Stay safe when banking on the go

Last updated: 1 June 2020

HSBCnet incorporates specific security measures to protect your information and safeguard your accounts. But there are things you can do to protect yourself even further.

  • Don’t store your HSBCnet log on or profile details on your mobile device.
  • Make sure that your mobile device is updated with the latest manufacturer updates and that you’re also using updated anti-virus and anti-spyware software.
  • Don’t leave your mobile device unattended after logging on to HSBCnet Mobile. When you’re finished using HSBCnet, make sure to log off of HSBCnet and close the app.
  • When connecting to a wireless network using your mobile device, use only trusted networks or service providers and enable additional security protection, such as Wi-Fi Protected Access (WPS), if possible.
  • Avoid using an unlocked device or a device with any unauthorised modifications when using HSBCnet Mobile. Don’t install applications on your mobile device from unknown sources.
  • Don’t share your mobile device with others. Enable automatic passcode/PIN lock features on your devices to prevent other people from using it if stolen.
  • Use a strong PIN that a hacker can’t easily guess or deduce and change it regularly. You can update your HSBCnet security PIN in the HSBCnet Mobile app settings at any time.

Find out more

We recommend that you regularly review the E-Channels Security Measures and make sure that you’re familiar with the requirements and comply with its contents at all times.

If you need assistance with HSBCnet Mobile, contact your local HSBCnet Support Centre.

Keep your personal details updated for enhanced security and service

Last updated: 25 November 2019

Maintaining up-to-date and accurate information on HSBCnet not only allows us to serve you better, it can also help prevent online banking fraud. When you contact us, HSBCnet support staff may use the information from your HSBCnet profile to verify your identity.

We need your help

To help us correctly identify you, we need you to make sure that your first and last name, birth date, and contact details are accurate and up-to-date in HSBCnet. Whenever your personal details change, make sure that you update your HSBCnet profile immediately.

System Administrators:

Please regularly review your HSBCnet users’ details to make sure that they are correct, complete and unabbreviated, and that they’re updated whenever there is a change.

Review your profile details today

To update your profile information, select the ‘Edit my profile’ option from the dropdown menu next to your name at the top of HSBCnet.

HSBCnet main menu screenshot

(select image to enlarge)

System Administrators: reminder to review your HSBCnet users’ access levels

Last updated: 8 October 2019

To maintain effective control over your organisation’s online banking activity, it’s important to make sure that only authorised individuals are able to view and transact from your accounts on HSBCnet. As such, we recommend that you periodically review your organisation’s user permissions and daily limits on HSBCnet, and make updates as needed.

How do I update HSBCnet permissions for my users?

We recommend that you regularly review the following frequently used permissions and update, as needed:

Type of permission

Where to go to review/update

Account signature groups and limits

Account Management > Maintain Signature Limits

User signature groups

User Management > View/Modify User Access Level

Authorisation entitlements

User Management > View/Modify User Access Level and Modify Multi User Access Level by Account

User status

User Management > View/Suspend/Reactivate/ Delete/Create new user profiles

Suspension of your organisation’s HSBCnet profile

Contact your HSBC representative

In addition to periodic reviews, we strongly recommend that you review your HSBCnet users’ access levels whenever your organisation updates the signing authorities in your account operations mandate. Maintained by your local bank, the mandate determines the individuals in your organisation who are authorised to operate your HSBC accounts. Whenever the account mandate is updated, please review your organisation’s HSBCnet setup to determine if access level changes are needed for specific users.

How do I check my organisation’s transaction limits?

To view the Daily transaction limits in effect for your organisation, use the ‘Maintain Daily Transaction Limit’ feature in HSBCnet’s Company Management service.

Please note, to avoid possible delays or payment rejections, we recommend that you to use this service for limit viewing purposes only.

Your organisation’s Daily transaction limits cannot be increased in HSBCnet and if they are reduced, proper documentation must be submitted separately to your HSBC representative to increase the limit to its previous amount.

HSBCnet’s Administration Reports service and the Account Services Activity Log can also help you identify how your users and accounts are set up.

Find out more

To learn more about managing permissions in HSBCnet, review the guides in the ‘User management’ section of the HSBCnet Help Centre.

If you need further assistance updating user access levels on HSBCnet, please contact your local HSBCnet Support Centre or HSBC representative.

