Beware of Phishing and Scams
Phishing
Phishing is a malicious attempt to steal your personal or financial information sending you an email, telephone or text message by fraudster posing as a legitimate institution to share them the sensitive information like passwords, bank details or clicks the embedded links, QR code or file attachment to implant malware to the victim’s device. The email will look as it is from a legitimate organisation like a bank or financial institutions. It often looks very similar to an actual email sent by those companies, and it will contain a link or QR code that takes you to a website that also looks very similar to the organisation's genuine site.
Once you arrive at the fake site, it will usually prompt you to enter personal security information, such as your account number, PIN or security code. The phishing site records everything you enter, and then uses your information to steal your money.
Scams
There are various scams which offer you the false promises to trick you into parting with your money or sharing sensitive details. Scammers may contact you out of the blue to tell you that you can claim a large inheritance from a distant relative or wealthy benefactor. You may be contacted by letter, phone call, text message, email or social networking message. They usually pose as a banker, lawyer or other foreign official, and claims that the deceased left no other beneficiaries.
The scammer will confirm that you are legally entitled to claim the inheritance which may be very large, sometimes in millions of dollars. Alternatively, they might say that an unrelated wealthy person has died without a will, and that you can inherit their fortune through some legal trickery because you share the same last name.
3 ways to protect yourself from fraud and security attacks
- Keep your personal details private
Never share your personal details, PIN codes, passwords or OTPs (One-Time-Password) with anyone. This also includes images of your ID cards, credit cards or any forms.
Generally speaking, financial institutions rarely take the initiative to approach customers to check their personal information, or request customers to click hyperlinks in emails to access their Internet banking accounts or to update their information. Whenever receiving calls, letters or emails purportedly from a financial institution, stay vigilant and verify their authenticity. This can prevent fraudsters from stealing your personal information or login credentials for unlawful use.
- Avoid clicking links
Never click a link in a message or download any attachments unless you are absolutely sure it is from someone you trust. Avoid clicking anything that promises you a prize, reward, voucher etc. for doing a survey or forwarding the message. If the offer sounds too good to be true, it probably is. Do an internet search for details of the offer and seeing if there are legitimate examples or warnings of a scam.
- Use common sense
If something seems off in a communication or something just doesn't feel right, use common sense and be cautious.
Report to us
If you are in doubt about any communication e.g. calls, letters or emails, please contact our customer service hotline/ email immediately.
Our customer service hotline and email contacts are as follows:
Hotline: (852) 2284 1118
Email: assetmanagement@hsbc.com.hk