HKICL flags additional FPS impersonation fraud sites
HKICL identified further fraudulent websites (companyhk.help, fpspayme.com) impersonating HKICL for FPS 'Buyer Online Protection' scams.
Repeated HKICL alerts within days signal escalating FPS-targeted scam campaigns. Indicates growing volume of impersonation infrastructure aimed at credential theft and unauthorised payment initiation.
Banks and payment firms must rapidly ingest fraud IOCs and reinforce authentication for FPS-linked transactions.
Action Required
Add newly identified domains to blocklists and update customer fraud advisories and transaction monitoring rules.
Frequency and expansion of fraud domains reflect systemic payments fraud pressure requiring enhanced controls.
Ensure fraud IOC feeds ingest HKICL-flagged domains; reassess FPS authentication step-up, velocity limits and customer scam education effectiveness.
“HKICL noted fraudulent sites companyhk.help and fpspayme.com impersonating HKICL for 'Buyer Online Protection' FPS services, tricking users into providing personal data.”
Published: 2026-07-10