Protect yourself online

Learn about our security tips

Phone scams: do you know who’s on the other end of the phone?

Last updated: 2 July 2020

Phone calls can be used maliciously to facilitate theft and fraud. This type of fraud is known as ‘vishing’. Be vigilant. Thieves now have various clever ways to steal information for fraudulent purposes.

How does vishing work?

Vishing (or voice phishing) happens when a fraudster calls to 'fish' for personal information over the phone. Fraudsters will often create a sense of panic to get a quick response over the phone. Targeting organisations, they may pretend to be a senior colleague or a customer in a rush or requiring urgent assistance.

Fraudsters may also call you pretending to be from HSBC. They may try to direct you to perform actions which would enable unauthorised payments to be sent to the criminal. This could include asking for security codes.

HSBC will never request you to provide the one-time security code from your Security Device or mobile device over the phone.

We’ll also never ask you to undertake actions using your Security Device (except during the initial setup of your profile). This is not information that HSBC requires to verify any activity.

Be cautious and protect yourself

If you ever doubt the authenticity of incoming telephone calls purporting to be from HSBC, you should terminate the call immediately and contact your HSBCnet Support Centre or HSBC representative to verify whether the caller is genuine.

Using your Security Device’s yellow button

The yellow button on your Security Device should only be used to authenticate transactions. We will never ask you to use the yellow button when you log on to HSBCnet (unless you are activating your Security Device for the first time).

Find out more

Additional information about vishing and other types of fraud is available in our Protecting your business page.

If you suspect you have been the victim of fraud, contact your HSBC representative immediately.

Security tip: Holiday fraud watch

Last updated: 25 November 2019

During the upcoming holiday period, fraudulent activity across electronic bank delivery channels, such as HSBCnet, may increase as online criminals attempt to exploit extended holiday periods within corporations and their banks.

At this time, please be extra vigilant in your online activity to make sure that you remain protected. If you experience any of the following events, a fraudulent attack may be underway:

  • When logging on to HSBCnet, you are presented with a message saying that HSBCnet is unavailable AFTER you have entered your username and security credentials. Alternately, the error message might give a set time that HSBCnet will return e.g. 15 minutes.
  • You are presented with a security check/verification screen that requires you to wait.
  • You are prompted repeatedly to re-enter your username, password or security code.
  • You see any screens that you think are unusual or are missing information.

If you experience any of these events, please contact your local HSBCnet support team immediately via the Customer Support link in the HSBCnet log on box.

Important reminder:

HSBC will never request information that could be used to make a payment (such as token details other than the serial number on the back, account numbers, passwords, etc). Also, under no circumstances will HSBC ever ask you to ask you to divulge any of your security details over the phone, by text message or via email.

In addition, please be wary of any requests from your beneficiaries (via email, phone or otherwise) to change their banking details. The request may be an attempt to divert payment funds to a fraudulent account. For more information on this type of fraud, please review the information available here.

For further information on how to protect yourself from fraudulent attacks, please select the Security Alerts and Tips link in the HSBCnet log on box.

Information on HSBCnet service maintenance windows

Last updated: 23 November 2020

calendar_iconBelow is a calendar of our planned maintenance windows for the next three months during which there will be a full HSBCnet maintenance period to accommodate maintenance work.*

At times, it is necessary to schedule non-regular maintenance windows to perform special types of maintenance. We will provide notification of both planned and unplanned maintenance windows in the HSBCnet News (Service Updates) section of the HSBCnet home page.

Full maintenance window begins
Full maintenance window ends
Saturday, 5 December 2020 at 15:00 GMT
Sunday, 6 December 2020 at 04:00 GMT
Saturday, 23 January 2021 at 18:00 GMT
Sunday, 24 January 2021 at 04:00 GMT
Saturday, 20 February 2021 at 18:00 GMT
Sunday, 21 February 2021 at 04:00 GMT

*Maintenance window dates, beginnings and ends may be subject to change (with notice) to accommodate maintenance requirements.

The schedule for upcoming HSBCnet maintenance is also available via the links below:

English | Deutsche | En français | En español | 繁體中文 | 简体中文 | Bahasa Indonesia

Note: in the week prior to a service maintenance period, a notification confirming the maintenance window will be available post-logon in HSBCnet. Please review this information in advance of any planned maintenance period to confirm the date and time.