[Insurance Scam] How to spot fake agents, fake policies and phishing links? Common tactics + 6 anti-scam tips

How many scam calls and WhatsApp messages do you receive every day? And how many times have you nearly clicked a link or replied to the other party? In Hong Kong, scams have long become part of everyday life. Taking 2025 as an example, the city recorded about 43,212 scam cases1; almost one in every two crimes was related to fraud. Even insurance, which is originally a tool for protecting against risk, has in recent years become a common entry point for fraudsters, and their methods are becoming increasingly convincing.

In this article, 10Life will unpack several common insurance scam tactics, as well as some simple yet practical ways to stay vigilant, helping everyone guard against fraudsters. 

1. Creating a sense of urgency with “payment about to be deducted / charges starting” 

The most common scenario is receiving a message or phone call saying that you have activated an insurance service, or that charges are about to start / be deducted automatically, and that you must act immediately or cancel it. Many people, upon seeing “charges starting” or “money will be deducted from your account”, will naturally want to deal with it at once. Fraudsters exploit this psychology by issuing a series of instructions within a short time, such as clicking a link, logging in to an account, entering details or providing an OTP. In some cases, the other party may even know your name or basic personal details, making the whole thing appear even more like an official notification.

2. Using phishing links to direct victims to fake websites

The design, logo and even the URL of these fake websites can be made very similar to the official website. Once login details, credit card information or verification codes are entered, the account may be taken over immediately. In recent years, this has also been combined with QR codes or fake customer service phone numbers to build trust first, before directing victims to phishing websites.

3. Misleading sales or fake agents

In addition to online scams, some risks actually arise from the sales process itself. For example, unsuitable products may be recommended, returns may be exaggerated or risks downplayed, and there may even be cases of unauthorised changes to information or false policy applications. These issues may not result in immediate losses, but discrepancies are often only discovered at the point of cancellation or claims. 

Case 1: Expired insurance scam (phone call + fake website)

A man received a call and was told that his insurance had been changed from free coverage to an annual premium of about HK$40,000, which would be automatically debited from his bank account. The caller asked him to phone a “cancellation hotline”, then led him to a fake website to enter his bank and credit card details, and pressured him by saying that failure to act would result in his account being frozen. In the end, the victim made multiple transfers and lost nearly HK$150,000.

Case 2: “Million-dollar insurance” scam (SMS + phishing link) 

A victim received a call saying that her insurance was about to expire. When she said she had never purchased any policy, the caller immediately changed tack and claimed they could help cancel it, while asking her to log in to a fake website and pay about HK$30,000 as a “verification deposit”. After the transfer, the caller became unreachable.

Upon receiving a suspicious message, you can first ask yourself three questions:

• Are you being asked to “act immediately”?  
• Is it from an “unknown source”?  
• Are you being asked to “provide information or transfer money”?  

If two or more apply, it is high risk. Pause and verify first.

Compared with fake customer service or phishing links, “fake insurance agents” are often harder to identify, as the other party may appear professional and even be somewhat persuasive. However, there are two simple ways to effectively reduce the risk: 

1. Check the licence on the IA website

The licence and registration details of all insurance agents can be found on the Insurance Authority (IA) website. However, holding a licence does not mean there is no risk at all; if you cannot find the relevant information, you should remain vigilant.

2. Premiums will not be paid into a personal account

Premiums should only be paid into the designated account of the insurance company, and you will not be asked to transfer them to an agent’s personal account. If the other party asks you to transfer the premium into a personal account, you should stop the process immediately. 

1. Do not click on links or QR codes indiscriminately 

In particular, links from text messages, WhatsApp or email should be avoided, even if they appear to be official notifications. If you suspect a link may be problematic, you may verify the relevant information via the “Anti-Scam Checker” on the “Scameter” website.

2. Always verify through official channels 

For matters involving policies, charges or account issues, you should make enquiries via the official website or app yourself, rather than following the instructions in the message.

3. Never provide OTPs, passwords or banking details 

Any request to provide such sensitive information immediately should be regarded as high risk.

4. Enable two-factor authentication (2FA) 

Even if data is leaked, this can provide additional protection and reduce the risk of your account being compromised.

5. Check your accounts and policies regularly 

Pay attention to any unexplained charges, unusual logins or unauthorised transactions, as this helps identify issues at an early stage.

6. If you suspect you have fallen victim, preserve evidence immediately 

Including screenshots, phone numbers, chat records and transaction details, to facilitate follow-up and handling.

Fraud tactics are constantly evolving, but they generally rely on creating pressure, building trust, and then inducing users to provide information or make transfers.

Whether it is “policy expiry”, “upcoming charges”, or “assistance to cancel a service”, if immediate action is required and money or personal information is involved, you should stay alert. Before taking action, it is advisable to pause, verify more carefully, and then respond, so as to avoid falling into a scam out of haste.

In addition, it is recommended that you download the “Anti-Scam App” launched by the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force, which can instantly identify suspicious calls, messages and websites, and provide risk alerts. You may also refer to the latest scam tactics via the Anti-Deception Coordination Centre (ADCC), or call the “Anti-Scam Helpline 18222” for immediate enquiries.

When taking out insurance, you should also make sure you use official channels. Do not, out of eagerness to arrange cover, or because of claims such as “there is a problem with the policy”, readily trust unfamiliar calls or messages, so as to avoid falling into scams involving forged policies or impersonation of agents.

10Life is a one-stop insurance platform that provides support from licensed professional advisers, helping users compare different insurance products. The platform also rates products through data analysis, so the key points are clear at a glance. If someone recommends a policy to you, but the terms or returns are not explained very clearly, it is worth checking 10Life first. By making more comparisons and understanding the details before deciding, you can feel more at ease. 

Reference:

• Anti-Deception Coordination Centre (ADCC)
• BOCHK：《Fraud Alert Notice》
• Hong Kong Police Force：《Anti-Scam Information and Scameter Platform》
   

This English version of this article has been generated by machine translation powered by AI. It is provided solely for reference purposes. In the event of any discrepancy or inconsistency between this translation and the original Chinese version, the Chinese version shall prevail.