HSBC attempted scam

[Thisonepotato]

Hi all my sister just called to say she has had HSBC on the line saying some fraud has taken place and she needed to reset her internet banking code.

Naturally a scam however she went to the app whilst the were on the phone and clicked on security code however, common sense kicked in and she hung up not having given them any info.

She is concerned that they could have seen her phone screen or she has been hacked.

She is on iPhone, it was a voice call and she accessed the HSBC app already on her phone. She gave no further details.

What is the best course of action?

Also do the scammers know she banks with HSBC. I don’t understand how they could have any details.

Thanks

Edited by Thisonepotato on Monday 4th December 15:12

[speedyman]

Change the security code and account password. I doubt the got any info though.

[2 sMoKiN bArReLs]

Thisonepotato said:

Also do the scammers know she banks with HSBC. I don’t understand how they could have any details.

Probably just a lucky shot. (HSBC probably the largest customer base)

[captain_cynic]

Thisonepotato said:

Hi all my sister just called to say she has had HSBC on the line saying some fraud has taken place and she needed to reset her internet banking code.

Naturally a scam however she went to the app whilst the were on the phone and clicked on security code however, common sense kicked in and she hung up not having given them any info.

She is concerned that they could have seen her phone screen or she has been hacked.

She is on iPhone, it was a voice call and she accessed the HSBC app already on her phone. She gave no further details.

What is the best course of action?

Also do the scammers know she banks with HSBC. I don’t understand how they could have any details.

Thanks

Edited by Thisonepotato on Monday 4th December 15:12

As long as she didn't give out any details, just chalk it up to a learning experience.

Your bank is highly unlikely to call you out of the blue. They'll usually ask you to call them if they need you urgently (usually because they've already blocked your card for safety reasons). If you're at any point unsure, the best course of action is to say "I'll call you back" and call the bank on their main customer service number.

I doubt they have any details on your sister. Likely just a chancer, HSBC is common enough a bank that there is a good chance of guessing right.

In my old job I used to get the odd scammer using American companies call in on the vendor line (which was a US number). I'd occasionally string them along feeding them utter bks (a Mr D Trump, 1600 Pennsylvania AVE).

[Freakuk]

Unless they have asked to install an app I doubt they would have had any access to her phone and any information held upon it. I would however reset any passwords etc as suggested. I'd also report this to HSBC who may be able to flag her account for any heightened tracking they may have - that may mean she has to validate transactions herself more frequently also. Assuming the HSBC app has this I would enable notifications of any transaction so she will instantly see any activity via her app/phone.

With regards to knowing how she banks with HSBC that could come from multiple sources too many to list, from the obviously statements go missing, dump in the rubbish. Social media - as daft as it may sound there could be reference to HSBC somewhere, a comment, a photo, or someone has managed to access another account i.e. Amazon and they can see the payment details etc etc. But sometimes it's just luck they've called and said HSBC or they've left an open ended question where she has mentioned HSBC.

[simon_harris]

Worth giving the bank a call on a different phone and tell them it has happened - they can then watch out for any unusual activity linked to your account.

[Thisonepotato]

Cheers guys. She has just said they had her full name and log in number which is the long IB number. God know where anyone could get that from.

She has now said she had confirmed her account number, sort code and DOB.

[captain_cynic]

Thisonepotato said:

Cheers guys. She has just said they had her full name and log in number which is the long IB number. God know where anyone could get that from.

She has now said she had confirmed her account number, sort code and DOB.

I'd notify the bank right away... Also change any passwords just on case.