It pays

to stop
and think
Protect yourself from
financial fraud

Together we thrive
Protect yourself from financial fraud 2

In the first six months Fraud can happen

of 2018, over 34,000 at any place and

any time.
Did you know
that UK fraud
people were scammed Here’s an example:
You’re at home watching TV and receive a
costs more
than £190 bn
out of £145.4m
call from someone who says they’re from

a year?
your bank’s fraud team.

A bank would…
Source: Experian ‘Annual Fraud
… explain that there’s been some unusual
Indicator’ 2017 report

At HSBC, we work hard to keep our activity on your account and check to see
whether you’ve made the payments. If

customers safe from fraud. not, they will stop the payment, cancel
your card and order you a new one.

However, with more and more people A fraudster might…

being targeted by fraudsters, it’s important … ask you to log into your internet
to understand more about this crime and banking account and transfer funds to
how to spot a potential scam. Taking the another account for safekeeping. They
time to stop and think about a situation may may ask for your PIN, or online banking
help you to make the right decision in those passwords and security details.
crucial moments.
A bank can already transfer funds at your
Fraud can happen at any place and any request and would never ask for your
time. It could happen when: passwords or PIN.
®® You’re at home and receive a call to
urgently transfer money out of your
account
®® You’re in a restaurant and receive a text
message asking you to call a number
urgently
®® You’ve just dropped the children off at
school and receive an email asking you
for personal information
Fraudsters look, sound and act like the bank, If you’re worried about fraud on your
police or even your internet provider. account, visit www.hsbc.co.uk/help/
security-centre/, pop into your local
branch or call us on 03457 404 404
Source: www.ukfinance
Protect yourself from financial fraud 3

Phone scams Text scams

Phone fraud – or vishing – is when a Text message fraud – or Smishing - is when
fraudster calls pretending to be your bank or a fraudster sends you a text that appears to
another trusted organisation. They can even be from your bank or another organisation
make their phone number look like a number that you trust.
you know and trust.
They may tell you that there’s been fraud
They can sound very convincing and on your account and ask you to share or
may already know some of your personal update personal details. The text may offer
information, such as your account number or vouchers, a tax refund or ask you to confirm
address. If you feel uncomfortable, or sense the delivery of a parcel.
something is wrong, don’t be afraid to end Email scams Typical examples of phishing
the call. You can always call the organisation Here’s an example: ®® HMRC email to say you’re owed a
Also known as phishing, emails are sent
on a number that you know, such as the You’re in a restaurant and receive a text tax refund
by fraudsters to encourage you to share
number on the back of your bank card. message asking you to call your bank
personal details or to click on fake links. Take ®® You win a lottery you haven’t entered
urgently. You call the number given and
a few minutes to check whether the email ®® The Telephone Preference Service ask
Fraudsters can keep the line open and even are told that there’s been suspicious
seems genuine or not. you to pay for a lifetime subscription
spoof a dial tone, so try to use a different activity on your account. They ask if
phone, or wait at least 10 seconds before you’ve made the payments. Here’s an example:
making your call. You could also call a friend You’re at work and receive an email that
A bank would… Signs of an email phishing scam
or relative first, to make sure a fraudster isn’t appears to be from your bank.
listening in when you do make the call. … stop the payment, cancel your card and ®® You are asked to make an urgent
issue you with a new one. payment.
A bank would…
Typical examples of vishing … email you to tell you more about their ®® The sender’s email address doesn’t
®® The Police or National Crime Agency A fraudster might… match the website address of the
savings accounts, mortgages or other
need your help to solve a crime or ask … ask you for your password, PIN, organisation it says it’s from –
accounts and services that they feel
you to move your money to a “safe account number or sort code in order to hover your cursor over the sender’s
might be useful to you.
account” stop the payment. name to reveal the true address.
®® Your bank need your help to investigate A fraudster might… ®® It asks you to share personal
Typical examples of smishing
a fraud … email you asking you for personal details information.
®® Your bank tells you that your internet
®® Your internet provider calls you to fix a or information about your bank accounts. ®® Links in the email are not official
banking access has been restricted and
problem you haven’t reported addresses, i.e. hsbc.co.uk. Hover
asks you to click on a link to reinstate
®® HMRC threaten jail unless unpaid taxes over the link to reveal its true
access
are paid immediately destination.
®® Your bank asks you to move your money
to a “safe account”
Protect yourself from financial fraud 4

