• Discover the ease of banking on the go

    HSBC Mobile Banking app

  • Download App
Close
  • Smart app screen shot
  • Smart app screen shot
  • Smart app screen shot

Cards online security

Experience extra levels of online security with HSBC Cards

Make secure online purchases with your HSBC Cards

HSBC offers you even more protection when shopping online. We have partnered with Visa® and MasterCard® to provide you with an additional layer of online shopping security when using your HSBC Debit and Credit Cards.

Thanks to Verified by VISA® and MasterCard® SecureCodeTM, using your HSBC Debit and Credit Cards online is even more secure.

Our Online Security is evolving

In the past we've asked you to enter a One Time Password (OTP) as a Unique PIN security information when shopping online but we know this can be inconvenient. So we're making some changes that should mean we ask for this less often although we may still have to in some circumstances.

How Verified by VISA® / MasterCard® SecureCodeTM works:

1. Shop online at participating retailers who show the Verified by VISA® and/or MasterCard® SecureCodeTM logo

2. You may see a message asking you to click to request a One Time PIN (OTP). If you do get the message and request the OTP, please proceed to steps 3 and 4 below. Else, you may proceed with the transaction

3. An OTP will immediately be sent to your registered mobile phone number via Text Message

4. Enter the OTP and your transaction will be confirmed

If you’d still like to receive a unique PIN for every transaction, you can simply call our Call Center number on the back of your card and they will help you set this up

It’s never been more important to update your details

HSBC Online Security in association with Verified by VISA® and MasterCard® SecureCodeTM will only work effectively if we have an up-to-date mobile phone number for your primary and supplementary cards. Please take a minute to make sure all your details are correct.

Updating your contact details is as easy:

1. Log in to your Personal Online Banking account and update your contact details; or
2. Call us on our Telephone Banking numbers and follow the instructions to update your contact details; or
3. Visit your nearest branch or customer service unit and update your contact details by filling in a form.

It's that simple

How you can stay safe when you shop online

  • Make sure your device is protected – do you have anti-virus software installed plus the latest browser?
  • Always log off after shopping online – especially if you’re on a shared computer
  • Look for the padlock – a padlock symbol in the corner of your browser window means your information is secure
  • Make sure HSBC has an up-to-date mobile phone number as Verified by VISA® and MasterCard® SecureCodeTM will only work effectively if we have the right mobile phone number for you.

What is Verified by VISA® / MasterCard® SecureCode™?

Verified by VISA / MasterCard SecureCode is provided to you by Visa / MasterCard and HSBC. It provides added security when you shop online against unauthorised use of your enrolled card.

How does Verified by VISA / MasterCard SecureCode work?

Whenever you make an online purchase at a participating retailer, a screen will appear to either show you where you will be able to request a One Time PIN (OTP) or to confirm the transaction. The 6 digit OTP will be sent to your mobile phone number registered with us. This OTP will need to be input on the space provided for the OTP. When you correctly enter your OTP, HSBC confirms that you are the authorised Cardholder and your purchase is completed.

How does Verified by VISA / MasterCard SecureCode protect me?

When you correctly enter your OTP or confirm your transaction during an online purchase at a participating retailer, you confirm that you are the authorised Cardholder and your purchase is then completed. If the correct OTP is not entered, the purchase will not go through. And if you’re not prompted for an OTP and you are only required to confirm the transaction, the purchase will go through securely.

Will all my purchases at retailers that accept Verified by VISA / MasterCard SecureCode require an OTP?

With the recent security enhancements that we have carried out, we may ask for the OTP less often although we may still have to in some circumstances. In the instances where the OTP is not requested, you will still get a pop-up page that will require you to confirm the transaction.

Is Verified by VISA / MasterCard SecureCode easy to use?

Yes. When you make an online purchase and enter your card payment information, a screen from HSBC will automatically appear and prompt you to either request for an OTP which will be 6 digits or to confirm the transaction. The OTP will be sent to your mobile phone number registered with us.

