Top of main content

Secure email communications

At HSBC, we care a lot about security and work hard to keep customer data safe.

Our goal is to give you a safe and secure banking experience at all times. We take special care with confidential information when we communicate with you.

About email security

We communicate with our customers in different ways based on what they need and prefer.

It's our policy to secure emails with information that could pose a risk to you if it fell into the wrong hands.

If you have a personal bank account, you can choose to receive letters or view documents and messages when you log on to online and mobile banking.

Never open any links in an email if you don't know the sender or you're not sure if it's from us. We'll never send you an email asking you to open a link and enter your online banking password. If in doubt, please contact us.

For help and support, check the Further guidance and support section.

Individuals

We may send encrypted emails to our personal and private banking customers.

If your email service provider supports encrypted emails, we may send them to you using Transport Layer Security (TLS). You can check if an email was sent using TLS with the information from your email service provider. Also, sender's email address should contain the correct domain name: hsbc.com.hk or hsbc.com.

You may also see encrypted emails sent using Voltage SecureMail or Proofpoint Encryption Email. We're gradually switching from Voltage SecureMail to Proofpoint Encryption Email.

For more information and user guides, check the Further guidance and support section. If you need more help or have any doubts, please contact us.

Which type of encrypted email is it? 

When you get an email telling you that you've received an encrypted email, check the footer to find out what type it is.

When you get an encrypted email through Proofpoint Encryption or Voltage SecureMail for the first time, you'll be asked to set up an account and choose your login details. Setting up an account is easy. You don't have to provide any bank or financial information.

Registering with Proofpoint Encryption Email

Proofpoint will ask you for your name, to set up a password, and to answer a security question. Keep the notification email from us so that you can sign in to Proofpoint and view the encrypted email again for up to one month.

Registering with Voltage SecureMail

Voltage will ask you to set up your username and password, then give you a personalised security image. You'll see this image every time you get an encrypted email through Voltage SecureMail from us. Once you've set up your account, you'll be able to log in and view your encrypted emails at any time.

 

Further guidance and support

Want to know more about how to open the first encrypted email sent from us? Refer to the following:

For more support, please contact us using the details in our encrypted emails.

Companies

We send emails to business customers or other organisations using Voltage, Proofpoint or TLS.

TLS is a common way to encrypt emails and helps to keep emails safe when sent over the Internet. Both the sender and receiver must have TLS turned on in their email servers.

For more information about TLS, download Transport Layer Security guide (PDF, 157KB).

Related content

Many online activities are now done using mobile devices. It's important to keep them as secure as computers.

 

Get tips to make sure your online banking experience is safe and secure.
Open Banking allows you to share your data digitally in a simple and secure way for an innovative and enhanced banking experience.