One-time password (OTP)

You can update the mobile number you registered with us in online banking. Simply log on and follow these steps.

Step 1: Click on "My banking" and click on "Update personal details"

Step 2: Fill in the relevant details you wish to update and click on "Update Details"

Step 3: Review all the details and click on "Confirm" if they are correct.

Once you've updated your mobile number with us, you can use it for OTP and transactions on your HSBC debit card or accounts immediately. For HSBC credit cards, please allow one working day for the changes to take effect.

To start the transaction, you'll need to enter your details on the merchant website page. These details may include:

• your card number
• your card expiry date
• the transaction amount
• your CVV (the 3-digit code on the back of your card)
• the cardholder name

Next, you'll need to authenticate the transaction by entering a 6-digit one-time password (OTP). Here's what to expect:

1. The merchant website will open a new window which will display an HSBC Visa / Mastercard verification screen
2. You should check that the transaction details on the verification screen are correct (e.g. the merchant name, transaction amount and last 4 digits of your card number)
3. You'll receive a 6-digit OTP on your mobile phone, which you'll need to enter on the authentication screen within 3 minutes
4. Your transaction will be approved if both the card and OTP details entered are correct and the transaction amount does not exceed your available balance / credit limit

Once your transaction is approved, you'll see confirmation on the website acknowledging the payment. We'll also send a transaction alert to your registered mobile number if the transaction amount meets your SMS alert threshold.

* OTP is not available for Unsecure Merchants - online merchants who are not registered as Secure Merchants with Visa International and/or Mastercard. Transactions with Unsecure Merchants will be verified without OTP after you've entered the correct cardholder name, number, expiry date and CVV. These transactions are subject to our internal risk evaluations. You'll be safeguarded with chargeback rights for any fraudulent transactions made through Unsecure Merchants.