The Physical Firewall: How Hong Kong’s “Money Safe” Uses Face-to-Face Checks to Kill Digital Fraud
Hong Kong banks have devised a radical way to undercut fraudsters: a portion of funds can be placed in a special account from which withdrawals or transfers are possible only in person, after a visit to a physical branch.
The local regulator, the Hong Kong Monetary Authority, refers to this mechanism as Money Safe. As explained by its chief executive, Eddie Yue, in a letter published in late 2024, the measure was introduced in response to a surge in fraud cases, where customer losses most often stemmed from unauthorized payments made from bank accounts.
According to the regulator, one of the key issues is that criminals sometimes manage to set up online banking without the account holder’s knowledge. As a result, all banks in Hong Kong have been instructed to roll out Money Safe: a pool of “protected” funds that can be accessed only offline. Digital-only banks without branch networks are therefore required to invite customers to their offices for in-person identity verification.
The logic is straightforward. When a customer seeks to access these funds, the bank conducts a face-to-face anti-fraud review, asking questions designed to detect whether the individual may be acting under the influence of scammers. Transfers or withdrawals are permitted only after this conversation has taken place. Banks were given until December 31 to develop and implement Money Safe, and authorities report that all institutions met the deadline. Some launched the service early, later adding features such as the ability to create a Money Safe account directly within mobile apps, and actively promoting it as a competitive advantage.
The government is now joining the promotional effort, pledging advertising and other awareness campaigns, while residents are already being advised to place money they do not intend to use in the near term into Money Safe accounts. The stakes for Hong Kong are high: the financial sector contributes roughly a quarter of the territory’s GDP, and the city is traditionally viewed as a vital bridge for trade with mainland China. Officials have been explicit in stating that safeguarding the banking system is a top priority.
The scale of the problem is also reflected in how frequently Hong Kong issues warnings about new phishing campaigns and fraudulent bank websites. The core idea behind Money Safe is precisely to ensure that even if a “digital” attack succeeds, fraudsters face far greater difficulty in rapidly siphoning off large sums without the customer’s physical presence at a bank.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.