The "eMPF" Phishing Wave: Why Your Employees Are Vulnerable Right Now

Market Updates By Me2Works Published on 23/12/2025

Logo Owned by MPFA


The news of the HK$1.8 million eMPF theft is terrifying, but it was predictable. whenever a major digital platform launches (like the eMPF rollout earlier this year), scammers follow.


The Scam Mechanism: 

Employees receive a WhatsApp or call from someone claiming to be from the "MPF Authority" or their trustee (e.g., Manulife/AIA). They claim there is an "account verification issue" or a "special 25th Anniversary Bonus" (playing on the recent 16% return news) and ask for the user's eMPF password or OTP.


Why HR Must Act: 

If an employee loses their retirement savings, the morale impact is devastating. Worse, they might blame you for forcing them onto a platform they didn't understand.


Immediate Action Item (Copy-Paste this email to staff):


Subject: URGENT: Protect Your MPF Account from Scammers
Dear Team, Please be aware of a new wave of phone scams targeting MPF accounts. The MPFA and your MPF provider will NEVER ask for your password or OTP over the phone.
  • Do not click links in SMS messages claiming your account is "locked."
  • If you receive a suspicious call, hang up and call your provider's official hotline directly.
  • [Optional: Insert link to MPFA anti-scam page]



⚠️ Protect your team. Send the warning today.



Reference: MPFA

https://www.mpfa.org.hk/en/info-centre/press-releases/20251219