What happens if I always want to be prompted for a Unique PIN for my online transactions ?

Simply call our 24-hr Call center number on the back of your card to request for a one time set up to ensure you receive your Unique PIN. However, this feature is applicable only to participating retailers that accept Verified by VISA / MasterCard SecureCode.

Will I need to get a new Card to use Verified by VISA / MasterCard SecureCode?

No, there is no need to get a new Card. Verified by VISA / MasterCard SecureCode works with your existing HSBC Cards.

What are the system requirements for Verified by VISA / MasterCard SecureCode?

Verified by VISA / MasterCard SecureCode works with most browsers. You should be sure that Java Script is enabled; if it isn’t, Verified by VISA / MasterCard SecureCode may not work properly.

Can I use Verified by VISA / MasterCard SecureCode from any computer?

Yes. There's no special software to install, so you can shop from any computer and still receive the added protection provided by Verified by VISA / MasterCard SecureCode. This would also work from Tablets / Smartphones as well.

What happens when my card expires?

All the cards issued by HSBC are automatically registered for Verified by VISA / MasterCard SecureCode. If your card has expired, the Verified by VISA / MasterCard SecureCode will not work. Once you receive the renewed credit card, the Verified by VISA / MasterSecurecode by Mastercard would work. The renewed cards are sent a couple of months prior to expiry of your card.

What happens if I cancel my existing card then get a new one with a different account number from HSBC?

All cards issued by HSBC are registered for Verified by VISA / MasterCard SecureCode. Once you start using the new HSBC Card issued to you, Verified by VISA / MasterCard SecureCode would work for the card.

Do I need to register for Verified by VISA / MasterCard SecureCode?                                               

All cards issued by HSBC are pre-registered for Verified by VISA / MasterCard SecureCode. Once you start using the new HSBC Card issued to you, Verified by VISA / MasterCard SecureCode would work for the card.

If I have a Supplementary Card, Will Verified by VISA / MasterCard SecureCode work for that as well?

All cards, primary or supplementary cards, issued by HSBC are registered for Verified by VISA / MasterCard SecureCode. The process for Verified by VISA / MasterCard SecureCode remains the same for Primary and Supplementary cards. The OTP would be sent to the mobile phone number registered for HSBC for the supplementary card number.

Is my OTP case sensitive?

No, the OTP is only numeric and will be sent to your registered mobile phone number with HSBC.
Shopping with Verified by VISA / MasterCard SecureCode

How do I use my Verified by VISA / MasterCard SecureCode password?

There is no need to log on or sign in. Every time you make an online purchase at a participating retailer, a screen will show where you will be able to request for the OTP or to confirm with the transaction. The 6 digit OTP which will be sent to your mobile phone number registered with us. The OTP will need to be input on the screen on the space provided for the OTP. When you correctly enter your OTP or confirm your transaction, HSBC confirms that you are the authorised Cardholder and your purchase is completed.

How will Verified by VISA / MasterCard SecureCode impact my purchase?

Aside from the added protection that Verified by VISA / MasterCard SecureCode provides, the only impact to your purchase will be that when the additional page appears, you will need to either type in your OTP or confirm your transaction. The OTP will be sent to the mobile number registered with us. Once the OTP is entered, it will take a few moments for the transaction to go through.

Do I have to register or log on before shopping?

No. Verified by VISA / MasterCard SecureCode works automatically at participating retailers. There is no special log on required. Simply shop online as you normally do, enter the enrolled card payment information, and when you are at the final step of your purchase on a participating retailer's site, the additional page will appear automatically.

What should I do if I purchase online but no Verified by VISA / MasterCard SecureCode request screen appears?

You should do the following:

  • Make sure you are entering the payment information for your enrolled card and have submitted a final checkout request.
  • Be sure your Internet settings are set to enable Java Script.
  • If you have checked 1 and 2 above and continue to experience difficulty, please contact HSBC at the number on the reverse of your Card or on the HSBC website.

