HKMA alerts on Octopus Cards impersonation websites

HKMA published an alert on fraudulent websites impersonating SVF licensee Octopus Cards Limited.

Stored value facility impersonation broadens the fraud surface beyond banks into e-wallets. Reinforces HKMA supervisory attention on SVF licensees' fraud controls, incident reporting and customer credential protection.

Payments firms and banks connected to SVFs must monitor cross-channel credential compromise and unauthorised transactions.

Shows regulator's expanding scam alert regime to SVFs, signalling wider supervisory scrutiny of e-money fraud.

“HKMA alerts public to a press release by Octopus Cards Limited on fraudulent websites; SVF licensee has reported the case to HKMA and warns users who submitted credentials.”