Hong Kong Police Issue Warning as Binance Users Lose Funds to Phishing Scam
Hong Kong has witnessed a surge in phishing scams targeting Binance users, prompting local law enforcement to issue a cautionary advisory.
CyberDefender warning
The warning was issued by Hong Kong police via its CyberDefender Facebook page on Monday. Over the past two weeks, at least 11 Binance customers in Hong Kong fell victim to phishing scams, collectively losing over $446,000 (equivalent to HKD 3.5 million). These scams primarily involve fraudulent text messages.
According to Hong Kong police, these fraudulent text messages claim to be from Binance and ask users to verify their accounts by clicking on a link provided within the message. On Facebook, the warning stated:
“Recently, fraudsters posing as Binance sent text messages claiming that users must click the link in the message to verify their identity details before a deadline, otherwise their account would be deactivated.”
Upon clicking the phishing link and entering their login credentials to “verify” their accounts, victims unwittingly grant fraudsters full access to their Binance accounts. This modus operandi mirrors the tactics commonly employed in phishing scams.
CZ chimes in
Binance CEO Changpeng Zhao (CZ) also joined in the cautionary chorus, issuing a warning to customers on his X account.
The crypto sector in Hong Kong has been facing challenges recently, largely related to the recent JPEX fraud case. The losses incurred from the JPEX exchange scandal have swelled to an estimated $180 million, with over 2,300 victims filing complaints with local authorities.
The JPEX scandal led to multiple arrests in Hong Kong and prompted authorities to intensify their efforts against illegal crypto activities. The Securities and Futures Commission (SFC) of Hong Kong introduced regulations mandating the licensing of all crypto exchanges operating within its jurisdiction earlier this year.
To date, only two exchanges, HashKey and OSL, have secured licenses under this regulatory framework. Numerous other crypto exchanges in Hong Kong have submitted license applications, but Dubai-headquartered JPEX, despite heavily promoting its application for a Hong Kong license, failed to submit an application to the local regulator. In the wake of the JPEX scandal, the SFC published a comprehensive list of companies seeking crypto licenses and expanded its list of suspicious platforms.
Cyber security firm Kaspersky found earlier this year that phishing related to crypto trading is on the rise in Asia, particularly in the Philippines. Binance’s CZ has had to issue warnings where phishing is concerned on previous occasions. He did so in July when the founder of decentralized crypto exchange (DEX) Uniswap was hacked.
In February of last year, CZ came out again to warn users of a massive SMS-related crypto phishing scam. Back in 2018 a serious attempt was made to compromise the credentials of Binance platform users via phishing techniques.
As phishing scams continue to pose a significant threat to crypto users in Hong Kong, and with the aftermath of the JPEX debacle still reverberating through the industry, vigilance and caution remain paramount for participants in the region’s crypto ecosystem.
