Hong Kong Orders Crypto Platforms to Implement Anti-Phishing Measures
Vexoda Newsroom
The Hong Kong Securities and Futures Commission (SFC) has mandated crypto platforms and online brokers to adopt new phishing-resistant login methods by the end of next year, amid a rise in cryptocurre
Hong Kong's financial regulator, the Securities and Futures Commission (SFC), recently issued stringent guidelines for cryptocurrency trading platforms. These requirements aim to enhance security measures against increasingly sophisticated phishing attacks targeting virtual asset traders.
The new standards mandate that crypto platforms implement stronger authentication methods such as passkeys, registered devices with cryptographic verification, and hardware security keys. The SFC explicitly prohibits the use of one-time passwords through SMS, email, or app-based logins due to their vulnerability to phishing scams.
This move comes in response to a significant increase in phishing attacks on the global cryptocurrency market during Q1 2026. According to recent data, these incidents accounted for $306 million out of total industry losses amounting to $482 million. Counterfeiting and fraud made up nearly two-thirds of reported security incidents in Hong Kong last year.
The new regulations are part of a broader effort by the SFC to bolster cybersecurity standards within the region's financial ecosystem. Dr. Ye Zhiheng, executive director of the Intermediaries Department at the China Securities Regulatory Commission (CSRC), emphasized that comprehensive measures must be implemented in conjunction with prevention, detection, response, and education.
These new anti-phishing requirements underscore the growing threat posed by sophisticated cyber attacks to crypto investors' assets. In recent incidents, a trader lost nearly $1 million after approving a malicious transaction on Ethereum, while another wallet holder suffered losses of over $1.65 million following a connection with a fake exchange.
The implementation of these measures is expected to significantly reduce the risk of phishing and social engineering scams in Hong Kong's crypto market. However, it also highlights the ongoing challenges faced by regulators globally as they strive to protect investors from emerging threats.
Traders should monitor how other jurisdictions respond to similar issues and stay informed about evolving security practices within the industry.
Source: Cointelegraph. Summarized and rewritten by the Vexoda Newsroom. This is market news, not financial advice.