HSBC Australia Scam Settlement

HSBC Australia has agreed to settle the regulator’s scam case after years of fighting allegations that weak controls left customers exposed. (theage.com.au) The Australian Securities and Investments Commission sued HSBC Australia on December 16, 2024, alleging the bank failed to prevent and detect unauthorized payments and mishandled customers’ scam reports. ASIC said HSBC received about 950 reports of unauthorized transactions between January 2020 and August 2024, with customer losses of about A$23 million. (asic.gov.au) ASIC said reports surged from mid-2023, often after scammers impersonated HSBC staff and gained access to customer accounts. The regulator alleged almost A$16 million of the A$23 million was lost in the six months from October 2023 to March 2024. (asic.gov.au) The court file shows the case was still active on April 20, 2026, with orders entered that day and an amended defence filed on April 1, 2026. Lawyerly reported on April 21, 2026, that HSBC would not defend the proceedings at trial. (fedcourt.gov.au, lawyerly.com.au) The Age reported that Australian customers lost more than A$100 million to the broader scam campaign and that many victims believed they were speaking to bank employees during the fraudulent contacts. That reporting goes beyond the A$23 million in losses tied to the specific transactions in ASIC’s court case. (theage.com.au, asic.gov.au) ASIC framed the lawsuit as the first case of its kind against a bank in Australia over scam prevention failures. The regulator said HSBC’s alleged breaches covered both its financial services licence obligations and its credit licence obligations. (claytonutz.com, asic.gov.au) ASIC also alleged HSBC took an average of 145 days to investigate customers’ scam reports and 95 days to restore full access to affected accounts. One customer waited 542 days to regain full access, according to the regulator. (asic.gov.au) HSBC’s public scam warnings now tell customers the bank will “NEVER ask” them to log on from an SMS message and urge them to verify unexpected messages through official channels. Those warnings match the impersonation tactics at the center of ASIC’s allegations. (hsbc.com.au) The settlement now leaves the court to formalize the outcome, while the case itself has already pushed Australia’s debate over who pays when bank impersonation scams get through. (fedcourt.gov.au, theage.com.au)