Hong Kong police warn of tech support scam duping expats, English-speakers of HK$17 million

“Individuals posing as tech support staff would tell victims their computers have been hacked and their personal data and bank information is at risk,” Chan added.

“Scammers would redirect victims to so-called law enforcement officers who would use different excuses to manipulate victims to transfer funds to mule accounts.”

Chan said this scam was common in the West and Singapore, with more scammers targeting Hong Kong residents in recent months.

Fraudsters posing as tech support staff and law enforcement officers mostly communicated in English and targeted foreigners living in Hong Kong or residents proficient in English, he added.

The force has received 12 reports of these technical support scams in the past two months, involving over HK$17 million.

May*, an expatriate in Hong Kong, lost nearly HK$10 million last month to fraudsters, the single largest case yet.

The retired human resources personnel in her 70s said a warning claiming her computer was under attack popped up on her computer screen last month while she was browsing for travel information.

“A loud noise and flashing colours erupted from my screen and an alert popped up on my screen saying ‘do not shut down or do anything except to call Apple security’,” she said.

“The alert seemed urgent and official. Being accompanied by the ongoing loud noise and flashing colours on the screen, it was a relief to be offered a solution.”

She was prompted to call a number claiming to be a support hotline, where a man named Gary Watson posing as an Apple staff told her hackers had “corrupted her computer completely.”

A man named Edward Jones, who claimed to be a police officer, then contacted May and said a Trojan horse virus was installed in her computer and nine hackers from five countries had already stolen her data.

“I saw my computer being operated by another person, impersonating me to increase my credit limit and set up accounts on nine cryptocurrency platforms,” she said.

“When I probed Edward about his identity, I was presented with websites purported to be from the Hong Kong Police Force.”

Over three days, May said Jones told her to authorise bank transfers, terminate her fixed deposit account and transfer her money to her savings account to “protect her funds from hackers.”

“Gary asked me to use my phone camera for facial recognition and take photos of my identity card and credit card, supposedly to protect my money,” she said.

She then discovered swindlers had made unauthorised transactions on her credit card and added three new payees to her bank account.

May was contacted by the police on the third day over concerns about her bank account after her bank flagged the volume of transactions to the force.

Superintendent Chan said that the identity of the scammers was still under investigation and would not rule out the possibility that they were based overseas.

“Pop-ups on the different websites can customise content relevant to the victims, for example, providing a Hong Kong phone number for the tech support hotline,” he said, adding that placing ads on a variety of websites allowed scammers to cast a wide net to bait victims.

Chan Chi-wing, senior inspector of the cybersecurity and technology crime bureau, reminded residents that law enforcement officers would never request for monetary transfers or ask for financial details.

“If your computer displays an alert message, you can press the Escape key, or the CTRL+ALT+DEL keys to launch the task manager to close the problematic page,” he said.

He also warned the public against downloading any applications that could grant a third-party complete control over computer operations.

The force logged 10,060 cases of online scams in the first five months of 2024, 14 per cent down from the 11,700 cases in the same period last year.

*Name changed to protect the victim’s identity