Can I make a purchase at retailers that accept Verified by VISA / MasterCard SecureCode but do not participate in the Verified by VISA / MasterCard SecureCode service?

Yes, but you will not be asked for your Verified by VISA / MasterCard SecureCode OTP or confirmation at these retailers. To complete your purchase, simply follow the traditional checkout process.

How will the online retailer know that my card is protected by Verified by VISA / MasterCard SecureCode?

When you use a Card you have enrolled in the Verified by VISA / MasterCard SecureCode service at participating online retailers, your Card number is automatically recognized via a Visa / MasterCard directory.

How do I know whether a retailer participates in Verified by VISA / MasterCard SecureCode or not?

Participating retailers will display the Verified by VISA / MasterCard SecureCode logo on their site. You can also click on the merchant link on the home page of the retailer to view a list of participating retailers.

What happens if I did not receive my One Time Password (OTP)?

The One Time PIN (OTP) is sent to the registered mobile phone number with HSBC.

If the mobile phone number registered with us is incorrect, please update your mobile phone number by calling the number on the reverse of your Card or on the HSBC website. You can alternately visit any of our branches or Customer Service Units to update the mobile phone number. The service will not be available immediately. You will be able to complete your online transactions only after 24 hours of updation of your mobile phone number with HSBC.

If you still face problems in receipt of the OTP, please contact HSBC at the number on the reverse of your Card or on the HSBC website and register a complaint.

What happens if I input the wrong OTP by mistake?

The transaction will not go through if you input the wrong OTP. Please try to input the right OTP which you have received on the registered mobile phone number with HSBC. If you input the right OTP, the transaction will go through.

What happens if I input the wrong PIN thrice?

If you input the wrong PIN thrice, the transaction will not go through and transaction screen will close and you will be guided back to the merchant web page. You will have to start the transaction process again.

What happens if I input the wrong credit card number?

The transaction will be declined at the outset since the card number will not be recognized as issued by HSBC.

What happens if I am travelling overseas and not using the mobile phone number registered with HSBC?

The OTP is sent to the registered mobile phone number with HSBC. In case you are not carrying the mobile phone number registered with HSBC, our suggestion is to register the number which you are carrying with you with HSBC by calling our Customer Services or update on the HSBC Website. Once you are back and start using the local mobile phone number, you can register that with HSBC again.

 

Security and Privacy

How does Verified by VISA / MasterCard SecureCode protect me?

When you make an online purchase and enter your card payment information, a screen from HSBC will automatically appear and prompt you to either request for an OTP which will be 6 digits or to confirm the transaction. The OTP will be sent to your mobile phone number registered with us. The OTP will need to be input on the screen on the space provided for the OTP. When you correctly enter the OTP, HSBC confirms that you are the authorised Cardholder and your purchase is completed. At a participating retailer, a screen will appear automatically asking you to either request an OTP or to confirm your transaction.

How will the online retailer know that my card is protected by Verified by VISA / MasterCard SecureCode?

When you use a card which is enrolled in Verified by VISA / MasterCard SecureCode at participating online retailers, the retailer does not know that your account is protected until you complete the purchase and confirm your identity to your issuer. At that point, your issuer guarantees your purchase to the retailer, but never shares your OTP.

Where can I view Terms and Conditions?

You should visit HSBC’s website for viewing the HSBC Card Terms and Conditions. You can click on the link on the HSBC Verified by VISA / MasterCard SecureCode transaction screens.

Does the service use cookies?

Yes. The Verified by VISA / MasterCard SecureCode service does use cookies. Both session cookies and permanent cookies are used.

You are leaving hsbc.ae

This link may allow you to access another HSBC Group website. Please read the terms and conditions of the linked website, which may differ from the terms and conditions of HSBC Bank Middle East Limited website.

Arabic

Cards online security

Cards online security

Make secure online purchases with your HSBC Cards

About HSBC Cards online security

HSBC offers you even more protection when shopping online. We have partnered with Visa® and MasterCard® to provide you with an additional layer of online shopping security when using your HSBC Debit and Credit Cards.

