The Hong Kong Monetary Authority (HKMA) issued an alert after Bank of Communications (Hong Kong) Limited reported phishing instant messages to the HKMA, and linked to the bank’s press release on its website. The HKMA reminded the public that banks will not send SMS or emails with embedded hyperlinks directing customers to bank websites to carry out transactions, and will not request sensitive personal information such as login passwords or one-time passwords by phone, email or SMS, including via embedded hyperlinks. Individuals who provided personal information or conducted transactions in response to the messages were advised to contact the bank using the details in the bank’s press release and to report the matter to the Police via the Crime Wing Information Centre.