On October 28, 2026, the Hong Kong Monetary Authority issued a scam alert warning the public about press releases from six banks regarding fraudulent websites and phishing emails.
Scam Alert Details
The Hong Kong Monetary Authority alerted members of the public to press releases issued by six banks relating to fraudulent websites, internet banking login screens, phishing emails, or other scams. The banks listed in the announcement are The Bank of East Asia, Limited; Shanghai Commercial Bank Limited; Chong Hing Bank Limited; Chiyu Banking Corporation Limited; OCBC Bank (Hong Kong) Limited; and The Hongkong and Shanghai Banking Corporation Limited.
Hyperlinks to the individual press releases from these banks are available on the Hong Kong Monetary Authority website.
Bank Guidance and Reporting
The Hong Kong Monetary Authority stated that banks will not send SMS messages or emails with embedded hyperlinks directing customers to websites to carry out transactions. Furthermore, banks will not ask customers for sensitive information, such as login passwords or one-time passwords, by phone, email, or SMS.
Anyone who provided personal information or conducted financial transactions in response to the scams should contact the relevant bank using the information provided in the corresponding press release and report the matter to the police.
What to do
- Contact the relevant bank using the information provided in their press release if you have provided personal information or conducted financial transactions in response to the scams.
- Report the matter to the Crime Wing Information Centre of the Hong Kong Police Force at 2860 5012.
Key facts and where they come from
- The Hong Kong Monetary Authority alerted the public to bank press releases regarding fraudulent websites.
The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to the press releases issued by the banks listed below relating to fraudulent websites
- Banks will not ask customers for sensitive information by phone, email, or SMS.
They will not ask customers for sensitive information, such as login passwords or one-time password, by phone, email or SMS
