HSBC impersonation scams

What this scam usually looks like

A text, email, or call impersonates HSBC, claims suspicious activity or a blocked account, and pushes you to a link or to read out a code to 'secure' your money.

What the real HSBC will never ask for

Your OTP, PIN, or full password
You to move money to a 'safe account'
KYC details via a link in a message

Common fake message patterns

Sanitised examples - placeholders only, never real links or data.

Example only: HSBC: unusual payment - call the number to stop it: [phone number removed]

Common red flags

'Suspicious transaction' or 'account blocked' alarm messages
A link to log in or 'verify' instead of the official app
Anyone asking for your full password, PIN, or OTP
Requests to move money to a 'safe account'
Caller ID or sender that looks like HSBC but cannot be trusted

How to verify safely

Call HSBC using the number on the back of your card.
Log in only through the official HSBC app you installed.
HSBC will never ask you to move money to a 'safe account'.
Never read out a one-time code to a caller.

What not to do

Do not click links in unexpected HSBC messages.
Do not share passwords, OTPs, or card details prompted by an HSBC message.
Do not call phone numbers contained in the message.

If you already clicked or paid

If you entered details on a fake HSBC page or paid, act fast: change your password from a trusted device, enable two-factor authentication, and contact HSBC and (if money or card details were involved) your bank through official channels.

See the step-by-step recovery guides and your country's reporting options.

Got a message like this?

Paste it into the checker to see the specific red flags and what to do next.

Check a message

Bank impersonation scamA scammer pretends to be your bank to make you reveal codes, move money, or share card details.PhishingPhishing is when a scammer pretends to be a trusted person or organisation to trick you into revealing passwords, codes, or financial details, or into clicking a malicious link.

Official HSBC security & reporting

HSBC - fraud guidance Needs manual review

HSBC fraud and security guidance.

Source type: corporate · Last checked 2026-06-05
https://www.hsbc.com/who-we-are/cybersecurity-and-fraud

Related red flags

Sources

Official HSBC security pagesInformational

External sites open in a new tab and are not controlled by this website. We link to them for reference and do not endorse or guarantee their content. Always confirm you are on the official domain before acting.

Frequently asked questions

How do I know if an HSBC message is real?

Do not judge by how official it looks. Open the genuine HSBC app or type the official website yourself and check there. Never use links or phone numbers from the message.

Is this website affiliated with HSBC?

No. This page is educational only and is not affiliated with, endorsed by, or sponsored by HSBC. The HSBC name is used only to explain common impersonation scams.

What should I do if I already entered details on a fake HSBC page?

Change your password from a trusted device, turn on two-factor authentication, and contact HSBC through official channels. If card or bank details were shared, contact your bank immediately.

Reviewed by the ScamMessageChecker.com editorial team. Last reviewed 2026-06-01. Spotted something out of date? Tell us so we can review it. See how we assess scam risk.