How to keep your online banking experience safe and secure

Accessing your account

• Avoid accessing your bank account with public computers
  
• Never share your personal security details (e.g. account number,PIN or security code) with anyone
• If you find any unusual pop-ups or your computer starts running unusually slow, please do not enter in your personal details and/or credit card information.
• Watch out for money-laundering scams. Be wary of any “business opportunity” that involves receiving or holding money for strangers
• Only use secure and trusted wireless networks. Add a password for your own home Wi-Fi network

• We will never ask you to confirm or provide us with any personal data by replying to an email¹
• We will not ask you to provide excessive information such as name, date of birth, Malaysia Identity Card (ID) number/passport number, credit card number, CVV code and the expiry date

Monitoring your account

• Check statements, emails and SMS notifications as soon as you receive them. If you spot any unusual transactions, report them to the bank immediately. Use HSBC Online Banking or the HSBC Malaysia Mobile Banking app to check transactions on your account more frequently.
• Always keep the electronic receipt for fund transfers and bill payment transactions to help you verify transactions.

Protecting your pin

• Never tell your PIN to anyone, even if they claim to be from the bank or the police
• Memorise your PIN and never write it down
• Choose a PIN that’s hard to guess
• Use different PINs for different websites and channels (ATM, Phone Banking, Mobile Banking)
• Remember that our customer service officer will never ask you to say your 6-digit Telebanking Personal Identification Number (TPIN) out loud. If you need to use your TPIN, you will only have enter it on the keypad of your phone

1. Dynamic QR code and matching unique 6-digit number
   Log on to HSBC Online Banking by scanning the dynamic QR code on your browser with your registered device and/or matching it with a unique 6-digit number using HSBC Malaysia Mobile Banking app (HSBC Malaysia app).
   
   
2. Transaction verification
   
   In line with regulatory measures to counter fraud, authentication is required for all third-party transactions made via HSBC Malaysia Online Banking and HSBC Malaysia Mobile Banking app.
   
   For transactions made via HSBC Malaysia Online Banking, you'll need to generate a security code using your Mobile Secure Key.
   
   For transactions made via the HSBC Malaysia app, your Biometric ID or 6-digit PIN authentication will be required.
   
3. SSL Encryption
   HSBC uses 128-bit SSL Encryption.
   
   
4. Automatic 'Time-out' feature
   You should always log out and close your browser window when you have finished your online banking session,especially when you are in public. If you forget to do that, we will automatically log you out after a period of inactivity. Leaving your computer unattended while you are logged on could cause your personal data and sensitive information to be leaked, which could lead to fraud attacks against you.
   
   
5. SMS/email notifications
   The SMS or email transaction notification will be sent to you to help you verify the transaction date, amount, and partial beneficiary account number. Call HSBC immediately if you receive an alert for any transaction you don't recognise.

¹The only exception is when responding to your enquiry, a customer service officer might contact you via email with a request for some personal information is required. In such a case, please note that the email will be sent through and stored in an encrypted form in our secured online banking platform (HSBC Online Banking) and you will need to enter your username and password to access such emails.