Secure online transactions

Debit cards

As part of our continuous efforts to offer innovative banking solutions to our customers, HSBC now offers usage of Debit Cards for online transactions through QPay.

QPay is a centralized payment gateway, which allows individuals to make payments online using NAPS-enabled (National ATM and Point of Sale Switch) debit cards. Customers can shop and pay online at merchant websites using their Debit Card by inputting a One Time Password (OTP) received via SMS on their registered mobile number and their PIN code as an additional security step to complete the transaction.

Credit cards

HSBC offers you protection when shopping online with Verified by VISA® / MasterCard® SecureCodeTM which provides you with an additional layer of online shopping security when you shop at participating retailers.

How Verified by VISA® / MasterCard® SecureCodeTM works

  • Shop online at participating retailers showing the Verified by VISA® / MasterCard® SecureCodeTM logo
  • You'll see a message asking you to click to request a PIN Number
  • A unique PIN number will be sent via SMS to the mobile phone number you have registered with HSBC
  • Enter the PIN number and your transaction is confirmed

Stay secure: take a minute to update your details

Secure online transactions with your credit or debit card will only work effectively if we have your up-to-date mobile phone number. Please take a minute to make sure that all your details are correct – especially your mobile phone number.

Updating your contact details is easy

  1. Log in to your online banking account and update your contact details
  2. Call us on our phone banking numbers and follow the instructions to update your contact details
  3. Visit your nearest branch and update your contact details by filling in a form. It's that simple.

Stay safe online

How you can stay safe when you shop online

  • Make sure your PC is protected − do you have anti-virus software installed plus the latest browser?
  • Always log out after shopping online – especially if you're on a shared computer
  • Look for the padlock − a padlock symbol in the corner of your browser window means your information is secure
  • Make sure HSBC has an up-to-date mobile phone number as VISA® / MasterCard® SecureTM will only work effectively if we have the right mobile phone number for you

Frequently asked questions

What is Verified by VISA® / MasterCard® SecureCodeTM?

Verified by VISA® / MasterCard® SecureCodeTM is provided to you by VISA® / MasterCard® and HSBC. It provides added security when you shop online against unauthorised use of your enrolled card.

 

How does Verified by VISA® / MasterCard® SecureCodeTM work?

Every time you make an online purchase at a participating retailer, a screen will show where you will be able to request a One Time Password (OTP). This 6 digit password will be sent to your mobile number registered with us. This Password will need to be input on the space provided for the PIN. When you correctly enter your password, HSBC confirms that you are the authorised Cardholder and your purchase is completed.

 

How does Verified by VISA® / MasterCard® SecureCodeTM protect me?

When you correctly enter your password during an online purchase at a participating retailer, you confirm that you are the authorised Cardholder and your purchase is then completed. If the correct password is not entered, the purchase will not go through. So even if someone knew your card number, they would not be able to use your account at that retailer.

 

Is Verified by VISA® / MasterCard® SecureCodeTM easy to use?

Yes. When you make an online purchase and enter your card payment information, a screen from HSBC will automatically appear and prompt you to request for a One Time Password (OTP) which will be 6 digits. This password will be sent to your mobile number registered with us. This PIN will need to be input on the space provided for the PIN. When you correctly enter your password, HSBC confirms that you are the authorised Cardholder and your purchase is completed.

 

Will I need to get a new Card to use Verified by VISA® / MasterCard® SecureCodeTM?

No, there is no need to get a new Card. Verified by VISA® / MasterCard® SecureCodeTM works with your existing HSBC Cards.

 

What are the system requirements for Verified by VISA® / MasterCard® SecureCodeTM?

Verified by VISA® / MasterCard® SecureCodeTM works with most browsers. You should be sure that Java Script is enabled; if it isn't, Verified by VISA® / MasterCard® SecureCodeTM may not work properly.

 

Can I use Verified by VISA® / MasterCard® SecureCodeTM from any computer?

Yes. There's no special software to install, so you can shop from any computer and still receive the added protection provided by Verified by VISA® / MasterCard® SecureCodeTM. This would also work from Tablets / Smartphones as well.

 

What happens when my card expires?

All VISA® / MasterCard® cards issued by HSBC are automatically registered for Verified by VISA® / MasterCard® SecureCodeTM. If your card has expired, the Verified by VISA® / MasterCard® SecureCodeTM will not work. Once you receive the renewed credit card, the Verified by VISA® / MasterCard® SecureCodeTM would work. The renewed credit cards are sent a couple of months prior to expiry of your credit card.

 

What happens if I cancel my existing card then get a new one with a different account number from HSBC?

All VISA® / MasterCard® credit cards issued by HSBC are registered for Verified by VISA® / MasterCard® SecureCodeTM. Once you start using the new HSBC Card issued to you, Verified by VISA® / MasterCard® SecureCodeTM would work for the card.

 

Do I need to register for Verified by VISA® / MasterCard® SecureCodeTM?

All VISA® / MasterCard® credit cards issued by HSBC are pre-registered for Verified by VISA® / MasterCard® SecureCodeTM. Once you start using the new HSBC Credit Card issued to you, Verified by VISA® / MasterCard® SecureCodeTM would work for the card.

 

If I have a Supplementary Credit Card, Will Verified by VISA® / MasterCard® SecureCodeTM work for that as well?

All VISA® / MasterCard® credit cards, primary or supplementary credit cards, issued by HSBC are registered for Verified by VISA® / MasterCard® SecureCodeTM. The process for Verified by VISA® / MasterCard® SecureCodeTM remains the same for Primary and Supplementary cards. The OTP would be sent to the mobile number registered for HSBC for the supplementary card number.

 

Is my password case sensitive?

No, the One Time Password (OTP) is only numeric and will be sent to your registered mobile number with HSBC.