Protect yourself from fraud and scams

The best way to defend yourself against fraud and scams is by protecting your personal information, safeguarding your devices and knowing how to spot a criminal. We have plenty of simple actions you can take to help protect you, your family and your finances.

Remember:

Watch out for scammers asking you to generate a one-time passcode (OTP). If you share it, they could access your bank accounts and money.

Fraudsters might pretend to be from your bank and claim you need to give them the code to fix suspicious activity.

If someone contacts you and asks you to generate an OTP, it's probably a scam. The name and number on your caller ID may look genuine, but fraudsters can 'spoof' these details. Hang up and call the bank on a trusted number to verify the request.

To protect yourself:

• Always follow the instructions in the OTP message - they will confirm whether your OTP is to be read out over the phone, or only to be entered online
• Don't be pressured or panicked into acting quickly - this is likely to be a scam
• If you're suspicious, hang up and call us on a trusted number - you can find this on the back of your card or bank statement

Our mobile banking app is an easy and secure way to manage your money on the move. But there are some things you should do to protect yourself from the threat of fraud:

• Only download apps from your official app store
• Use Face ID, Touch ID or Fingerprint ID to log on to the app and never share your log on details
• Don’t do your banking when connected to unsecure, public wi-fi networks
• Keep your phone and apps updated to the latest software version
• Turn on transaction alerts – this will help you spot any money leaving your account unexpectedly

Take care when managing your accounts online.

Remember:

• Never share your log on details with anyone
• Don’t click on links to online banking (a link you receive in an email, for example). This could be fake. Access online banking by typing the URL directly into the address bar or using a bookmark you've saved previously
• Check web addresses for small character changes or missing security credentials before logging on
• Don’t let anyone control your computer remotely, unless you have verified their identity with someone you trust 
• Don't enter sensitive details or do your banking when connected to unsecure, public wi-fi networks

Here are some tips for keeping your card and card details secure.

• Sign the back of your card and pick a PIN that's difficult to guess
• If you get a fraud alert from us, reply straight away. Not sure if it's really HSBC? Call us using the number on your statement or the back of your card
• Don’t lend your card to someone else or leave it unattended
• Know who you’re dealing with before making a payment or purchase
• Make sure websites are secure (and genuine) before entering any card details. For added security, say no to the site storing your card information
• Let us know right away if your card is lost or stolen, or you spot unauthorized activity

It's good to be on your guard when using an ATM, whether you're withdrawing cash or just checking your balance.

Here are a few things to remember:

• Location, location, location - choose an ATM that's visible, well-lit and has cameras
• Assess your surroundings - check who is nearby
• Shield your PIN - cover the keypad while you enter the number
• Focus - don't let anyone distract you from your transaction 
• Do it in daylight - Use ATMs during the day when possible

If you receive paper statements or other mail that shows your personal or card details, here are some things to keep in mind:

• Don’t leave incoming or outgoing mail sitting in your mailbox where it could be stolen
• Use secure ways to send mail, like dropping it off at your local Post Office or workplace, or by handing it to your letter carrier
• Sign up for USPS Informed Delivery and get daily email updates on the mail and packages that are due to arrive
• If you're going to be away for a while, ask your Post Office to pause delivery of your mail until you're back
• If you notice anything suspicious about your letter carrier, or see someone following them, call 911
• If your mail is stolen, report it to the Postal Inspection Service online or at 877-876-2455.

You can also report concerns about the behaviour of a Postal Service worker, including attempts to corrupt a Postal Service employee, to the United States Postal Service OIG at 1-888-877-7644 or www.uspsoig.gov.

It’s important to protect your phone and phone number to reduce the chance of criminals calling you, accessing your device, or intercepting your calls or texts.

To protect yourself:

• Use your phone carrier's SIM card security feature to avoid SIM card porting without your authorization
• Enable Face ID, Fingerprint ID or Touch ID on your phone
• Protect your Voice Over Internet Phone (VOIP) lines by blocking phone forwarding of SMS messages
• Look out for calls that ask you to dial a two-digit code and the "#" or "*" key (for example, *79 or 72#) and then an 800 number - this is a call-forwarding scam
• Don't always trust Caller ID, criminals can impersonate valid phone numbers and names when they call you
• Block and report suspicious callers

If you think someone has accessed your account or you've been targeted in a scam, let us know right away.