What happened
The Bank of East Asia (BEA) issued a press release in Hong Kong on 2 November 2026 alerting customers and the public that it has no affiliation whatsoever with a website at uafhk.duesdezx.us.cc/beabank, which the release gives in defanged form. BEA says it has reported the incident to the Hong Kong Police Force and the Hong Kong Monetary Authority and will take any action it considers necessary to protect its reputation and the interests of customers and the public.
How the scam works
The release does not describe what the page shows or how people are reaching it, but it tells customers what to do. Anyone who has provided personal information or carried out financial transactions through the website should immediately report to the Police and call BEA's Customer Service Hotline for help. Customers should also refrain from visiting the site and from downloading any suspicious files from it, which suggests that the page may try to install software as well as collect details.
The address is a path, /beabank, on the unrelated host uafhk.duesdezx.us.cc, and the bank's name appears only in that path. A genuine page of the bank would sit on its own domain.
BEA reminds customers that they can use the bank's internet-based services safely and securely through the bank's homepage, www.hkbea.com. People who are suspicious about the identity of a website at an address similar to BEA's homepage are asked to call the bank's hotline for verification. As a general precaution, a bank's login page should be reached by typing its address or using its official app, and not from links in emails, messages or search ads. Fake bank pages commonly aim to capture login names, passwords and one-time codes.
Source
The Bank of East Asia, Limited, press release “Fraudulent Website Notification”, 2 November 2026.