HKICL flags additional fraudulent impersonation site
HKICL identified another fraudulent website (hkicl[.]lat) impersonating it to run FPS-related buyer protection scams.
A further HKICL impersonation site targets FPS users through fake refund and unauthorised transaction reporting services. Recurrence within days of prior alerts shows adaptive threat actors registering new lookalike domains, requiring continuous monitoring and rapid takedown coordination.
Repeat impersonation of payments infrastructure heightens FPS fraud and reputational exposure.
Action Required
Ingest new fraudulent domain into threat intel feeds and customer-facing scam warnings.
Recurring HKICL impersonation reflects durable scam typology requiring sustained control focus.
Add newly identified HKICL-impersonation domains to blocklists and fraud rules. Review FPS scam response playbook and coordinate intelligence sharing with HKICL and peer banks.
“The Hong Kong Interbank Clearing Limited (HKICL) has recently noted a fraudulent website at hkicl[.]lat purported to be from the HKICL. The fraudulent website imitates as 'Buyer Online Protection' to provide services including refund to buyer, unauthorised online transaction reporting, and online transaction support, for online transaction over FPS payment.”
Published: 2026-07-07