Security

The security of your personal information and your online banking transactions is of utmost importance to HSBC. We maintain strict security standards and procedures to prevent unauthorised access to your information.

Security of Our Systems:

128-Bit SSL Encryption

HSBC requires the use of 128-bit Secure Socket Layer (SSL) Encryption, with all Personal Internet Banking applications and online application forms, which is the industry standard encryption used for internet banking applications. Encryption converts your data (i.e. when you apply for a loan or credit card at HSBC or when you use Internet Banking) into an encoded form before it is sent over the Internet. The encryption helps keep your information private between the bank's computer system and your Internet browser.

To determine if the browser you are using supports 128-bit encryption try a browser check.

Internal Systems Encryption

HSBC employs multiple levels of encryption with multiple encryption algorithms on and between internal systems to help ensure your data is kept secure and inaccessible to unauthorised users.

Firewalls

HSBC uses firewalls to block potentially destructive information from entering our computer systems and to prevent unauthorised access. Firewall software can be installed on business and home computers as a barrier against hackers and viruses.

Digital Certificates

To protect your computer and your account information when using Personal Internet Banking, SB HSBC Bank Kazakhstan JSC uses Digital Certificates to allow you to ensure you are communicating with HSBC. When you log on to Personal Internet Banking with SB HSBC Bank Kazakhstan JSC, your browser challenges the HSBC website to prove its identity using digital certificates. Your browser can verify the certificate and will alert you if the website is not HSBC. When logging on to HSBC, you should always ensure that this identity check has occurred. For instance in Microsoft® Internet Explorer, ensuring that the yellow lock is present on the browser and double-clicking it allows you to view the digital certificate of the website your browser has verified.

Security Device

SB HSBC Bank Kazakhstan JSC is committed to safeguarding your sensitive financial information. We have introduced a Security Token Device, needed to access Personal Internet Banking. Each Security Token Device generates a series of single-use Security Codes unique to the user's account. By using these Security Codes together with your Username and Memorable Answer, your online security is increased.

Server Gated Cryptography (SGC)

HSBC uses Server Gated Cryptography or SGC, which allows a browser using 40-bit SSL encryption to function as 128-bit encryption for the duration of the online banking session. This helps keep your online banking transaction information as secure as possible without having to download an updated browser.

Keeping Your Online Sessions Secure

Secured Sessions

Your HSBC Internet Banking session is protected in a "secured" environment through Secured Socket Layer (SSL) encryption. SSL technology is used within your Internet Banking session to encrypt your personal information before it leaves your computer to help ensure no one else can read it. Depending on your browser setting, a pop-up window will appear to notify you that you will be entering a secured page. You will know when you are on a secured HSBC page when you see the "https://" before the web address. A padlock symbol in the lower right hand corner of your browser window will also be present. A closed padlock indicates that your HSBC online session is in a "secured" environment.

Your Internet Banking Session

For Personal Internet Banking:

Log on, Personal Identification, and Random Challenge Password Feature

To make accessing your SB HSBC Bank Kazakhstan JSC accounts more secure, we require that after obtaining your Personal Banking Number, you create your memorable question and response, to log on to HSBC's secured Internet Banking site. This information is then authenticated by HSBC's system to verify your identity before providing account access. Your memorable question and answer is a key element to differentiate HSBC from “phishing” sites. The random generation of password on your Token device feature protects your password from being captured by keystroke logging tools that are planted into your home PC through virus attack.

Log On Attempts

For added security, we protect your online banking access by tracking the number of log on attempts. After a number of incorrect personal identification response attempts, we will disable your online access temporarily. You may either try to log on again after several minutes or contact HSBC to re-establish access by phone. After a number of incorrect password attempts, we will immediately disable online access. Should this happen, you will need to contact HSBC to re-establish access by phone: +7 (727) 259 69 00.

Session Time-out

For your protection, HSBC includes a Session Time-out feature for your online banking session. If your Internet banking session remains idle for a given time, your session is ended automatically. This is done to help protect your accounts from unauthorised access if your PC is left unattended or you have not logged-off your Internet banking session.

Secure Email

To protect any private information you may send to us via email, HSBC provides a secure email feature within Business Internet Banking so that your correspondence and your information remains between you and HSBC.

Important Note: If your Internet Banking password has been compromised, please immediately contact us.