HSBC HK Mobile Banking app

The following are security tips for when you log on to HSBC Mobile Banking via mobile handsets and tablets. For the full set of security tips for HSBC Personal Internet Banking / HSBC Mobile banking, please visit the Security and Fraud Centre

1. Do not store your Personal Internet Banking/HSBC Mobile Banking username and password on your mobile handset or tablet
   
2. Install and update the latest anti-virus and anti-spyware software regularly on your mobile handsets and tablets, whenever available
3. Avoid sharing your device with others and use your own handset or tablet to log on
4. Do not leave your handset or tablet unattended after logging on to Personal Internet Banking or HSBC Mobile Banking. Always log off properly when you are finished
5. Wipe data on your old phone or tablet before you donate, resell or recycle it
6. If you lose your mobile phone or tablet, please tell us immediately. You should also review your account transaction history through Personal Internet Banking. If there are any suspicious transactions, please contact Customer Service Hotline and report to us immediately. You should also enable remote wiping
7. Set up auto-lock and passcode lock to prevent unauthorised access to your handsets and tablets
8. When using Wi-Fi, only use trusted Wi-Fi networks or service providers and enable security protection such as Wi-Fi Protected Access (WPA), if possible
9. Disable Bluetooth if you are not using it, or set the smartphone or tablet to non-discovery mode
10. Use the default browsers originally provided on your device rather than newly installed browsers downloaded from other sources
11. Do not use any jailbroken handsets or tablets which may have security loopholes to log on to Personal Internet Banking
12. Do not install applications on your mobile handsets or tablets from sources unless you trust the source. Understand the permissions of mobile applications before you install them. Do not use untrusted custom virtual keyboards
13. Install updates and patches to your smartphone and tablet regularly, including upgrades/updates to your OS and other mobile applications. Enable data encryption on your handset or tablet if possible
14. Always type in the address www.hsbc.com.hk directly into the browser. If you use the HSBC Mobile Banking app, only download it from official application stores, to avoid going to fraudulent websites
15. Our Personal Internet Banking website uses EV TLS Certificate (Extended Validation Transport Layer Security Certificate). In the Safari browser, a padlock and the bank name will appear in green at the top of the browser. (Note: the padlock and the bank name may be hidden on some screens and they will show up when you scroll down the screen manually

Balances
You can check the balances of all integrated accounts, current accounts, savings, credit cards, and investments/securities (Hong Kong and United States stock only) accounts using the HSBC Mobile Banking app. For balance enquiries on other accounts and services such as MPF/ORSO, insurance, Time Deposits, etc, please use Personal Internet Banking.

Bill payment
Pay bills to existing and new merchants on the go with HSBC HK Mobile Banking app. You can even choose to pay now or set up a future-dated bill payment.

Transfers
HSBC Mobile Banking supports Hong Kong dollar and foreign currency transfers with your accounts, including accounts worldwide linked in Global View with Global Transfers (exclusive to HSBC Premier and HSBC Advance customers) and third-party accounts.

Digital Counter Services
HSBC Premier customers can see when the counter is available, get a ticket and book a counter-service appointment, all before arriving at an HSBC Premier Centre.

Trade Hong Kong and United States stocks
You can trade Hong Kong and United States stocks after you have logged on the HSBC Mobile Banking app. Available trades include Limit Order, Market Order and At-auction Order. The At-auction order applies to Hong Kong stocks only.

Stock Alerts service
You can use HSBC Mobile Banking to set up your Hong Kong stock alerts and receive either SMS text messages or push notifications. To change the alerts setting from push notification to SMS text message, use Personal Internet Banking.

Push notifications

• You may register one mobile device (iOS or Android OS device) to receive Stock Alerts. You can only activate one mobile device for each HSBC customer profile. Please note that your iOS or Android OS device should use the updated iOS or Android OS version we have specified.
  
• Push notifications run on a service provided by Apple Inc. or Google Inc. You need to update us on your device information whenever you change mobile device: Update iOS or Android and reinstall the HSBC Mobile Banking app.
• We will only send Stock Alert messages once. If you delete push notifications we have sent you, they cannot be sent again.
• Any push notification messages we send are one-way and you should not reply to them.
• You should never respond to a Stock Alert push notification that appears to be from us asking you to provide your account or security details. We will never ask you for this.
• Please make sure your device has 3G or WiFi connection. If you are traveling overseas, make sure data roaming is enabled. You will need to pay any charges/fees arising from connecting to the internet, whether locally or internationally.
• Push notifications run on a service provided by Apple Inc. or Google Inc. Any delay or failure of message delivery due to Apple's or Google's service is out of HSBC’s control.
• Push notification alerts may not be encrypted and may not be secure from corruption by third parties. You are responsible for ensuring that your mobile device is enabled with auto-lock and passcode lock to prevent unauthorised access to your handset.

Security (On top of existing Security session)
Please pay attention to the relevant points under the "security" section in the Terms and Conditions for HSBC's eAlerts Service, specifically point f. i.e. You must inform us as soon as possible of all matters which may have an impact on or otherwise affect our provision or your use of the eAlerts Service including, without limitation, if you know or suspect that someone knows your SIM Card PIN Code or your nick-names or has unauthorised access to your e-mails or if your mobile telephone number/e-mail address changes or if your mobile telephone is lost, stolen or no longer under your control or if your contract with the network operator ends.

• You should at all times set up auto-lock and enable passcode lock to prevent unauthorised access to your mobile devices.
• You should install our HSBC Mobile Banking App from sources you trust and read push notifications from the app to ensure that they are genuine and have been sent by us.

Mobile banking in other countries outside Hong Kong
The new HSBC HK Mobile Banking app gives you access to your Hong Kong accounts only. If you need to access mobile banking in other countries outside Hong Kong, please use the “HSBC Mobile Banking app” in addition to the new app.