Hong Kong’s Securities and Futures Commission Orders Phishing-Resistant Logins for Brokers, Crypto Platforms | LeapRate
The Securities and Futures Commission (SFC) has issued a circular ordering internet brokers and virtual asset trading platform operators (VATPs) in Hong Kong to abandon one-time passwords (OTPs) in favour of phishing-resistant authentication methods, as account takeover attacks targeting client credentials continue to rise. The regulator’s directive, published on 9 July 2026, requires firms to…