Mobile Secure Key (MSK)

Download the HSBC Malaysia Mobile Banking app (HSBC MY app) to register for mobile and online banking. During registration, you can securely verify your identify by taking a photo of your identity document (Mykad or passport) and a selfie, following the in-app instructions. For detailed steps and more about registration, see our Register for mobile and online banking page.

Once you've successfully set up the app, a 12-hour cooling-off period will apply for security reasons. You'll need to wait until this period ends before you can make payments. 

We can also issue you a physical security device if you have accessibility needs. Contact us for more help.

Before setting up the HSBC Malaysia app on your new device, deregister the HSBC Malaysia app on your old device.

Download the HSBC Malaysia app on your new device and follow the in-app instructions to set up your HSBC app. During the setup process, you can securely verify your identity by taking a photo of your identity document (MyKad or passport) and a selfie.

For security reasons, a 12-hour cooling-off period applies after setting up on your new device. You’ll need to wait until this period ends before you can make payments transaction on the new device. 

You'll need to generate a logon code every time you log on to HSBC Online Banking.

Step 1: Open the HSBC Malaysia Mobile Banking app (but don't log on). Select 'Generate Security Code' at the bottom of the screen.

Step 2: Select 'Logon code'.

Step 3: Enter your 6-digit PIN or complete your biometric authentication (if you've enabled it) to generate a security code.

Step 4: Your security code will be generated.

Step 5: Enter the code where it's requested on HSBC Online Banking.

When you make a payment or transfer to another person or a company, you need to generate a transaction verification code.

Step 1: Open the HSBC Malaysia Mobile Banking app (but don't log on). Select 'Generate Security Code' at the bottom of the screen.

Step 2: Select ‘Transaction Verification Code’.

Step 3: Enter the last 4 digits of the payee's account number followed by the transfer amount including cents and select 'Authorise'. Refer back to step 3: it shows the account number of the payee is 3456789098 and the transfer amount is RM10.25. In this case, the transaction verification number is 90981025.

Step 4: Enter your 6-digit PIN or complete your biometric authentication (if you've enabled it) to generate a security code.

Step 5: Your security code will be generated.

Step 6: Enter the code where it's requested on HSBC Online Banking.

You'll need to generate a re-authentication code if you make one of these types of transactions or updates:

• Updating your personal details or online banking limits
• FPX and DuitNow Online Banking/Wallets transactions of any amount through online banking
• Payments or transfers exceeding RM10,000 between your own HSBC accounts through online banking
• Payments or transfers to saved payees of any amount through online banking

Step 1: Open the HSBC Malaysia Mobile Banking app (but don't log on). Select 'Generate Security Code' at the bottom of the screen.

Step 2: Select ‘Re-authentication code’.

Step 3: Enter your 6-digit PIN or complete your biometric authentication (if you've enabled it) to generate a security code.

Step 4: Your security code will be generated.

Step 5: Enter the code where it's requested on HSBC Online Banking.

From 17 May 2026, we'll need your biometric or 6-digit PIN authentication for all transactions or transfers made via the HSBC Malaysia app, as part of our fraud countermeasures.

Yes, Mobile Secure Key works offline. Even if you see a 'No connection' prompt, you can still generate a security code by selecting 'Generate security code' at the bottom of the screen. Therefore, even there's no internet connection or Wi-Fi where you are, you can still generate security codes with the HSBC Malaysia app.

You can use your Mobile Secure Key on one device only.

We can deactivate your Mobile Secure Key for you. Contact us immediately for assistance.

Alternatively, if you have set up HSBC Malaysia Mobile Banking app on another device, follow these steps:

1. Log on to HSBC Malaysia Mobile Banking app on another device.
2. Go to 'Profile' and select 'Manage devices'.
3. Remove lost devices from the list.