HKICL warns fake FPS 'Buyer Online Protection' sites fpshkicl-hke8.sy30.my and fpsicl-hke8.sy30.my
On 28 October 2026 Hong Kong Interbank Clearing Limited (HKICL), in an alert published by the Hong Kong Monetary Authority (HKMA), warned of two fraudulent websites pretending to be from HKICL: fpshkicl-hke8.sy30.my a…
- First reported
- Reports
- 1
Source: hkma.gov.hk · published
What happened
On 28 October 2026 Hong Kong Interbank Clearing Limited (HKICL), in an alert published by the Hong Kong Monetary Authority (HKMA), warned of two fraudulent websites pretending to be from HKICL: fpshkicl-hke8.sy30.my and fpsicl-hke8.sy30.my. HKICL says the sites pose as a "Buyer Online Protection" service that offers refunds to buyers, reporting of unauthorised online transactions and online transaction support for payments made over the Faster Payment System (FPS). It says the sites have no affiliation with it. HKICL is impersonated and not accused.
How the scam works
The scam targets people who have paid for something online using FPS, Hong Kong's instant bank-transfer system. A fake "protection" service promises that, if a payment went wrong, the buyer can get it refunded. Victims are likely to be steered there by messages that say a payment has a problem. HKICL notes that the links may end in varying combinations of characters, which suggests addresses are generated for each target. A person who follows the link meets a page that looks like an official service and is asked to enter payment or banking information to claim a "refund" or to "report" a transaction.
HKICL says it does not provide FPS services directly to individual members of the public and does not contact them proactively. Banks in Hong Kong also warn that they do not send links to log in or ask for one-time passwords by message. No official body offers a buyer-protection refund through a website reached from an unsolicited link.
Anyone who suspects they have been caught out is asked to report to the police. If banking credentials or card details were entered, the bank should be told immediately so that access can be blocked.
Source
Hong Kong Monetary Authority, scam alert publishing the HKICL warning about fake FPS "Buyer Online Protection" websites, 28 October 2026.
Red flags
- A "Buyer Online Protection" service you did not sign up for.
- A link to an address ending in .sy30.my rather than an official HKICL or bank domain.
- An offer of a refund for an FPS payment that asks for banking details.
- An unsolicited message or call about a problem with a payment.
- A page asking you to log in with online-banking credentials.
If you were targeted
- 1Do not open links in unsolicited messages about FPS payments; remember HKICL does not contact the public proactively.
- 2Never enter banking passwords or one-time codes on a page reached from a message.
- 3If you entered details, call your bank at once and change your credentials.
- 4Report the case to Hong Kong Police, for example through the Anti-Scam Helpline 18222.
- 5Check scam alerts on the HKMA website.