6.7 Security 香港证监会禁用OTP，要求加密平台采用更强身份验证，大型券商需立即执行，其他机构12个月内合规，高管将被追责。
香港证券及期货事务监察委员会（SFC）已要求虚拟资产交易平台和线上券商停止使用一次性密码（OTP）进行客户登录和设备绑定，原因是近期网络钓鱼和冒充攻击事件激增。SFC建议采用更强的身份验证方式，如passkey、加密注册设备和硬件安全密钥，这些方式被认为更能抵御钓鱼攻击。大型互联网券商需立即执行，其他机构则有12个月的合规期限。 此外，SFC还要求平台加强对异常登录、交易和提币的监控，若发生安全事件需及时通知客户。对于因内部控制缺陷导致的损失，高级管理层将被追究个人责任。 SFC此举旨在为加密行业网络安全树立新标准，应对日益增长的网络欺诈和诈骗风险。
Hong Kong SFC forces crypto platforms to ditch SMS authentication
Crypto Platforms in Hong Kong Face 12-Month Deadline for New Anti-Phishing Requirements
Hong Kong’s SFC Tightens Crypto Security as Phishing Threats Grow
Hong Kong regulator orders new anti-phishing measures for crypto platforms
Hong Kong Tightens Crypto Login Rules with Phishing-resistant Security Standards
Hong Kong SFC Orders Crypto Platforms to End OTP Logins
Hong Kong Enforces Stricter Cybersecurity Measures for Crypto Platforms
Strict new authentication rules for Hong Kong crypto platforms! What changes for investors?
Hong Kong regulator orders crypto platforms to implement anti-phishing measures within 12 months
Hong Kong SFC Bans One-Time Passwords For Crypto Platforms To Combat Rising Phishing Threats
Hong Kong SFC requires brokers and virtual asset platforms to disable one-time passwords to prevent phishing scams
