HKMA Warns of Fraudulent Alipay HK Website, Public Alert Issued
The Hong Kong Monetary Authority (HKMA) issued a warning on June 8, 2026, about a fraudulent website impersonating Alipay Financial Services (HK) Limited. The site, reported by Alipay HK, is suspected of phishing sensitive user data and conducting unauthorized transactions.
The suspicious website, operating under the URL http://38.190.250.164:8080, was flagged by Alipay HK, which holds a Stored Value Facility (SVF) license under HKMA regulation. The regulator urged individuals who may have interacted with the site to immediately contact Alipay HK, alert the Police Anti-Deception Coordination Centre via 18222, or report to law enforcement directly.
HKMA's alert comes amidst a concerning rise in financial scams in 2026. Just five days earlier, the regulator warned of fraudulent websites misusing its branding to promote a fake “e-HKD” investment app and a supposed subsidy programme. Similar scams targeting financial institutions, such as fake websites linked to Mastercard and Bank Julius Baer, have been reported since early 2026.
In recent years, phishing and impersonation scams have become increasingly sophisticated, exploiting the growing reliance on digital financial services. The HKMA has repeatedly emphasized that neither banks nor SVF licensees will request sensitive information, such as passwords or one-time verification codes, via hyperlinks in SMS, email, or websites.
Context: A Growing Risk to FinTech
Hong Kong, a major global financial hub, has seen a surge in fraudulent activities targeting both institutional brands and licensed operators. The HKMA’s series of alerts in 2026 highlights a broader trend of cybercriminals exploiting trust in well-known financial brands like Alipay HK, Mastercard, and even the HKMA itself. These scams often aim to steal login credentials, induce unauthorized fund transfers, or distribute malware.
For users of Alipay HK, the risk is particularly acute given the app’s widespread use for payments, investments, and remittances. A single compromised account could result in significant financial losses. This underscores the importance of user education and vigilance when interacting with financial services online.
What to Do If Affected
The HKMA advises anyone who has provided personal information or conducted transactions through the fraudulent Alipay HK website to take immediate action. This includes:
- Contacting Alipay HK to secure their account and verify activity.
- Reporting the incident to the Police Anti-Deception Coordination Centre via the hotline 18222.
- Monitoring financial accounts closely for unauthorized transactions.
Broader Implications
These repeated scam incidents are a stark reminder of the vulnerabilities in the digital financial ecosystem. While the HKMA and financial institutions continue to enhance cybersecurity measures, users remain the first line of defense. The regulator’s proactive alerts aim to mitigate risks, but the onus is also on consumers to verify the authenticity of websites and communications before sharing sensitive information.
As financial fraud escalates globally, expect regulatory scrutiny to intensify, potentially impacting the development of new digital payment tools and platforms like the e-HKD. For now, vigilance is key.