Security Device

What is a Security Device?

To protect our customers, HSBC has recently introduced a small electronic device which you should receive in the mail. This device generates a security code in addition to your normal Personal Internet banking password. You must use this security code when you login to gain access to your Personal Internet banking Services.

The Security Code appears on the LCD screen of the Security Device when you push the power-on button (this is the grey button on the left of the LCD screen). The code you will then see is a 6-digit password that can be used only one time to access your Personal Internet Banking Services.

What is a Serial Number?

You should have recently received your Security Device. This device has a sticker on the back that has a unique number that is linked to you personally. The number is a 10-digit serial number, identifying your individual Security Device, and will look something like xx-xxxxxxx-x where 'x' is a number (e.g. 90-0232884-1).

What is a Security Code?

The Security Code is a special, one-time password used to access your Internet Banking Service. You receive this password by pressing the grey button on the Security Device. A 6-digit number should then be displayed on the LCD screen. You will need to use this 6-digit Security Code to access your HSBC Personal Internet Banking accounts.

For further questions regarding the Security Device, call the HSBC 24-hour hotline at 800-820-8878.

What if the Security Code is not accepted?

Each Security Code is valid for 16 seconds, so if you take longer than 16 seconds to enter your code, there is a possibility that you will get an error message when you attempt to logon. If this happens, just use the Security Device to generate a new Security Code. You do this by pushing the button to turn off the LCD display, and pushing it again to generate a new Security Code. If the LCD display is already blank or turned off, then just push the button again once.

How do I get a Security Device?

HSBC will be sending a Security Device to all of our HSBC Personal Internet Banking customers in phases. For prompt delivery, please ensure that your address on record with HSBC is current and up-to-date.

Is it safe to send the Security Device by mail?

Prior to use, the Security Device must be activated. Security Device activation requires the correct entry of the User ID, password, and Security Code. Until activation has been completed, the Security Device has no security value. It is safe to send the device by mail, as a fraudster would not be able to attach the Security Device to your profile to commit fraudulent transactions unless they have all of your Personal Internet Banking credentials.

If you suspect that someone may have gained access to your password, please notify HSBC, and change your password, as soon as possible.

How long does the battery last?

The battery in the Security Device has been designed to last three to five years. When your battery begins to run low, the message, "BATT" will appear in the LCD screen. At this point, you should call our 24-hour Services hotline at 800-820-8878 to have a replacement device sent to your correspondence address.

What if I lose or damage my Security Device?

If you lose or damage your Security Device, please phone our 24-hour Services hotline on 800-820-8878 to order a replacement device.

Why is HSBC issuing the Security Device to HSBC Personal Internet Banking customers?

HSBC is committed to protecting the security of our HSBC Personal Internet Banking customers. HSBC has made the decision to issue a Security Device to all HSBC Personal Internet Banking customers to offer better protection from a variety of potentially damaging attacks. These attacks include:

• Identity theft - where a fraudster obtains personal details of a victim, and uses these details to complete fraudulent activities such as applying for loans, credit cards, ordering chequebooks, etc;

• Trojans (Keylogging/Screen Capturing) - where a victim discloses their confidential credentials to a fraudster by a Trojan unknowingly downloaded on their PC;br>
• Phishing - where a fraudster "phishes" for confidential information from a customer by pretending to be from a legitimate source such as a bank or a financial institution. These details are later re-used to carry out fraudulent transactions;

• Shoulder surfing - where a fraudster observes a victim entering their confidential details, and then re-uses these details to carry out fraudulent transactions.