HKICL warns of fraudulent websites impersonating FPS services
HKMA-affiliated HKICL flagged fraudulent websites impersonating it and offering fake 'Buyer Online Protection' services for FPS transactions.
HKICL identified multiple spoofed domains posing as official channels for FPS refund and dispute services. The scam leverages trust in retail payment infrastructure to harvest credentials and funds. Banks and payment providers should reinforce customer education and monitor for related impersonation typologies.
Impersonation of payment infrastructure increases APP fraud and reputational risk for FPS participants.
Action Required
Update fraud detection rules, customer alerts, and phishing takedown workflows to cover the identified domains and FPS-related scam patterns.
Direct regulator-flagged fraud typology affecting a systemically used retail payment rail.
Fraud risk elevated: HKICL impersonation sites target FPS users. Ensure phishing monitoring, domain takedown, and customer warnings are updated; review controls on inbound FPS dispute claims.
“The Hong Kong Interbank Clearing Limited (HKICL) has recently noted several fraudulent websites purported to be from the HKICL, imitating 'Buyer Online Protection' to offer refunds, unauthorised transaction reporting and support for FPS payments.”
Published: 2026-07-31