HSBC HK Mobile Banking app

The following are security tips for when you log on to HSBC Mobile Banking via mobile handsets and tablets. For the full set of security tips for HSBC Personal Internet Banking / HSBC Mobile banking, please visit the Security and Fraud Centre

1. Do not store your Personal Internet Banking/HSBC Mobile Banking username and password on your mobile handset or tablet
   
2. Install and update the latest anti-virus and anti-spyware software regularly on your mobile handsets and tablets, whenever available
3. Avoid sharing your device with others and use your own handset or tablet to log on
4. Do not leave your handset or tablet unattended after logging on to Personal Internet Banking or HSBC Mobile Banking. Always log off properly when you are finished
5. Wipe data on your old phone or tablet before you donate, resell or recycle it
6. If you lose your mobile phone or tablet, please tell us immediately. You should also review your account transaction history through Personal Internet Banking. If there are any suspicious transactions, please contact Customer Service Hotline and report to us immediately. You should also enable remote wiping
7. Set up auto-lock and passcode lock to prevent unauthorised access to your handsets and tablets
8. When using Wi-Fi, only use trusted Wi-Fi networks or service providers and enable security protection such as Wi-Fi Protected Access (WPA), if possible
9. Disable Bluetooth if you are not using it, or set the smartphone or tablet to non-discovery mode
10. Use the default browsers originally provided on your device rather than newly installed browsers downloaded from other sources
11. Do not use any jailbroken handsets or tablets which may have security loopholes to log on to Personal Internet Banking
12. Do not install applications on your mobile handsets or tablets from sources unless you trust the source. Understand the permissions of mobile applications before you install them. Do not use untrusted custom virtual keyboards
13. Install updates and patches to your smartphone and tablet regularly, including upgrades/updates to your OS and other mobile applications. Enable data encryption on your handset or tablet if possible
14. Always type in the address www.hsbc.com.hk directly into the browser. If you use the HSBC Mobile Banking app, only download it from official application stores, to avoid going to fraudulent websites
15. Our Personal Internet Banking website uses EV TLS Certificate (Extended Validation Transport Layer Security Certificate). In the Safari browser, a padlock and the bank name will appear in green at the top of the browser. (Note: the padlock and the bank name may be hidden on some screens and they will show up when you scroll down the screen manually

Balances
You can check the balances of all integrated accounts, current accounts, savings, credit cards, and investments/securities (Hong Kong and United States stock only) accounts using the HSBC Mobile Banking app. For balance enquiries on other accounts and services such as MPF/ORSO, insurance, Time Deposits, etc, please use Personal Internet Banking.

Bill payment
Pay bills to existing and new merchants on the go with HSBC HK Mobile Banking app. You can even choose to pay now or set up a future-dated bill payment.

Transfers
HSBC Mobile Banking supports Hong Kong dollar and foreign currency transfers between your accounts. Global Transfers (exclusive to HSBC Jade, HSBC Premier and HSBC Advance customers) enables you to make instant transfers to self-named or eligible third-party overseas HSBC accounts.

Digital Counter Services
HSBC Premier customers can see when the counter is available, get a ticket and book a counter-service appointment, all before arriving at an HSBC Premier Centre.

Trade Hong Kong and United States stocks
You can trade Hong Kong and United States stocks after you have logged on the HSBC Mobile Banking app. Available trades include Limit Order, Market Order and At-auction Order. The At-auction order applies to Hong Kong stocks only.

Stock Alerts service
You can use the HSBC Mobile Banking app to set up SMS notifications for Hong Kong stocks and indices. To change your alert settings, log on to your Personal Internet Banking.

Push notifications

• If you change your mobile device, you need to:
  (i) provide us with updated information on your mobile device
  (ii) update iOS or Android OS on your mobile device, and
  (iii) reinstall the HSBC Mobile Banking app ("app").
  
• We only send push notifications once. If you delete the push notification we sent, that notification can't be sent again.
  
• Any push notifications we send are one-way and shouldn't be replied to.
  
• You should never respond to a push notification that appears to be from us asking you to provide your account or security details. We never make such a request.
  
• Please make sure you have cellular data internet connection or WiFi internet connection. If you're travelling outside Hong Kong and wish to receive push notifications, please make sure you've enabled data roaming. You're responsible for any fees and charges arising from internet connection, whether local or international. Push Notification Alerts Service may not be available in certain countries or territories on some types of mobile devices.
• Push notifications run on the services provided by Apple Inc. ("Apple") or Google LLC. ("Google"). Any delay or failure in delivering push notifications  due to Apple's or Google's service is beyond our control.
• The alerts sent by push notifications may not be encrypted and may not be secure from corruption by third parties. You're responsible for ensuring that your mobile device is enabled with auto-lock and passcode lock to prevent unauthorised access.
• Make sure your mobile device and other telecommunications equipment or services are capable of receiving Push Notification Alerts Service through push notifications.
• You may register one iOS device or one Android OS device to receive push notifications with. Your mobile device should be using the updated iOS or Android OS version we specify.

Security (On top of existing Security session)
Please pay attention to the relevant points under the "security" section in the Terms and Conditions for HSBC's eAlerts Service, specifically point f. i.e. You must inform us as soon as possible of all matters which may have an impact on or otherwise affect our provision or your use of the eAlerts Service including, without limitation, if you know or suspect that someone knows your SIM Card PIN Code or your nick-names or has unauthorised access to your e-mails or if your mobile telephone number/e-mail address changes or if your mobile telephone is lost, stolen or no longer under your control or if your contract with the network operator ends.

• You should at all times set up auto-lock and enable passcode lock to prevent unauthorised access to your mobile devices.
• You should install our HSBC Mobile Banking App from sources you trust and read push notifications from the app to ensure that they are genuine and have been sent by us.

Mobile banking in other countries outside Hong Kong
The new HSBC HK Mobile Banking app gives you access to your Hong Kong accounts only. If you need to access mobile banking in other countries outside Hong Kong, please use the “HSBC Mobile Banking app” in addition to the new app.