Hong Kong Interbank Clearing Limited has warned the public about a scam involving counterfeit websites that impersonate official Faster Payment System service providers. The company said the sites are designed to collect personal and banking information, while luring users with promised cash rewards and virtual wallet transactions.
Fake verification and refund claims
In a notice dated July 10, HKICL said the fraudulent sites promote a bogus “Buyer Online Security Protection” service. The pages reportedly tell users they must complete so-called real-name verification, then ask for sensitive information including Hong Kong ID numbers, photos of identity cards, phone numbers, bank account details and account holder names.
According to HKICL, the operators present these requests as part of a reward-based process, promising cash incentives before directing users to deposit or withdraw funds through virtual wallets using FPS. The sites also claim they can help people secure refunds, report unauthorized online transactions or obtain transaction support.
No connection to official FPS services
HKICL said the websites have no connection to its operations or businesses despite presenting themselves as official platforms. The company stressed that it does not provide FPS services directly to individual members of the public and does not proactively contact users about such services.
The warning also said the scheme may involve fake customer service representatives, with victims encouraged to continue communicating with the operators after submitting information. HKICL urged anyone who suspects they may have been targeted or victimized to report the matter to Hong Kong police as soon as possible.
Broader scrutiny of crypto-linked security risks
The alert comes during a period of tighter oversight of digital-asset security and suspicious online platforms in Hong Kong. Earlier in the same week, the Securities and Futures Commission introduced new cybersecurity requirements for licensed virtual asset trading platforms and online brokers.
Under those measures, firms will have 12 months to move away from SMS-based authentication and adopt phishing-resistant login methods. The change reflects growing concern among regulators about account compromise and online impersonation tactics.
Recent enforcement backdrop
The HKICL notice also follows recent action against other potentially risky crypto-related businesses. In June, the SFC placed Aurum, also referred to as Aurum Foundation, on its Alert List, alleging that the platform may have been providing virtual asset, futures and derivatives trading services without the required authorization.
Taken together, the latest warning from HKICL and the SFC’s recent cybersecurity and enforcement steps point to heightened official scrutiny of phishing campaigns and suspected unlicensed crypto activity in Hong Kong. Authorities have been signaling that users should verify platforms carefully and avoid handing over sensitive information before completing identity checks or transactions.
Source: crypto.news