What you need to know about mobile device settings

Be cautious of using any free VPN

A "Virtual Private Network", or VPN, is a software that allows you to mask your computer's location or log on to sites as if your computer is based in another country or region. But just as “there’s no such thing as a free lunch”, the cheaper the VPN, the greater the chance they have security issues.

Free VPNs have hidden dangers

• Malware hidden inside VPNs can steal your data, which can then be used to hijack your online accounts, steal your money (bank and credit card details), steal your digital goods or products, or lock or encrypt your devices in exchange for a payout (e.g. ransomware), and more.
• VPNs can also hijack your browser, redirecting it to other sites without your permission, which can further lead to fraud risk.

If you really want to use VPN, it's important to use a paid VPN, or one that has in-app purchase for higher levels of service. Paid doesn’t guarantee secure, but even partially paid apps are often more protective of your data and give more software updates than free options. Better yet, stick with a reputable VPN made by well-known providers or antivirus-software makers.

Be vigilant if your mobile is suddenly out of signal

With more people using mobile devices to do banking, fraudsters have begun to use a technique known as a "SIM-swap".

Basically the criminal will call your mobile service provider claiming to be you, and ask for a replacement SIM card, saying that they lost the SIM or phone. If they are convincing, the mobile service provider will deactivate your SIM and issues a new one to the fraudster, who then executes transactions that require OTP authorisations. 

Please be alert and talk to your mobile provider immediately if you suddenly find you do not have network connectivity and are not receiving calls or text messages for unusually long periods. 

Also, please change the password you use for accessing the mobile service portal. This is because fraudsters can activate an SMS forwarding service or enquire SMS content by logging on to the online service portal which are provided by some Mobile service providers. 

It’s also recommended that you do not switch off your phone if you are receiving numerous unknown calls, which could be a ploy to make you turn off your phone so you don't notice a tampered network connection.

Be vigilant

• Do not store your username and password for HSBC Mobile Banking and other private services on your mobile handset or tablet
• Avoid sharing your device with others and do not use other people’s devices to log on to your private accounts
• Some online services might request you to upload a scanned copy of your HKID via their mobile apps. Protect your HKID copy and treat it with the same caution same as your physical HKID card.  Do not store your HKID copy on your mobile device and don't share it with people you don't trust people. Do not scan your HKID copy to any untrusted apps.

Mobile Security Key 

Available via the HSBC HK App, Mobile Security Key provides you with a safe and convenient way to log on to online and mobile banking. It also allows you to generate unique, one-time security codes to authenticate important transactions and access a full range of online and mobile banking services securely.

Biometric Authentication

The new iOS Face ID lets you authenticate your identity and access your digital banking in seconds, just by looking at your screen. You can also log on to our app and confirm transactions using fingerprint authentication with iOS Touch ID and Android™¹ Fingerprint ID.

If you are using biometric for log on or confirming transactions, we highly recommend you only register your own biometric print onto your mobile. 

Note:

1.Not available on all Android devices.

Identity verification​

After activating your Mobile Security Key or if we detect any suspicious activity on your HSBC Online and Mobile Banking and other selected HSBC Digital Banking platforms, you may need to further verify your identity before you can enjoy full access.