Top of main content

How to bank safely online

Shopping and banking online, or in mobile apps, can be fast and convenient.

But, as with more traditional methods, it’s important to protect yourself against risks. Here are some online banking safety tips:

Keep your device secure

Create strong passwords

Look for secure connections

Avoid scams

Keep your devices secure

Make sure your phone, tablet or computer is secure by keeping your operating systems up to date.

You can set laptops and desktops to install software updates automatically as soon as they become available. The same goes for app updates on your devices. Choose to install them whenever you’re connected to Wi-Fi and a new update is available, or at night when your device is plugged in.

This way you benefit from any security enhancements, which are designed to make it difficult for hackers to gain access.

You should also install anti-virus software from a well-known, reputable and trusted company to protect your device from any malicious activity. You can find out more by visiting our security centre.

Create strong passwords

Complex online passwords might feel like a hassle, but they do an important job protecting your personal information.

When it comes to passwords, longer equals stronger. Using a combination of upper case, lower case, numbers and symbols also makes them harder to crack. Another way to strengthen a password is to string together unrelated words.

If you're banking online or via a mobile app, there are further security measures you can put in place. For example, using fingerprint or face recognition adds biometric security to your banking app, while Voice ID adds a strong layer of protection when doing phone banking. This is known as 2-factor authentication.

Setting up a digital account can be a good form of defence against cyber-criminals. The layers of security typically make it harder for them to access your account than it would be for them to fraudulently set one up in your name.

Look for secure connections

Look for a padlock in the address bar to confirm your web connection is secure. But remember, the padlock doesn’t guarantee an authentic site.

For example, if you’re on and see a green padlock, you know you’re securely interacting with HSBC. But if you’re on, you could still see a green padlock, indicating a secure connection, but you wouldn’t be interacting with HSBC. You may instead be on a site that’s been set up to trick you into thinking that’s what you’re doing.

So always make sure a website is genuine by checking the address for subtle misspellings, additional words, characters or other irregularities. Sites like Trustpilot can help you work out if a site is legitimate.

Shopping and bank transfers

When shopping, check again for the padlock in the address bar before entering your personal or payment details and don't give more information than is needed for the transaction.

For example, only fill in the mandatory details when making a purchase.

You can usually complete your purchase without having to create an account – so don't create one if you don’t have to. And, where possible, don't allow the retailer to save your payment details.

Never pay for something by bank transfer if you don’t know the seller. Always use a credit card, debit card, PayPal or a payment option that offers some protection against fraud.

If you suspect fraudulent activity on your account, contact us immediately on 03457 404 404.

Avoid scams

Once you’ve put those security measures in place, you need to be mindful of common scams. Here are some tips on what to look out for.

Requests to move money

Genuine banks won’t ask you to move money to another account, or for your PIN, password or other personal details out of the blue.

Unknown senders

Never click on links or attachments from unknown sources.

More useful links