Skip to content
Scammers.com
PhishingReviewed

Shanghai Commercial Bank warns fake internet banking login page at uafhk.duesdezx.us.cc/shanq

Shanghai Commercial Bank warned on 2 November 2026 about a fake internet banking login page at uafhk.duesdezx.us.cc/shanq, saying it has no connection with it. The bank has told the Police and the HKMA.

First reported
Reports
1

Source: shacombank.com.hk · published

Illustration: Phishing, texts and email scams

What happened

Shanghai Commercial Bank issued a press release in Hong Kong on 2 November 2026, titled “Notification of Fraudulent Websites”. It alerts customers and the public that the bank has no affiliation or connection with a website that impersonates its internet banking login page, at uafhk.duesdezx.us.cc/shanq in defanged form. The release includes a screenshot of the fake internet banking login page. The bank says it has reported the case to the Hong Kong Police Force and the Hong Kong Monetary Authority and will take the necessary actions to protect customers, the public and the bank.

How the scam works

The bank advises customers and the public strongly not to click on suspected or fraudulent websites or on hyperlinks embedded in emails to reach the bank's website or internet banking. Instead they should type the official address, www.shacombank.com.hk, into the browser's address bar. Any customers who have provided personal information to the fake website, or carried out financial transactions through it, should immediately call the bank's Customer Service Hotline and report to the Police.

The fake page copies the look of a real login screen, which is what makes this kind of scam effective. A customer who types a username, password or one-time code into it hands those details to whoever runs the page. The address puts the bank's name only in the path, /shanq, on the unrelated host uafhk.duesdezx.us.cc.

Typing the address by hand, or using the bank's official app, avoids this risk completely. A bank's genuine pages are on its own domain, and no legitimate bank asks customers to confirm their login details through an emailed link.

Source

Shanghai Commercial Bank, press release “Notification of Fraudulent Websites”, 2 November 2026.

Red flags

  • A fake internet banking login page at uafhk.duesdezx.us.cc/shanq.
  • A domain that is not the bank's real address, www.shacombank.com.hk.
  • A link to the bank's login page embedded in an email.
  • A bank name placed only in the path of an unrelated host.
  • A page that asks for login details or one-time codes.

If you were targeted

  1. 1Do not click the link or enter any details on uafhk.duesdezx.us.cc/shanq.
  2. 2Type www.shacombank.com.hk into your browser, or use the bank's app, to bank online.
  3. 3If you gave personal information or made transactions, call the bank's Customer Service Hotline and report to the Police.
  4. 4Never use links in emails to open internet banking.
  5. 5Share the warning with relatives who use Shanghai Commercial Bank.