HKMA put out a scam alert on 8 October. A bank has told the regulator about fake websites, fake internet banking login screens and phishing emails using its name.

The notice itself does not name the bank. It says the bank's press release is linked on the HKMA website. So you have to go and look.

Here is the rule the HKMA wants you to remember. Banks will not send you an SMS or email with a link that takes you to their website to do a transaction. Not one.

They also will not ask for your login password or a one-time password by phone, email or SMS. If someone does, it is not your bank. Hang up.

Already tapped a link, typed in your details or sent money? Contact the bank straight away, using the details in that bank's press release. Then report it to the Police Crime Wing Information Centre on 2860 5012.

Honestly, the scammers only need you to be in a hurry once. The bank needs you to be slow every time. Open the app yourself.