Online Threat Alerts (OTA) - Alerting you to scams and frauds.
HSBC Apple Pay Registration Email Scam

If you recently received an unexpected HSBC Apple Pay registration email, be highly cautious, as scammers often use this tactic to steal personal information. However, if you are in the UK, please note that HSBC experienced a technical issue on May 15, 2026, which caused some unexpected Apple Pay, Google Pay, and Samsung Pay emails to be sent to customers from noreplydocuments@hsbc.co.uk. In that specific instance, the bank confirmed it was an internal system error, and accounts remain safe.

How the Scam Usually Works

Fraudsters send fake emails claiming your HSBC card has been added to a new device or Apple Pay. The email typically includes a "Cancel" or "Verify" link. Clicking this link directs you to a spoofed, fake banking website designed to capture your login credentials, One-Time Passcodes (OTPs), or credit card details.

Received a Suspicious Email

  • Do not click links: Never click on any links or open attachments in unverified emails.
  • Do not share details: HSBC and Apple will never ask you for your PIN, full password, or One-Time Passcodes via email.
  • Verify through official channels: If you are unsure whether your card was legitimately added to Apple Pay, log directly into your HSBC mobile banking app or check the Apple Wallet app manually.
  • Report the phishing attempt: Forward the suspicious email directly to HSBC's official security team (e.g., phishing@hsbc.com for UK/Global).
waiting