Important updates and reminders

Get Rate service:

• Gain more control of your foreign exchange payments

Mexico account holders:

• Mandatory payment file email alerts (new)

Recent and upcoming enhancements

HSBC Securities Services:

• An all-new Client View look and feel (new)

European account holders:

• Message Centre service is coming March 2019 (new)

Singapore account holders:

• Get Rate enhancements (new)

NetPlus:

• Learn more about HSBCnet with the Inform zone - coming soon in Canada (recently updated)

New HSBCnet experience:

• A brand new look is coming to your HSBCnet experience

Back to top

System Administrators: when did you last review your HSBCnet users’ access levels?

Last updated: 22 February 2019

To maintain effective control over your company’s online banking activity, it’s important to make sure that only authorised individuals are able to view and transact from your accounts on HSBCnet. As such, we recommend that you periodically review your organisation’s user permissions (also known as ‘entitlements’) and daily limits on HSBCnet and update, as needed.

HSBCnet user permissions:

The table below outlines some common account and user level permissions that we recommend System Administrators review regularly:

Permissions	Use this HSBCnet service to review/update
Account signature groups and limits	Account Management service > Maintain Signature Limits
User signature groups	User Management service > View/Modify User Access Level
Authorisation entitlements	User Management service > View/Modify User Access Level and Modify Multi User Access Level by Account
User status	User Management service > View/Suspend/Reactivate/Delete/Create new user profiles
To suspend your organisation's HSBCnet profile	Submit a request by contacting your HSBC representative

You can also use the Administration Reports service and the Account Services Activity Log obtain reporting information about how your users and accounts are setup on HSBCnet.

In addition to periodic reviews, we strongly recommend that you review your HSBCnet users’ access levels whenever signing authorities are updated in your account operations mandate. Maintained by your local bank, this mandate determines the individuals in your organisation who are authorised to operate your HSBC accounts. Whenever the account mandate is updated, please review your organisation’s HSBCnet setup to determine if access level changes are needed for specific users.

HSBCnet daily transaction limits:

To view daily transaction limits for your organisation’s HSBCnet profile (as established by the bank), go to the ‘Company Management’ service and select ‘Maintain Daily Transaction Limit’.

Note: to avoid possible delays or payment rejections, we recommend that you use the Company Management service for viewing purposes only.

System Administrators (with necessary permissions) can use the Company Management service to reduce your organisation’s HSBCnet daily transaction limit. If you want to increase your limit back up to the original amount, you will need to:

• Contact your HSBC representative to obtain the required documentation;
• Return the signed documentation;
• The daily transaction limit will be increased once your HSBC representative has processed the documentation.

If your organisation’s transaction needs change and you want to adjust your transaction limits, we recommend that you discuss any proposed changes with your HSBC representative before making any updates in HSBCnet. This will help you mitigate internal fraud risks and maintain effective controls within your organisation.

Find out more

If you need assistance to update user access levels on HSBCnet, please contact your local HSBCnet Support Centre.

 

Security Devices: do you know what to do when the battery is low?

Last updated: 31 January 2019

Your HSBCnet Security Device helps provide your organisation with some of the highest levels of online protection. That’s why it’s important you know what to do when your device needs replacing.

Did you know?

Your Security Device battery should last 3-5 years with normal use.

How do I know when the battery is running low?

You will see the following messages appear in the device window:

• bAtt 2: The battery power is starting to run low and you have about 2 months of use remaining.
• bAtt1: The battery is running low and you have about 1 month of power remaining.
• bAtt0: The battery is running very low. There is only minimal power left.

Can I replace the battery myself?

No, the device is security sealed. Any attempts to open the device or replace the battery will prevent  it from working and you will be unable to log on to HSBCnet.

I’m a System Administrator:

We recommend that you regularly check your organisation’s Security Devices by turning them on. If any of your devices display a low battery warning, order replacement devices as soon as possible.

Read the "How do I order additional Security Devices?"guide for step-by-step information on ordering new devices.

I’m an End User:

If your Security Device is displaying one of the low battery messages, contact your System Administrator immediately to place an order for a new device.

Find out more

To learn more about using your Security Device, guides are available in the ‘Security Device’ section of the HSBCnet Help Centre. For further assistance, please contact your local HSBCnet Support Centre.

 

Back to top

Updated Security Measures documentation

Last updated: 22 February 2019

As part of our ongoing commitment to provide you with secure online banking, we’ve recently updated our E-Channels Security Measures requirements. The Security Measures outline the security requirements that must be in place for both HSBC and our customers and you are required under the terms of your contract with us to comply with them at all times.

