HSBC Australia fined A$35m over weak scam protections
Australia’s financial regulator fined HSBC Australia A$35 million after finding its anti-scam controls failed to stop customers losing money to fraud.
Australia’s financial regulator this week imposed a A$35 million penalty on HSBC Australia after finding the bank’s anti-scam protections were insufficient and allowed customers to lose money to fraud.
The regulator found gaps in the bank’s transaction monitoring, staff training and escalation processes. Investigators concluded HSBC Australia failed to act on warning signs of scam activity, delayed warning customers and in some cases did not promptly block or reverse suspect transfers.
The review covered multiple incidents in which account holders authorised payments to fraudsters in schemes resembling authorised push payment scams. The regulator determined the bank’s systems and controls did not meet legal obligations to protect consumers from foreseeable harm.
Under the enforcement outcome, HSBC Australia must pay the A$35 million fine and carry out a program of remedial work. The regulator ordered improvements to monitoring systems, stronger staff training on scam detection, clearer escalation routes and faster response protocols for suspected scam activity.
The bank acknowledged the regulator’s action and committed to address the issues identified. HSBC Australia said it will review its fraud prevention tools and processes, cooperate with the regulator’s requirements and repay eligible customers who suffered losses due to inadequate controls.
The regulator has required HSBC Australia to report on the progress of reforms and demonstrate tangible improvements in customer safety. It specified work should include better data-driven monitoring to flag unusual payment patterns, faster customer communications when scams are suspected, and quicker action to freeze or recover funds moved to suspected fraudsters.
The penalty follows wider regulatory scrutiny of Australia’s banks over how they detect suspicious activity, train frontline staff and handle requests to freeze or recover funds. Regulators have continued enforcing penalties where firms fail to meet consumer protection obligations.
Articles by this author
