• Avoid sharing your mobile device with others and use your own mobile device to log-in your online account
• Do not leave your mobile device unattended after log-in to the Internet website. Always log off properly when you have finished browsing  
• Set up auto-lock and enable passcode lock to prevent unauthorised access of your mobile device  

• Use default browsers originally provided by mobile device rather than newly installed browsers downloaded from other sources
• Do not use any jailbroken mobile device which may have security loopholes to log-in to Internet website
• Do not install applications on your mobile device from mistrusted sources

• Do not store your Internet website username and password on your mobile devices  
• When using Wi-Fi connection, use trusted Wi-Fi networks or service providers and enable security protection such as Wi-Fi Protected Access (WPA), if possible
• Install and update the latest anti-virus and anti-spyware software regularly on your mobile device, whenever they are available
• HSBC Internet website has adopted EV SSL Certificate (Extended Validation SSL Certificate). For Safari browser, a padlock and the bank name will be shown in green at the top of the browser. (Note: the padlock and the group name may be hidden at some screens and they will be shown up by scrolling down the screen manually.)

• From time to time, vulnerabilities are discovered in programs running on your PC. The publisher will then release a “patch” to correct this weakness. These weaknesses are regularly exploited by virus writers and hackers to gain unauthorised access to those PC’s that have not been patched.
• To check for patches and updates you should visit the publisher’s website, typically in their Download section.

• You may already be using anti-virus software but to be effective, the software should be updated on a regular basis with the latest virus definition files. If you are unsure how to do this, you should refer to the program's Help function.
• There are many effective programs to choose from, but the most common commercial products include McAfee, Symantec (Norton) and Sophos.
• It is also possible to obtain free anti-virus protection. A search for “free anti-virus” on Google will provide a list of the most popular ones.

• A personal firewall is another small program that helps protect your computer and its contents from outsiders on the Internet. When installed, it stops unauthorised traffic to and from your PC.
• There are many effective programs to choose from. Common commercial examples include Zone Labs, McAfee and Computer Associates.
• The widely recognised market leading free firewall is “Zone Alarm” from Zone Labs and there are many others to choose from. Zone Alarm is now used on over 20,000,000 PCs and has been awarded the PC World 2003 "World Class Award" for Best Firewall.

• Passwords are the key to your online account information. Avoid using the same password for different systems that are important to you. Doing so puts your money at risk should anyone discover this single password. For this reason, you are strongly advised to have a unique password for any services.

• Be different – Avoid using the same password for different services.
• Don’t be personal – Do not be tempted to use passwords that can be easily guessed, e.g. children’s names, pets' names, birth dates, telephone numbers.
• Never write them down – We strongly recommend that you never write down or otherwise record your passwords. If, however, you feel that you have no alternative but to do so, you should ensure that you never write down or otherwise record your passwords in a way that can be understood by somebody else.
• In any event, you should never disclose your Internet login details anywhere online except at your usual website which should be accessed in the normal way and never via a link in an email.

• Spyware is the term used to describe programs that run on your computer for the purpose of monitoring and recording the way in which you browse the web and the internet sites you visit. For example, spyware can combine information about your online behaviour with that of many other users in order to generate market research data. This information can be bought and sold by companies interested in improving the way websites are designed and how the internet is used.
• You may or may not wish for your internet usage to be monitored in this way. In addition, just as spyware can be used to improve the online experience it can also be used to extract personal information that you have entered, including passwords, telephone numbers, credit card numbers and identity card numbers.
• Spyware is often loaded onto a PC as part of a free download of another service - for example a service that claims to improve the performance of your PC. Sometimes your agreement to the download is requested in the small print, but spyware may also be loaded onto your PC without your agreement or knowledge.
• Spyware is not the same as a virus in that it only records what you do rather than altering how your machine works. Because of this, anti-virus software is not effective in identifying and removing spyware; you will need to download and run a specialised anti-spyware program.
• Anti-spyware security software currently available include McAfee, Spybot Search and Destroy, AdAware, Spyware Eliminator, Spyware Doctor and Microsoft antispyware. We strongly recommend that you install and use a reputable anti-spyware product to protect yourself against spyware on your PC.

 When you are using email / SMS notification service

• Do not forward or reply directly to any emails / SMS that ask you to provide personal information. Report to us immediately if any.
• Avoid using public computers. Instead, use your own computer to read personal emails.
• HSBC will not provide any hyperlinks to HSBC Internet Banking Logon page in our emails / SMS.
• HSBC will not ask you to click on a hyperlink or reply to any emails / SMS to confirm any personal data / password.