Top of main content

Online Security Information

Online Security

At HSBC, we strive to deliver the most secure and convenient online banking services for our customers. As part of our effort to maintain the highest level of security on our site and for our internet banking users, we ask that you read and be aware of the below information. If you receive a suspicious-looking email/ SMS purporting to be from HSBC or suspicious of information leak, please do not click on any links or do not reply; forward it to, delete it and empty your deleted items.

Latest scams related to COVID-19

Protect yourself online

In our view, there are a few key rules that offer the most protection online for the least amount of effort. By following these rules you will greatly increase your PC's protection, not just when you use our Internet Banking services but when you use the internet generally.

They are not all the measures you can take, but are an excellent start. They are equally applicable to business owners and to private individuals:

What you should always do

Your responsibilities

  • Keep your account details secure, i.e. do not openly disclose them
  • Never write down your security credentials or reveal them to anyone
  • Access your account from private places like home, office
  • Always disconnect from the Internet when finished; never leave a connection on when not using the service
  • Install a personal firewall and virus detection software on personal computers, and update them regularly to ensure protection

How HSBC protects you online

We are constantly reviewing the ways we can help and support you. Our proactive approach includes meeting some of the world's leading security experts to discuss key issues and sponsoring joint initiatives to improve your online security.

We protect you by:

  1. Ensuring your online transactions are safe and secure. We use industry-standard security technology and practices to safeguard your account from any unauthorised access.
  2. Creating secure online sessions. When you log in to internet banking you are said to be in a secure session. You know you are in a secure session if the URL address begins with https:// and a padlock symbol appears at the top of the page as part of the address bar.
  3. Using encryption. Encryption Secure Sockets Layer (SSL) encryption technology is used within your Internet Banking session to encrypt (code) your personal information before it leaves your computer in order to ensure no one else can read it. Depending on your browser setting, a pop-up window will appear to notify you that you will be entering a secured page. At HSBC, we use 256-bit SSL Encryption, which is accepted as the industry standard level. Any email service within Internet Banking is similarly protected with encryption technology (unlike your regular email which is usually not secured).
  4. Using session timeouts. If you forget to log-off after banking online, or your computer remains inactive for a period of time during a session, our system will automatically log you off. Pages viewed during a secure session are not recorded in your PC's temporary files.
  5. Using many layers of security. For obvious reasons we cannot disclose all of them, but the following are typically used: All our operating systems are updated with the latest security patches, Our anti-virus software is kept updated , We use firewalls to prevent unauthorized intrusion.
  6. Using Two Factor Authentication to provide an extra layer of protection. The Secure Key or Security Device is a two-factor authentication will help protect you from internet banking fraud. It is designed to make sure only you can access your personal information. Devices like these are commonly being used for secure transactions all round the world. With this technology you can enjoy far more secure online banking services and it's one of the smallest and simplest to use. Two-factor authentication means you not only need a password or PIN, but you also need a device unique to you.
  7. Using logons and passwords to make sure we're dealing with you. Online access to your account is only possible once you have authenticated yourself using the correct Internet Banking ID and security details. For this reason, it is vital that you do not share your password and do not use the same password for other services (e.g., Yahoo, Hotmail, etc.)
  8. Having automatic lockouts. After 3 incorrect attempts to logon, we disable online access to your account. To re-activate your account, you should contact our Contact centers described above.

Security alert

We would like to bring your attention to sites and emails purporting to be from HSBC, whether in Vietnam or elsewhere. These sites and emails aim to solicit sensitive personal information, for example, username, password, PIN, account numbers, credit card numbers, etc. Once obtained, the fraudulent party can gain access to the user’s account, channel money to a third party, or impersonate the user, to name a few.