Crypto scams in Hong Kong: how they work, how to check, and where to report

A crypto scam in Hong Kong usually starts with a stranger, a link or a cash meeting, and ends with money you cannot recover. Police counted HK$3.58 billion lost to online investment fraud in 2025, about HK$1.18 billion of it involving virtual assets. The best protection is simple: use only SFC-licensed platforms you reach yourself, check every new name on the SFC alert list and Scameter, and call 18222 the moment something feels wrong.

Hong Kong has some of the strongest crypto rules in Asia, and some of the busiest crypto scams. The two facts are connected. A well-known licensing regime gives fraudsters something to imitate: a cloned HashKey domain, a fake "SFC certificate" in a Telegram group, an OTC shop that looks exactly like the legitimate ones two floors down. This guide goes through the scam types that actually show up in Hong Kong police reports and court cases, with dates and places, then explains how to check a platform and how to report.

How big the crypto scam problem is in Hong Kong

The police's 2025 law-and-order review is the best official snapshot. Deception cases overall fell slightly, by 2.9%, to 43,212, with losses of about HK$8.1 billion. But online investment fraud went the other way: 5,135 cases, up 30.7%, and HK$3.58 billion lost, up 58.4%. Roughly one-third of that, about HK$1.18 billion, involved virtual assets. Police said they intercepted HK$480 million.

These figures cover reported cases. Many victims never report, out of embarrassment or because they believe the money was lost in a legitimate trade. If you have been scammed, you are not unusual, and reporting fast matters more than anything else you do next.

JPEX: the case that changed the rules

JPEX was the scandal that turned crypto regulation into dinner-table conversation. The platform, which had links to Japan, was never licensed in Hong Kong but was promoted heavily by influencers and through physical OTC shops. The SFC had put it on its alert list in July 2022 and warned publicly on 13 September 2023. Withdrawals froze, and the platform collapsed.

The numbers since: more than 2,700 victims, losses above HK$1.6 billion (about US$205 million), 80 arrests, and HK$228 million in assets frozen, including cash, property, cars and HK$14.5 million in crypto. On 3 November 2025, 16 people were charged, among them an influencer who was a former barrister and a YouTuber. Charges included conspiracy to defraud and, for the first time in an AMLO prosecution, fraudulently inducing investment in virtual assets. Interpol Red Notices were issued for three fugitives. On 26 March 2026, ten more were charged, bringing the total to 26. JPEX-linked OTC shop operators were among those arrested.

The lesson for readers is not "avoid crypto". It is that a platform with celebrity endorsements, glossy shops and claims of licences in other countries can still be unlicensed in Hong Kong. The only licence that counts for a platform serving Hong Kong is on the SFC's list, which our licensed crypto exchanges page mirrors with CE numbers.

Fake exchanges and SFC warnings

The SFC publishes a suspicious virtual asset trading platforms alert list, and it now reads like a catalogue of impersonation. Recent entries include look-alike domains copying HashKey (for example hashkeycom.com, added 14 August 2026), DFX Labs clones (dfxlabs.org and others in July, and dfx.cn and dfxcn.com on 28 September 2026), and EX.IO look-alike URLs in June 2026. Other entries in the past year include Vebit (22 September 2026), Polar Tensor, BiFinance, Aurum, R-Coin Wallet, Ju.com and Hong Kong Stable Exchange (HSEX).

The trend matters. Fraudsters have learnt that "licensed in Hong Kong" is a selling point, so they borrow the names of real licensees. A cloned site can show the real company's logo, CE number and even a copy of its licence. What it cannot change is the web address. If you did not type it yourself or reach it from the SFC's own register, assume it is fake until proven otherwise. For more on how licensed platforms actually hold your coins, see our crypto wallet guide.

Romance and pig-butchering patterns

"Pig-butchering", a translation of the Chinese 殺豬盤, is the long con behind a large share of online investment fraud. The shape rarely changes. Someone contacts you on a dating app, social media, or with a "wrong number" message. Weeks of friendly chat follow, often with photos of a comfortable life in Hong Kong or Singapore. Eventually they mention an investment platform that has done well for them, and offer to guide you.

You deposit a small amount, perhaps by buying USDT at a shop or on a P2P market and sending it to the platform. The app shows gains. You withdraw a little, successfully, which builds trust. Then you deposit more. When you try to take out a larger sum, there is a problem: a tax, a verification deposit, an "abnormal account" fee. Every payment leads to another. The platform, the profits and often the person were never real.

Two tells cut through all of it. First, a genuine romantic partner or friend does not need you to move money to a platform they chose. Second, a real, licensed platform never makes you pay to withdraw your own funds. If both appear together, stop sending money and call 18222.

Fake OTC shops and counterfeit cash

Hong Kong's roughly 200 walk-in crypto exchange shops are not licensed for virtual-asset dealing, which makes them easy to imitate. Most complaints follow one of three scripts: the shop takes your USDT and pays in fake notes, takes your cash and says the USDT "hasn't arrived", or simply vanishes after you transfer. Our crypto shops guide explains how the legitimate shops operate; here are the fakes.

The pattern in the geography is telling. Fake-shop cases have clustered in West Kowloon and Kwun Tong, while the Tsim Sha Tsui hell-notes case happened in the same district as several legitimate shops. A professional-looking counter proves nothing. Count and check every note before you release coins, never send first to someone you met that day, and treat "come to my office upstairs" or "meet at a hotel" as a reason to leave. Since 1 August 2025, shops are also not permitted to offer USDT to the public under the Stablecoins Ordinance; our USDT to HKD guide explains what that means for you.

