Protect yourself from Phishing

Criminals call out of the blue and may claim to be your bank, the police or another trusted organisation like your network provider. To make the call seem more convincing, they may already have some information about you, such as your account number, address and account details. They can also make the call seem authentic by making their phone number look like a number you know and trust. This is known as 'number spoofing'.

The caller will then try to persuade you to:

1. transfer money to another account for 'safekeeping' or 'holding'
2. withdraw cash and hand it over 'for investigation'
3. give private information, which can then be used to gain access to your finances

If you're suspicious or feel vulnerable, immediately end the call and disregard messages from unregistered numbers asking for your CVV, Card Expiry Date, Credit Card PIN, or OTP. In case you've given them your banking details, call us immediately at +6328858-0000 or +6327976-8000 or +800-100-85-800 from overseas.

Be wary of unsolicited emails that appear to be from your bank or another trusted organisation (like government agencies) and contain links to websites asking you for confidential, personal or financial information. The emails may appear to come from a legitimate source and often warn your account may be shut down unless you take some action or they may say you're owed money.
If you receive one of these emails, don't reply or click on a link that you're not sure is genuine. Instead, contact the company using a phone number you know is genuine.

Phishing emails typically:

1. warn you of some sudden change in an account which means you have to confirm you still use the service
2. sometimes have poor spelling and grammar
3. ask for confidential or security information such as your online banking details, passwords, account numbers or PINs
4. include instructions to reply, complete a form or document attached to the email or click through to a website to verify your account

Don't open attachments or click on links if you suspect they may not be genuine.

If you're suspicious of an email claiming to be from HSBC, forward it to phishing@hsbc.com, delete it and empty your deleted items.

Another thing to watch out for is suspicious text messages that look like they're from HSBC or another trusted organisation. These may be sent by criminals trying to trick you into giving your personal and financial information (by calling a number or clicking a link).

It's important to remember:

1. Banks and other organisations such as the police or service providers will never ask you for your full PIN, OTP, password or banking codes.
2. Some sophisticated fraudsters can send text messages that show "HSBC" as the sender, to look genuine. This is why you should always be wary of what each SMS you receive contains and asks of you.
   

If you're unsure whether a text claiming to be from HSBC is genuine, forward it to phishing@hsbc.com and we'll investigate it. Never share your security details with anyone else.

For inquiries or complaints, please call HSBC's Customer Service at (02) 8858-0000 or (02)7976-8000 from Metro Manila,
+1-800-1-888-8555 PLDT domestic toll-free, (International Access Code) + 800-100-85-800 international toll-free for selected countries/regions, or send an email to hsbc@hsbc.com.ph to submit an inquiry or complaint. If you want to find out more about HSBC's customer feedback procedures, please visit hsbc.com.ph/feedback to learn more about feedback and complaints.

The Hongkong and Shanghai Banking Corporation Limited is an entity regulated by the Bangko Sentral ng Pilipinas (Bangko Sentral) https://www.bsp.gov. You may get in touch with the Bangko Sentral Consumer Protection and Market Conduct Office through their Email: consumeraffairs@bsp.gov.ph; Webchat: http://www.bsp.gov.ph; Facebook: https://www.facebook.com/BangkoSentralngPilipinas or SMS: 021582277 (for Globe subscribers only).

Deposits are insured by PDIC up to PHP500,000 per depositor.

Note: Do not provide your account or credit card numbers or disclose any other confidential information or banking instructions through email.