Look, the HKMA published three things on September 17 and 18 that a Hong Kong bank's compliance desk needs to sort by priority, not by press release order. The Banking Policy Department adjusted the base rate on September 17, tracking the Fed move (mechanical, not a story for anyone outside treasury). The same day, Banking Conduct Department pushed out another bank-related scam alert, the second in two days after the September 16 warning tied to a fraudulent HKICL-branded website. And on September 18, the HKMA released both the Q2 2026 payment card statistics and the SVF licensee scheme data, the two data sets that actually show where transaction volume, and therefore fraud exposure, is concentrated right now.

Here's the arithmetic that matters: two scam alerts in 48 hours is not a coincidence the Banking Conduct Department will file as one-off (the department only publishes these when a pattern hits a threshold worth a public warning). Under SPM TM-E-1, section 8.1, authorized institutions run automated fraud monitoring and remediation obligations across e-banking channels, and section 7.6 covers card-not-present authentication and monitoring specifically. A bank whose CNP transaction volume shows up in Thursday's Q2 card statistics with elevated growth is the one whose TM-E-1 monitoring stack examiners will ask about first, and the back-to-back scam alerts are the public tell that somebody's detection window is too slow.

There's no consultation close or hearing date attached to any of this week's notices, so the next dated event for the regulatory calendar is whenever the HKMA next revises the base rate following a Fed move, unscheduled by definition. Until then, the two scam alerts are the only actionable signal: a bank citing TM-E-1 section 8.1 compliance in its next board pack needs to show the monitoring caught these patterns before HKICL had to post a public warning about a fraudulent look-alike site.