Hong Kong privacy watchdog warns of fake e-visa sites scamming applicants
Scam e-visa portals tricked 16 applicants into handing over passport data and fees.
Hong Kong's privacy watchdog issued a public warning Monday about a rising wave of phishing sites impersonating official e-visa application portals for Canada, the UK, and Thailand. The Office of the Privacy Commissioner for Personal Data confirmed it received 16 inquiries or complaints over the past three months from applicants who were duped into submitting sensitive personal information and paying fees via these fraudulent websites. Victims provided names, gender, nationality, passport numbers, and dates of birth before realizing they had been scammed, with individual financial losses ranging from HK$300 to more than HK$1,700 (US$216).
The watchdog noted that the fake sites often mimic official URLs but contain subtle spelling mistakes, extra letters, or numbers — a classic lookalike domain tactic. Scammers reportedly lured victims through sponsored or top-ranked search results, making the deception harder to spot. The office urged the public to verify the authenticity of e-visa websites before providing any personal data or making payments, emphasizing that safeguarding privacy is critical in an era of increasing digital government services. The warning underscores a broader trend of targeted phishing campaigns exploiting travelers' urgency to secure visas and travel authorizations efficiently.
- Fraudulent e-visa portals mimicked Canada, UK, and Thailand official sites using lookalike URLs with misspellings or extra digits.
- 16 complaints were filed in three months; individual losses ranged from HK$300 to over HK$1,700 (US$216).
- Victims surrendered passport numbers, names, nationality, gender, and date of birth, plus paid application fees to scammers.
Why It Matters
Phishing campaigns targeting visa applications can easily steal passports and payment data, putting travelers at serious financial and identity risk.