until that date, customers are advised to save transaction history and update billing details for recurring subscriptions: future charges to the old card will not go through. Access to withdrawal of assets via the web app will remain.
Based on materials from: Gnosis Pay, official notice on card program closure, Decrypt.
