Email scams and phishing

You may have seen or heard of some recent emails or phone calls that may appear like official requests for your personal or financial details especially your internet banking usernames, passwords and security codes.

Such emails (called 'Phishing' ) and other forms of requests are fraudulent in nature and used for the purpose of obtaining your personal, financial and confidential information. Please exercise caution at all times and do not respond to such requests.

HSBC Bank Malaysia Berhad does not and will never authorise any of its staff to ask customers for sensitive security details, such as User ID, passwords or online security codes or otherwise ask you to validate your account numbers by email, phone or through any other channels. If you receive any such requests claiming to be from HSBC, you are advised not to act on such request. HSBC will not be liable for any loss, financial or otherwise, should you act on such request.

If you are concerned that you may have revealed your security or personal details to fraudsters, please immediately contact Internet Banking Helpdesk at +603-8321 5400.

This is a sample of how a suspicious email may look like

The hyperlink, "HSBC BIB Form" embedded directs the customer to a spoof HSBC website which looks like this

Learn more

What is phishing?
Phishing is an attempt by fraudsters to 'fish' for personal information such as the security details you use for banking. These emails may come from any source but is made to appear as if it came from your bank or an organisation you have registered with. The email will normally ask you to click on a link and/or to confirm your username or password - and through such responses they obtain your details.

How do they know where I bank?
They don't. They send out as many emails as they can and hope that they reach some customers.

The email says it's from HSBC Bank Malaysia Berhad - is this possible?
If we do contact you by email from within our Internet Banking platform, it is to advise you of service-related developments. We will never ask you to enter or confirm your security or personal details.

What should I do if I get a suspicious looking email?
If in doubt, delete it without opening it. You should apply this precautionary measure to all unexpected emails with links or attachments.

What should I do if I believe someone might have obtained my security or personal details?
Call us immediately at anytime at our Internet Banking Helpdesk 1-300-88-1388 (local) or +603-8321 5400 (from overseas).

What makes my transactions on HSBC's Internet Banking safe?
Each transaction on our Internet Banking platform is protected by 'strong grade' encryption that keeps your information secure.

On top of this - the Security Device that is provided to all HSBC Internet Banking users gives you a 2nd level of security. Apart from logging in with your User ID and password, a security code from the Security Device is needed. The Security Device generates a unique and time sensitive security code each time you log in to HSBC's Internet Banking. Since the Security Device is to be kept by you at all times and the codes change constantly - only you will be able to access your account!

Click here to learn more about Online Security.

Not a customer of HSBC yet? Find out how secure and comprehensive our Personal and Business Internet Banking service is.

Personal          call 1-300-88-1388 or +603-8321 5400 (from overseas)
Business         call 1-800-88-3898