Changeflow GovPing Banking & Finance HKMA Alerts Public to Fraudulent Bank Websites ...
Priority review Notice Added Final

HKMA Alerts Public to Fraudulent Bank Websites and Phishing Scams Involving Six Banks

Favicon for www.hkma.gov.hk HKMA Press Releases
Published
Detected
Email

Summary

The HKMA issued a scam alert on 24 April 2026 alerting members of the public to fraudulent websites and internet banking login screens associated with six banks that have been reported to the HKMA: The Bank of East Asia, Shanghai Commercial Bank, Chong Hing Bank, Fubon Bank (Hong Kong), Bank of Communications (Hong Kong), and DBS Bank (Hong Kong). The HKMA reminded the public that banks will not send SMS or emails with embedded hyperlinks directing them to bank websites to carry out transactions, and will not ask customers for sensitive information such as login passwords or One-Time Passwords by phone, email, or SMS. Anyone who has provided personal information or conducted financial transactions through these scams should contact the relevant bank and report to the Hong Kong Police Force Crime Wing Information Centre at 2860 5012.

“The HKMA wishes to remind the public that banks will not send SMS or emails with embedded hyperlinks which direct them to the banks' websites to carry out transactions. They will not ask customers for sensitive information, such as login passwords or One-Time Password, by phone, email or SMS (including via embedded hyperlinks).”

HKMA , verbatim from source
Why this matters

Banks operating in Hong Kong should review their customer-facing fraud warnings and anti-phishing communications to confirm alignment with the HKMA's explicit guidance in this alert—that banks will not send embedded hyperlinks via SMS or email, and will not request passwords or OTP by phone, email, or SMS. Any customer communications that contradict this guidance may undermine the HKMA's public messaging and reduce customer vigilance against social engineering attacks.

AI-drafted from the source document, validated against GovPing's analyst note standards . For the primary regulatory language, read the source document .
Published by HKMA on hkma.gov.hk . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

GovPing monitors HKMA Press Releases for new banking & finance regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 78 changes logged to date.

What changed

The HKMA issued a public scam alert on 24 April 2026 relating to fraudulent websites and internet banking login screens associated with six Hong Kong banks. The alert names The Bank of East Asia, Shanghai Commercial Bank, Chong Hing Bank, Fubon Bank (Hong Kong), Bank of Communications (Hong Kong), and DBS Bank (Hong Kong) as the banks that reported the scams. The HKMA provided explicit guidance on legitimate bank practices, stating that banks will not send SMS or emails with embedded hyperlinks to conduct transactions, nor will they request sensitive information such as login passwords or One-Time Passwords by phone, email, or SMS. Financial institutions should ensure their customer-facing fraud warnings and educational materials are consistent with the HKMA's stated legitimate practices. Consumers who may have been targeted should contact their bank and law enforcement immediately.

What to do next

  1. Contact the relevant bank using the information provided in the corresponding press release
  2. Report the matter to the Crime Wing Information Centre of the Hong Kong Police Force at 2860 5012

Archived snapshot

Apr 24, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Scam alert related to banks

Press Releases

24 Apr 2026

Scam alert related to banks

The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to the press releases issued by the banks listed below relating to fraudulent websites, internet banking login screens, phishing emails or other scams, which have been reported to the HKMA.  Hyperlinks to the press releases are available on the HKMA website.

Bank Type of Scam
The Bank of East Asia, Limited Fraudulent website and internet banking login screen
Shanghai Commercial Bank Limited Fraudulent website and internet banking login screen
Chong Hing Bank Limited Fraudulent websites and internet banking login screens
Fubon Bank (Hong Kong) Limited Fraudulent website and internet banking login screen
Bank of Communications (Hong Kong) Limited Fraudulent websites and internet banking login screens
DBS Bank (Hong Kong) Limited Fraudulent website and internet banking login screen

The HKMA wishes to remind the public that banks will not send SMS or emails with embedded hyperlinks which direct them to the banks’ websites to carry out transactions.  They will not ask customers for sensitive information, such as login passwords or One-Time Password, by phone, email or SMS (including via embedded hyperlinks).

Anyone who has provided his or her personal information, or who has conducted any financial transactions, through or in response to the scams concerned, should contact the relevant bank with the information provided in the corresponding press release, and report the matter to the Crime Wing Information Centre of the Hong Kong Police Force at 2860 5012.

Hong Kong Monetary Authority
24 April 2026

Latest Press Releases
- 24 Apr 2026 Scam alert related to banks
- 23 Apr 2026 Instant Message and Incoming Call Alert – Phishing instant messages and incoming calls related to Alipay Financial Services (HK) Limited
- 23 Apr 2026 Scam alert related to banks
- 23 Apr 2026 Results of 10-year RMB HKSAR Institutional Government Bonds tender through re-opening
- 23 Apr 2026 Results of 3-year RMB HKSAR Institutional Government Bonds tender through re-opening
View All View All Last revision date : 24 April 2026 Share

Get daily alerts for HKMA Press Releases

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from HKMA.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
HKMA
Published
April 24th, 2026
Instrument
Notice
Branch
Executive
Legal weight
Non-binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Banks Consumers
Industry sector
5221 Commercial Banking
Activity scope
Fraud alert Phishing warnings Consumer advisory
Geographic scope
Hong Kong HK

Taxonomy

Primary area
Consumer Protection
Operational domain
Compliance
Topics
Cybersecurity Banking

Get alerts for this source

We'll email you when HKMA Press Releases publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!