HSBC Australia Faces Landmark Legal Action Over Scam Protection Failures

HSBC Bank Australia Limited has acknowledged significant shortcomings in its systems and processes designed to protect customers from fraudulent schemes, failures that resulted in losses amounting to tens of thousands of dollars for individual victims and, in some cases, wiped out their entire life savings.

In a case described as one of the first of its kind internationally, the Australian Securities and Investments Commission (ASIC), together with HSBC, is seeking Federal Court orders declaring that the bank breached its legal obligations and imposing a financial penalty of $35 million. The proposed settlement remains subject to judicial approval, with the Federal Court responsible for determining whether the agreed orders are appropriate and whether any additional orders should be made.

The proceedings follow an ASIC investigation that examined HSBC’s handling of scam-related risks and customer complaints. In response to the findings, the bank has implemented a broad remediation initiative intended to address the impact of its compliance and operational failures. As part of these efforts, HSBC has already paid approximately $21.5 million in compensation to affected customers, with further compensation payments expected. In addition, the bank has successfully recovered around $6.5 million that had been lost through scams and returned those funds to customers.

The scale of the issue became apparent through customer reports received over a period spanning January 2020 to August 2024. During that timeframe, HSBC received more than 1,000 notifications relating to unauthorised transactions, involving a combined transaction value of $34.6 million.

The bank has admitted to a number of serious deficiencies. It acknowledged that between May 2023 and May 2024 it failed to maintain adequate safeguards within its internal transfer system, exposing customers to an increased likelihood of unauthorised transfers and fraudulent payments. HSBC also admitted that as early as May 2021 it had become aware of the rising threat posed by impersonation scams, in which fraudsters falsely presented themselves as representatives of the bank in order to deceive customers.

The problem intensified significantly during 2023 and 2024, when reports of unauthorised transactions submitted to HSBC increased by approximately 380 percent. According to the bank’s admissions, this sharp rise was driven largely by impersonation scams targeting its customers. HSBC further acknowledged that its inability to provide sufficient protection against these scams left customers exposed to greater financial and non-financial risks, and that a number of customers ultimately suffered those harms.

The bank also admitted breaching its financial services licence obligations because of substantial delays in investigating scam reports. On average, investigations took 144 days to complete, leaving affected customers waiting extended periods for outcomes and resolutions. In addition, HSBC conceded that it lacked adequate systems and procedures to properly guide customers on how to regain access to their accounts after those accounts had been locked following the reporting of a scam.

Among the victims were individuals and families who suffered significant financial losses. One case involved a 51-year-old dental technician from New South Wales who lost $47,000, representing almost all of her savings. Another involved a 25-year-old part-time architectural assistant from New South Wales whose life savings of $50,000 were lost to scammers. A Victorian couple in their fifties lost $48,000 after funds were transferred out of their home loan account, while a 41-year-old father from Victoria lost $50,000.

The financial consequences extended beyond the immediate losses. Some affected customers reported that they were forced to seek loans from other sources in order to manage their finances. Others said they had to work additional shifts to compensate for the money that had been stolen. Several customers expressed fears that they might struggle to meet their mortgage obligations or maintain repayments on their home loans as a result of the scams.

The impact was not limited to financial hardship. Customers also described experiencing significant emotional and psychological distress following the incidents. Reports included feelings of guilt, panic, anxiety, and ongoing stress associated with losing access to their funds or being unable to use their accounts during lengthy investigation periods. These experiences formed part of the broader consequences acknowledged by HSBC as regulators pursue legal action aimed at holding the institution accountable for its failures and strengthening protections for consumers against increasingly sophisticated scam activity.

By fLEXI tEAM