What happened
Shanghai Commercial Bank issued a press release in Hong Kong on 2 November 2026, titled “Notification of Fraudulent Websites”. It alerts customers and the public that the bank has no affiliation or connection with a website that impersonates its internet banking login page, at uafhk.duesdezx.us.cc/shanq in defanged form. The release includes a screenshot of the fake internet banking login page. The bank says it has reported the case to the Hong Kong Police Force and the Hong Kong Monetary Authority and will take the necessary actions to protect customers, the public and the bank.
How the scam works
The bank advises customers and the public strongly not to click on suspected or fraudulent websites or on hyperlinks embedded in emails to reach the bank's website or internet banking. Instead they should type the official address, www.shacombank.com.hk, into the browser's address bar. Any customers who have provided personal information to the fake website, or carried out financial transactions through it, should immediately call the bank's Customer Service Hotline and report to the Police.
The fake page copies the look of a real login screen, which is what makes this kind of scam effective. A customer who types a username, password or one-time code into it hands those details to whoever runs the page. The address puts the bank's name only in the path, /shanq, on the unrelated host uafhk.duesdezx.us.cc.
Typing the address by hand, or using the bank's official app, avoids this risk completely. A bank's genuine pages are on its own domain, and no legitimate bank asks customers to confirm their login details through an emailed link.
Source
Shanghai Commercial Bank, press release “Notification of Fraudulent Websites”, 2 November 2026.