>

Thanks to Verified by VISA® and MasterCard® SecureCodeTM, using your HSBC Debit and Credit Cards online is even more secure.

Our Online Security is evolving

In the past we've asked you to enter a One Time Password (OTP) as a Unique PIN security information when shopping online but we know this can be inconvenient. So we're making some changes that should mean we ask for this less often although we may still have to in some circumstances.

How Verified by VISA® / MasterCard® SecureCodeTM works:

1. Shop online at participating retailers who show the Verified by VISA® and/or MasterCard® SecureCodeTM logo

2. You may see a message asking you to click to request a One Time PIN (OTP). If you do get the message and request the OTP, please proceed to steps 3 and 4 below. Else, you may proceed with the transaction

3. An OTP will immediately be sent to your registered mobile phone number via Text Message

4. Enter the OTP and your transaction will be confirmed

If you’d still like to receive a unique PIN for every transaction, you can simply call our Call Center number on the back of your card and they will help you set this up

It’s never been more important to update your details

HSBC Online Security in association with Verified by VISA® and MasterCard® SecureCodeTM will only work effectively if we have an up-to-date mobile phone number for your primary and supplementary cards. Please take a minute to make sure all your details are correct.

Updating your contact details is as easy:

1. Log in to your Personal Online Banking account and update your contact details; or
2. Call us on our Telephone Banking numbers and follow the instructions to update your contact details; or
3. Visit your nearest branch or customer service unit and update your contact details by filling in a form.

It's that simple

Stay safe online

How you can stay safe when you shop online

  • Make sure your device is protected – do you have anti-virus software installed plus the latest browser?
  • Always log off after shopping online – especially if you’re on a shared computer
  • Look for the padlock – a padlock symbol in the corner of your browser window means your information is secure
  • Make sure HSBC has an up-to-date mobile phone number as Verified by VISA® and MasterCard® SecureCodeTM will only work effectively if we have the right mobile phone number for you.

FAQs

What is Verified by VISA® / MasterCard® SecureCode™?

Verified by VISA / MasterCard SecureCode is provided to you by Visa / MasterCard and HSBC. It provides added security when you shop online against unauthorised use of your enrolled card.

How does Verified by VISA / MasterCard SecureCode work?

Whenever you make an online purchase at a participating retailer, a screen will appear to either show you where you will be able to request a One Time PIN (OTP) or to confirm the transaction. The 6 digit OTP will be sent to your mobile phone number registered with us. This OTP will need to be input on the space provided for the OTP. When you correctly enter your OTP, HSBC confirms that you are the authorised Cardholder and your purchase is completed.

How does Verified by VISA / MasterCard SecureCode protect me?

When you correctly enter your OTP or confirm your transaction during an online purchase at a participating retailer, you confirm that you are the authorised Cardholder and your purchase is then completed. If the correct OTP is not entered, the purchase will not go through. And if you’re not prompted for an OTP and you are only required to confirm the transaction, the purchase will go through securely.

Will all my purchases at retailers that accept Verified by VISA / MasterCard SecureCode require an OTP?

With the recent security enhancements that we have carried out, we may ask for the OTP less often although we may still have to in some circumstances. In the instances where the OTP is not requested, you will still get a pop-up page that will require you to confirm the transaction.

Is Verified by VISA / MasterCard SecureCode easy to use?

Yes. When you make an online purchase and enter your card payment information, a screen from HSBC will automatically appear and prompt you to either request for an OTP which will be 6 digits or to confirm the transaction. The OTP will be sent to your mobile phone number registered with us.

What happens if I always want to be prompted for a Unique PIN for my online transactions ?

Simply call our 24-hr Call center number on the back of your card to request for a one time set up to ensure you receive your Unique PIN. However, this feature is applicable only to participating retailers that accept Verified by VISA / MasterCard SecureCode.

Will I need to get a new Card to use Verified by VISA / MasterCard SecureCode?

