Scammers steal HK$2.2 million with fake Hongkong Post messaging scheme

  • Texts and emails told victims they had a parcel delivery pending and asked for credit card details to cover a mailing fee, police say
  • The postal service said it would only contact people through mail collection notification cards left at their home address

Latest Articles

Top 10: What habits did you grow out of as you got older?

A postman at the General Post Office. Recently scammers pretending to be the post office have asked people for their credit card details and stolen the numbers. Photo: SCMP

Scammers have cheated more than 100 Hongkongers out of HK$2.2 million since November through phishing text messages and emails claiming to be from Hongkong Post, while demand for delivery services during the coronavirus pandemic surged.

Many of the fake messages told victims they had a parcel delivery pending but the recipient address was incomplete, according to the police’s cybersecurity and technology crime bureau. Scammers then directed victims to a controlled website and asked for a postal fee of a few dollars.

Should Hongkongers receive cash handouts instead of electronic vouchers?

“Scammers were not actually after such a small amount of money, but rather the credit card details provided by the victims,” Superintendent Terry Cheung Tin-lok said on Tuesday. “Then the culprits used the stolen data to go shopping.”

Police had received reports from 120 victims who had lost a total of HK$2.21 million since November.

In the single largest case, a 39-year-old man lost HK$75,000 in January after falling for a trap similar to the phishing email scam. Not knowing who had sent the parcel, the victim paid the “delivery fee” with his credit card. The next day he received a call from his bank notifying him about four online transactions totalling HK$75,000 had been made with the card, prompting him to alert police.

Hong Kong government announces minimum wage freeze

Kenneth Wu Pak-kin, Hongkong Post’s director of operations, said the city’s postal service would not send a text or email notification to anyone. Instead, a postal worker would leave a mail collection notification card at a person’s home address if delivery failed.

“If the address is wrong, the mail would be returned to the sender,” Wu said. “Hongkong Post does not request anyone to confirm nor provide mailing address through emails, social media or SMS. We also do not ask for tariffs on behalf of customs or postal services of other jurisdictions.”

Bureau head Frank Law Yuet-wing suspected that victims were easily lured into the scams by the small amount of money requested. The pandemic had also made people rely more heavily on postal service for daily necessities and online shopping, he said.

Sign up for the YP Teachers Newsletter
Get updates for teachers sent directly to your inbox
By registering, you agree to our T&C and Privacy Policy