The case
The Hong Kong Monetary Authority (HKMA) has issued multiple alerts regarding fraudulent websites and internet banking login screens impersonating Shanghai Commercial Bank Limited et al. These scams have been reported since December 2024, with the most recent alert dated 7 May 2025.
Source: Hong Kong Monetary Authority
The commentary
The HKMA wishes to remind the public that banks will not send SMS or emails with embedded hyperlinks which direct them to the banks’ websites to carry out transactions. They will not ask customers for sensitive personal information, such as login passwords or One-Time Password, by phone, email or SMS (including via embedded hyperlinks).
Anyone who has provided his or her personal information, or who has conducted any financial transactions, through or in response to the website or login screen concerned, should contact the bank using the contact information provided in the press release, and report the matter to the Police by contacting the Crime Wing Information Centre of the Hong Kong Police Force at 2860 5012. Link









