Common scams

Fraudsters have a range of tactics for getting their hands on your money. They can be hard to spot, so it’s important to know the signs of a scam.

On this page you'll find information on some of the most common scams to help keep you one step ahead. If you have any suspicions, don’t transfer money, and never give out passcodes or other security details.

There has been an increase in malware scams, in which fraudsters will invite you to download a mobile app that can steal your financial information.

This won't happen with genuine apps, but we've enhanced our security measures on Android phones and tablets to help protect you against this.

When you open the HSBC Mobile Banking app, we'll now alert you if we detect a suspicious app installed on your device.

Apps downloaded from non-official app stores may allow fraudsters to gain control of your device, so we've introduced this extra layer of security to protect you and your financial information.

If you see one of these in-app alerts, you'll be asked to complete one of the following actions before you can log on:

• Remove the suspicious app from your device
• Turn off accessibility for the suspicious app
• Switch back to your device's default keyboard

Purchase scams happen when you pay for an item or service and don't receive it.

Typically, these scams:

• Ask you to send money via bank transfer rather than using a card or cheque
• Offer a too-good-to-be-true deal or discount
• Have 'limited availability', or are a 'special offer' to encourage you to act quickly
• Persuade you to pay in advance
• Are advertised on social media or other online marketplaces, or in some cases through legitimate-looking websites that have been set up by fraudsters

Remember to:

• Use safe sites when shopping online
• Use safe ways to pay, such as your debit or credit card 
• Check the returns and cancellations policy
• Research the retailer online to make sure they’re legitimate
• Stop and think - would you be willing to send cash in the post for an item you've ordered?
• Research and check the validity of the item before paying - ask to see it if possible
• Approach an independent professional to authenticate the goods or services you're purchasing

Some cold calls will offer too-good-to-be-true investment opportunities. These often involve being sold worthless, overpriced or even non-existent shares.

Fraudsters may also set up spoof websites and fake companies that have similar (or the same) names as genuine investment organisations.

When investing, here are some red flags to look out for:

• Being approached out of the blue
• Unrealistically high returns offered for 'low risk' investments
• Lack of independent evidence supporting the scheme
• Glowing testimonials or celebrity endorsements, which could be fake
• Pressure to make quick decisions
• Being told to keep it a secret 
• An approach from someone whose only contact details are a mobile phone number

If it sounds too good to be true, it usually is.

Cryptocurrency is a digital asset that can be traded or exchanged online.

It has increased in popularity over the last few years, with some people seeing high returns on investments, but it is unregulated, highly speculative and there's no investor protection. Because of this, criminals are taking advantage.

They may do this by:

• Contacting you over the phone or on social media, offering you an investment opportunity
• Advertising investments that don’t exist or  won't deliver the returns they promise
• Convincing you to sign up with a cryptocurrency provider to open a trading account or online wallet
• Setting up fake, but realistic-looking, websites and portfolios
• Delivering small initial returns on your investment to encourage you to invest more

Remember to:

• Check how it works - make sure you understand what you're getting into
• Keep sensitive details and documents private - never let anyone set up a cryptocurrency wallet, upload ID documents or manage investments for you
• Be wary of unusual requests - fraudsters may ask you to download software so they can access your devices and move money without your knowledge. They may also ask you to mislead your bank about the purpose of payments you make to them
• Look out for fake endorsements - fraudsters may impersonate celebrities on social media or messaging groups

As the use of QR codes increases, criminals are creating codes which lead you to fake websites or download malicious software to your device. This can cause you to hand your personal or financial details to a fraudster.

A common method fraudsters use, is to stick a fake QR code on top of the original one. You may find this in places like:

• Pubs or restaurants
• Advertising posters
• Parking meters

Most smartphone cameras will provide a preview of a QR code's link as you start to scan it. If the URL looks suspicious or isn't what you expected, don't tap on the link. If you’re unsure, go directly to the company's official website or app instead.

In this type of scam, fraudsters impersonate major organisations to take over computers and steal money from online bank accounts. This will usually start with a phone call where they'll offer to help you with a slow computer or internet connection. They can then use technology to take control of your computer remotely.

To avoid falling victim to this scam, you should:

• Be wary of unsolicited approaches by phone which may be claiming to offer a refund on something
• Avoid letting someone you do not know or trust have access to your computer, especially remotely
• Never log on to your online banking while someone else has access to your computer

Never tell anyone your:

• 4-digit card PIN 
• Password or online banking codes (including activation code)
• Personal details - unless you are sure who you're talking to

Romance scams occur when people enter into an online relationship, through a dating website. But, one person enters the relationship under false pretences to steal funds and information from the other.

Even if a relationship seems genuine, if someone you met online asks for money or financial information, stop and think.

• Never share your bank details or account information
• Research the person before agreeing to meet with them outside the dating site
• Report suspicious behaviour

Some fraudsters may ask you to hand over your bank card and PIN - claiming to be a courier organised by your bank. To add credibility they may even advise you to cut the card in half before giving it to them.

It's important to remember:

• HSBC will never ask for your card and/or PIN to be returned via courier
• You should never give your PIN to anyone
• Our fraud detection teams will only ever ask for partial information. For example we will never ask for your mother's full maiden name or full date of birth

If you think you may have given money or personal details to a fraudster, or you see transactions you don't recognise, let our security team know straight away.

To help us act fast, please have your 10-digit Personal Banking Number (PBN) and 6-digit Telephone Banking PIN to hand - along with details of any unusual transactions.

For account or debit card issues, call us on:

HSBC Premier: +44 1534 616 313

HSBC Advance: +44 1534 616 212

For credit cards, call us on:

0800 085 2401 (within the UK)

+44 1442 422 929 (outside the UK)