What's changed?

Some key changes are:

• Dormancy policy regarding profile and user suspension
• Policy on biometric authentication
• Additional controls around Mobile Devices

What do I need to do?

Please ensure that you review the updated document as soon as possible and make sure that your organisation is familiar with the requirements and complies with its contents at all times.

The updated Security Measures are now available in the HSBCnet Help Centre.

Find out more

If you have questions about the new Security Measures, please contact your local HSBCnet Support Centre.

 

Business Email Compromise: A Growing Online Security Threat

Last updated: 9 January 2019

At HSBC, we are committed to online security and helping our customers protect their businesses against fraud and theft. One of the ways we do this is by keeping you informed of emerging trends and threats among cybercriminals and fraudsters.

A business email compromise happens when a fraudster sends an email to your company’s payments team impersonating a contractor, supplier, creditor or even someone in your senior management. For instance, the payments team may receive:

• An email appearing to be from the CEO asking that an urgent payment be made. This is often accompanied by a request for secrecy, directing the recipient not to discuss the matter with anyone else.
• An email or forged letter from a supplier advising that their account numbers have changed, and instructing all future payments be sent to the new account.

In either case, it can be difficult to detect this type of fraud since cybercriminals make the sender’s email address appear to be the same as a known email address. Fraudsters may even hack into the actual email account of a particular user and send the email directly from there.

How You Can Take Action

Start by making your payments team and/or relevant staff aware of this type of fraud so they can be looking out for it. In addition to this:

• Implement payments security that includes a two-step verification process, which involves contacting the sender via an alternative method (e.g., phone, instant message)
• Always use known contact details to follow up
• Don’t reply directly to the email
  
• Don’t use any phone numbers or other contact information included in the email

If you suspect you’ve been a victim of a business email compromise fraud, please contact your local HSBCnet Support Centre immediately. 

To find out more

We have recently added two new videos on HSBCnet that examine the threats of Business Email Compromise and Payment Diversion fraud. These short videos will help you understand what these types of fraud look like and how they can impact your business. More importantly, you will learn what you can do to protect yourself and your business.

Watch the videos today

These short videos are available in the HSBCnet Help Centre, as shown in the image below:

(select image to enlarge)

See what else you can do to protect yourself online with our online security guides and tips.

 

Please be on high alert for fraudulent telephone calls

Last updated: 22 February 2019

Please be aware of fraudulent telephone calls from individuals claiming to represent HSBC. Some HSBCnet users have been asked to input codes into their Security Device during these fraudulent calls which are then used to try to complete transactions.
                                      
HSBC will never contact you and request that you undertake actions using your Security Device (except during the initial setup of your profile). Under no circumstances will HSBC ever ask you to divulge any of your security details over the phone, by text message or via email.

Be cautious and protect yourself
If you ever doubt the authenticity of incoming telephone calls purporting to be from HSBC, you should terminate the call immediately and contact your HSBCnet Support Centre or HSBCnet Representative to verify whether the caller is genuine.

Yellow button warning
The yellow button on your Security Device should only be used to authenticate transactions. We will never ask you to use the yellow button when you log on to HSBCnet (unless you are activating your Security Device for the first time), or ask you to undertake actions using your Security Device over the phone.

For further information on fraud matters and your responsibilities when it comes to online safety please refer to our HSBCnet Online Security page.

 

Back to top

Information on HSBCnet service maintenance windows

Last updated: 22 February 2019

Below is a calendar of our planned maintenance windows for the next three months during which there will be a full HSBCnet maintenance period to accommodate maintenance work.*

At times it is necessary to schedule non-regular maintenance windows to perform special types of maintenance. Notification of both planned and unplanned maintenance windows will also be posted to the HSBCnet Service Updates section.

Full maintenance window begins	Full maintenance window ends
Saturday, 16 March 2019 at 15:00 GMT	Sunday, 17 March 2019 at 04:00 GMT
Saturday, 20 April 2019 at 17:00 GMT	Sunday, 21 April 2019 at 03:00 GMT
Saturday, 18 May 2019 at 17:00 GMT	Sunday, 19 May 2019 at 03:00 GMT

*Maintenance window dates, beginnings and ends may be subject to change (with notice) to accommodate maintenance requirements.

The schedule for upcoming HSBCnet maintenance is also available via the links below:

English | En français | En español | 繁體中文 | 简体中文 | Bahasa Indonesia

Note: in the week prior to a service maintenance period, a Service Update banner confirming the maintenance window will be available post-logon in HSBCnet. Please review this information in advance of any planned maintenance period to confirm the date and time.

Back to top