A 64-year-old retired landlady in Hong Kong has lost about KSh 168 million (US$1.3 million) in a crypto scam after a fraudster allegedly posed as a prospective tenant, established a relationship with her online and eventually gained access to her cryptocurrency wallet.
Hong Kong police disclosed the case on Friday, August 14, 2026, after the woman reported that her digital assets had been emptied. The victim owned residential, commercial and parking properties and had advertised a property for rent on Facebook in May.
The alleged crypto scam began when a stranger contacted her through WhatsApp, claiming to be interested in renting the property. Although no tenancy agreement was signed, the individual continued communicating with the woman and gradually developed a personal relationship with her.
The case highlights how criminals can use seemingly ordinary social interactions to build trust before introducing financial schemes, particularly those involving cryptocurrency and promises of substantial returns.
How the crypto scam unfolded
According to the report, the fraudster eventually shifted the conversation away from property and towards cryptocurrency investment.
The individual presented digital assets as “the next opportunity to get rich” and portrayed themselves as knowledgeable enough to guide the retiree through the investment process.
The approach gave the crypto scam an appearance of legitimacy because the fraudster did not initially ask for money directly. Instead, the victim was reportedly given step-by-step instructions on how to establish and use a cryptocurrency wallet.
During that process, however, she was deceived into revealing sensitive wallet credentials and her password.
Once the fraudster obtained the information needed to access the wallet, the alleged scheme escalated. The retiree was persuaded to transfer large sums of money into cryptocurrency purchases.
She ultimately spent approximately HK$10 million on digital assets, equivalent to roughly KSh 168 million, according to the report.
The money was then transferred out of her cryptocurrency wallet by the fraudster.
The victim discovered the crypto scam only after checking her wallet and finding that her digital assets had been completely drained.
The incident demonstrates a significant risk associated with online investment fraud: criminals may spend considerable time establishing credibility before requesting access to financial information.
Police warn against online investment promises
Hong Kong police responded to the case by warning residents not to disclose cryptocurrency wallet details, passwords or other sensitive credentials to third parties.
Authorities also urged members of the public to exercise caution when communicating with strangers through social media, particularly when seemingly casual conversations begin moving towards financial transactions.
The police warning is particularly relevant to the crypto scam, as the victim was reportedly introduced to cryptocurrency only after the alleged fraudster had established a personal connection with her.
Authorities cautioned residents against trusting individuals who make unsolicited approaches online or present themselves as investment experts without independent verification.
Police also warned against promises of “high returns” and “expert tips” from people encountered through social media.
The advice comes as cryptocurrency continues to attract legitimate investors while also remaining a target for fraudsters who exploit the complexity of digital wallets, online exchanges and blockchain transactions.
Why crypto wallet credentials remain a major target
Unlike a traditional rental scam, the alleged crypto scam relied on a combination of social engineering and cryptocurrency access.
The fraudster first used the woman’s property listing as an entry point. After gaining her attention as a supposed tenant, the individual developed a personal connection before introducing the investment opportunity.
That sequence is significant because it shows how a criminal scheme can be disguised as an ordinary social or business interaction.
The retiree’s experience also underscores why cryptocurrency wallet credentials should be treated as highly sensitive information. Once such information is compromised, victims can face significant difficulty recovering assets transferred from their wallets.
Hong Kong police therefore urged residents to remain skeptical of unsolicited online relationships that quickly develop into discussions about money, investment or cryptocurrency.
The case also illustrates why consumers should independently verify investment opportunities instead of relying solely on information provided by someone they have met online.
For potential investors, the warning is straightforward: no legitimate investment opportunity should require a stranger to obtain private wallet credentials or passwords.
The wider warning for cryptocurrency users
The Hong Kong case is another reminder that a crypto scam does not necessarily begin with an obvious request for money.
Fraudsters can first establish familiarity, present themselves as trustworthy and gradually introduce an investment proposition. By the time financial transactions begin, victims may already feel that they know and trust the person behind the offer.
The alleged crypto scam also shows how social media platforms can become an entry point for financial fraud. Facebook and WhatsApp were reportedly central to the interaction between the victim and the fraudster, with the initial contact linked to a property advertisement.
The Hong Kong police warning therefore extends beyond cryptocurrency itself. Residents were encouraged to be careful about sharing personal and financial information with people they encounter online and to question unsolicited claims about investment opportunities.
For cryptocurrency holders, the incident reinforces one of the most basic security principles: private wallet credentials and passwords should never be disclosed to another person.
The retiree’s losses demonstrate the financial consequences when that information falls into the wrong hands. What appeared to be an ordinary conversation with a prospective tenant ultimately became a crypto scam that wiped out approximately HK$10 million in digital assets.
The case serves as a broader reminder that trust built online can be manipulated, and that claims of easy wealth should be independently verified before any money or sensitive information changes hands.
Hong Kong authorities’ warning is therefore clear: strangers offering investment guidance, promising “high returns” or presenting themselves as cryptocurrency experts should be treated with caution, particularly when they request access to wallets or passwords.