ScanTheSender
Last updated: August 2026
HSBC will never ask for your full PIN or password via email, so any message that does is a scam. If you receive an email claiming your HSBC account is locked, do not click any links. Instead, verify the email’s authenticity through HSBC’s official channels.
Not sure about the email in front of you? Check if your bank email is a scam for an instant read.
What this scam looks like
The ‘HSBC account locked’ email scam typically claims that your account has been locked due to suspicious activity. It urges you to click a link to verify your identity. Here is a made-up sample of what such an email might say:
Dear Customer,
Your HSBC account has been temporarily locked due to suspicious activity. Please verify your identity by clicking the link below to restore access: [link]
Thank you, HSBC Security Team
Another variant might warn of an urgent need to update your account information to avoid suspension. These emails often use official logos and language to appear legitimate.
How to tell if an HSBC email is a scam
- Sender address: Check if the email is from an official HSBC domain. Scammers often use similar-looking addresses.
- Urgency: Scams often create a false sense of urgency. Genuine banks do not pressure you to act immediately.
- Links: Hover over links to see the actual URL. If it doesn’t lead to an official HSBC site, it’s a scam.
- Personal information requests: HSBC will never ask for your full PIN or password via email.
- Generic greetings: Scams often use generic greetings like ‘Dear Customer’ instead of your name.
- Spelling and grammar: Many scam emails contain noticeable spelling and grammar errors.
What to do right now
- Do not click any links: Instead, open your browser and type the official HSBC website address yourself.
- Verify with HSBC: Contact HSBC directly using the number on their official website to confirm if your account is truly locked.
- Report the email: Forward the email to phishing@hsbc.co.uk and report it to Action Fraud.
- Change your password: If you clicked the link and entered your details, change your HSBC password immediately.
- Monitor your account: Check your bank statements for any unauthorized transactions and report them to HSBC.
FAQ
I clicked the link — what now?
If you clicked the link, do not enter any information. Close the page immediately. If you entered your details, change your HSBC password right away and contact HSBC to secure your account.
How can I report a phishing email?
Forward the phishing email to phishing@hsbc.co.uk and report it to Action Fraud at actionfraud.police.uk. This helps authorities track and stop scammers.
What if I provided my details?
If you provided your details, contact HSBC immediately to secure your account. Change your password and monitor your account for unauthorized transactions. Report any suspicious activity to HSBC.
How does HSBC contact customers?
HSBC typically contacts customers via their secure online banking portal or through official letters. They will not ask for sensitive information like your full PIN or password via email.
Not sure about an HSBC email?
Verify if your HSBC email is a scam with ScanTheSender for peace of mind.