No, there is no need to get a new Card. Verified by VISA / MasterCard SecureCode works with your existing HSBC Cards.

What are the system requirements for Verified by VISA / MasterCard SecureCode?

Verified by VISA / MasterCard SecureCode works with most browsers. You should be sure that Java Script is enabled; if it isn’t, Verified by VISA / MasterCard SecureCode may not work properly.

Can I use Verified by VISA / MasterCard SecureCode from any computer?

Yes. There's no special software to install, so you can shop from any computer and still receive the added protection provided by Verified by VISA / MasterCard SecureCode. This would also work from Tablets / Smartphones as well.

What happens when my card expires?

All the cards issued by HSBC are automatically registered for Verified by VISA / MasterCard SecureCode. If your card has expired, the Verified by VISA / MasterCard SecureCode will not work. Once you receive the renewed credit card, the Verified by VISA / MasterSecurecode by Mastercard would work. The renewed cards are sent a couple of months prior to expiry of your card.

What happens if I cancel my existing card then get a new one with a different account number from HSBC?

All cards issued by HSBC are registered for Verified by VISA / MasterCard SecureCode. Once you start using the new HSBC Card issued to you, Verified by VISA / MasterCard SecureCode would work for the card.

Do I need to register for Verified by VISA / MasterCard SecureCode?                                               

All cards issued by HSBC are pre-registered for Verified by VISA / MasterCard SecureCode. Once you start using the new HSBC Card issued to you, Verified by VISA / MasterCard SecureCode would work for the card.

If I have a Supplementary Card, Will Verified by VISA / MasterCard SecureCode work for that as well?

All cards, primary or supplementary cards, issued by HSBC are registered for Verified by VISA / MasterCard SecureCode. The process for Verified by VISA / MasterCard SecureCode remains the same for Primary and Supplementary cards. The OTP would be sent to the mobile phone number registered for HSBC for the supplementary card number.

Is my OTP case sensitive?

No, the OTP is only numeric and will be sent to your registered mobile phone number with HSBC.
Shopping with Verified by VISA / MasterCard SecureCode

How do I use my Verified by VISA / MasterCard SecureCode password?

There is no need to log on or sign in. Every time you make an online purchase at a participating retailer, a screen will show where you will be able to request for the OTP or to confirm with the transaction. The 6 digit OTP which will be sent to your mobile phone number registered with us. The OTP will need to be input on the screen on the space provided for the OTP. When you correctly enter your OTP or confirm your transaction, HSBC confirms that you are the authorised Cardholder and your purchase is completed.

How will Verified by VISA / MasterCard SecureCode impact my purchase?

Aside from the added protection that Verified by VISA / MasterCard SecureCode provides, the only impact to your purchase will be that when the additional page appears, you will need to either type in your OTP or confirm your transaction. The OTP will be sent to the mobile number registered with us. Once the OTP is entered, it will take a few moments for the transaction to go through.

Do I have to register or log on before shopping?

No. Verified by VISA / MasterCard SecureCode works automatically at participating retailers. There is no special log on required. Simply shop online as you normally do, enter the enrolled card payment information, and when you are at the final step of your purchase on a participating retailer's site, the additional page will appear automatically.

What should I do if I purchase online but no Verified by VISA / MasterCard SecureCode request screen appears?

You should do the following:

  • Make sure you are entering the payment information for your enrolled card and have submitted a final checkout request.
  • Be sure your Internet settings are set to enable Java Script.
  • If you have checked 1 and 2 above and continue to experience difficulty, please contact HSBC at the number on the reverse of your Card or on the HSBC website.

Can I make a purchase at retailers that accept Verified by VISA / MasterCard SecureCode but do not participate in the Verified by VISA / MasterCard SecureCode service?

Yes, but you will not be asked for your Verified by VISA / MasterCard SecureCode OTP or confirmation at these retailers. To complete your purchase, simply follow the traditional checkout process.

How will the online retailer know that my card is protected by Verified by VISA / MasterCard SecureCode?

