Received a suspicious text?

Message example

'This is a fraud alert from HSBC. We need you to verify recent transactions. Shortly you will receive a message from +447537438061 with directions on how to respond. We may decline your card until we have a response. Standard network charges apply.'

Purpose

A fraud alert is used to notify you that we need to verify some transactions, and that you'll shortly receive instructions in a follow-up message.

Guidance

• Following this initial message, we'll send instructions on what to do next.
• These instructions may come from the same number or +447537438061.

Message example

'HSBC fraud alert. Possible unauthorised transactions on card ending 1004: 250 GBP. 30-Jan 09:56am. ABCSTORES; 3000 EUR. 30-Jan 09:52am. 123STORES. If you made all transactions reply Y, otherwise reply N.'

Purpose

A transaction query is to alert you that we’ve detected potentially unauthorised transactions within your account.

Guidance

• Reply ‘Y’, and we'll allow the transactions to be debited.
• Reply ‘N’, and we'll stop the transaction from debiting.
• Take care when replying, as an incorrect response may authorise fraudulent transactions to debit your account.
• You may also receive notifications within our mobile app.

Message example

'Please urgently call Fraud Prevention on 03456081878 from UK or int +441470697094 24x7 quoting D1. This is not a marketing text. Do NOT reply by SMS.'

Purpose

A request to call text is to alert you that we’ve stopped a potentially fraudulent payment and to request you contact our payment fraud team.

Guidance

• Check the payee details carefully.
• Call us on the number provided to discuss the payment further.

Message example

'Someone has logged on to your online banking and is trying to make a payment. Genuine organisations won't ask you for online security details, to generate codes or move money; fraudsters will. If you've been asked, STOP. for advice, visit our Fraud Centre in the help section of our website.'

Purpose

A suspicious log on text is to alert you that someone has logged on to your online or mobile banking and is trying to make a payment.

Guidance: 

• If you know this was you, there’s nothing else you need to do.
• If you're unsure, call us using the number on the back of your debit or credit card.

Message example

'This is a fraud alert from HSBC. To protect our customers, we are carefully monitoring transactions for fraud. Shortly you will receive a message from +447860093059 with direction on how to respond. Please respond by 8pm (GMT) today, or your payment may be cancelled.'

Purpose

A payment query is to alert you that we’ve detected potentially unauthorised payments from your account.

Guidance

• We’ll send you a follow-up text with instructions on what to do next.

Message example

'HSBC fraud alert - please log on to our app to verify an attempted transaction. Once logged on, tap the bell icon to access your alerts. To protect you, we may temporarily block your card until you respond'

Purpose

A push notification reminder is to alert you of a possible unauthorised card transaction and to notify you that there's a fraud alert notification pending on our mobile app.

Guidance

• Log on to our mobile app.
• Tap the bell icon to access your alerts.
• Verify the alert / transaction details.

Message example

'HSBC: A payment was attempted from a new device. If this was not you, please visit http://security-unverifiedpayee.com/hsbc'

What to look out for

• Check the link – this is not a HSBC website address.

Message example

'ID931: Your direct debit RVX FINANCE added successfully. Allow 24 hours to view online. Call HSBC 033004-348-67 if you did not request this.

What to look out for

• Beware messages that try to create concern and get you to act with urgency.
• Check the number – call us using the number on the back of your credit or debit card.

Message example: 

'We attempted to deliver your package at 19:05 on Thursday 20th July 2023 but no one was available. Your parcel was returned to our depot. Pay to reschedule you redelivery by pressing here http//:bit.ly/2jh.1nuk.'

What to look out for

• Are you expecting a parcel?
• Does the delivery company usually need a rescheduling fee?
• Check with the parcel delivery company directly using their official website.

Message example

'Your H.SBC car was used on 20-07-23, 12:20:40, at B&Q for £2491. If you do not recognise this transaction call us on 033002245906.'

What to look out for

• Obvious spelling and grammar mistakes indicate the message isn’t genuine, eg, the dot within ‘HSBC’ and ‘card’ being misspelt as ‘car.’
• Look for informal language and poor sentence structure.