Hongkong Post reminds the public to stay vigilant to phishing attempts

Hongkong Post reminds the public to stay vigilant to phishing attempts
 

How to identify phishing messages

  1. 1. Check the Email Address of the sender

    Emails of Hongkong Post are sent via the following official domains :-

    Check the email address of sender

    While phishing emails may use addresses with keywords like hongkongpost, hkpo, gov, and etc., such as hongkongpost@xmail.com or posthk@post.hk, it is impossible for them to use the above official domains of Hongkong Post.


  2. 2. Check the URL of the embedded link

    All websites of Hongkong Post are hosted on the following official domains :-

    Check the url of the embedded link

    Although the fraudulent websites may copy the designs and contents from those of Hongkong Post, their URL addresses such as “www.hongkongpost.cc” or “www.hongkongpost.hk.com” or “posthongkong.info” are only imitations of the official domains of Hongkong Post. These websites are not affiliated with Hongkong Post.


  3. 3. Check the Item Number

    Message with item number that cannot be verified on the official website of Hongkong Post (www.hongkongpost.hk) should be considered a phishing message.

    Check the item number
 

Common fraudulent tactics (Last Update: 28.11.2022)

Below are some screenshot examples of reported phishing email and SMS message that the public should stay alert to:

 

Fraudulent Websites (Last Update: 26.10.2022)

Below are some screenshot examples of reported fraudulent websites that the public should stay alert to:

 

Useful Links

 

Action to Be Taken in Response to Suspicious SMS Messages or Emails

If you receive any suspicious SMS messages or emails, please take the following actions:

  1. Do NOT click on any embedded links or download any attachments in the SMS message or email;
  2. Check the webpage that the embedded links will lead to against the official domain names of Hongkong Post, i.e. hongkongpost.hk, hongkongpost.gov.hk and ecert.gov.hk;
  3. Delete the suspicious message or email immediately;
  4. If in doubt, email us at hkpo@hkpo.gov.hk with information such as the caller’s phone number, sender’s email address, message content or screenshots of the SMS message or email in question for our verification.