HKMA scam alert on bank phishing and fraudulent websites
HKMA highlighted bank press releases on fraudulent websites, phishing emails and fake internet banking login screens reported to the regulator.
Continued HKMA alerts indicate sustained phishing pressure on HK banks. Institutions should validate that anti-phishing takedown, customer alerting and authentication controls remain effective.
Sustained fraud activity raises operational and conduct risk for retail banks and digital channels.
Action Required
Review phishing detection, customer authentication and incident escalation processes for retail and digital banking channels.
Recurring HKMA scam alerts reflect persistent fraud threat environment relevant to retail banking risk posture.
Confirm anti-phishing takedown SLAs, customer alerting and MFA coverage. Track HKMA scam alerts in operational risk register.
“HKMA alerted the public to press releases issued by banks relating to fraudulent websites, internet banking login screens, phishing emails and other scams reported to the HKMA.”
Published: 2026-06-04