HKMA warns of more fraudulent activity using the name of banks in Hong Kong.


This is a far from infrequent occurrence. In fact, it happens so often that it falls into that hole where due diligence and newsworthiness do not collide. So as a news outlet, we pay less attention to it than we would if we were a provider of due diligence information. Here's a round-up of recent announcements from the HKMA.
16th June
Livi Bank Limited : fraudulent websites, phishing emails, and phishing instant messages
Source: LIVI Bank. https://www.livibank.com/pdf/2...
"Livi BankLimited 28/F Oxford House, Taikoo Place Quarry Bay, Hong Kong15June2021Press Release Fraudulent Message and Website Alert Livi Bank Limited (‘livi’or ‘livi bank’)wishes to alert customers and the general public to beware of fraudulent email and SMS messages which include fake account opening invitation codes and/orfalse claims to reward the customer extra loyalty scheme points or cash rewards. livi’s branding materials (including the logo, name and graphics) were used in such messages without authorization."
Fraudulent links: hxxps://www[.]e-jetso.hk/mailster/2178/dc457d3604b084f01df2b5782bffcf8e/aHR0cHM6Ly9iaXQubH kvM2h6THNHSA
hxxp://bit[.]ly/2SayaP
----------------------------
15 June 2021
The Hongkong and Shanghai Banking Corporation Limited
Fraudulent website, phishing, instant messages
Press release: 13 June "The Hongkong and Shanghai Banking Corporation Limited would like to alert
its customers to phishing SMS and fraudulent websites which purported to be
from HSBC.
The phishing SMS suggest that recipients may have added a new payee. If
they haven’t, they should click a link:
https://www.about.hsbc.com.hk/...
Fraudulent links:
hxxps://remove-device-host[.]com
hxxps://device-host[.]com
hxxp://www[.]is[.]gd/hsbc_cancel_payee
hxxp://hsbc[.]secure-manageactivity[.]com/
-------------------------------
11 June - similar HSBC
-------------------------------
10 June
DBS Bank (Hong Kong Limited)
Similar to the HSBC mail with similar links.
That's just this week.
Last week saw more.
The HKMA webpage is at https://www.hkma.gov.hk/eng/sm...
However, from a risk management perspective, it is clear that the HKMA is, usually, two to three days behind the announcement by the banks. It is therefore not to be considered the actual source material. That is the banks.
