You should keep your user ID, user password and one-time password generated by your assigned token confidential and should not disclose them to any unauthorised third parties. HKEX will never ask users for such information by email, phone or in person.
You have to ensure that you are connected to a valid ESS website before key in user ID, user password and one-time password. Users should access their accounts by keying in the website address at the address bar of the browser, or bookmark the website and use that function to access ESS (
please refer to “Access to e-Submission System (ESS) ”). In addition, please note that HKEX will never ask users to access the ESS website by clicking hyperlinks in an email.