Hongkong Post warns of fake tracking site hongkongpostairmailtrackingapf.wordpress.com
Hongkong Post warned on 3 November 2026 about fake SMS and emails linking to hongkongpostairmailtrackingapf.wordpress.com, a bogus site that asks for personal information or a postage payment. It says it has reported the case to the Police.
- First reported
- Reports
- 1
Source: info.gov.hk · published
What happened
Hongkong Post issued a press release on 3 November 2026 asking the public to stay alert to a fraudulent Hongkong Post website at hxxps://hongkongpostairmailtrackingapf[.]wordpress[.]com. It also warned of fraudulent text messages or emails that claim to come from Hongkong Post. The release was issued through the Hong Kong government news service at 5:42 pm Hong Kong time.
How the scam works
According to Hongkong Post, the fraudulent messages contain a hyperlink to the fake website. That site asks the recipient to provide personal information or to make a payment for postage. This is the usual parcel-delivery scam. A message says that a parcel could not be delivered, or that postage is owed, and the link leads to a page that copies a postal service so that a person enters a name, address and card details. The release does not say how many messages were sent, who received them or whether anyone has lost money.
Hongkong Post says that it has no connection to the fraudulent website and has reported the case to the Police for follow-up. It says its official websites are hongkongpost.hk, hongkongpost.gov.hk and ecert.gov.hk. The fake address is a free page on wordpress.com, which has nothing to do with the postal service.
Hongkong Post explains how its genuine messages look. It will use only “#HKPost” as the sender when it sends SMS messages to local mobile subscribers, and it will send emails from the domains @hkpo.gov.hk or @hongkongpost.hk. It says that it will not send embedded hyperlinks by email, SMS or social media to collect payments or personal information. People with questions can call its enquiry hotline on 2921 2222 or email hkpo@hkpo.gov.hk.
Source
Hong Kong Government news service, Hongkong Post press release “Hongkong Post alerts public to fraudulent Hongkong Post website”, 3 November 2026.
Red flags
- A postal delivery text or email that links to a page on wordpress.com.
- A request to pay postage or provide personal information through a hyperlink.
- Sender details that do not match #HKPost or the @hkpo.gov.hk and @hongkongpost.hk domains.
- A web address with a long name that includes airmail and tracking but is not an official Hongkong Post domain.
If you were targeted
- 1Do not open hongkongpostairmailtrackingapf.wordpress.com or pay anything on it.
- 2Use only hongkongpost.hk, hongkongpost.gov.hk or ecert.gov.hk for Hongkong Post services.
- 3Remember that Hongkong Post will not send links to collect payments or personal information.
- 4If you entered card details, call your bank immediately to block the card.
- 5Report the message to Hongkong Post on 2921 2222 and to the Police.