Revolut notified 680 customers after scammers used a government email account to obtain passports, addresses, bank details and Bitcoin records.