Short Message Service (SMS) Sender Registration Scheme
Hongkong Post reminds the public to stay vigilant to phishing attempts
 

What's New

2024.06.03

Short Message Service (SMS) Sender Registration Scheme

Under the “SMS Sender Registration Scheme”(the “Scheme”) introduced by the Office of the Communications Authority (OFCA), registered users are using "Registered SMS Sender IDs" with prefix "#" to send SMS to help members of the public verify the identities of the senders. Having registered under the Scheme, Hongkong Post will only use “#HKPost” to send SMS to local subscribers of mobile services starting from today.

Relevant information can be seen in “List of Registered Senders” maintained by OFCA. For details, please visit OFCA website www.ofca.gov.hk.

 

How to identify phishing messages

  1. 1. Check the Email Address of the sender

    Emails of Hongkong Post are sent via the following official domains :-

    Check the email address of sender

    While phishing emails may use addresses with keywords like hongkongpost, hkpo, gov, and etc., such as hongkongpost@xmail.com or posthk@post.hk, it is impossible for them to use the above official domains of Hongkong Post.


  2. 2. Check the URL of the embedded link

    All websites of Hongkong Post are hosted on the following official domains :-

    Check the url of the embedded link

    Although the fraudulent websites may copy the designs and contents from those of Hongkong Post, their URL addresses such as “www.hongkongpost.cc” or “www.hongkongpost.hk.com” or “posthongkong.info” are only imitations of the official domains of Hongkong Post. These websites are not affiliated with Hongkong Post.


  3. 3. Check the Item Number

    Message with item number that cannot be verified on the official website of Hongkong Post (www.hongkongpost.hk) should be considered a phishing message.

    Check the item number
 

Fraudulent Websites / Social Media Pages (Last Update: 28.03.2024)

Below are some screenshot examples of reported fraudulent websites / social media pages that the public should stay alert to:

 

Common fraudulent tactics (Last Update: 28.03.2024)

Below are some screenshot examples of reported phishing email and SMS message that the public should stay alert to:

 

Useful Links

 

Action to Be Taken in Response to Suspicious SMS Messages or Emails

If you receive any suspicious SMS messages or emails, please take the following actions:

  1. Do NOT click on any embedded links or download any attachments in the SMS message or email;
  2. Check the webpage that the embedded links will lead to against the official domain names of Hongkong Post, i.e. hongkongpost.hk, hongkongpost.gov.hk and ecert.gov.hk;
  3. Delete the suspicious message or email immediately;
  4. If in doubt, email us at hkpo@hkpo.gov.hk with information such as the caller’s phone number, sender’s email address, message content or screenshots of the SMS message or email in question for our verification.