Online Security

As a bank we are used to thinking about security. The growth of the Internet has offered greater flexibility for us all, but it also brings new risks that must be guarded against. At HSBC, we use industry standard security technology and practices, focusing on three key areas – privacy, technology and identification to safeguard your account from any unauthorised access.

Discover what HSBC does to protect your Online Internet Banking and what steps you can personally take to improve your Online security.

Know more about Online Security

• Types of Fraud
• Steps HSBC has taken for Online Security
• Your role in Online Security
• Tips for using Public Computers

If you suspect someone has access to your Internet Banking details, logon to Internet Banking to change your Password and immediately call us on our Phone Banking Numbers. HSBC's Phone Banking numbers are accessible 24 hours a day, 7 days a week*.

Multi-layer logon verification

Your financial information is protected by a sophisticated combination of a unique Username and Password, and a one-time Security Code generated by your Online Security Device.

Transaction verification

When you transfer money or pay bills online, HSBC prompts you for the Security Code generated by your Online Security Device. This ensures that only you can authorise payment and transfer requests.

128-bit Secure Socket Layer (SSL) Encryption

HSBC uses 128 bit Secure Socket Layer (SSL) Encryption for information transmitted during an Internet Banking session, which is accepted as the industry standard for encryption.

Automatic 'Time-out' feature

As a security measure, your Internet Banking session will automatically shut-down or time-out, out after a period of not being used. You should always close your Internet Banking session when you have finished.

Top

You also have a role to play in Online Security

Adopt the following measures to ensure Internet Banking security:

• Ensure your computer is protected with the latest anti-virus and firewall protection software at all times. Download updates regularly to ensure you have the latest protection
• Choose a Password that is memorable to you but not easy to guess by someone else. Passwords that contain combinations of alpha and numeric characters are generally harder to guess (e.g. a7g3cy91)
• Do not choose a Password that you use for other services. Your Password should be unique to Internet Banking
• Change your Internet Banking Password on a regular basis
• Never disclose your Internet Banking Password to anyone. A member of HSBC will never ask you for your Password
• Do not write your Internet Banking Username together with your Password. Do not write your Password in a recognizable format and never leave your logon details with your Online Security Device
• Disable functionality on your computer or browsers that remembers logon details
• Keep your system and web browser updated. Manufacturers regularly release security patches when weaknesses are discovered in their systems and browsers. Check with your software provider for these updates on a regular basis.
• Check the padlock symbol and site certificate. Double-click the padlock symbol at the bottom of your browser when you log-in to HSBC Online Banking to ensure the site certificate belongs to HSBC. This will ensure you're not being duped into entering your details on a 'fake' site.
• Check your accounts regularly. If in doubt about any transactions, note the details and call us.
• Always log-out after using Online Banking. Just select the log-out button and never leave your PC unattended while you're logged in to the service.

Top

Tips for using Public Computers:

• Avoid the use of public computers to do your banking, including those at libraries, internet cafes and schools.
• Log out if you leave the computer, even  if it is just for a moment. If possible, do not leave the computer unattended while you are still logged in.
• Delete your browsing history before  you log out of the computer: Internet browsers store information about your passwords and the pages that you visit. Go to the tools menu of the internet browser and select options or internet options. Make sure that the browser has any auto complete function turned off, delete any cookies, and clear the history.
• Dont type in sensitive information: Even if you take the precautions listed above, the public computer may have malicious software called a keystroke logger installed on it. These can steal your password, credit card number and bank details. Avoid doing financial transactions that could reveal sensitive information.

Top

Find out more about how HSBC ensures Internet Banking security.