Risk Horizon
Live

Intelligence generated by AI from public regulatory sources. Not investment or regulatory advice. Verify before relying on any output.

IncreasingHigh2026-07-20

HKMA warns public of bank-related phishing and scam websites

Banking SupervisionAlertGeneral RegulatoryRetail BankingHong KongConf: High
Regulatory Event

HKMA issued a scam alert flagging fraudulent websites, phishing emails and fake internet banking login screens impersonating banks.

Analysis

HKMA continues to escalate warnings about impersonation scams targeting bank customers via fake websites and phishing emails. Banks should reinforce customer education, monitor domain abuse, and ensure rapid takedown and incident reporting channels are effective.

Relevance

Ongoing phishing activity elevates fraud losses, ATO risk, and reputational exposure for retail banks operating in Hong Kong.

Required Action

Action Required

Review customer fraud controls, phishing takedown processes, and public communications on digital banking authentication.

Justification

Persistent scam alerts signal sustained fraud pressure and regulator focus on consumer protection controls.

Control Commentary

Fraud and cyber risk rating maintained elevated. Confirm phishing detection, URL monitoring, and customer alerting controls remain effective; validate SMS/email communication policy compliance.

Source

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to the press releases issued by the banks listed below relating to fraudulent websites, internet banking login screens, phishing emails or other scams, which have been reported to the HKMA.

Scam alert related to banks

Published: 2026-07-20

RH-2026-07-19-003