Internet security

How to protect yourself

From viruses and spyware to phishing and fake websites, learn how criminals operate online – and how you can protect your computer, your cards and your personal information.

Protect your computer

How secure is your computer? Keeping your operating system, browser and security software up to date will protect you against threats from hackers, viruses and spyware.

• Basic maintenance tips
  • Update your operating system. Newer systems like Windows Vista and Mac OSX are more secure.
  • Download security patches and updates. By choosing to receive automatic updates, you’ll have the latest software as soon as it’s available.
  • Disable File and Printer Sharing on your computer to prevent unauthorised access.
  • Use a current web browser – and keep it updated.
  • Set your browser to block pop-ups.
  • Turn your computer off when you’re not using it. If you’re not connected to the internet, you’re not exposed to hackers and viruses.
• Using security software
  • Use the latest anti-virus software to protect your computer against viruses and spam. When you register for Internet Banking, you can download McAfee® anti-virus software for free.
  • Use an anti-spyware program.
  • If your operating system has a built-in firewall, make sure it’s enabled. Or install a separate firewall to block hackers.
  • Use a secure password to stop anyone accessing the files on your computer.
  • Use encryption software to protect wireless devices like your laptop, PDA and mobile phone.

back to top

Stay safe online

As well as protecting your computer, you should take steps to keep your personal information safe when you’re banking, browsing and shopping online – and when you’re using email and Instant Messenger.

• Banking online
  • Log on to Internet Banking every month to check you recognise all the transactions. By monitoring your accounts regularly you’ll spot anything unusual fast.
  • Use Internet Banking to regularly check your personal contact details are correct and kept up to date.
  • Never access your online accounts on public computers in libraries, internet cafes and schools. You can’t guarantee these computers are secure – and you never know who might be looking over your shoulder.
  • Look for https in the web address – and the locked padlock symbol in your browser status bar at the bottom of the page. These tell you the page is secure.
  • Look out for anything unusual or out of place, such as a distorted logo or a slightly different web address like www.hbsc.com or www.offshore.hbs.com

  For more information on internet security, visit Getsafeonline.org.

• Passwords
  • Never tell anyone your password. We will never ask you for your full password.
  • Memorise your password. Don’t write it down or store it on your computer or mobile phone.
  • Change your password and memorable question regularly – at least every 90 days.
  • Use a combination of upper and lower case letters, numbers and symbols.
  • Change your passwords regularly – at least every 90 days.
• Browsing and shopping online

  Browsing the internet

  • Don’t respond to unsolicited requests for personal or account information.
  • Don’t give out personal information to blogs, online forums and other social networking sites.
  • If you see a strange error message, don’t click on it or respond to it – and run a virus check on your computer.
  • Scan your computer files regularly ’ at least once a week.
  • Don’t install software or run programs unless you know they’re from a reputable source.

  Shopping online

  • Choose well-known, reputable sites – and type the web address directly into the address bar.
  • Make sure the site is secure – and check that it will encrypt your debit/credit card details. Look for https in the address and the locked padlock symbol in your browser status bar at the bottom of the page.
  • Add an extra layer of security by registering for a service like MasterCard SecureCode or Verified by Visa .
• Email
  • Add offshore@hsbc.com to your email account address book – this stops HSBC emails being filtered to junk, and lets you know the email is valid.
  • Don’t reply to any email claiming to be from HSBC if it asks for personal information such as passwords or account numbers – we never ask for this information by email.
  • Don’t enter your details if an email claiming to be from HSBC links to the Internet Banking log on page, or any page that ask you to enter details.
  • Don’t open an email from someone you don’t know. Read the subject line carefully – and don’t be taken in by a friendly tone or urgent request.
  • Turn off the preview pane in your email program.
  • Don’t click on a link or attachment in an unrecognised email, particularly if it’s asking you to respond to an urgent request – or if the attached file ends in .exe.
  • Use your junk mail filter – and delete email from unknown sources immediately.
  • Don’t forward chain emails – they can contain harmful viruses.

back to top

Prevent card and identity theft

From skimming your card at an ATM to stealing your mail, there are lots of ways a criminal can get hold of your card details and personal information. So it’s important you know how to stop them.

• Using ATMs
  • Memorise your PIN. Don’t write it down or keep it in your wallet or purse.
  • Cover the ATM keypad when you’re entering your PIN.
  • Try to use ATMs under video surveillance – or ones located inside a bank.
  • Avoid using ATMs at night. This is when most ATM crime takes place.
  • Look out for shoulder surfers – people with binoculars or cameras watching you enter your PIN.
  • Don’t accept offers of ‘help’. If someone approaches you at an ATM, leave immediately.
  • Be suspicious of signs telling you to use a specific ATM – it could be fitted with a skimming device that copies your card details.
  • Report anything unusual or suspicious to your bank.
• Choosing a PIN

  It’s a good idea to change your PIN to a number you’ll remember – but don’t choose a PIN that’s easy to guess. Here are some tips for choosing a new PIN.

