Retail News CRM

Tag: HKMA

  • Chelsea Stablecoin Shirt Deal Sparks Hong Kong Merchandising Regulatory Fears

    Chelsea Stablecoin Shirt Deal Sparks Hong Kong Merchandising Regulatory Fears

    English Premier League club Chelsea signed a front-of-shirt sponsorship deal with Circle in late August to display its USDC stablecoin logo across official jerseys for the 2026-27 season. The agreement has created immediate uncertainty for Hong Kong sports apparel retailers and consumers navigating the city’s strict digital asset marketing framework.

    Only two stablecoin issuers, Anchorpoint Financial Limited and HSBC, currently hold operating licences in Hong Kong. Circle’s USDC token is neither issued nor licensed under Hong Kong law, putting local replica jersey distributors in an uncertain regulatory position.

    Licensing Limits Under City Ordinance

    The legal friction stems from Hong Kong’s Stablecoins Ordinance, which took effect on August 1, 2025. Under guidelines issued by the Hong Kong Monetary Authority (HKMA), actively marketing unlicensed fiat-referenced stablecoins to the public is illegal.

    Regulators assess active marketing based on target audience, language, local domain usage, and whether an intentional promotional strategy exists. While the ordinance provides exemptions for live broadcast networks that do not control commercial content, it does not explicitly clarify whether physical apparel retail falls under promotional activity.

    Apparel stockists in major retail hubs are already weighing the commercial risk. Hammer Chung, owner of football apparel store DirectSoccer in Mong Kok, questioned whether stocking and retailing replica kits bearing unlicensed crypto logos exposes shop owners to regulatory enforcement.

    Retail Merchandising and Active Marketing Rules

    Supporter demand across Asia remains a vital revenue stream for European football merchandise, but grey areas in sports sponsorship compliance are multiplying. European teams continue to sign lucrative sponsorship contracts with global crypto firms, yet Asian jurisdictions are enforcing increasingly localised virtual asset licensing regimes to protect retail consumers.

    The UK Financial Conduct Authority warned Premier League clubs three months before the Chelsea deal about partnering with unregulated crypto platforms. In Hong Kong, consumer advocates and digital asset compliance specialists, including VerifyVASP, have called for clearer retail guidance and on-screen disclaimer requirements for televised fixtures.

    Retailers in the city are now waiting to see whether the HKMA issues formal enforcement guidance on replica sports merchandise before peak sales for the 2026-27 European football season get underway.

  • Surge in Hong Kong Cybercrime

    Surge in Hong Kong Cybercrime

    Hong Kong has experienced a surge in fraudulent banking websites this year. In August alone, there were 15 reports of such incidents, compared with only two cases of fake websites or phishing attempts in the same month a year ago, according to the Hong Kong Monetary Authority (HKMA). In September, seven incidents were reported, up from one a year ago.

    And the trend seems to continue, with eight cases reported in October so far. Customers of DBS, Hongkong and Shanghai Banking Corporation, as well as Dah Sing have been among the targets of the criminals. With the rise of financial technology firms and mobile banking apps, experts predict that novice mobile banking users will become prime targets.

    Digital Banks Attract Attackers

    While the use of digital banking tools is spreading quickly, the technology is also attracting the attention of cybercriminals, said cybersecurity specialist Securelist in a report earlier this year. «We are sure that the world of cybercrime will see increasing attacks against this type of banks and their customers,» Securelist said in its report. 

    Fraudsters have long tried to trick users to visit fake bank website via e-mail messages pretending to be from the bank. On these fake websites, they try to trick account holders into revealing their access credentials. On mobile devices, the connection with the bank is typically via an application, rather than a website.

    Tricks Of Criminals

    Banks’ usage of chat applications increases the possibility that criminals could try impersonating the bank in social media chats and try to trick users into downloading and installing an «updated» version of the bank’s app. In reality, such an app would be malicious and could help attackers steal credentials from the phone.

    «Other social engineering scams have emerged which try and trick the genuine user into revealing the authentication code for their chat app and hence lose control of the account. Even if this is only temporary, it may allow enough time for a fraud to be perpetrated,» Jackson said in an interview.

    Attacks Focused On Smaller Vendors

    Experts predicts there could be more attacks on fintechs or payment providers going forward. This is due to lower investments into cybersecurity versus traditional banks, and criminals’ evolving technological skills.

    «Large financial organizations invest considerable resources in cybersecurity, thus the penetration of their infrastructure is not an easy task. However, a threat vector that is likely to be actively used by cybercriminals in the coming year is attacks on software vendors supplying financial organizations,» Securelist said. Most of these vendors have a lower level of protection compared with the financial organizations themselves.

    Attacks Via Software

    For the coming year, the cybersecurity experts expect criminals to stage attacks via software for the finance business, including such for ATMs and PoS terminals. «A few months ago we registered the first attempts of this kind, when attackers embedded a malicious module into a firmware installation file, and placed it on the official website of one of the American ATM software vendors,» Securelist wrote.

    Based on a 2017 study by Accenture, the financial services industry posted annual costs of nearly $18.3 million per firm from cyber attacks.

    Lees ook:

    Lees ook: