HKICL flags fraudulent FPS 'Buyer Protection' websites
HKICL identified two fraudulent websites impersonating HKICL and offering fake FPS 'Buyer Online Protection' services to harvest ID documents and phone numbers.
The scam exploits trust in FPS clearing infrastructure to obtain personal identifiers used for account takeover and unauthorised payments. Payment providers should refresh scam detection rules and customer education around fake refund and buyer protection schemes.
Impersonation of core payment infrastructure heightens fraud losses and undermines confidence in retail payment systems.
Action Required
Update FPS fraud typologies, monitor for impersonation of clearing infrastructure and enhance customer warnings on fake refund and dispute services.
Fraudulent sites impersonating clearing infrastructure represent a targeted payments risk with systemic reputational implications.
Review FPS-related fraud controls and customer messaging; block known malicious domains, share intelligence with HKICL and update KYC monitoring for ID document misuse.
“HKICL noted two fraudulent websites purporting to be from HKICL, imitating 'Buyer Online Protection' for FPS payments to trick users into giving away personal document numbers, ID photos and phone numbers.”
Published: 2026-07-06