FAQ: Security

How does HSBC ensure Internet Banking security?

HSBC follows industry best practice to ensure our Internet Banking is safe and secure. These include:

• Secure 128-bit encryption (the highest available) for all information transmitted during an Internet Banking session.
• Each Internet Banking User has a unique Username and Password, and is issued with an Online Security Device - which generates a constantly changing Security Code that must be input every time you logon to Internet Banking and to transfer money to third party accounts.
• An automatic time-out feature that will end your Internet Banking session after a period of not being used.

What is my role in security?

You also have a role to play in security. You should adopt the following measures to ensure your Internet Banking is safe and secure:

• Ensure your computer is protected with the latest anti-virus and firewall protection software at all times. Download updates regularly to ensure you have the latest protection.
• Choose a Password that is memorable to you but not easy to guess by someone else. Passwords that contain combinations of alpha and numeric characters are generally harder to guess (e.g. a7g3cy91).
• Do not choose a Password that you use for other services. Your Password should be unique to Internet Banking.
• Change your Internet Banking Password on a regular basis.
• Never disclose your Internet Banking Password to anyone. A member of HSBC will never ask you for your Password.
• Do not write your Internet Banking Username together with your Password. Do not write your Password in a recognizable format and never leave your logon details with your Online Security Device.
• Disable functionality on your computer or browsers that remembers logon details.
• • If you suspect someone may have obtained access to your Internet Banking details, logon to Internet Banking to change your Password and immediately call us on 1300 306 543 Monday to Friday from 8am to 8pm (AEST) or +61 29005 8421 if calling from overseas.

How can I check if 128-bit encryption is being used?

For Microsoft Internet Explorer:

• Move a mouse over the "security lock icon" at the button-right corner. A tool-tip of "SSL secured (128-bit)" should pop-up or
• Right-click any text on a page (not on a graphics object) and select "Properties". "Connection" with "SSL 3.0, RC4 with 128-bit encryption (High); RSA with 1024-bit exchange" is shown or
• Press "File" in the toolbar and select "Properties". "Connection" with "SSL 3.0, RC4 with 128-bit encryption (High); RSA with 1024-bit exchange" is shown

For Netscape Navigator:

• "Security" with "This is a secure document that uses a high-grade encryption key for U.S. domestic use only (RC4, 128-bit)" is displayed if you:
  
  
  - Press "Security" in the toolbar. Then a "Security Info" window will be displayed and click "Open page info" or
  
  - Right-click any text on a page (not on a graphic object) and select "View Info".

 Back to top

Why do I need an Online Security Device?

HSBC takes security very seriously. Your Online Security Device is designed to help safeguard you against unauthorised access to your accounts, and to keep your information safe and secure.

 Back to top

How does HSBC protect against phishing scams?

Phishing scams are used by other parties to fraudulently solicit Internet Banking details from customers. Third parties contact customers (usually by email, letter, or phone) purporting to be a financial organisation and requesting customers to provide their security details. HSBC will never contact you to ask you for your Internet Banking details. If someone contacts you, do not disclose your details and please call us immediately on 1300 306 543 Monday to Friday from 8am to 8pm (AEST) or +61 29005 8421 if calling from overseas.

HSBC’s Online Security Device provides protection against phishing by generating a constantly changing Security Code.

 Back to top

What is ‘spyware’ and what does HSBC do to protect Internet Banking users from ‘spyware’?

Spyware is a malicious program that third parties can attempt to download onto computers to fraudulently view information that you input to site.

Internet Security software helps prevent third parties from downloading malicious software onto your computer. Ensure you have the latest version of anti-virus and firewall protection installed on your computer at all times and download updates regularly.

HSBC’s Online Security Device provides protection against spyware by generating a constantly changing Security Code.

 Back to top

What are ‘trojans’ and what does HSBC do to protect Internet Banking users s from ‘trojans’?

Trojans are malicious programs which are designed to fraudulently capture computer key strokes. Internet Security software helps prevent third parties from downloading malicious software onto your computer. Ensure you have the latest version of anti-virus and firewall protection installed on your computer at all times and download updates regularly.

HSBC’s Online Security Device provides protection against trojans by generating a constantly changing Security Code.

 Back to top

I think someone may have access to my Internet Banking logon details. What should I do?

Immediately logon to Internet Banking to change your Password and call us on 1300 306 543 Monday to Friday from 8am to 8pm (AEST) or +61 29005 8421 if calling from overseas.

 Back to top

What is a 'time-out' feature?

A ‘time-out’ feature provides protection if you leave your computer unattended and have not logged out from an Internet Banking session. After a period of time of not being used, your Internet Banking session will automatically end or time-out.

 Back to top

Will I incur a loss if someone gains access to my money through Internet Banking?

HSBC takes security very seriously and uses a variety of measures to ensure your personal details, financial information and money are kept safe and secure. You also have a role to play in security to ensure your Internet Banking details are not disclosed to anyone.

In the event that money is removed from your account without your instruction (provided you have not acted negligently or fraudulently and report the details to HSBC in a timely manner) you will not bear any loss.

 Back to top