Robberies around crypto and cash

Where crypto meets large amounts of cash, robbers follow. On 13 December 2025 at about 8:40pm, three to five men with long knives attempted to rob a crypto shop owner at closing time in W Plaza, 608 Nathan Road, Mong Kok, the densest crypto-shop building in the city. The owner's hand was injured; nothing was taken.

Five days later, on 18 December 2025, employees of a Japanese crypto and luxury-goods firm were robbed of about ¥1 billion (around HK$50 million) in four suitcases on Wing Lok Street, Sheung Wan, while carrying cash to a money changer. Fifteen people were arrested and seven charged. In January 2026, ¥51 million was robbed outside a money changer on Des Voeux Road Central, and two staff of a Tsim Sha Tsui virtual-currency shop were among those arrested on suspicion of handling the loot. On 6 March 2026, about HK$10 million in US dollars and renminbi was robbed near Sheung Wan MTR Exit B after a money-changer transaction. And in March 2026 a mainland man was forced to transfer HK$5.3 million in crypto at a Hung Hom hotel.

The Sheung Wan money-changer cluster has become the hotspot for large cash-in-transit robberies. If you must move serious cash, do it by bank transfer to a licensed platform instead. If you insist on cash, never go alone, never announce the amount in chat groups, and do not follow a counterparty to a second location.

Crypto ATM scams

Hong Kong has around 220 to 240 crypto ATMs, and they are not specifically licensed. We found no Hong Kong-specific statistics on ATM scams, but the overseas pattern is well documented: the FBI counted over US$388 million in crypto-ATM fraud losses in the United States in 2025. The script is a phone call from a fake bank, police officer or government department, telling you your account is compromised and you must move your money "to safety" by feeding cash into a Bitcoin ATM and scanning a QR code they send.

Once the coins leave the machine, they are gone. No genuine official in Hong Kong or anywhere else will ever ask you to pay by crypto ATM. If you use a machine for your own purchases, scan only a wallet address you created yourself; our Bitcoin ATM guide covers fees and the few machines that also buy back.

Money mules and frozen bank accounts

A quieter crypto risk is becoming part of someone else's scam without knowing it. In May 2025 police broke up a HK$118 million laundering syndicate that used more than 500 stooge bank accounts; victims' money was withdrawn in cash and taken to crypto exchange shops in Tsim Sha Tsui to convert into crypto. Twelve people were arrested. Police and the HKMA repeat the same message: lending, renting or selling your bank account is money laundering, whatever the "job ad" calls it.

The more common version for ordinary users comes through P2P crypto trading. You sell USDT to a stranger, receive HK$50,000 by FPS, and weeks later your bank freezes the account because that money came from a fraud victim. Hong Kong users have reported freezes and account closures at several banks after P2P trades. Here is what to do if it happens to you:

• Ask the bank, in writing, why the account is restricted and which transactions are affected.
• Gather every record: trade confirmations, chat logs, the counterparty's name and account, wallet addresses and transaction hashes.
• Speak to a solicitor before giving any statement to police or the bank.
• Ignore anyone online who offers to "unfreeze" accounts for a fee. That is another scam.
• In future, sell through a licensed platform that pays out to your own bank account, which avoids receiving money from strangers; see our guide to selling crypto in Hong Kong.

How to check before you pay

Checking takes two minutes and prevents most losses. Search the platform or company on the SFC's list of licensed platforms, remembering that "deemed-to-be-licensed" applicants are not licensed. Then search the SFC suspicious-platform alert list. Next, run the website, phone number, bank account or payment ID through Scameter on the police CyberDefender site or the Scameter+ app, which flags items linked to reported scams. Finally, reach the platform by typing its address yourself, and compare it letter by letter with the one on the SFC register. Our review of HashKey Exchange is a useful example, since HashKey is one of the brands most often cloned.

For the regulatory picture behind these checks, including why OTC shops and ATMs are not yet licensed and what the coming dealer regime will change, see our Hong Kong crypto regulation guide.

How to report a crypto scam in Hong Kong

Speed matters. Police can sometimes stop a bank transfer if they hear about it within hours; once funds have been converted to crypto and moved through several wallets, the odds fall sharply.

1. Stop paying and screenshot everythingChats, the platform website and app, wallet addresses, transaction hashes, bank receipts and the scammer’s contact details.
2. Call 18222The Anti-Deception Coordination Centre’s Anti-Scam Helpline runs 24 hours a day. It gives advice and can help with urgent interception.
3. Make a police reportAt any police station, or online through the Police e-Report Centre or the Hong Kong Police mobile app. Keep the report reference number.
4. Tell your bank and the platformAsk your bank to flag the transfer. If funds went through a licensed exchange, contact it with the transaction details.
5. Complain to the SFC if relevantUse the SFC online complaint form for unlicensed platforms, fake intermediaries or impersonation of licensees.

Be wary of anyone who contacts you after a loss promising to recover your crypto for an upfront fee. "Recovery agents" are a known second-stage scam that targets people who have just been defrauded. Genuine recovery happens through police and the courts, not through a stranger on Telegram.

Frequently asked questions

Sources & further reading

1. HK Government — Law and order situation in 2025 (police statistics) · 11 Feb 2026
2. SFC — Suspicious virtual asset trading platforms alert list · checked 30 Sep 2026
3. ADCC — Anti-Scam Helpline 18222 · checked Sep 2026
4. CyberDefender (HK Police) — Scameter · checked Sep 2026
5. HK Police — e-Report Centre · checked Sep 2026
6. SFC — Online complaint form · checked Sep 2026
7. HKFP — 16 charged in JPEX crypto fraud case · 5 Nov 2025
8. RTHK — another 10 charged over JPEX · 26 Mar 2026
9. The Block — HK police arrest 12 over laundering via crypto exchange shops · May 2025
10. RTHK — Sheung Wan money-changer robbery · 6 Mar 2026

Keep reading