HSBC Expat's tips on how to protect yourself from fraud

• Update your operating system. Newer systems like Windows Vista and Mac OSX are more secure.
• Download security patches and updates. By choosing to receive automatic updates, you'll have the latest software as soon as it's available.
• Disable File and Printer Sharing on your computer to prevent unauthorised access.
• Use a current web browser - and keep it updated.
• Set your browser to block pop-ups.
• Turn your computer off when you're not using it. If you're not connected to the internet, you're not exposed to hackers and viruses.

• Use the latest anti-virus software to protect your computer against viruses and spam. When you register for Internet Banking, you can download McAfee® anti-virus software for free.
• Use an anti-spyware program.
• If your operating system has a built-in firewall, make sure it's enabled. Or install a separate firewall to block hackers.
• Use a secure password to stop anyone accessing the files on your computer.
• Use encryption software to protect wireless devices like your laptop, PDA and mobile phone.

• Use Rapport software from the security experts at Trusteer to safeguard your HSBC Expat Internet Banking by locking down the connection between your internet browser and HSBC. Rapport checks that you've accessed a genuine web site, and if you haven't, then it stops your information going to a counterfeit web site.
• Log on to Internet Banking every month to check you recognise all the transactions. By monitoring your accounts regularly you'll spot anything unusual fast.
• Use Internet Banking to regularly check your personal contact details are correct and kept up to date.
• Never access your online accounts on public computers in libraries, internet cafes and schools. You can't guarantee these computers are secure - and you never know who might be looking over your shoulder.
• Look for https in the web address - and the locked padlock symbol in your browser status bar at the bottom of the page. These tell you the page is secure.

For more information on internet security, visit www.getsafeonline.org

• Never tell anyone your password. We will never ask you for your full password.
• Memorise your password. Don't write it down or store it on your computer or mobile phone.
• Change your passwords and memorable question regularly - at least every 90 days.
• Use a combination of upper and lower case letters, numbers and symbols.

Browsing the internet

• Don't respond to unsolicited requests for personal or account information.
• Don't give out personal information to blogs, online forums and other social networking sites.
• If you see a strange error message, don't click on it or respond to it - and run a virus check on your computer.
• Scan your computer files regularly, at least once a week.
• Don't install software or run programs unless you know they're from a reputable source.

Shopping online

• Choose well-known, reputable sites - and type the web address directly into the address bar.
• Make sure the site is secure - and check that it will encrypt your debit/credit card details. Look for https in the address and the locked padlock symbol in your browser status bar at the bottom of the page.
• Add an extra layer of security by registering for a service like MasterCard SecureCode or Verified by Visa.
• As well as safeguarding HSBC Expat Internet Banking, use Rapport software from the security experts at Trusteer to lock down the connection between your internet browser and your sensitive web sites and check that you've accessed the genuine web site.

• Add expat@hsbc.com to your email account address book - this stops HSBC emails being filtered to junk, and lets you know the email is valid.
• Don't reply to any email claiming to be from HSBC if it asks for personal information such as passwords or account numbers - we never ask for this information by email.
• Don't enter your details if an email claiming to be from HSBC links to the Internet Banking log on page, or any page that ask you to enter details. Don't open an email from someone you don't know. Read the subject line carefully - and don't be taken in by a friendly tone or urgent request.
• Turn off the preview pane in your email program.
• Don't click on a link or attachment in an unrecognised email, particularly if it's asking you to respond to an urgent request - or if the attached file ends in .exe.
• Use your junk mail filter - and delete email from unknown sources immediately.
• Don't forward chain emails - they can contain harmful viruses.

• Avoid sharing your handsets with others and use your own one to log on
• Do not leave your handset unattended after log on to internet or mobile banking. Always log off properly when you are finished with it
• Setup auto-lock and enable a passcode lock to prevent unauthorized access of your handset

• Use default browsers originally provided with the handset rather than newly installed browsers downloaded from other sources
• Don't use 'jailbroken' handsets, which may have a security loophole, to log on to internet or mobile banking
• Don't install applications on your handset from untrusted sources. Stick to sources such as the Apple iStore or Android Marketplace

• Do not store your internet or mobile banking username and/or password on your handset
• When using Wi-Fi connection, use trusted Wi-Fi networks or service providers and enable security protection such as Wi-Fi Protected Access (WPA), if possible
• Install and update to the latest operating system, anti-virus and anti-spyware software regularly on your handset, whenever they are available
• HSBC Mobile Banking website has adopted EV SSL Certificate (Extended Validation SSL Certificate). For Safari browser, a padlock and the bank name will be shown in green at the top of the browser. (Note: the padlock and the bank name may be hidden on some screens and they will be shown by scrolling down the screen manually.)

