Hong Kong police have reported a wave of over 60 phishing scams in the past two weeks, with losses exceeding HK$6 million, including two significant cases where victims were deceived by fraudsters posing as delivery service staff and customer service agents.
In one case, a victim received a text message claiming to be from a delivery company, stating that a parcel was arriving soon and instructing them to contact a courier.
Having recently shopped on the online platform Pinduoduo, the victim called the number provided without suspicion.
The person posing as a courier claimed the parcel was damaged and referred the victim to a supposed customer service representative via WhatsApp to process a compensation claim.
The scammer then requested the victim’s bank account details for a refund, only to later claim the account was faulty and required multiple transfers to resolve issues like unfreezing the account or assisting an investigation.
The victim, unaware of the scam, transferred funds repeatedly, losing over HK$300,000 before noticing that Pinduoduo’s app showed their parcels had cleared customs and were ready for delivery.
In another case, a victim received a similar phishing text and contacted a supposed claims representative, providing credit card details for a refund.
The scammer, under the guise of verifying information, instructed the victim to display their credit card’s front and back, including name, number, and security code, during a WhatsApp video call.
The victim only realized they had been scammed when their bank flagged and halted several suspicious transactions, but not before losing over HK$1 million.
Police are urging the public to avoid responding to unsolicited text messages and to refrain from sharing personal or sensitive information with unverified contacts.
They recommend using the “Scameter” tool or "Scameter+" app, available through the police’s CyberDefender platform, to assess risks.
Additionally, authorities are encouraging businesses to join a text message sender registration scheme to enhance the security and credibility of communications, aiming to curb the rising tide of phishing scams.