Bank of East Asia warns of fraudulent sites bank.boeahk.com and bank-heurosas.com
The Bank of East Asia said on 29 October 2026 it has no connection with bank.boeahk.com and bank-heurosas.com, and has reported them to Hong Kong Police and the HKMA.
- First reported
- Reports
- 1
Source: hkbea.com · published
What happened
The Bank of East Asia (BEA) said in a press release dated 29 October 2026 that it has no affiliation whatsoever with the websites https://bank.boeahk.com and https://bank-heurosas.com, and that it has reported the matter to the Hong Kong Police Force and the Hong Kong Monetary Authority (HKMA). BEA says customers should not visit the websites or download any suspicious files from them.
How the scam works
The release does not say how customers reach the sites or what they ask for. The addresses are built to look like the bank's: bank.boeahk.com is a subdomain of a lookalike domain, while the real bank uses hkbea.com. Fake bank sites of this kind usually copy the login page of internet banking and are reached through SMS, email or messaging-app links that claim an account problem, a prize or a security check. Anything typed in, such as a customer number, password or one-time code, is captured by the fraudsters, who then log in to the real account. The warning to avoid downloading "suspicious files" suggests the sites may also try to install software, but BEA does not describe this.
BEA's advice is plain. Anyone who has given personal information or made transactions through the sites should report to the Police straight away and call BEA's customer service hotline on +852 2211 1333, a legitimate bank number, not a scammer's. Customers should reach internet banking only through the bank's homepage, www.hkbea.com, and call the hotline if they are unsure about the identity of a site whose address resembles the bank's.
Source
The Bank of East Asia, Limited, press release "Fraudulent Website Notification", Hong Kong, 29 October 2026.
Red flags
- A bank address that is not hkbea.com, such as bank.boeahk.com or bank-heurosas.com.
- Messages urging you to log in or "verify" via a link instead of the bank's own app or typed address.
- A page that asks for your internet-banking password, one-time code or personal details.
- Pop-ups or prompts to download files from a bank-branded website.
- Pressure to act quickly because an account will be suspended.
If you were targeted
- 1Do not visit bank.boeahk.com or bank-heurosas.com, and do not download files from them.
- 2Access BEA services only via www.hkbea.com or the official app, typing the address yourself.
- 3If you entered details or made transactions, report to Hong Kong Police and call BEA's hotline on +852 2211 1333 at once.
- 4Change your internet-banking credentials and watch your account for transfers you did not make.
- 5Call the bank to verify any site or message you are unsure about.