Public warned of impersonation scams claiming SFC affiliation

On February 12, 2026, the Securities and Futures Commission ("SFC") has cautioned the public about emerging impersonation scams involving fraudsters who claim to represent the SFC. Recent reports have indicated that scammers have been contacting members of the public and industry professionals through phishing emails that purportedly originate from the SFC.

Fraudsters impersonated SFC personnel and sent deceptive emails that urge recipients to reply or click on embedded links, potentially installing malware or ransomware on the recipient’s device. Scammers have also requested personal or contact details under false pretenses, with targeted recipients including SFC-licensed corporations, their staff, and members of the investing public.

The SFC underscores that all such unsolicited messages and claims are fraudulent. The public is advised to exercise extreme caution when dealing with unexpected communications. The SFC’s only official email domain is @sfc.hk; any variation is fraudulent. Scammers may use “@sfc.hk” in the sender’s display name to mislead recipients, so always check the actual sending email address carefully.

To verify personnel identities and the authenticity of any SFC communications, contact the SFC at This email address is being protected from spambots. You need JavaScript enabled to view it.. Do not reply to unsolicited emails, or send money or disclose account details if asked by anyone claiming to be SFC staff. Report any suspected impersonation, fake documents, or suspicious communications immediately to the SFC or the Police.

For more information on scam prevention and known fraudulent activities, visit the SFC’s Alert List and the Police’s Anti-Deception Coordination Centre.