On May 21, 2025, the SFC warned the public about phishing text messages sent by 'brokers' containing embedded hyperlinks that direct users to fake websites and steal account login details. LCs were instructed not to send such messages and to ask clients to confirm directly if in doubt. Affected clients should contact LCs and the Police.
This article was generated using SAMS, an AI technology by Timothy Loh LLP.
Hong Kong: A Checklist To Recovering Monies Transferred As A Result Of Email Wire Fraud
Businesses who transfer money as a result of email scams and frauds must act quickly to recover funds including taking steps to freeze bank accounts
FAQS on Debt Collection in Hong Kong and Internationally
Law firms can apply both business and legal leverage in debt collection, applying pressure through reputation, bankruptcy proceedings and court orders
SPOTLIGHT ON
FAMILY OFFICES
On May 21, 2025, the Securities and Futures Commission ("SFC") issued an urgent warning to the public concerning phishing mobile text messages that purport to originate from SFC-licensed corporations ("LCs"). These messages contain embedded hyperlinks leading to webpages that mimic the LCs' genuine websites, tricking recipients into entering their account login details. As a result, some affected clients have experienced financial losses due to unauthorized transactions.
Following this incident, several LCs reported receiving similar phishing messages. In response, the SFC has issued guidelines to LCs, emphasizing the need to refrain from sending electronic communications with embedded hyperlinks directing clients to their websites or mobile applications for transactions. LCs have also been advised to avoid requesting clients to share sensitive personal information, such as login credentials and one-time passwords, through these links.
The SFC has strongly advised the public to remain vigilant and avoid clicking on embedded hyperlinks in such messages. If uncertain, recipients are instructed to confirm with the LCs directly. Additionally, the disclosure of account login information to unverified websites should be avoided. Any clients who have disclosed their login details to untrusted websites or noticed unauthorized transactions are encouraged to contact their LCs and the Police promptly.
View the full article:Source
