HSBC Secure Logon

You can now log on to online banking quickly and safely using a QR code and matching a unique 6-digit number – no passwords needed.

What is HSBC Secure Logon?

HSBC Secure Logon enables you to bank online safely and flexibly. It also helps protect you from scams and fraud by using your trusted device to verify your logon.

You can scan a QR code and match a unique 6-digit number shown in the HSBC Malaysia Mobile Banking app (HSBC Malaysia app) on your device. This helps you log on securely and confirm you’re on the genuine HSBC site.

You can choose from new logon options as well as your date of birth, including:

Your username
Your card number (debit card/-i or credit card/-i), or
Your account number

These new logon options will also be available when you use FPX (online payment) or DOBW (Duitnow Online Banking/Wallet) to access banking services.

Make sure your HSBC Malaysia app is updated to the latest version, and enable push notifications for a smoother, more secure banking experience.

Secure authentication

Verify your logon using your trusted mobile device and a dynamic QR code. You’ll stay in control and be alerted whenever there’s a new logon attempt. Find out more.

Fraud prevention

This feature helps protect you from phishing and fraud by matching a unique 6-digit number between your browser and your trusted device. It also helps you confirm you’re on a genuine HSBC website. Find out more about phishing.

More ways to log on

Choose from different logon options to suit your situation and help us verify your identity securely. More ways to log on mean greater flexibility.

How HSBC Secure Logon works on your desktop browser

Follow the instructions below and log on to HSBC Malaysia Online Banking in four easy steps.

Step 1

From the options displayed, select your chosen logon method to log on to HSBC Malaysia Online Banking.

Step 2

You'll be prompted to enter selected personal details, followed by your date of birth.

Step 3

You’ll see a unique 6-digit number generated on screen.

Step 4

Open the HSBC Malaysia app to verify the 6-digit number and your logon details. Then, scan the QR code using your registered mobile device.

How HSBC Secure Logon works on your registered mobile device

If you're logging on to HSBC Online Banking via your mobile device, follow the four steps below to log on.

Step 1

Open the mobile browser on your registered mobile device. From the options displayed, select your chosen logon method to log on to HSBC Malaysia Online Banking.

Step 2

You will be prompted to enter selected personal details, followed by your date of birth.

Step 3

You’ll see a unique 6-digit number generated. Tap 'Launch mobile app' to proceed.

Step 4

Verify your logon details on the browser and check that the 6-digit number displayed on the HSBC Malaysia app matches the one displayed in your browser. Then, select 'Continue'.

Step 5

Tap 'Approve' and return to your browser to finish logging on to HSBC Malaysia Online Banking.

How to make sure you're logging on to the genuine HSBC Online Banking service

Check that the 6-digit unique number displayed on your desktop or mobile browser and on the HSBC Malaysia app are the same.
Make sure the 3 browser logon information details ('Browser', 'Location' and 'Date/time') are accurate on the HSBC Malaysia app.
If either the 6-digit unique number does not match or the browser access information is not accurate, select 'Reject' to discontinue the logon journey and report this incident immediately to HSBC Malaysia.

Frequently asked questions (FAQs)

Please ensure your device clock is synced with the server under settings.

Syncing your device's date and time is important for QR code log on because the security process relies on accurate timestamps, in real time. If your device clock is not synced, the system may not be able to capture your QR code accurately.

How to sync the date and time on your device:

1.Change the date and time on your desktop system.

On Windows: Go to settings > Time & language > Date & tme, and turn on 'Synchronise your clock'
On Mac: Go to System settings > General > Date & time, and turn on 'Set time and date automatically'. Ensure the toggle for 'Synchronise time with Apple time server' is on.

2.Change the date and time on your mobile device.

On Android: Go to Settings > Date & Time, and turn on the toggle for 'Set time and time zone automatically'
On iPhone: Go to Settings > General > Date & Time, and turn on the toggle for 'Set automatically'

3.Check your internet connection.

Your desktop and mobile device need a stable connection so they can update the correct time. You can restart your Wi-Fi router to refresh the connection.

First, select 'Reject' on your HSBC Malaysia App to discontinue the log on journey. Then, report this incident to us via HSBC Contact Centre or visit our Branch nearest to you.

You need to have your device registered with HSBC MY Mobile App. Otherwise, you won’t be able to use HSBC Secure Logon.

You may continue to use the regular log on method. Generate a 6-digit unique log on code from your Physical Security Device (PSK) to access online banking. Learn more.

Download the HSBC Malaysia app

Start using HSBC Secure Logon now

HSBC Secure Logon is available now via the HSBC Malaysia app. For your security, please make sure you always install the latest version of the app from the App Store or Google Play.

Download the app

Ways to bank

Discover all the ways you can bank with us.

Mobile banking

Manage your money on the go with the HSBC Malaysia Mobile Banking app.

Online banking

Start banking online with us today to securely manage your accounts anytime, anywhere.