Retired investor loses HK$7 million in phishing scam
SingTao · 2 SOURCESabout 2 hours ago2 MIN
Summary
Hong Kong police said on August 31 that a 49-year-old retired investment professional lost more than HK$7 million after falling for a phishing SMS that appeared to come from a securities firm and entering his credentials on a fake brokerage website. The case was disclosed on the police anti-scam platform CyberDefender, which said officers had received more than 52 phishing reports in the past two weeks involving over HK$18 million.
Key Points
- The victim received a text message that appeared to be from a brokerage, warning that a withholding tax form was about to expire.
- The message urged him to click a link and reconfirm details before a deadline, or US stock income could face tax of up to 30%.
- After clicking through, he landed on a fake brokerage site whose layout matched the genuine platform and whose web address was highly similar.
- He entered his securities account details and password for what he believed was a renewal verification, allowing fraudsters to steal the credentials immediately.
- He discovered the unauthorized activity only after receiving legitimate trade notification emails showing his shares had been sold and replaced with a thinly traded low-cap stock.
Why It Matters
The case shows how phishing scams can move beyond simple password theft into direct manipulation of investment accounts, causing losses within a single trading day when fraudsters switch holdings into illiquid shares. For Hong Kong investors, the incident underlines the risk of acting on urgent tax-related messages without independently checking the sender, website address and account alerts.