Multiple Hong Kong banks reported customers’ credit cards were stolen and used
to order Apple iPhones. The Hong Kong Monetary Authority said card transactions
must use effective security measures to protect customers, and noted some
merchants may, for operational reasons, not use or temporarily suspend
additional authentication such as In‑App authentication or one‑time passwords
(OTP). In those cases merchants are liable for unauthorized transactions and
related financial losses. The HKMA urged cardholders to check statements and
notify their issuing bank immediately, including blocking cards via online
banking. Generally, if an account is used in an unauthorized transaction and the
cardholder has not committed fraud or been seriously negligent, the cardholder
is not held liable.
