Hong Kong’s financial regulator, the Securities and Futures Commission (SFC), has identified and blocked fake websites impersonating major local cryptocurrency exchanges.
On March 4, the SFC issued an official warning against multiple suspicious websites impersonating two licensed crypto trading platforms. The online perpetrators created several fake domains impersonating two licensed exchanges in Hong Kong, including OSL Digital Securities and Hash Blockchain Limited, also known as HashKey.
According to the announcement, the SFC blocked a total of six websites, including hskexpro.com, hskex.com, hskexs.com, hskexit.com, oslexu.com and oslint.com. The measures followed reports of fund withdrawal difficulties and high fees and commissions for withdrawals.
At the SFC’s request, the Hong Kong Police Force has taken steps to block access to the relevant websites.
The websites are listed on the SFC’s official crypto alert list alongside other fake websites impersonating other crypto exchanges like MEXC. The SFC previously blacklisted eight domains impersonating MEXC on Feb. 9.
The SFC urged investors to verify trading platforms using its public register of licensed persons and registered institutions, as well as the list of licensed virtual asset trading platforms for relevant information on licensed entities, including their official websites.
“Investors should also refrain from sending money or making any transactions before verifying the counterparty’s identity,” the regulator stressed.
It might not be that easy to detect whether this or that website is original or fake, according to Bartosz Barwikowski, layer-1 security expert at the blockchain security firm Hacken. He noted that it may be particularly difficult when a user accesses a website for the first time.
Related: 4 tips that’ll keep your crypto safe from hackers this bull market
“Sure you could always check on the SEC website if the URL is correct but less than 1% of people would do it,” Barwikowski noted. He recommended users rely on trusted third parties instead of depending on search engines or social media channels, including Reddit, because results can be easily manipulated by scammers.
Barwikowski highlighted two recommendations for users to stay away from fake websites:
The news comes a few days after the SFC accepted the last applications from crypto exchanges in the latest round of the licensing cycle on Feb. 29. The crypto exchanges that failed to register to submit applications by that date must exit the region within three months.