HKICL warns of further fraudulent FPS refund websites
HKMA/HKICL issued a further alert on additional spoofed websites impersonating HKICL and offering fake FPS buyer protection services.
A second alert within 24 hours confirms an active, expanding fraud campaign targeting FPS retail users through impersonation of HKICL refund and dispute channels. Institutions should treat this as an elevated live threat requiring immediate operational response.
Confirms escalating payment fraud vector against Hong Kong retail customers requiring urgent controls uplift.
Action Required
Escalate anti-phishing controls, submit domain takedown requests, and deploy targeted customer alerts for FPS users.
Second HKICL alert in one week confirms sustained fraud campaign with systemic implications for FPS trust.
Ongoing HKICL impersonation fraud requires coordinated response: refresh phishing detection, customer warnings, dispute triage, and FPS transaction anomaly rules. Track scam recovery ratios in KRI dashboards.
“HKICL has noted several fraudulent websites purported to be from the HKICL, imitating 'Buyer Online Protection' services for refund to buyer, unauthorised online transaction reporting, and online transaction support for FPS payments.”
Published: 2026-07-29