Hong Kong Interbank Clearing Limited has uncovered several fake websites that use cash rewards and virtual wallet transactions to steal personal and banking information from users.
summary
- HKICL has warned of fake websites that use cash rewards and virtual wallets to steal personal and banking information.
- The clearing company said the scam sites are falsely pretending to be official FPS providers and have no connection to HKICL.
- The warning comes as Hong Kong regulators tighten cryptocurrency security rules and crack down on suspicious trading platforms.
According to July 10 He notices From Hong Kong Interbank Clearing Limited (HKICL), fraudulent websites impersonate a clearing company and advertise fake “Online Buyer Security Protection” services to convince users to complete so-called real name verification.
The websites ask victims to provide Hong Kong ID numbers, ID photos, phone numbers, bank account details and names of account holders in exchange for promised cash rewards before directing them to deposit or withdraw money through virtual wallets using the Faster Payment System (FPS).
HKICL says the fake websites have no connection to official FPS services
While presenting themselves as official platforms, fraudulent websites also claim to help users obtain refunds, report unauthorized online transactions, or access transaction support. The operators then encourage victims to contact fake customer service representatives as part of the scheme, HKICL said.
The clearing company stated that the fraudulent sites have nothing to do with its operations or business. HKICL also reminded the public that it does not provide FPS services directly to members of the public and does not proactively contact users regarding such services.
It identified its official websites as hkicl.com.hk and fps.hkicl.com.hk, and urged anyone receiving suspicious communications claiming to represent the organization to verify them through the official hotline before sharing personal information.
Separately, HKICL advised anyone who believes they have fallen victim to a scam to report the incident to the Hong Kong Police as soon as possible.
This warning comes as Hong Kong’s financial authorities continue to tighten protection measures against online fraud targeting users of digital assets and payment services.
Regulators in Hong Kong continue to tighten cryptocurrency security measures
Earlier this week, the Hong Kong Securities and Futures Commission (SFC) announced… New cybersecurity requirements introduced Require licensed virtual asset trading platforms and online brokers to replace SMS-based authentication with phishing-resistant login methods within the next 12 months.
According to the SFC, companies should stop relying on one-time passwords delivered via SMS, email, or app-generated codes, and instead implement stronger authentication methods combined with device tethering.
The regulator has identified passkeys, encryption-verified registered devices, and hardware security keys as acceptable alternatives designed to reduce phishing attacks against customer accounts.
The latest warning also comes on the heels of recent enforcement activities against suspicious cryptocurrency companies. In June, S.F.C The Aurum/Aurum Foundation has been added to its alert list After claiming that the platform may have been offering trading services in virtual assets, futures and derivatives without obtaining the required license.
According to the regulator, Aurum/Aurum Foundation claimed to be registered in Hong Kong under the Companies Act, but the SFC said the entity did not hold a license to conduct regulated virtual asset activities. The regulator has added the platform to its alert list, which identifies entities that may pose risks to investors.
Taken together, the latest actions show that Hong Kong authorities are increasing scrutiny of phishing campaigns and unlicensed cryptocurrency operations, while warning users that they should verify platforms and protect sensitive information before completing transactions or verifying identity.
