Top of main content

Protecting yourself online

Learn about common scams and precautionary measures you can take to protect yourself online

On this page

Avoiding fraud during coronavirus

Some fraudsters are trying to exploit the coronavirus outbreak as an opportunity for financial crime. They may pretend to offer medical products, guidance or a safe haven for your money.

However, you can safeguard yourself against such scams by staying vigilant and taking the precautions outlined on this page. Remember, HSBC will never ask you to move money to a safe account. 

Keep your software up-to-date

It's harder for viruses to infect updated software. The criminals who create viruses take advantage of software bugs to infect computers. Software companies fix bugs with free, downloadable updates. So it's a good idea to install updates for your software as soon as they become available.

Just be wary of fake emails about bogus updates. Only use the update software that comes with your computer – don't click on links in emails. 

You'll also want to make sure you're always using the most up-to-date web browser. Modern browser software adds a layer of protection against fake websites. So when you're looking at websites, your browser can warn you if you're visiting a fake or suspicious website.

Check your privacy settings

If you use social-networking websites, double-check your privacy settings to make sure you only share personal information with people you trust.

On these sites, you tend to share personal things about yourself. Anything from your mother's maiden name to the name of the first school you went to, your address, birthday and telephone number can be found on social media. And all this information is useful to people who want to steal your identity or break into your accounts.

Be aware of common scams


These are email scams where a fraudster will send you an email pretending to be a legitimate organisation such as a bank. The email will ask you to update or verify your personal or financial information. Sometimes you'll be sent to log on to a website that looks legitimate, but is fake. The objective is to encourage you to provide your secure information so the fraudster can hack into your accounts.


This kind of fraud is a social-engineering scam. It's the telephone equivalent of phishing, where a fraudster will phone you and try to trick you into giving your private information. Be wary of anyone who calls you asking you to disclose information. If we call you, we will ask you some simple security questions about your personal and financial details to make sure we're talking to the right person. However, we'll never ask you for information that could be used to access your account such as your PIN, CVV number from your card or HSBC Secure Key. If in doubt, always end the call and ring us back. Anyone legitimately calling from HSBC will not be upset if you say you prefer to phone us directly.


This is the text message equivalent of phishing or vishing. Like them, it's an attempt to trick you into handing over your personal information.

How to spot fake emails and websites

Fraudsters use fake emails and websites to get you to unknowingly give away your passwords or bank details. Look out for these warning signs to spot them:

  • poor design, typos or bad grammar
  • the sender's email address doesn't match the name of the company domain it's meant to be coming from
  • asking you to do something unusual
  • asking for personal information
  • an email link that says it's going somewhere that it isn't (tip: hover over a link in an email to see its real destination)
  • a website that doesn't display the padlock symbol in their address bar when you log in 

To report phishing websites or suspicious emails, contact us via We'll send you an automatic response to let you know we've received your email but are unable to provide personalised responses to this mailbox.

Tips to stay safe

  • don't download any free software on your computer unless you're certain it's safe
  • use anti-virus software, and make sure it's up to date 
  • change your passwords regularly
  • don't respond to unsolicited emails requesting information, and don't follow any links in them either
  • make sure you're on a secure website before submitting banking or other sensitive information. Secure websites begin with 'https://' instead of 'http://'. They'll also contain a padlock icon on the address bar

You might be interested in


Learn more about our initiative to safeguard your hard-earned money from financial crime.


Stay safe when you do your banking online with the HSBC Secure Key. 


If you suspect there's been fraud on your account, find out your next steps.

Approved and issued by HSBC Bank Malta p.l.c, (116, Archbishop Street, Valletta VLT 1444). HSBC is a public limited company regulated by the Malta Financial Services Authority and licensed to carry out the business of banking in terms of the Banking Act (Cap.371 of the Laws of Malta). HSBC is licensed to conduct investment services in terms of the Investment Services Act (Cap.370. of the Laws of Malta) and is enrolled as a Tied Insurance Intermediary for HSBC Life Assurance (Malta) Ltd under the Insurance Distribution Act (Cap. 487 of the Laws of Malta).




The Site is primarily intended for those who access it from within Malta. Because of this we cannot guarantee that the Site or the information thereon complies with law or regulation of other countries, or is appropriate for use, in other places. You are wholly responsible for use of the Site by any person using your computer and you must ensure that any such person complies with these Terms. The information provided on this Site is not intended for distribution to, or use by, any person in any jurisdiction where such distribution or use would be contrary to law or regulation. This Site should not be considered as communicating any invitation or inducement to engage in banking or investment activity or any offer to buy or sell any securities or other instruments outside Malta.

Listening to what you have to say about our services matters to us.