HSBC Bank Scam Call UK: How to Spot and Stop Phone Impersonators
HSBC scam callers sound convincing—but they're after your passwords and bank access. Here's how to tell the difference.
What is this scam?
HSBC bank scam calls are fraudulent phone calls where criminals impersonate HSBC customer service staff or fraud teams. The scammer claims to have detected unusual or suspicious activity on your account—perhaps a large transaction, login from a new location, or attempted fraud. They create urgency by suggesting your account is at risk or will be frozen unless you take immediate action. The caller asks you to verify personal information like your password, PIN, card details, or one-time codes sent to your phone.
They may also pressure you to install remote access software, download a banking app, or authorize a transfer to a 'safe' account. Importantly, scammers often use number spoofing technology to make the call appear to come from HSBC's genuine number, such as 03457 404 404, making it extremely difficult to spot the deception at first glance. The goal is always the same: gain access to your online banking or steal enough information to transfer funds or commit identity fraud.
Warning signs to look for
- HSBC staff will never ask you to share your password, PIN, or full card number over the phone, even if they claim to be the fraud team.
- The caller asks you to move money to another account for 'security' or to 'verify' your funds—legitimate banks never do this.
- You're pressured to act immediately or threatened with account closure or card cancellation if you don't comply.
- The caller asks you to install remote access software (like TeamViewer or AnyDesk) to 'check your account'—this gives them full control of your computer.
- They ask for a one-time code sent to your phone and claim to need it to 'protect' your account, when in fact they're trying to access it.
- The line quality is poor, background noise is unusual, or the caller struggles with basic account details you'd expect HSBC to know.
- You receive the call out of the blue after seeing an email or text that seemed suspicious—real banks verify issues through secure channels, not cold calls.
- The caller refuses to let you hang up and call HSBC back on the official number, or becomes aggressive when you suggest doing so.
How this scam works step by step
The scam typically starts with a phone call—the fraudster may have obtained your number from a data breach, phishing campaign, or stolen contact list. They open with a plausible story: 'We've detected unauthorised activity on your HSBC account' or 'Your card has been blocked due to suspicious transactions.' Because the caller ID shows an HSBC number (via spoofing), you're inclined to believe them. They then ask you to 'verify' your identity by confirming your full name, date of birth, sort code, and account number—information that appears on your statements and debit card.
The scammer may then ask you to log into online banking while on the phone, or to provide the one-time code HSBC sends for verification. With this information and your login credentials, they can access your account, view your balance, and set up payments or transfers. Some variants ask you to install remote access software so the fraudster can see your screen and control your mouse, extracting information directly. Others push you to transfer funds to a 'safe' account they control, claiming it will protect your money.
By the time you realise what's happened, the money is gone and the account details have been changed.
How to verify if it is genuine
If you receive a call claiming to be from HSBC, never trust the phone number displayed—always hang up and call HSBC directly. Use the number on the back of your debit card, on your bank statements, or the official HSBC website (www.hsbc.co.uk). Do not use any number the caller provides. When you call HSBC's genuine line, ask to speak to the fraud team and reference the call you just received. HSBC staff can confirm whether they attempted to contact you and about what. Genuine HSBC staff will never ask for your password, PIN, or full card number over the phone.
If the original caller asked for any of these, it was a scam. Additionally, HSBC's official channels (phone, secure online messaging, or in-branch) will never ask you to download remote access software, move money to another account for 'safety,' or install third-party apps to verify your identity. You can also check the NCSC's Suspicious Email Reporting Service at report@phishing.gov.uk for advice on phishing attempts, though for phone scams the focus should be on calling HSBC directly to verify.
What to do if you have already interacted
Act immediately if you suspect you've been scammed. First, hang up if the scammer is still on the line, and do not follow any further instructions. Second, call HSBC on the number on your bank card (not any number the scammer provided) and tell them what happened and what information you may have shared. Ask them to flag your account for fraud and monitor for suspicious activity. If you gave them your password, change it immediately using a secure device and HSBC's official website. If you shared your card details, contact HSBC to cancel your card and request a replacement.
If you installed remote access software on your computer, uninstall it immediately: go to Settings > Apps > Apps & Features, find the software (TeamViewer, AnyDesk, etc.), and uninstall it. Do not reconnect to the internet until you're sure it's removed. If you authorised a payment or transfer, call HSBC right away—if the payment hasn't cleared yet, they may be able to stop it. If money has left your account, report it to Action Fraud (0300 123 2040) and provide your case reference number to HSBC.
Document everything: the date, time, phone number shown, what was said, and any payments made.
Reporting this scam in the UK
Report HSBC bank scam calls to Action Fraud, the UK's national fraud reporting centre. Call 0300 123 2040 (Monday to Friday, 8 am to 8 pm; Saturday 8 am to 2 pm) or report online at www.actionfraud.police.uk. You'll receive a crime reference number, which you should share with HSBC. If you received a suspicious text message beforehand (e.g., claiming unusual account activity), forward it to 7726 (SPAM)—this alerts your mobile network and the NCSC. For phishing emails that may have preceded the call, report to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk.
Also contact Citizens Advice consumer helpline (0808 223 1133) if you need guidance on recovering funds or disputing charges. Tell HSBC immediately—they have fraud response teams trained to handle these scams and may be able to recover funds if the receiving account is traceable. Finally, consider reporting the phone number shown on your caller ID to your mobile provider, as it's likely a spoofed number being used by multiple scammers. Keep records of all communication with authorities and your bank.
Frequently asked questions
Is HSBC a legitimate bank, or should I never trust calls from them?
HSBC is a legitimate, fully regulated bank in the UK. However, scammers impersonate HSBC by spoofing their phone number, so you cannot trust the caller ID alone. Always hang up and call HSBC back on the official number from your card or statement. Genuine HSBC staff will never ask for your password, PIN, or full card number over an unsolicited call.
What should I do if I've already sent money to the scammer?
Call HSBC immediately on the number on your card and report the fraudulent transfer. If the payment hasn't cleared yet, HSBC may be able to stop it. Report the scam to Action Fraud (0300 123 2040) and get a crime reference number. Provide this to HSBC, who will investigate and may recover funds if the receiving account is identified. The sooner you act, the better your chances of recovery.
Can HSBC really see my account details if I don't give them my password?
No. If a caller asks you to stay on the line while you log into your account, or asks for your one-time codes, they are a scammer. HSBC staff already have access to your account internally and will never need you to log in or provide verification codes during an unsolicited call. Any request for these details is a red flag.
How do I report an HSBC scam call and will anything happen?
Report to Action Fraud (0300 123 2040 or www.actionfraud.police.uk), your phone provider (to block the spoofed number), and HSBC directly. While individual cases are hard to prosecute, your report helps police identify patterns and shut down fraud operations. HSBC may also be able to recover funds if the receiving account is within the UK banking system.