Hong Kong regulator orders new anti-phishing measures for crypto platforms

Hong Kong's Securities and Futures Commission mandated crypto platforms implement phishing-resistant authentication within 12 months, banning SMS and email one-time passwords. The directive requires passkeys and hardware security keys as alternatives. Phishing attacks cost the industry $306 million in Q1 2026. This strengthens Hong Kong's crypto regulatory framework, relevant for Indian investors monitoring global security standards.
Key takeaways
- 1Hong Kong SFC mandates crypto platforms implement phishing-resistant authentication within 12 months, banning SMS and email one-time passwords.
- 2Phishing attacks cost the crypto industry $306 million in Q1 2026, with platforms required to adopt passkeys and hardware security keys.
- 3Hong Kong raises cybersecurity standards as global crypto losses from phishing and social engineering reached $366 million in H1 2026.
Coins in this story
Why it matters
This regulatory move sets a global security benchmark that Indian crypto exchanges may face pressure to adopt, protecting retail investors from rising phishing and social engineering threats that have caused significant financial losses in 2026.
Related stories

Robinhood launched a Wall Street layer 2 chain and the market crowned a $150M cat coin first
Robinhood launched the public mainnet of Robinhood Chain this month, describing it as a permissionless Layer 2 built on Arbitrum for tokenized stocks, real-world assets, DeFi lending, and AI-native finance. One week in, the chain's loudest retail activity is driven by CASHCAT, a memecoin built on Robinhood's own discarded “CashCat” name. The token reached ne...

AI contracts, not bitcoin, now drive miner valuations, and Cipher and TeraWulf look cheap
Compass Point analysts Michael Donovan and Ed Engel said markets are giving little credit to future AI data center pipelines despite billions of dollars in signed leases....

Aave rolls out vaults for yield-hungry fintech investors
Aave's new Stable Vaults product lets wallets, exchanges and payment apps offer yields on stablecoin deposits...