Mobile Secure Key

Register the HSBC Malaysia App on your mobile device and set up MSK. For detailed steps and more about MSK, check out Getting Started with HSBC Digital Banking (PDF).

There's a 12-hour cooling-off period for setting up Mobile Secure Key.

We can also issue you a physical security device if you have accessibility needs. Contact us for further assistance.

Deregister the HSBC Malaysia App on your old device before logging on from your new device. There's a 12-hour cooling-off period for setting up MSK on a new device.

You'll need to generate a logon code every time you log on to HSBC Online Banking.

Step 1: Open the HSBC Malaysia Mobile Banking app (but don't log on). Select 'Generate Security Code' at the bottom of the screen.

Step 2: Select 'Logon code'.

Step 3: Enter your 6-digit PIN or complete your biometric authentication (if you've enabled it) to generate a security code.

Step 4: Your security code will be generated.

Step 5: Enter the code where it's requested on HSBC Online Banking.

When you make a payment or transfer to another person or a company, you need to generate a transaction verification code.

Step 1: Open the HSBC Malaysia Mobile Banking app (but don't log on). Select 'Generate Security Code' at the bottom of the screen.

Step 2: Select ‘Transaction Verification Code’.

Step 3: Enter the last 4 digits of the payee's account number followed by the transfer amount including cents and select 'Authorise'. Refer back to step 3: it shows the account number of the payee is 3456789098 and the transfer amount is RM10.25. In this case, the transaction verification number is 90981025.

Step 4: Enter your 6-digit PIN or complete your biometric authentication (if you've enabled it) to generate a security code.

Step 5: Your security code will be generated.

Step 6: Enter the code where it's requested on HSBC Online Banking.

You'll need to generate a re-authentication code if you make one of these types of transactions or updates:

• Updating your personal details or online banking limits
• FPX and DuitNow Online Banking/Wallets transactions of any amount through online banking
• Payments or transfers exceeding RM10,000 between your own HSBC accounts through online banking
• Payments or transfers to saved payees of any amount through online banking

Step 1: Open the HSBC Malaysia Mobile Banking app (but don't log on). Select 'Generate Security Code' at the bottom of the screen.

Step 2: Select ‘Re-authentication code’.

Step 3: Enter your 6-digit PIN or complete your biometric authentication (if you've enabled it) to generate a security code.

Step 4: Your security code will be generated.

Step 5: Enter the code where it's requested on HSBC Online Banking.

From 17 May 2026, we'll need your biometric or 6-digit PIN authentication for all transactions or transfers made via the HSBC Malaysia app, as part of our fraud countermeasures.

Yes, Mobile Secure Key works offline. Even if you see a 'No connection' prompt, you can still generate a security code by selecting 'Generate security code' at the bottom of the screen. Therefore, even there's no internet connection or Wi-Fi where you are, you can still generate security codes with the HSBC Malaysia app.

You can use your Mobile Secure Key on one device only.

We can deactivate your Mobile Secure Key for you. Contact us immediately for assistance.

Alternatively, if you have set up HSBC Malaysia Mobile Banking app on another device, follow these steps:

1. Log on to HSBC Malaysia Mobile Banking app on another device.
2. Go to 'Profile' and select 'Manage devices'.
3. Remove lost devices from the list.