Hong Kong

HKCERT Issues Urgent Warning on Phishing Scams Targeting Water Supplies Department

By David Wong
|
Published: 2026-03-17 06:28

The Hong Kong Computer Emergency Response Team (HKCERT) has issued a warning regarding a new phishing scam that impersonates the Water Supplies Department. Victims are being targeted with fake bills that could lead to financial loss and identity theft.

Phishing Alert: A Growing Concern in Hong Kong

The Hong Kong Computer Emergency Response Team (HKCERT) has raised alarms over a recent wave of phishing scams that are specifically designed to impersonate the Water Supplies Department (WSD). This alarming trend has seen scammers sending out fraudulent bills that appear legitimate, putting unsuspecting residents at risk of financial loss and identity theft.

How the Scam Works

According to HKCERT, the phishing attempts involve emails that closely resemble official communications from the Water Supplies Department. These emails typically contain fake bills that request immediate payment for water services. The scammers have gone to great lengths to ensure that their emails look authentic, often including official logos and formatting to deceive recipients.

Once a victim clicks on the link provided in the email, they are directed to a counterfeit website that mimics the WSD's official site. Here, they may be prompted to enter personal information, including banking details, which can be exploited for financial gain. This method of deception is not new, but the sophistication of these scams has raised concerns among cybersecurity experts.

Recent Incidents

HKCERT has reported a noticeable increase in the number of complaints from residents who have fallen victim to these scams. Many individuals have reported receiving emails that appear to be from the WSD, complete with fake billing amounts and payment deadlines. In some cases, victims have unwittingly provided sensitive information, leading to unauthorized transactions and identity theft.

Advice for Residents

In light of these incidents, HKCERT has urged residents to exercise caution when receiving unexpected emails, especially those that request payment or personal information. They recommend the following measures to safeguard against phishing scams:

  • Verify the Sender: Always check the email address of the sender. Official communications from the Water Supplies Department will come from a verified government domain.
  • Do Not Click on Links: Avoid clicking on any links or downloading attachments from emails that seem suspicious.
  • Contact Authorities: If you receive a suspicious email, contact the Water Supplies Department directly through their official channels to verify its authenticity.
  • Report Scams: Residents are encouraged to report any phishing attempts to HKCERT or the Hong Kong Police Force to help combat these fraudulent activities.

The Importance of Cybersecurity Awareness

The rise in phishing scams highlights the critical need for cybersecurity awareness among residents in Hong Kong. As technology continues to evolve, so do the tactics employed by cybercriminals. Public education campaigns and resources provided by organizations like HKCERT play a vital role in equipping individuals with the knowledge needed to protect themselves online.

As Hong Kong continues to embrace digital transformation, residents must remain vigilant against potential threats. By staying informed and adopting best practices for online safety, individuals can significantly reduce their risk of falling victim to phishing scams and other cybercrimes.

Conclusion

The recent phishing scams impersonating the Water Supplies Department serve as a stark reminder of the ever-present threat of cybercrime. With the support of HKCERT and other cybersecurity organizations, residents can take proactive steps to safeguard their personal information and financial security.