HKMA issues consolidated scam alert covering multiple banks
HKMA published a consolidated alert on fraudulent websites, fake internet banking login screens and phishing emails affecting multiple Hong Kong banks.
HKMA aggregated bank-reported scams involving fraudulent sites and phishing emails. The regulator reiterates banks do not send SMS/emails with embedded transaction links. Indicates sustained phishing pressure on Hong Kong retail banking.
Persistent phishing campaigns against banks raise fraud loss, AML, and conduct risk exposure.
Action Required
Reinforce anti-phishing controls, customer education and rapid takedown procedures across retail banking channels.
Multi-bank scam alerts signal systemic fraud pressure requiring coordinated control responses.
Ensure phishing detection, URL takedown SLAs, and customer awareness messaging are current; validate that staff and customer channels align with HKMA guidance on embedded links.
“The HKMA alerts the public to press releases issued by banks relating to fraudulent websites, internet banking login screens, phishing emails or other scams reported to the HKMA.”
Published: 2026-06-08