HKICL warns of fraudulent FPS-themed website
HKICL warned of a fraudulent website impersonating it to steal credentials and redirect users to fake customer service via WhatsApp.
HKICL flagged a fraudulent site mimicking the Faster Payment System to harvest login credentials. The scheme uses WhatsApp impersonation of customer service, illustrating evolving social engineering against retail payment users.
Direct payments fraud risk targeting FPS users in Hong Kong.
Action Required
Update fraud typology libraries and alert payments and FPS users to the HKICL impersonation scheme.
Targeted impersonation of HK payments infrastructure raises fraud and reputational risk.
Incorporate HKICL impersonation typology into fraud monitoring; reinforce customer education on FPS-related phishing and WhatsApp scams.
“HKICL noted a fraudulent website purporting to be from HKICL, tricking users into giving login credentials and directing them to WhatsApp chats with fraudsters impersonating customer service.”
Published: 2026-05-27