#internet brokers

The post Hong Kong gives crypto platforms one year to ditch one-time passwords or cover user losses appeared on BitcoinEthereumNews.com. Hong Kong crypto platforms have until July 8, 2027, to ditch one-time passwords for client logins and device registration under new security rules. By then, licensed virtual asset service providers and internet brokers must use authentication that can resist phishing for client logins and the registration or binding of devices, according to a July 9 circular. The regulator said one-time passwords, or OTPs, do not meet that standard and should not be used for those two processes. The rule applies only when clients log in or link a new device, leaving other OTP uses unchanged. Firms do not have to make existing clients rebind devices that are already linked. Large internet brokers are expected to deploy the stronger methods immediately, while the broader group has a 12-month implementation period. Related Reading Hong Kong approves 4 new crypto trading

The post Hong Kong Crypto Security Tightens With OTP Ban appeared on BitcoinEthereumNews.com. Hong Kong’s push to strengthen crypto security just took a concrete and consequential step. The city’s Securities and Futures Commission has issued a circular banning one-time password logins across all crypto trading platforms and internet brokers — a direct response to a phishing epidemic that is quietly draining user accounts and overwhelming the region’s cybersecurity infrastructure. Key takeaways Hong Kong’s SFC has banned SMS, email, and app-based OTP logins for crypto platforms and internet brokers, requiring passkeys or other phishing-resistant methods instead. Operators have a 12-month deadline to comply; large brokers must act immediately. Hong Kong recorded 15,877 cybersecurity incidents in 2025 — a 27% jump from the prior year — with phishing accounting for 57% of cases. Senior management at licensed platforms now face direct personal liability for client losses tied to weak authen