The Hong Kong Securities and Futures Commission (SFC) has reprimanded and fined Tung Tai Securities Company Limited (Tung Tai) HKD 900,000 for failures relating to unauthorised sales of client securities and transfers of client funds, finding that the firm did not adequately safeguard client assets. Between 6 September 2019 and 18 February 2020, Tung Tai acted on instructions from a bogus email address resembling that of an overseas client, sold shares in the client’s account and transferred sale proceeds totalling USD 3,301,740 to three overseas bank accounts not designated by the client. The SFC cited multiple red flags, including prior rejections of telegraphic transfers by banks and mismatches between beneficiary addresses in the instructions and the client’s account opening records, yet the firm continued processing transfers without making enquiries. In setting the sanction, the SFC considered the seriousness of the internal control failings, subsequent remedial measures, compensation paid to the client, the use of independent reviewers and cooperation with the SFC, and Tung Tai’s otherwise clean disciplinary record.