£
Investment scams
Investment scams claim to offer high returns Account takeover fraud
for very little risk. Fraudsters often use false This growing crime is a form of identity theft,
testimonials, fake celebrity endorsements, where a fraudster gains control of a victim’s
spoof websites and other marketing bank or credit card account and then makes
materials to make the scams appear unauthorised payments.
genuine. If it seems too good to be true, it
generally is. How this could happen
A fraudster calls, impersonating your
Ways to spot an investment scam internet provider. They tell you that you
®® You’re approached by phone, email, text have some connection problems. To fix
message or by someone calling at your the problem, they ask you to log onto your
house with an investment opportunity computer and download a specific piece
®® The ‘company’ contacting you won’t of software.
allow you to call back Online scams
Online fraud is on the increase. Fraudsters This software allows the fraudster to see
®® You feel pressured into making a quick
use sophisticated tactics to access your your screen. They then ask you to log
decision, for example if the caller states
financial details and passwords, creating into your online banking account. The
the offer is “only available right now” or
bogus links and retailer web pages, as well fraudster now has the opportunity to steal
“don’t miss out”
as fake pop-ups. your banking details and move money out
®® The only contact you’re given is a mobile of your account.
phone number or a PO box address
Protect yourself from online fraud
®® It seems too good to be true – high ®® Always update the operating systems on If YOU call your bank and the bank gain
returns for a low risk your tablet, smartphone and computer as access to your computer (The bank would
soon as they become available do this)
®® Install anti-virus software from a well-
If you receive a call, even one asking you
known and trusted company
to call them back, to gain access to your
Romance scams ®® When shopping online, always check that computer (The fraudster would do this)
Somebody you have never met in person the website you are using is genuine and
falls in love with you… and then asks you when entering your personal or payment An example of account takeover fraud
for money. details ensure that there is a padlock in ®® The caller offers you a refund and
the address bar that indicates that your “accidentally” sends you too much
Typical examples of this would be Visit the FCA website where there connection is secure money and asks you to return the
®® Relative needs an urgent operation and is an approved list of companies ®® If you’re buying something online and you overpayment. This creates a new
has no health care and a known scammers list don’t know the seller, never pay by bank payment to the fraudster on your
®® They have a large inheritance and are together with more useful tips on transfer. Always use a credit card, debit account and now the fraudster can
unable to access the money staying safe. card or PayPal – or a payment option that transfer money from your account to
®® Don’t have any funds to travel to the offers some protection against fraud the fraudster’s account
UK (with promise of marriage)
Protect yourself from financial fraud 5

Top tips to help you At HSBC we

wise up to fraud would never
®® Phone and ask for your PIN or
password, even by tapping them
Always question uninvited Regular updates into your phone keypad.
approaches Always update your computer, tablet
®® Ask you to provide numbers to us
Instead, contact the company directly and smartphone operating systems
over the phone from an e-mail, text
using an email or phone number that as soon as they become available and
message or from your secure key.
you can check is genuine. install anti-virus software.
®® Ask you to transfer money into
Don’t share personal information Shred important documents another ‘safe’ account in your
Never reveal your password or share Shred any paperwork that reveals name – even if we suspect fraud.
your card details over email. Check the personal information, such as bank ®® Ask you to withdraw money to
address of any website you’re on. Be statements, card details and other hand over to us for safekeeping.
If you’re worried about fraud on your
careful with the level of detail shared sensitive data. ®® Send someone to your home to
account, visit our security centre at
on Social Media sites and check your collect cash, your PIN, cards or
www.hsbc.co.uk/help/security-centre/,
privacy settings. Register for Voice ID cheque books, even if you are a
pop into your local branch or call us on
This is an additional layer of security that victim of fraud.
03457 404 404.
Update your passwords protects your account and makes it easy ®® Ask you to pay for goods using
Try to change your passwords at least for you to call if you have a problem – your card and then hand them For more information on fraud, visit
twice a year. Don’t use a password that no passwords to remember. over to us for safekeeping. www.financialfraudaction.org.uk
can be easily guessed and make sure www.takefive-stopfraud.org.uk
that your Online Banking password
isn’t the same one you use for other
websites.

Check bank statements regularly

If there are any transactions that you
don’t recognise, always contact us.

Check your credit report

If someone has used your name to take
HSBC UK Bank plc. Registered in England & Wales with number 09928412. Registered Office:
out a loan or credit card, it may not 1 Centenary Square, Birmingham, B1 1HQ, United Kingdom. Authorised by the Prudential Regulation
show on your statements. Check your Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.
credit report at least once a year for any Our Financial Services Register number is 765112.
unusual activity. ©HSBC Group 2018. All Rights Reserved. RFB2335 MCP52294