HKMA issues further scam alert on bank impersonation fraud
HKMA published additional alert on fraudulent websites and phishing scams impersonating banks.
A second HKMA scam alert within days highlights persistent phishing campaigns. Banks should escalate detection, takedown, and customer communication measures, and ensure fraud loss reporting to HKMA remains timely and complete.
Persistent fraud campaigns require sustained retail banking fraud controls and reporting.
Action Required
Escalate fraud monitoring and coordinate takedowns of impersonation sites targeting bank customers.
Frequency of HKMA alerts signals elevated fraud environment requiring active response.
Ensure fraud detection, brand protection, and customer notification workflows are operating at heightened tempo; capture emerging typologies in RCSA updates.
“HKMA alerts the public to press releases from banks regarding fraudulent websites, phishing emails and scams; banks will not send SMS/emails with embedded hyperlinks.”
Published: 2026-07-20