Hong Kong SFC Flags Four Suspicious Websites Impersonating Licensed Firms

Hong Kongs Securities and Futures Commission has added four suspicious websites to its alert list after identifying signs that they may be impersonating licensed firms.

According to the regulator, some of the websites falsely claim links to licensed intermediaries, display fabricated regulatory credentials, or ask users to provide sensitive personal and banking information.

Four websites named in the warning

The latest suspicious websites identified by the SFC are:

• usmart-app.com — impersonating uSmart Securities Limited — not connected to the licensed firm
• lizenasset.asia — impersonating LiZen Asset Management Limited — not connected to the licensed firm
• gfihksecurities.cc / gfihksecurities.shop — impersonating GFI (HK) Securities L.L.C. — not connected to the licensed firm
• blackrock666.com — impersonating BlackRock Asset Management North Asia Limited — not connected to the licensed firm

The regulator noted that these websites should not be treated as official platforms of the licensed companies they refer to.

Impersonation remains a common fraud pattern

Clone-style websites often use the name, logo, or regulatory identity of a real financial company to make the platform appear credible.

In some cases, users may be asked to download an app, open an account, submit identity documents, provide banking details, or transfer funds. Once the website borrows the name of a legitimate firm, it may become harder for users to detect the fraud at first glance.

The SFC warned that investors should be especially cautious with unsolicited investment offers, online platforms, or mobile apps that claim to be regulated but cannot be verified through the official public register.

Investors urged to verify before transferring funds

The SFC advised investors to check the identity of any company or individual before making a financial transaction. The key step is to compare the platform name, website domain, contact details, and licence information against the SFCs public register.

A company name alone is not enough. The website address must also match the licensed firms official records. If the domain is different, recently created, or not listed by the licensed institution, users should treat it as a warning sign.

Investors should not provide passwords, personal identification documents, banking information, or funds to unlicensed operators. Suspicious activity should be reported to the relevant authorities.

About WikiFX

WikiFX is a global broker information platform that provides broker profiles, licence records, regulatory updates, risk alerts, and user complaint data to help users review the compliance background of financial platforms.