27th October 2026 – (Hong Kong) The Hong Kong Monetary Authority issued a public alert after Octopus Cards Limited reported a fraudulent website impersonating its services. The regulator said the stored value facility licensee had notified the authority of the incident and reminded users to stay vigilant against phishing attempts targeting payment credentials and personal information.
Members of the public who may have entered personal details, account credentials or carried out transactions in response to the bogus site are urged to contact Octopus Cards Limited without delay. They should also file a report with the Police or reach the Anti-Deception Coordination Centre on 18222 for assistance.
The authority noted that the fraudulent address reported by the licensee at the time was “hxxps://octopus-auth[.]com”, and advised users to verify communications through official channels before acting on any requests. It added that ongoing monitoring and cooperation with the relevant licensee and law enforcement are under way to mitigate risks to customers.