• Memorise your PIN. Don't write it down or keep it in your wallet or purse.
• Cover the ATM keypad when you're entering your PIN.
• Try to use ATMs under video surveillance - or ones located inside a bank.
• Avoid using ATMs at night. This is when most ATM crime takes place.
• Look out for shoulder surfers - people with binoculars or cameras watching you enter your PIN.
• Don't accept offers of 'help'. If someone approaches you at an ATM, leave immediately.
• Be suspicious of signs telling you to use a specific ATM - it could be fitted with a skimming device that copies your card details.
• Report anything unusual or suspicious to your bank.

It's a good idea to change your PIN to a number you'll remember - but don't choose a PIN that's easy to guess. Here are some tips for choosing a new PIN.

• Make it a memorable date like your wedding anniversary or an historical event.
• Choose something quirky like the time your postman arrives or when your alarm goes off.
• Use part of a phone number you know by heart.
• If you're better with words, use the number of letters in each word of a phrase you'll remember. For example, I love my Mum becomes 1423.

• If your mail is left in a public place, pick it up promptly - don't leave it out overnight or over the weekend.
• If you're living or working abroad, get your mail redirected to a different address or register for online statements.
• Shred documents like bank statements, bills and application forms for credit cards and loans - anything that includes your name, address and other personal details.
• Check your monthly bills and statements - and report any transactions you don't recognise.
• If you don't receive a bill or statement when you expect it, contact the organisation straight away.
• If you move house, tell your bank, card providers and all the other organisations you deal with. And redirect mail from your old address for at least a year.

We monitor your HSBC Expat account to protect you from fraud. And we sometimes carry out security checks on transactions - so your transaction could be declined. We apologise if this causes you any inconvenience.

Before you leave the country

• Make sure your bank has your contact details, including your mobile number - so they can get in touch if they suspect fraudulent activity or detect unusual spending patterns on your account.
• Take several ways to pay - debit card, credit card, cash and travellers cheques.
• Tell your bank when you're going abroad - and take their contact details with you.

While you're away

• Protect your card as if it was cash - keep it with you all the time and watch transactions being carried out.
• If your card is lost or stolen, report it straight away.
• Be vigilant when you're using an ATM - and keep your PIN safe.

When you get home

• Check your statement carefully. And contact your bank immediately if there are any transactions you don't recognise.

If you receive an email asking for personal information or security details, don't reply or click on any links. It may look genuine, but it is likely to be someone 'phishing' for your details by directing you to a fake website.

How to spot a phishing email

• They often contain spelling and grammatical errors
• They give a fake web or email address like info@hsbc-security.com.
• They feature a logo that looks distorted
• They're mostly sent in bulk - so the email might not be addressed to you personally.
• They often ask you to click on a link to confirm or validate your security details - and they threaten to close your account if you don't.
• Some ask you to send money to a worthy cause.
• The web address isn't quite right.
• The padlock symbol is in the wrong place. It should be in your browser status bar at the bottom of the page, not within the page itself.
• When you double click on the padlock, you see a warning that the site address doesn't match the digital security certificate.
• Your browser tells you that the site is unsafe - or the address bar is highlighted red or yellow.
• You get an error message asking you to log on again.
• The phone number on the site doesn't match the number on your account statements.
• You can't link to a home page from the site.

If you receive a suspicious email or letter, you should report it immediately.

Fraudsters may contact you by telephone too. If you receive a call claiming to be from HSBC:

• Don't provide any information about your 6-digit Direct Banking PIN - we never ask for these details over the phone.
• If you have any doubts, end the call and contact us immediately on the telephone numbers you're familiar with.

If it sounds too good to be true, it's probably a scam. Be suspicious of mail that contains any of these offers or requests.

• Letters from your bank highlighting a problem and asking for your account details.
• Letters from your bank advising they have money waiting for you and require you to confirm your account/personal details.
• Pre-approved credit offers that charge a fee to get the card.
• Job descriptions asking you to pay for more information.
• Work at home schemes where you have to buy something before you can start.
• Donation requests for unregistered charities.
• Sweepstakes and lotteries where you have to pay to receive your prize - particularly ones based in a different country.

Card fraud can happen in restaurants, shops, petrol stations - anywhere you pay with plastic. Here are some tips to keep your card safe.

• Don't let it out of your sight.
• Don't let anyone swipe your card a second time through a skimming device.
• Don't let someone look over your shoulder when you're entering your PIN.
• Don't leave receipts or carbon copies behind. Take them home and destroy them.