Octopus Cards Limited warned on 2 November 2026 about a fraudulent Facebook ad and a kredit.sc page that ask for personal information. Octopus says it has no connection with them and has told the Hong Kong Monetary Authority.
Source: octopus.com.hk · published
Octopus Cards Limited, the operator of Hong Kong's Octopus payment card, issued a press release on 2 November 2026 reminding the public to be vigilant against a fraudulent social media advertisement and websites that ask customers for personal information. The release names a Facebook share link, facebook.com/share/p/1Hei5Ku5me, and a page on the website kredit.sc as the fraudulent addresses. Octopus says it has no connection with the advertisement and websites and has notified the Hong Kong Monetary Authority. It adds that the list is not exhaustive because the domain names of fraudulent websites keep changing.
The release does not describe what the advertisement promises or what the website asks for beyond personal information, so the scheme's details are not known from this source. What it does set out is how Octopus really contacts its customers, and that is the useful test. Octopus says it will never ask customers to validate personal or account-related information by SMS, email or social media posts, or through hyperlinks embedded in such messages.
Octopus also describes a protection for text messages: it has joined the SMS Sender Registration Scheme and uses registered sender IDs, #Octopus and #OctopusOTP, when sending one-way SMS to local mobile customers. The ID “OCTOPUS” is no longer used. A message that claims to come from Octopus but carries another sender name, or arrives as a social media post or an advertisement, therefore deserves suspicion.
Social media ads that lead to forms collecting names, phone numbers, card numbers or identity details are a common way to harvest data that is later used for fraud or sold on. Customers with questions can contact Octopus on its customer service number given in the release, rather than follow a link, and anyone who has already entered details should tell their bank and consider reporting to the police.
Octopus Cards Limited, press release of 2 November 2026, “OCL reminds the public and customers to be vigilant against fraudulent social media advertisement and websites”.
Mimikama warned on 2 November 2026 about a fake CSS “dental insurance from 50” advert whose “Details ansehen” links lead to kredit.sc. CSS is not involved.