Many internet users have been caught out by phishing scams which exploit people's good faith. Everyone using the internet should be wary of these scams - and you can start by reading the information below.
What is phishing?
Phishing is an attempt by fraudsters to 'fish' for personal information such as the security credentials you use for banking. Someone can send you an email which appears to come from your bank or an organisation you have registered with, such as PayPal. The email asks you to click on a link and/or to confirm your username or password - and in this way they obtain your details.
How do they get my email address?
Not from us. Lists of live email addresses are bought or swapped between unscrupulous parties.
How do they know where I bank?
They don't, but if they send enough emails they're bound to reach some customers.
The email says it's from HSBC - is it?
It's unlikely. We currently use secure 'My messages' from within HSBC Internet Banking to advise you of service-related developments. If we do contact you by email, we will never ask you to enter or confirm your security details. By contrast, this is typically what a phishing email does when it tries to obtain your security details.
What should I do if I get a suspicious looking email?
If in doubt, delete it without opening it. This caution should apply to all unexpected emails with links or attachments.
What should I do if I believe someone might have obtained my security credentials?
Call us on 0845 600 2290 (textphone 08457 125 563), so that we can investigate and change your security number.
Take advantage of a 20% discount off McAfee security software.
If you are suspicious of an email that purports to come from HSBC, please forward it to phishing@hsbc.com.
For more advice on how to fight off intruders and hackers, visit Get Safe Online.
Please note that HSBC Bank plc has no control over the websites offered here and is not liable for your use of them.
