Personal Internet Banking

How am I protected against fraud?

Close

What makes Internet Banking with HSBC safe and secure?

Security is our top priority. We have equipped our Internet Banking Service with industry standard security technology and practices to ensure that our customers are fully protected against third party fraud.

You are uniquely identified by your Internet Banking ID and password every time you bank online.

Your financial information is protected by Secure Socket Layer (SSL) 128-bit encryption, the most secure form available commercially.

If you forget to log off after banking online, we activate an automatic 'time-out' after a period of inactivity to prevent unauthorised access.

The pages you have viewed during your banking session expire to prevent the pages from being stored in your browser, ensuring that no one can access these pages and your financial information.

We also track the number of logon attempts. Should we find three consecutive incorrect passwords have been attempted, we will immediately disable online access and customers will need to contact us again to re-establish the access.

Close

What is my role in security?

We need your active participation in online security. You have an important role to play, in ensuring that you are careful with your Internet Banking ID and password, that your computer and software are protected and you are careful while online.

Keep your Internet Banking ID and password secret at all times. These are your keys to access Internet Banking from HSBC. Only the right combination of these allows you access.

Use a combination of numbers, upper and lower case letters, eg. ha6N3Rw2.

Avoid using the same details that you use to access other online services such as email or electronic chat.

Avoid obvious terms that others might guess, like names, birthdays or telephone numbers.

Change your password regularly. If you want to change your Internet Banking password to make it less obvious you can do so online at your own convenience.

Do not reveal your Internet Banking password to anyone or write it down.

You should be the only one who knows your Internet Banking password. Never give it to anyone. No one at HSBC will ever ask you to tell them your Internet Banking password, ensuring it remains private and confidential to you. Know everyone who uses your computer and limit unauthorised access.

Protect your computer

Your computer and software may be vulnerable to viruses and hackers.

Install a personal firewall on your computer.
Personal firewall software is designed to prevent hackers from accessing the computer it is installed on. Installing a personal firewall is recommended especially if you are using a broadband connection. When installing such software, follow the manufacturer's recommendations for a 'conservative' access control.

Install and regularly update virus detection software
Virus detection software scans your computer and your incoming emails for viruses and then deletes them. You can download anti-virus software from the websites of software companies or buy it in retail stores. To be effective, anti-virus software must be updated routinely. As a matter of precaution avoid opening any emails with attachments that you are not expecting, even if they are from known people.

Download and apply security updates and patches to the PC/browser when they are made available
Always download updates to ensure you have the latest protection

Protect yourself when you use the Internet and bank online

Do not access Internet Banking from public places or from shared computers such as those in cyber cafes. You never know what malicious programs might be installed on the PC you use there.

Always exit using the 'Logoff' button to ensure you end each Internet Banking session securely.

When you've finished using the Internet, always disconnect. Avoid leaving your connection on, especially with broadband access, unless you're actively using it.

Always check the date and time of your last visit to the Internet Banking page on the HSBC website (we track it at all times and display it on the Welcome Page). If you suspect anything unusual, please contact us on Internet Banking Customer Service Helpdesk at (021) 111-4722-11 (within Pakistan) or (+92 21) 111-4722-11 (outside Pakistan).

Do not leave an Internet Banking session unattended at any time.

When you log on to a Internet Banking session, ensure that no browser windows with access to other websites are open. This will protect your computer from the possible harm by being exposed to other websites while you are doing banking transactions and can help to ensure your financial information is protected and blocked from unauthorised access via another website.

Do not install pirated software or software from unknown sources.

Reconfirm the HSBC website. Always verify that the website you are visiting is genuine. Double click the 'lock' icon at the bottom of the screen to check the security certificate of HSBC.

Know everyone who uses your computer and create passwords to limit unauthorised access. It's good practice to create passwords to protect your computer and to know everyone who uses it to avoid others from planting harmful and malicious programs in your computer.

Disable the 'AutoComplete' function. Your computer may be used by others, in order to protect you from unauthorised access to your accounts through your computer, disable the 'AutoComplete' function to prevent others from making banking transactions without your knowledge. 'AutoComplete' on Internet Explorer, for example, remembers data you have input including your passwords for frequently used sites.

You can disable the 'AutoComplete' function in Internet Explorer as follows:

Click 'Tools' from the menu bar and select 'Internet Options'

From the tabs at the top of the window, select 'Content'

Click the 'AutoComplete' button

If 'User names and passwords on forms' is checked, click on the box to uncheck it

Click 'OK'

Disable the 'File and Printer Sharing' feature of your operating system. If you are part of a computer network, it's important to stop sharing files and printers with other people to prevent anyone on the Internet from browsing and deleting files from your computer.

For Windows 2000, you may disable access to your files and printer as follows:

Click on 'Start', click on 'Settings', then click on 'Control Panels'. This will bring up the Control Panels folder.

Double click 'Network and Dial-up Connections'

Right-click on 'Local Area Connection' and left-click on 'Properties'.

