First published: 06th July 2018
Customers of Hongkong & Shanghai Banking Corporation (HSBC) and Bank of East Asia (BEA) have been targetted in fraudulent campaigns. Emails purporting to be from HSBC concerning a payment confirmation ask recipients to open dangerous attachments. HSBC has emphasised that it has no connection with the messages and recommend that concerned customers should contact the HSBC Commercial Banking service hotline at +852 2748 8288 or report the message to the Police.
The BEA case involves a fake website at http://unitedbea.com that mimics the genuine site. The site is hosted in the USA and the domain was registered in January 2018, but it is unknown whether it has been hosting a fraudulent site ever since then. It uses encryption, with a certificate issued by Let's Encrypt.
Victims should immediately report the case to the Police for investigation, and contact BEA’s Customer Service Hotline +852 2211 1333 for assistance.