HKICL flags fraudulent FPS refund websites
HKICL identified two fraudulent websites impersonating it to solicit personal data via fake FPS refund and transaction support services.
Fraudulent sites 'companyrefund.club' and 'fpshkpay.xyz' impersonate HKICL to harvest ID data and phone details under the guise of FPS 'Buyer Online Protection'. This exploits trust in the FPS payment scheme and raises identity theft and payment fraud risk.
Impersonation of payment infrastructure directly threatens FPS user trust and increases APP fraud exposure for banks.
Action Required
Update FPS-related fraud typologies, monitor customer disputes citing fake refund sites, and coordinate takedown intelligence sharing.
Direct impersonation of HK payment clearing infrastructure represents a systemic fraud vector requiring coordinated response.
FPS-linked impersonation fraud increases payment and identity theft risk; ensure detection rules cover flagged domains and customer-reported ID compromise scenarios.
“The Hong Kong Interbank Clearing Limited (HKICL) has recently noted two fraudulent websites at companyrefund[.]club and fpshkpay[.]xyz purported to be from the HKICL. The fraudulent websites imitate as “Buyer Online Protection” to provide services including 1) refund to buyer, 2) unauthorised online transaction reporting, and 3) online transaction support, for online transaction over FPS payment.”
Published: 2026-07-13