Top of main content

Tips to avoid fraud and identify scams

Every year, scammers get more sophisticated. But there are simple things you can do to protect yourself.

Here are 10 ways you can protect yourself against cybercrime and fraud. 

1. Check your bank accounts and statements regularly

Get a copy of your credit report once a year and keep an eye out for any unfamiliar transactions. If a fraudster has used your name to take out a loan or credit card, it may not show on your regular statements.

Set up notification alerts

  1. Log onto internet banking at www.hsbc.com.au
  2. Go to 'My Banking' in the main navigation bar located at the top of the page
  3. Under 'My Profile', select 'Account alerts'
  4. On the left menu, select 'Manage Alerts' to open the 'Notification Settings' page
  5. Click on the 'Alert Me' box on the top right hand corner and make your selections from the options available

Stay up-to-date with the latest fraud and scam warnings on HSBC Security Centre.

What to do if you suspect a scam or fraud

Please contact HSBC immediately at (+612) 9005 8220 or visit your nearest HSBC branch if you feel you may have been the victim of a scam, or that your bank details have been compromised and you're worried about fraud on your account.

2. Learn how to avoid phishing – never assume an email, text or phone call is authentic

Phishing attacks seek to steal your personal or business information. Scammers may email, SMS or call you, pretending to be from a legitimate organisation. It's often hard to tell if this communication is real or not.

They'll try to get you to divulge passwords, bank details or other personal information. You may be asked to open embedded links, scan QR codes or download attached files to put malware on your device.

Make sure the person contacting you is actually from the company they say they're from – don't just take their word for it.

Knowing intimate details like your mother's maiden name doesn't mean the callers are genuine. Criminals may: 

  • Know your name and address
  • Falsify phone numbers
  • Pose convincingly as bank employees or other trusted officials
  • Try to trick you into revealing security details by telling you you've been a victim of fraud

If you have any doubt at all, get the caller's name and contact information and hang up. Then, contact the company directly, using a genuine email or phone number.

Always look carefully at links and suspicious texts before clicking on anything. Don't open email attachments from sources you can't verify as safe and genuine. If in doubt, delete the email or SMS immediately.

3. Protect your accounts and devices

Always keep your personal and account information safe to prevent scams. Don't share your usernames, PINs or passwords and don't write them down anywhere – if you forget them, you can always call your bank for assistance.

Use strong passwords consisting of letters, numbers and symbols, and change them regularly. Be careful about using regular words or names as they may be easy for scammers to guess.

Always update your computer, tablet and smartphone operating systems as soon as these become available and install anti-virus software. This makes them harder to hack. If your device is too old to update, you may want to consider an upgrade. 

Read more: Protect your Android device from malware

4. Never disclose personal or financial information

A bank or other trusted organisations will never ask you for your PIN or full password in an email, on the phone or in writing. Be careful with the level of detail you share on social media sites and check your privacy settings.

Protect your HSBC SMS code like you would your password and PIN. Do not disclose it – or any HSBC Online Banking access codes – to anyone, or you could risk shouldering losses as a result of fraud.

To keep your money safe and secure, we use unique One Time Passcodes (OTPs). You may have received one when paying someone new, adding a card to Apple Pay or Google Pay, or changing your personal banking details online. Scammers will want to try to gain access to OTPs to access your account. To stay safe, never share your OTP with anyone, make sure the details in an OTP match your transaction and if you receive an OTP that you didn't ask for, please contact us immediately.

Never download or install software you're not familiar with or allow a person making an unsolicited call to access your computer remotely.

Need to reset your password? Go to our Online Banking FAQs to find out how to do this. 

5. Don't be pushed into making any important decisions

A bank or other trusted organisation will never force you to make an on-the-spot financial transaction or transfer, or rush you while you pause to think.

Slow down, so that you can consider your actions and your options. If you're uncomfortable in any way, don't be afraid to hang up.

6. Trust your instincts

They don't call it a gut feeling for nothing. If something feels wrong or seems too good to be true, question it. Criminals aim to either pressure you or lull you into a false sense of security while your defences are down.

Always make it a point to think carefully about the information you're giving and the decisions you're being asked to make. A good rule to stick to: don't send money or personal information to people you don't know.

7. Remember – you're in control

Have the confidence to refuse unusual requests for personal or financial details, or if someone asks you to set up payments or make payments out of the ordinary.

It's easy to feel embarrassed when faced with unexpected or complex conversations. But if you don't feel in control of a discussion, it's fine to end it straight away. Again, get the caller's name, hang up and call the company directly on a number from a trusted source.

Explore more: Elder financial abuse

8. Make sure the website or Wi-Fi is secure

If you shop online, always use secure websites. Make sure the web address (URL) starts with 'https' or has a padlock symbol at the front. Even then, you must be vigilant against fake websites that appear to be authentic. Access online stores directly through their websites, not by opening an email or social media link.

Avoid shopping or banking on public networks, such as free Wi-Fi networks. If you must connect to public Wi-Fi: 

  • Install and use a VPN
  • Never enter personal details
  • Log out of any apps you might have open on your device
  • Avoid doing financial transactions
  • Update your software
  • Turn off discovery and file sharing

Banking with HSBC? Download the HSBC Australia Mobile Banking app only from official app stores to avoid possible malware. 

9. Reduce risks of card fraud

First off, always check the amount you're paying has been entered correctly. Avoid swiping your card when making purchases or signing for purchases (when overseas). Opt for the more secure options of inserting or tapping your card, or even using a PIN. 

10. Put a temporary block on your card

If you've misplaced your card or seen suspicious activity on it, you can place a temporary block on your card.

Find out how to put a temporary block on your credit card.

Find out how to put a temporary block on your debit card.

You might also be interested in

By being aware, you can protect yourself against fraud and scams. Here's how.
Use a travel money card and other tips to save on foreign transaction fees.
Sending money to people outside of Australia used to involve a lot of complicated paperwork, but not anymore.