What Changed
- HKICL identified two unauthorized domain names: tk.f2g4h.cn and fps.852789.cc.
- The fraudulent websites falsely offer FPS transaction refunds, reporting, and customer service while soliciting sensitive bank account details.
- HKICL confirmed its official web addresses, telephone hotline (2533 1111), and stated it does not directly serve or proactively contact individual consumers under usual circumstances.
### Background and Regulatory Context
On November 13, 2026, the Hong Kong Government published a press release on behalf of the Hong Kong Monetary Authority (HKMA) regarding a public alert from Hong Kong Interbank Clearing Limited (HKICL). The official notice cautions members of the public against two specific fraudulent websites that falsely claim to be affiliated with or operated by HKICL.
HKICL plays an essential role in Hong Kong SAR's financial clearing and settlement infrastructure, including services associated with the Faster Payment System (FPS). According to the published press release, HKICL identified two unauthorized web addresses operating online under deceptive pretences. The identified fraudulent domain names are:
1. `tk.f2g4h.cn`
2. `fps.852789.cc`
The public release highlights the ongoing efforts of Hong Kong SAR financial regulatory and clearing authorities to inform consumers about online security risks, digital impersonation, and fraudulent activities targeting online payment platform users.
### Details of the Fraudulent Scheme
The official press release details the specific deceptive mechanisms and features used by these unauthorized websites to mislead internet users:
1. **Impersonation of 'Buyer Online Protection' Services**: The fraudulent websites display false claims of offering 'Buyer Online Protection' for transactions conducted over the Faster Payment System (FPS). Under this false pretense, they purport to offer services including:
- Refunding payments to buyers;
- Reporting unauthorized online transactions; and
- Providing online transaction support.
2. **Deceptive Financial Data Collection**: The fraudulent platforms trick visitors into entering sensitive banking information. Specifically, users are prompted to disclose their:
- Bank name;
- Bank account number; and
- Bank account holder's name.
The websites claim this information is necessary to execute top-up and withdrawal operations for virtual wallets hosted on their platforms.
3. **Redirection to Fraudulent Customer Support**: The fraudulent sites direct users to interact with individuals who falsely claim to be customer service personnel. These fraudsters facilitate the unauthorized collection of account information and manipulate victims under the guise of customer assistance.
### Official Clarifications and Operational Disclaimers
To prevent financial losses and correct public misunderstandings, HKICL provided important operational clarifications regarding its public-facing role and official communications:
- **No Affiliation**: HKICL explicitly stated that the fraudulent websites `tk.f2g4h.cn` and `fps.852789.cc` have no affiliation whatsoever with HKICL or any of its business activities.
- **Direct Service Limits**: HKICL clarified that under usual circumstances, it does not directly provide FPS services to individual members of the public.
- **Proactive Contact Policy**: HKICL confirmed that under usual circumstances, it does not proactively contact individual members of the public.
- **Genuine Official Websites**: HKICL confirmed that its official website addresses are strictly limited to:
- `www.hkicl.com.hk`
- `fps.hkicl.com.hk`
### Practical Implications and Recommended Actions
For banking clients, online consumers, and market participants operating within or communicating with financial channels in Hong Kong SAR, the alert provides actionable guidance to reduce cyber risk:
1. **Vigilance Against Suspicious Communications**: Members of the public are advised to remain vigilant against unverified telephone calls, websites, or digital messages asking for personal or financial details.
2. **Direct Contact Verification**: Any individual receiving suspicious communications purportedly from HKICL is advised to verify the authenticity directly by contacting HKICL's general line at 2533 1111.
3. **Prompt Law Enforcement Reporting**: Members of the public who suspect they have fallen victim to fraudulent activities or disclosed credentials on deceptive websites should report the incident promptly to the Police.
### Frequently Asked Questions
**Q1: Which domain names were specifically flagged as fraudulent by HKICL?**
A1: HKICL flagged two specific domain names: `tk.f2g4h.cn` and `fps.852789.cc`. Neither site has any connection or affiliation with HKICL or its operations.
**Q2: Does HKICL directly provide FPS payment services to individual consumers?**
A2: No. HKICL clarified that, under usual circumstances, it does not directly provide FPS services to individual members of the public, nor does it proactively contact individuals.
**Q3: What services do the fraudulent websites claim to provide?**
A3: The fraudulent websites claim to offer 'Buyer Online Protection' for FPS payment transactions, including buyer refunds, unauthorized transaction reporting, and transaction support, while soliciting bank account details and directing users to impersonated customer service agents.
**Q4: How can individuals verify whether a website or message from HKICL is legitimate?**
A4: Individuals can verify communications by cross-checking official HKICL web addresses (`www.hkicl.com.hk` and `fps.hkicl.com.hk`) or by calling HKICL's general inquiry line at 2533 1111.
**Q5: What action should be taken if someone suspects they are a victim of a fraudulent site?**
A5: Anyone who suspects that they have become a victim of fraudulent acts should report the matter promptly to the Police.
Who May Be Affected
Individual banking clients, users of the Faster Payment System (FPS), and members of the public in Hong Kong SAR.
Cross-Border Context
Relevant for individuals and businesses interacting with Hong Kong SAR's digital payment ecosystem, banking infrastructure, and cross-border clearing systems.
What to check next
- Check official HKICL websites (www.hkicl.com.hk and fps.hkicl.com.hk)
- Contact HKICL general line at 2533 1111 to verify suspicious communications
- Report suspected fraudulent incidents to the Police
This article provides general information and does not constitute legal advice. Consult the official text and obtain advice appropriate to your circumstances where needed.