Bank of China (Hong Kong) warns of phishing site boc.bankhk-center.com stealing internet banking logins
Bank of China (Hong Kong) warns that boc.bankhk-center.com is a fraudulent site impersonating its internet banking to steal login numbers and passwords. BOCHK has reported it to the HKMA and police.
- First reported
- Reports
- 1
Source: bochk.com · published
What happened
On 4 November 2026 Bank of China (Hong Kong), known as BOCHK, issued a public statement warning that a fraudulent website at boc.bankhk-center.com was impersonating its internet banking service. The bank said the fake site is designed to steal customers' internet banking login details, specifically the internet banking number or user name and the password. BOCHK said it has no connection with the website and has reported the matter to the Hong Kong Monetary Authority (HKMA) and the Hong Kong Police.
How the scam works
The fraudulent domain places the BOCHK brand in front of an unrelated bankhk-center.com address to look like an official site. According to the bank's statement, a customer who reaches the page and enters their internet banking number or user name and password is handing those credentials to the operators, who can then attempt to access the real account. Sites like this are usually promoted through SMS, email or search adverts that lead customers to the fake login rather than the genuine one.
BOCHK reminded customers that it will not ask them to provide internet banking login details, one-time passwords or other personal information through hyperlinks in emails, SMS messages or unknown websites. It advised customers to access internet banking only by typing the official address www.bochk.com directly into the browser or by using its official mobile app, and to check the website address carefully. Anyone who has entered their details on the fake site should change their password immediately, contact the bank and watch for unauthorised transactions. BOCHK gave its customer service hotline as (852) 3988 2388, with the option to press 3, then the hash key, then 2. The statement is from BOCHK; scammers.com has summarised it and not independently verified the technical details.
Source
Bank of China (Hong Kong) public statement, 4 November 2026. Not independently verified by scammers.com.
Red flags
- A domain that puts the BOCHK brand in front of an unrelated bankhk-center.com address.
- A login page asking for your internet banking number or user name and password.
- Links to internet banking from SMS, email or search adverts.
- Any request for a one-time password through a link.
- A web address that is not www.bochk.com.
If you were targeted
- 1Access BOCHK internet banking only by typing www.bochk.com or using the official app.
- 2Do not enter login details or one-time passwords on a page reached from a link.
- 3Check the website address carefully before logging in.
- 4If you entered details, change your password and call BOCHK on (852) 3988 2388.
- 5Watch for unauthorised transactions and report them to the bank.