Hong Kong Interbank Clearing Limited (HKICL) warned on July 10 that fraudulent websites impersonating its Faster Payment System are tricking users into surrendering ID documents and bank details with promises of cash rewards.
The latest crypto wallet scam highlights how cybercriminals continue exploiting growing interest in digital assets while authorities intensify efforts to strengthen cybersecurity across Hong Kong’s financial ecosystem.
The crypto wallet scam was revealed in a public notice issued by HKICL on July 10, warning residents about fraudulent websites impersonating the organization and promoting fake “Buyer Online Security Protection” services.
The fraudulent platforms falsely promise cash incentives while tricking users into completing bogus identity verification procedures before requesting access to personal banking details.
Crypto wallet scam uses fake cash rewards to lure victims
According to HKICL, the crypto wallet scam begins by enticing users with promises of financial rewards in exchange for completing so-called “real-name verification.”
Victims are instructed to submit highly sensitive information, including Hong Kong Identity Card numbers, photographs of identification documents, phone numbers, bank account information, and account holder names.
The fraudulent operators then encourage victims to deposit or withdraw money through virtual wallets using Hong Kong’s Faster Payment System (FPS), creating the illusion of a legitimate financial transaction.
HKICL emphasized that these fraudulent websites have no connection whatsoever with its official operations.
“HKICL does not provide FPS services directly to members of the public and will not proactively contact individuals regarding such services,” the organization said in its official public warning.
The company urged users to verify any suspicious communication through its official websites before providing personal information or completing financial transactions.
Crypto wallet scam expands through fake customer service
One of the more dangerous aspects of the crypto wallet scam is the use of counterfeit customer support representatives.
The fraudulent websites claim they can help users recover unauthorized transactions, obtain refunds, or resolve payment disputes.
Victims are then directed into conversations with fake customer service agents who continue harvesting personal information or persuading users to authorize additional transfers.
Cybersecurity experts have repeatedly warned that social engineering remains one of the most effective tools used by online criminals.
As the Federal Bureau of Investigation noted in previous public advisories, cybercriminals increasingly rely on trust-building tactics rather than technical hacking alone, manipulating victims into voluntarily handing over credentials and financial information.
Hong Kong authorities intensify fight against crypto wallet scam threats
The latest crypto wallet scam warning comes as Hong Kong regulators significantly tighten cybersecurity standards across licensed virtual asset businesses.
Earlier this week, the Securities and Futures Commission announced sweeping cybersecurity requirements for licensed crypto exchanges and online brokers.
The regulator ordered firms to phase out SMS-based authentication within the next 12 months, replacing traditional one-time passwords with phishing-resistant authentication methods.
Recommended alternatives include:
- Passkeys
- Cryptographically verified registered devices
- Hardware security keys
- Device binding technology
According to the SFC, these measures are designed to reduce successful phishing attacks that continue targeting crypto investors worldwide.
Crypto wallet scam emerges alongside crackdown on unlicensed platforms
The crypto wallet scam warning also follows increased regulatory action against unauthorized crypto businesses operating in Hong Kong.
Last month, the SFC added Aurum/Aurum Foundation to its Alert List after alleging the company may have offered virtual asset, futures, and derivatives trading services without obtaining the necessary regulatory authorization.
The regulator stated that although the platform claimed registration under Hong Kong’s Companies Ordinance, it does not possess the licenses required to conduct regulated virtual asset activities.
The move reflects Hong Kong’s broader effort to improve market integrity while protecting investors from increasingly sophisticated online fraud.
As Julia Leung has repeatedly emphasized, maintaining investor confidence requires both innovation and robust safeguards against cybercrime and fraudulent digital asset schemes.
How users can avoid a wallet scam
Financial authorities say individuals should remain cautious whenever websites request sensitive personal or banking information, especially when accompanied by promises of easy rewards.
Users are encouraged to:
- Verify website addresses before logging in.
- Never share identity documents unless dealing directly with verified institutions.
- Ignore unsolicited messages requesting FPS verification.
- Confirm suspicious communications through official HKICL channels.
- Report suspected fraud immediately to Hong Kong Police.
Anyone believing they have become a victim of this crypto wallet scam should notify their bank, secure affected accounts, and contact law enforcement without delay.
Crypto wallet scam shows why vigilance remains critical
The latest crypto wallet scam demonstrates that phishing campaigns continue evolving alongside the rapid adoption of cryptocurrencies and digital payment systems.
While Hong Kong is strengthening cybersecurity rules and cracking down on unauthorized crypto businesses, criminals continue adapting their tactics by impersonating trusted institutions and exploiting consumer confidence.
For investors and everyday users alike, verifying platforms before sharing personal information remains the strongest defense.
As digital finance continues expanding, authorities warn that awareness, skepticism, and strong authentication practices will play an increasingly important role in protecting assets from the next generation of crypto wallet scam operations