Hong Kong Warns of Fake Crypto Wallet Scams

Hong Kong Interbank Clearing Limited (HKICL) has warned the public about fraudulent websites impersonating the official Faster Payment System (FPS). The fake platforms lure users with promises of cash rewards while using bogus cryptocurrency wallet services to steal personal and banking information.

According to a statement released on July 10, the scam websites advertise a fictitious service called "Buyer Online Security Protection" and invite users to complete an identity verification process. In exchange for a promised cash bonus, victims are asked to provide their Hong Kong ID number, a photo of their identity document, phone number, bank account details, and the account holder's name. They are then instructed to deposit or withdraw funds through virtual cryptocurrency wallets using the FPS payment system.

The fraudulent websites are designed to appear legitimate. They also claim to offer assistance with recovering lost funds, reporting unauthorized transactions, and contacting customer support. However, HKICL stressed that these websites have no connection to the company. The organization also reminded users that it does not provide FPS services directly to the public and does not contact customers regarding such matters.

HKICL emphasized that its only official websites are hkicl.com.hk and fps.hkicl.com.hk. Anyone who receives suspicious messages is encouraged to verify their authenticity through the company's official customer support channels. If users believe they have fallen victim to the scam, they should report the incident to the police immediately.

The warning comes as Hong Kong continues to strengthen security measures across its cryptocurrency market. Earlier this week, the Securities and Futures Commission (SFC) instructed licensed digital asset trading platforms and brokers to replace SMS-based login authentication with phishing-resistant alternatives within the next 12 months.

The regulator approved several secure authentication methods, including passkeys, registered device authentication, and hardware security keys. In June, the SFC also added Aurum/Aurum Foundation to its warning list after determining that the platform may have been providing digital asset-related services without the required license.