Identifying Fraud
Beware of Online Investment Scams, e.g. “Ramp and Dump” Scheme
Be skeptical of the identities of anyone you meet online. Fraudsters very often impersonate themselves as well-known investment advisers and market commentators and set up social media groups discussing and offering stock tips or insider information. They may proactively approach you through emails or social media platforms, such as WhatsApp, WeChat and Telegram. They bolster a particular stock by actively discussing tips to “ramp” up the stock prices and lure investors to buy the stock at an artificially high price in hopes of further price increases. Once the stock price rises sharply, they will sell or “dump” the stock. Most of the time, the investors do not know the true identities of the fraudsters who lured them into the trap.
Be Wary of Fraudulent Websites and Phishing Emails
Fraudulent websites can be difficult to detect, particularly when the address bar and the padlock icon (a security/privacy feature) that appear in your browser window can be faked. Please ensure that you land on a genuine EBSI website.
The addresses of EBSI’s official websites are listed below:
- www.ebshk.com
- www.ebshkfg.com
- www.ebshkdirect.com
- www.ebshkprivate.com
- www.ebshkforex.com
- www.ebshkclubprive.com
Be alert to emails purportedly sent from EBSI or its senior management personnel requesting you to provide your personal details or account information, open documents attached to the emails, click the hyperlinks embedded in the emails, or transfer money to them.
Be Vigilant Against Phishing Scams. EBSI has joined the “SMS Sender Registration Scheme”
By sending short message service (SMS) messages with embedded phishing hyperlinks to brokers’ clients to trick them into entering their user credentials into fake websites that closely resembled Licensed Corporations (LCs)’ genuine websites, the perpetrators were then able to intercept clients’ usernames, login passwords and data used to authenticate the clients as part of the LCs’ two-factor authentication (2FA) process, including SMS one-time passwords (OTPs) and biometric data, to access clients’ accounts and conduct unauthorized trading.
Everbright Securities International has joined the SMS Sender Registration Scheme implemented by the Office of the Communications Authority (OFCA) of Hong Kong. Starting from September 13, 2025, SMS messages sent to clients’ Hong Kong mobile numbers registered with our Company have been using “#EBSI” as the sender name. EBSI will not send electronic messages (such as SMS messages and emails) with embedded hyperlinks that redirect clients to our website or mobile application for login. Even if you receive SMS messages with the prefix “#”, you should remain vigilant and not click on any embedded hyperlinks. If you accidentally click on the embedded hyperlinks and are thus redirected to any websites or mobile applications, you are reminded not to enter any sensitive or confidential personal information, such as user credentials and one time password for logging onto your account(s).
If you have doubts about the authenticity of an SMS, you may check the register established by OFCA to verify the sender’s identity. You may also contact us to verify the authenticity of emails or SMS messages you received via our Customer Service Hotline at +852 2822 5001 (Hong Kong), +853 6262 5028 (Macau) or +86 40011 95525 (Mainland).
If you suspect that you have disclosed personal information to unknown individuals or notice any unusual activity in your account, please contact our Anti-Fraud Hotline at +852 3920 2980 or report the case to the police immediately to prevent further losses.
How to Protect Yourselves
Monitoring Your Online Account
To identify signs of attackers’ attempt to conduct unauthorized trading, whether successful or not, monitor your online account by logging in regularly and when you receive online statements, emails, or SMS notifications from EBSI. Review the official statements and check all transactions and account balances upon receipt. Beware of any suspicious changes to your account information, such as telephone number, email and/or correspondence address, and login password.
Keep Your Account Information Secure
Do not disclose your login ID, password, and/or OTPs of your online account over the phone, social media platforms, SMS, or via email to any person, including your Wealth Manager, or respond to any unverified request. Do not share your computer or mobile device used to access to your online account with other people, including your Wealth Manager. Do not authorize any person, including your Wealth Manager (other than your duly and officially registered authorized representative), to conduct transactions via your trading account. We highly recommend that you change your passwords regularly and use different passwords for other services, e.g. email and online banking.
Open Emails and Attachments with Caution
Be alert when opening unexpected emails with attachments, and never click on a hyperlink in a suspicious email. If you really need to open the attachments, always scan them with Internet security software.
Do Not Click on Embedded Hyperlinks in SMS Messages
Do not click on embedded hyperlinks in SMS messages and do not enter confidential personal information, user credentials, or OTPs into websites or mobile applications to which you are re-directed.
Install Anti-Virus, Firewall, and Anti-Spy Programs
Install Internet security software with anti-virus, anti-spyware and personal firewall features to perform real-time detection of new viruses, spyware and intrusions on your computer. Enable the auto-update feature to obtain the latest virus and spyware definition files. You are also advised to regularly scan your system.
Keep Your Devices Updated
Update your computer by installing the latest software and patches, and/or update your mobile devices by installing the latest software version, to prevent hackers or viruses from exploiting any known weaknesses in your computer or mobile devices.
Keep Good Track of Your Account Statements and Our Emails
Beware of any suspicious transactions in your account by checking your account statements and emails from EBSI as soon as you receive them. Under no circumstances should you authorize anyone to receive your account statements and other information on your behalf.
