OCBC and BEA (Hong Kong) warn of fake Carousell 'bank-confirm' pages on carousell.service-shop.click
OCBC Bank (Hong Kong) Limited issued a media release on 27 October 2026 warning customers and the public about fraudulent websites at carousell.service-shop.click. Two addresses were named, both under the path /mercha…
- First reported
- Reports
- 1
Source: ocbc.com.hk · published
What happened
OCBC Bank (Hong Kong) Limited issued a media release on 27 October 2026 warning customers and the public about fraudulent websites at carousell.service-shop.click. Two addresses were named, both under the path /merchant/bank-confirm/ocbc/: one ending 368742709 and one ending 194412133. The pages are presented as Carousell "bank-confirm" pages; Carousell is a popular online marketplace. OCBC states it has no connection with the websites, that its official site is www.ocbc.com.hk, and that it has reported the matter to the Hong Kong Monetary Authority and the Hong Kong Police Force.
How the scam works
The notice does not set out how the pages are used, so what follows is general. On classified-ad marketplaces, a common pattern is for a "buyer" or "seller" to send a link to a page that claims to confirm a payment or release funds. The address is built to look like the marketplace, and the page names a bank (here the path includes "ocbc") and asks the visitor to log in or approve something. Whatever is typed goes to the people running the site, who can then use it to reach the real account.
Two details in the notice are worth noting. The domain is not Carousell's and not OCBC's, and both addresses end in a long number. OCBC says only that the sites are fraudulent and unconnected to the bank. It does not say how many people were affected, and neither OCBC nor Carousell is accused of anything.
OCBC advises that anyone who may have disclosed personal information, or received requests for information on these sites, should call its customer service hotline on (852) 3199 9188 and report to the Hong Kong Police Force immediately.
Source
OCBC Bank (Hong Kong) Limited, "OCBC Hong Kong statement on fraudulent website", media release dated 27 October 2026.
Red flags
- A link to a 'bank-confirm' or payment-confirmation page sent by a marketplace buyer or seller.
- A web address that is not the bank's or the marketplace's own (here carousell.service-shop.click).
- A page that asks for banking details or approval to 'confirm' a deal.
- A link with a long order or reference number meant to look like a genuine transaction.
If you were targeted
- 1Don't open or enter details on carousell.service-shop.click or any similar link sent by a stranger.
- 2Reach your bank and marketplace only through their official websites or apps (OCBC Hong Kong: www.ocbc.com.hk).
- 3If you entered banking or personal details, call OCBC's customer service hotline on (852) 3199 9188 and report to the Hong Kong Police Force immediately.
- 4Contact your bank straight away to freeze or secure any account that may be affected, and change passwords you reused.
- 5Keep screenshots of the message and link for police.