Hong Kong Monetary Authority (HKMA) issued a public alert on September 24, 2026, warning of coordinated fraudulent schemes targeting customers of five major Hong Kong banks. The scams involve fake websites and counterfeit internet banking login screens designed to harvest customer credentials and enable unauthorized financial transactions.
- Affected institutions: The Bank of East Asia Limited, Shanghai Commercial Bank Limited, Chong Hing Bank Limited, Chiyu Banking Corporation Limited, and OCBC Bank (Hong Kong) Limited
- Scam methods: Fraudulent websites and internet banking login screens
- Alert date: September 24, 2026
- Police reporting number: Crime Wing Information Centre at 2860 5012
The HKMA emphasized that legitimate banks never send SMS messages or emails containing hyperlinks directing customers to banking websites for transactions. Financial institutions will not request sensitive data, including login passwords or One-Time Passwords, via phone, email, or text message, including through embedded links.
Customers who have already disclosed personal information or completed financial transactions through these fraudulent schemes should immediately contact their respective bank using contact details provided in official press releases. The HKMA directed victims to also report incidents to the Hong Kong Police Force’s Crime Wing Information Centre for investigation and potential recovery assistance.
Each affected bank has published individual press releases detailing the specific threats targeting their customers, with hyperlinks available on the HKMA website.
