HKICL warns of fraudulent FPS refund website impersonation

HKMA flagged a fraudulent website impersonating HKICL to harvest banking credentials via fake FPS refund pages.

HKICL identified phishing domains mimicking its FPS refund platform to steal login credentials and bank account details. Victims are routed to fraudsters posing as customer service. Signals continued targeting of Hong Kong's retail payments rails through social engineering.

Heightens fraud risk for retail banks and FPS participants; warrants customer awareness and transaction monitoring uplift.

Direct impersonation of payments infrastructure operator indicates active phishing campaign against banking customers.

“The Hong Kong Interbank Clearing Limited (HKICL) has noted a fraudulent website purporting to be from HKICL, tricking users into giving away login credentials and bank account information via fake FPS refund pages.”