Gnosis Pay, which issues debit cards that spend crypto, says someone got into its older card system on November 3. It told customers on November 6. What leaked differs by person. Some notices list only a name and shipping address. Others list full card numbers, home addresses and every crypto wallet linked to the card. The company says no funds were taken.

Key facts

  • Who: Gnosis Pay, a crypto debit card provider
  • What: Unauthorized access to its legacy consumer card system; exposed data varies by customer
  • Exposed: In some notices: card numbers, home addresses and linked wallet addresses
  • When: Detected November 3, 2026; customers told November 6
  • Source: CoinDesk and Protos

Gnosis Pay, a company that issues debit cards you can spend crypto with, has told customers their personal data was exposed. Someone got into its older card system on November 3, and the company sent notices on November 6, CoinDesk reported. In some cases the leak links a person's card, home address and crypto wallets.

The notices don't all say the same thing. Some list only a name, a shipping address and an account number, Protos reported. Others list full card numbers, full home addresses and every wallet address linked to the account. Cointelegraph, citing notices it reviewed, said some also included card expiry dates and security codes, according to a copy on TradingView.

What the company says

  • No funds taken. Gnosis Pay says customers' money wasn't affected.
  • Fixes made. It replaced the exposed security keys, closed the hole, and made 3D Secure, the extra check at online checkout, required on every online payment, CoinCentral reported.
  • The old system is going away. It was already due to shut down in December.

It hasn't said how many people were affected. It has warned customers to expect phishing messages that use their real details.

Why a wallet list plus a street address matters

A card number can be canceled. A home address tied to wallet addresses can't. Anyone can look up a public wallet's balance, so the leak can tell a criminal who holds crypto, roughly how much, and where they live. That makes targeted scam calls more convincing, and it's why we covered the Coinbase customer data leak the same way.

If you had a Gnosis Pay card

  • Check your notice to see exactly what was listed for you, and watch your card statement.
  • Treat every "support" message as fake until you've checked it yourself, even if it knows your name and address. See how wallet support scams work.
  • Never share your seed phrase (the backup words that unlock your wallet) or sign a request to "secure" or "migrate" your wallet. Here's what fake exchange emails look like.
  • Consider moving funds to a fresh wallet that isn't tied to your name, and be careful copying addresses. Read what address poisoning is.

Sources: CoinDesk, Crypto debit card provider Gnosis Pay breach exposes card numbers, home addresses and linked wallets (November 7, 2026), Protos, Gnosis Pay breach exposes customer addresses (November 2026), CoinCentral, Gnosis Pay makes 3D Secure mandatory after card data breach exposes wallet addresses (November 2026), Cointelegraph via TradingView, Gnosis Pay breach exposes card details, personal data and crypto wallet information (November 2026).