0
Phishing Alert
Current Status and Related Trends
Recently, HKCERT has identified phishing websites impersonating government platforms, including the eTraffic Ticket Platform and HKeToll. These phishing websites use pages that closely resemble official websites, tricking citizens into believing they are legitimate platforms and deceiving users into entering personal information and credit card details.
Important: Official Government Website Domains Must End with .gov.hk
- HKeToll Official Website:
- eTraffic Ticket Platform Official Website: (All electronic Fixed Penalty Notices “FPNs” SMS messages will only be issued from “#HKPF-eTT”. Please note that the FPNs, whether issued via SMS messages or email, will never contain any hyperlinks.)
The following is recent examples of phishing URLs reported by HKCERT：
Fake eTraffic Ticket Platform:
- After clicking the phishing link, users are redirected to a counterfeit “Verify/Pay Ticket” page.
- Users enter their vehicle number and click “Verify/Pay,” then see a fake fine amount.
- Clicking “Pay” leads to a page requesting credit card number, cardholder name, expiry date, and CVV, enabling scammers to steal financial information.
Fake HKeToll Website:
- After clicking the phishing link, users see a fake login page (two versions have been reported recently).
- Users enter their vehicle registration mark or email/phone number, then see a payment amount. Clicking “Pay” prompts users to enter credit card details (number, name, expiry date, CVV), which are then stolen.