Maintain Safe Practices When You Login/Logout
Do not access your account with a public computer (e.g. in a cyber café). Before logging in to our website, close all browser windows to protect your personal information from unauthorized access from another website. You should always logout from your account after using it.
Always Enable Online Trade Execution Notifications
Enabling online trade execution notifications can help you identify any potential unauthorized transactions promptly. You may follow the steps below:
-
Activate Email Notifications
You can log into your online trading account(s) through EBSI’s official website, navigate to [Stock Trading] → [My Account] → [Alert Management] → select [Email] under “Please select a channel” → click [Activate] in the activation column → click [Submit] to complete the setup, which will take effect immediately. -
Apply for SMS Notifications (Paid Service; please refer to service application page for details)
You can log into your online trading account(s) through EBSI’s official website, navigate to [Stock Trading] → [Action Forms] → [Service Subscription/Cancellation] → select [Real-time Price Alert] under [SMS Alert Service], and follow the instructions to complete the application. - Enable Push Notifications for the Mobile Application: You can access “Settings” on your mobile devices, select the eMO! or EBSI GO! application from the app list, find the [Notifications] options, and tap to enable notification functions.
(Note: The settings may vary depending on the mobile device model and system version. It is recommended to refer to the official mobile device manual for details.)
Special Notes:
- For eMO! (iOS system): In addition to enabling push notifications in device settings, please log into your online trading account via the eMO! mobile application, navigate to “Settings” → turn on the switch next to the [Trade Alerts] under [Push Notifications]. The setting will take effect immediately.
- b. For eMO! (Android system): The current version does not support push notifications for transaction executions. Please switch to our newly launched EBSI GO! mobile application if necessary.
- For EBSI GO!: No additional settings are required within the application. You can receive push notifications, including those related to transaction executions, once notifications are enabled in your mobile device settings.
Report Fraud and Unauthorized Trading Incidents to EBSI and the Police
If you suspect any fraudulent activities or irregularities may have occurred with respect to your account(s), please immediately call our Anti-Fraud Helpline on +852 3920 2980 or our Customer Service Hotline on +852 2822 5001 (Hong Kong), +853 6262 5028 (Macau) or +86 40011 95525 (Mainland). Alternatively, you can report them directly to the police.
Useful external links:
-
CyberDefender: Aimed at enhancing digital literacy among the general public and raising awareness of information security risks, online fraud, and harmful contents, in order to prevent the public from falling into online traps and helping them become vigilant digital citizens
- Website: Click here
- Facebook: Click here
- Youtube: Click here
-
Scameter and Scameter+ App: Scameter is a search engine introduced by the Hong Kong Police Force to assist the public in identifying frauds and online pitfalls. When the public encounters suspicious calls, online sellers, friend requests, job ads, investment websites, they can enter the platform account name or number, payment account, phone number, email address, URL, etc. to assess the risk of fraud and cyber security. Scameter+ can alert a user in real time if it detects that the user is trying to visit a potentially fraudulent website.
- Website: Click here
-
Faster Payment System (FPS) High Risk Alert (also known as “Suspicious Proxy Alert”): A service introduced by the Hong Kong Monetary Authority (HKMA) that utilizes data within the Scameter to establish an alert mechanism for FPS transactions. When the recipient's FPS identification code (including mobile phone number, email address, and FPS ID) matches the data labeled as “high-risk” in Scameter, the user will receive a fraud prevention alert before confirming the transaction. Participating institutions include a number of banks and stored-value payment tools operators.
- Website: Click here
-
Anti-Deception Coordination Centre (ADCC):The Hong Kong Police Force’s ADCC, which is under its Commercial Crime Bureau, corrdinates the efforts of various relevant departments with the police force in fighting and preventing fraud-related crimes. It also operates an all-day enquiry hotline “Anti-Scam Helpline 18222”, to provide immediate consultations to the general public. Through this hotline, measures such as intercepting fraudulent funds and issuing fraud alerts are facilitated to reduce the losses suffered by victims.
- Website: Click here
- Facebook: Click here
- Youtube: Click here
- Xiaohungshu: Click here
- Subscription to ADCC’s Scam Alert Emails: Click here
-
Anti-Deception Alliance: The Hong Kong Police Force, together with the HKMA and the Hong Kong Association of Banks, established the alliance to collaborate in combating fraud. Representatives from participating banks are stationed at the center, working alongside officers from the Commercial Crime Bureau's ADCC to provide real-time assistance to the police regarding fraud cases. One of the core duties of the alliance is to implement the Upstream Scam Intervention mechanism.
- Details: Click here
-
The Investor and Financial Education Council: A public organization and a subsidiary of the Securities and Futures Commission (SFC), dedicated to improving investor and financial education in the Hong Kong Special Administrative Region (HKSAR). It aims to equip the public with the knowledge, attitude and skills necessary for making informed investment and financial decisions and managing money wisely.
- Details: Click here
-
The Securities and Futures Commission (SFC)’s Alert List: The Alert List established by the SFC that allows searches for suspicious virtual asset trading platforms, investment products and websites, fake regulators and/or market operators, unlicensed entities and phishing emails that have come to the SFC's attention.
- Details: Click here