  • Make it a memorable date like your wedding anniversary or an historical event.
  • Choose something quirky like the time your postman arrives or when your alarm goes off.
  • Use part of a phone number you know by heart.
  • If you’re better with words, use the number of letters in each word of a phrase you’ll remember. For example, I love my Mum becomes 1423.
• Protecting your mail
  • If your mail is left in a public place, pick it up promptly – don’t leave it out overnight or over the weekend.
  • If you’re living or working abroad, get your mail redirected to a different address or register for online statements.
  • Shred documents like bank statements, bills and application forms for credit cards and loans – anything that includes your name, address and other personal details.
  • Check your monthly bills and statements – and report any transactions you don’t recognise.
  • If you don’t receive a bill or statement when you expect it, contact the organisation straight away.
  • If you move house, tell your bank, card providers and all the other organisations you deal with. And redirect mail from your old address for at least a year.
• Protecting your cards while you’re travelling

  We monitor your HSBC International account to protect you from fraud. And we sometimes carry out security checks on transactions – so your transaction could be declined. We apologise if this causes you any inconvenience.

  Before you leave the country

  • Make sure your bank has your contact details, including your mobile number – so they can get in touch if they suspect fraudulent activity or detect unusual spending patterns on your account.
  • Take several ways to pay – debit card, credit card, cash and travellers cheques.
  • Tell your bank when you’re going abroad – and take their contact details with you.

  While you’re away

  • Protect your card as if it was cash – keep it with you all the time and watch transactions being carried out.
  • If your card is lost or stolen, report it straight away.
  • Be vigilant when you’re using an ATM – and keep your PIN safe.

  When you get home

  • Check your statement carefully. And contact your bank immediately if there are any transactions you don’t recognise.

back to top

Recognise fraud

A padlock symbol in the wrong place. An urgent request to verify your account details. A letter saying you’ve been pre-approved for credit. Here’s how to spot the fake websites, phone scams and illicit offers in the post. And how to protect your card from being used fraudulently.

• Phishing

  If you receive an email asking for personal information or security details, don’t reply or click on any links. It may look genuine, but it is likely to be someone ‘phishing’ for your details by directing you to a fake website.

  How to spot a phishing email

  • They often contain spelling and grammatical errors.
  • They give a fake web or email address like www.hbsc.com or info@hsbc-security.com.
  • They feature a logo that looks distorted.
  • They’re mostly sent in bulk – so the email might not be addressed to you personally.
  • They often ask you to click on a link to confirm or validate your security details – and they threaten to close your account if you don’t.
  • Some ask you to send money to a worthy cause.

  How to spot a fake website

  • The web address isn’t quite right, like www.hbsc.com or www.offshore.hbs.com.
  • The padlock symbol is in the wrong place. It should be in your browser status bar at the bottom of the page, not within the page itself.
  • When you double click on the padlock, you see a warning that the site address doesn’t match the digital security certificate.
  • Your browser tells you that the site is unsafe – or the address bar is highlighted red or yellow.
  • You get an error message asking you to log on again.
  • The phone number on the site doesn’t match the number on your account statements.
  • You can’t link to a home page from the site.

  If you receive a suspicious email or letter, you should report it immediately.

• Phone fraud

  Fraudsters may contact you by telephone too. If you receive a call claiming to be from HSBC:

  • Don’t provide any information about your 6-digit Direct Banking PIN – we never ask for these details over the phone.
  • If you have any doubts, end the call and contact us immediately on the telephone numbers you’re familiar with.
• Mail fraud

  If it sounds too good to be true, it’s probably a scam. Be suspicious of mail that contains any of these offers or requests.

  • Letters from your bank highlighting a problem and asking for your account details.
  • Letters from your bank advising they have money waiting for you and require you to confirm your account/personal details.
  • Pre-approved credit offers that charge a fee to get the card.
  • Job descriptions asking you to pay for more information.
  • Work at home schemes where you have to buy something before you can start.
  • Donation requests for unregistered charities.
  • Sweepstakes and lotteries where you have to pay to receive your prize – particularly ones based in a different country.
• Skimming

  Card fraud can happen in restaurants, shops, petrol stations – anywhere you pay with plastic. Here are some tips to keep your card safe.

  • Don’t let it out of your sight.
  • Don’t let anyone swipe your card a second time through a skimming device.
  • Don’t let someone look over your shoulder when you’re entering your PIN.
  • Don’t leave receipts or carbon copies behind. Take them home and destroy them.

back to top

Know your responsibilities

It’s important to review the terms and conditions of every product and service you use. They contain information on the steps you need to take to keep your personal details safe – and what to do if you suspect that someone is using them fraudulently.

Internet Banking terms and conditions

Visit our Download Centre for more information.