Look, three things landed from the Hong Kong Monetary Authority on September 17 and 18, and only one of them is actually about risk. The HKMA adjusted the base rate on September 17 (a Fed-linked mechanical move, not a policy signal about credit conditions), issued a scam alert tied to banks the same day, and published two statistics releases on September 18: stored value facility scheme data from SVF licensees and payment card issuance numbers for the second quarter. None of the three is a rulemaking. The stats releases are backward-looking data drops. The scam alert is a public notice republished from HKICL and police warnings, which is the kind of thing that reads like supervisory guidance until you check who wrote it.

So here's the part that matters for a bank's Banking Conduct Department: none of this touches the actual obligation set. The scam alert changes no institution's duty under the Code of Banking Practice, where the HK$500 cardholder liability cap and the 60-day unauthorised-transaction reporting window already sit, and it isn't examination-relevant the way an update to SPM TM-E-1's card-not-present monitoring provisions would be. The payment card statistics might eventually feed into how the Banking Supervision Department benchmarks fraud-monitoring adequacy under TM-E-1 section 8.1, but a Q2 issuance count is not itself a supervisory finding. Nothing published this week creates a new compliance task; it's data and a warning, not a circular.

The next dated event to watch is procedural, not substantive: HKMA statistical releases follow a quarterly cycle, so the next SVF and payment card data drop lands with Q3 2026 figures in December. Until a circular or SPM revision actually lands, the base rate move and the scam alert are informational, not obligations.