Uncheck 'File and Printer Sharing for Microsoft Networks' and click 'OK'.
For Windows 95/98, you may disable access to your files and printer as follows:

Go to the Control Panel from the Start bar on your computer

Click on 'Network'

Click on 'File and Print Sharing'

Uncheck both the options and Click 'OK'

Close

How can I enable my browser to use 128-bit encryption?

Depending upon the browser you are using you can check whether 128-bit SSL is being used in the following ways:

For Microsoft Internet Explorer:

Move your mouse over the 'security lock icon' at the bottom-right corner. A tool-tip of "SSL secured (128-bit)" should pop up if you are connected using 128 Bit SSL; OR

From the 'File' menu in the toolbar, select 'Properties'. "Connection" with "SSL 3.0, RC4 with 128-bit encryption (High); RSA with 1024 bit exchange" is shown if you are connected using 128 Bit SSL.

For Netscape Navigator:

Click 'Security' in the toolbar. A 'Security Info' window will be displayed. Click 'Open page info'. The message displayed should be: "This is a secure document that uses a high-grade encryption key for US domestic use only (RC4, 128-bit)"

If you find that 128-bit encryption is NOT being used in the Netscape Navigator browser, you should configure the settings in the browser to ensure 128-bit encryption.

This can be done as follows:

Click 'Security' in the toolbar

Click 'Navigator' in the left column

Click 'Configure SSL v3' on the right of 'Enable SSL (Secure Sockets Layer) v3'

Enable all ciphers except 'No encryption with an MD5 MAC'.

Close

How can I assure myself that I am connecting to HSBC?

For Microsoft Internet Explorer, you may check the validity of the certificate as follows:

Click the 'security lock icon' at the bottom right corner (enable status bar if it cannot be seen)

Check that the certificate information is displayed.

For Netscape Navigator, you may check the validity of the certificate as follows:

Press 'Security' in the toolbar

In 'Security Info', press 'View Certificate'

Check that the certificate information is displayed

This Certificate belongs to:

Member, VeriSign Trust Network
Authenticated by British Telecommunications plc
Terms of use at www.Verisign.com/rpa (c)00
HSBC Holdings Plc, Sheffield, South Yorkshire, GB

This Certificate was issued by:
www.verisign.com/CPS Incorp.by


Ref. LIABILITY LTD.(C)97
VeriSign VeriSign International Server CA - Class 3
VeriSign, Inc.
VeriSign Trust Network

Check if the certificate is within a valid date.

Note: If, after clicking the security padlock icon you find any message different from what is illustrated above, contact HSBC for more information or assistance.

Close

Why do the Internet Banking pages expire?

Because the security of our site is important to you, page expiry occurs to prevent the pages from being stored in your browser. This feature is meant to secure the confidentiality of your accounts.

Close

Can I exit by closing the browser window?

Do not exit by closing the browser window. If you simply close the browser window, you cannot be sure that your Internet Banking session is terminated properly. Always exit by using the 'Logoff' button to ensure you end each Internet Banking session securely.

Close

How can I create and protect my Internet Banking password?

To create your Internet Banking password, please follow the tips below:

Select a password that cannot be easily guessed by anyone else. Do not associate your Internet Banking password with anything personal such as birthdays, names, phone numbers or other familiar words.

Do not use Internet Banking password, which is used on other Internet sites/ISP servers. Create a password with a combination of letters and numbers using upper and lower cases, eg hu6N3Rw2. Avoid using repetitive or consecutive digits in your Internet Banking password, eg 111222, abababa. To protect your Internet Banking password, we strongly recommend that you

Do not disclose your Internet Banking Password to any other party. Remember no one at HSBC will ever ask for a customer's password.

Never write or record your Internet Banking Password in a way that can be read or understood by someone else, or on any software which retains it automatically. Check your account balances and statements regularly to identify any unusual transactions. You should check the last logon time-stamp each time you log on.

If you suspect your Internet Banking ID and Password has become known by someone else, you should change it immediately.

If you suspect your password may have been comprised or if you detect any unusual activity on your Account, immediately contact our Internet Banking Customer Service Helpdesk at (021) 111-4722-11 (within Pakistan) or (+92 21) 111-4722-11 (outside Pakistan). In such circumstances, you should also change your password immediately by selecting the 'Change Internet Banking password' option under the 'Services' section of Internet Banking of HSBC.

Change your Internet Banking password on a regular basis. Know everyone who uses your computer to stop someone from loading software to capture your Electronic/ Personal Banking Number and Internet Banking password.

Close

How can I protect myself from unauthorised access to my account(s)?

You should install a personal firewall on your computer especially if you are using a broadband connection. Update the firewall regularly to ensure you are covered with the latest protection. Please refer to your PC or software vendor to identify a personal firewall which best suits your PC environment.

To prevent viruses or other unwanted problems, do not open email attachments or install software/files that you do not trust.

For more information, please click on:

Measures we take

Your role in online security

Close