When you use a Card you have enrolled in the Verified by VISA / MasterCard SecureCode service at participating online retailers, your Card number is automatically recognized via a Visa / MasterCard directory.

How do I know whether a retailer participates in Verified by VISA / MasterCard SecureCode or not?

Participating retailers will display the Verified by VISA / MasterCard SecureCode logo on their site. You can also click on the merchant link on the home page of the retailer to view a list of participating retailers.

What happens if I did not receive my One Time Password (OTP)?

The One Time PIN (OTP) is sent to the registered mobile phone number with HSBC.

If the mobile phone number registered with us is incorrect, please update your mobile phone number by calling the number on the reverse of your Card or on the HSBC website. You can alternately visit any of our branches or Customer Service Units to update the mobile phone number. The service will not be available immediately. You will be able to complete your online transactions only after 24 hours of updation of your mobile phone number with HSBC.

If you still face problems in receipt of the OTP, please contact HSBC at the number on the reverse of your Card or on the HSBC website and register a complaint.

What happens if I input the wrong OTP by mistake?

The transaction will not go through if you input the wrong OTP. Please try to input the right OTP which you have received on the registered mobile phone number with HSBC. If you input the right OTP, the transaction will go through.

What happens if I input the wrong PIN thrice?

If you input the wrong PIN thrice, the transaction will not go through and transaction screen will close and you will be guided back to the merchant web page. You will have to start the transaction process again.

What happens if I input the wrong credit card number?

The transaction will be declined at the outset since the card number will not be recognized as issued by HSBC.

What happens if I am travelling overseas and not using the mobile phone number registered with HSBC?

The OTP is sent to the registered mobile phone number with HSBC. In case you are not carrying the mobile phone number registered with HSBC, our suggestion is to register the number which you are carrying with you with HSBC by calling our Customer Services or update on the HSBC Website. Once you are back and start using the local mobile phone number, you can register that with HSBC again.

 

Security and Privacy

How does Verified by VISA / MasterCard SecureCode protect me?

When you make an online purchase and enter your card payment information, a screen from HSBC will automatically appear and prompt you to either request for an OTP which will be 6 digits or to confirm the transaction. The OTP will be sent to your mobile phone number registered with us. The OTP will need to be input on the screen on the space provided for the OTP. When you correctly enter the OTP, HSBC confirms that you are the authorised Cardholder and your purchase is completed. At a participating retailer, a screen will appear automatically asking you to either request an OTP or to confirm your transaction.

How will the online retailer know that my card is protected by Verified by VISA / MasterCard SecureCode?

When you use a card which is enrolled in Verified by VISA / MasterCard SecureCode at participating online retailers, the retailer does not know that your account is protected until you complete the purchase and confirm your identity to your issuer. At that point, your issuer guarantees your purchase to the retailer, but never shares your OTP.

Where can I view Terms and Conditions?

You should visit HSBC’s website for viewing the HSBC Card Terms and Conditions. You can click on the link on the HSBC Verified by VISA / MasterCard SecureCode transaction screens.

Does the service use cookies?

Yes. The Verified by VISA / MasterCard SecureCode service does use cookies. Both session cookies and permanent cookies are used.

Don't have an HSBC Credit Card?

Apply now
 

Apply online

 

Verified by VISA Terms and conditions apply

MasterCard SecureCode Terms and conditions apply apply

You are leaving hsbc.ae

This link may allow you to access a non - HSBC website. HSBC Bank Middle East Limited has no control over the linked website and is not liable for your use of it.

You are leaving hsbc.ae

This link may allow you to access a non - HSBC website. HSBC Bank Middle East Limited has no control over the linked website and is not liable for your use of it.

You are leaving hsbc.ae

This link may allow you to access a non - HSBC website. HSBC Bank Middle East Limited has no control over the linked website and is not liable for your use of it.

You are leaving hsbc.ae

This link may allow you to access another HSBC Group website. Please read the terms and conditions of the linked website, which may differ from the terms and conditions of HSBC Bank Middle East Limited website.