ASIC Sues HSBC Over Customer Protection Failures in $23 Million Scam

The Australian Securities and Investments Commission (ASIC) is taking legal action against HSBC, alleging the bank failed to protect 950 customers from a long-running "spoofing" scam that resulted in losses of $23 million. The lawsuit, filed in federal court, reveals a far-reaching impact from the scam, which was active from January 2020 to August 2024.

ASIC's Deputy Chair, Sarah Court, stated that the bank's shortcomings appear to be systemic. She highlighted the necessity for banks to play their part in combating scams, indicating that ASIC will pursue legal action when banks neglect their responsibilities to safeguard customers. This case is reportedly the first of its kind, holding a financial institution accountable for widespread customer complaints regarding scam protection.

The scam involved fraudsters utilizing software to mask their phone numbers, making their communications appear as if they were from HSBC. Customers received alerts about suspicious transactions and were directed to call a number that connected them to fake fraud representatives. This manipulation led to customers disclosing personal information, which scammers exploited to gain access to their accounts.

ASIC alleges significant delays in HSBC's response to scam reports, with some customers waiting over 500 days to regain access to their accounts. The bank is mandated to complete investigations into unauthorized transaction claims within 21 days, with extended timelines only in exceptional cases.

The ACCC's National Anti-Scam Centre issued warnings about impersonation calls and messages from scammers, raising concerns with HSBC directly. Although no specific laws govern bank actions in scam situations, banks are legally obliged to protect customer information, a requirement under various industry codes.

As the legal proceedings unfold, ASIC has not specified the potential penalties HSBC could face, but significant fines are anticipated if the case is successful. Court emphasized the importance of sending a clear message to HSBC and the banking sector about their obligations.

In response to the rising number of scam complaints, HSBC has made adjustments to its security measures. The bank has taken steps to improve its fraud prevention strategies and is enhancing customer communication regarding potential scams. Despite these measures, the fallout from the scam continues to affect numerous customers, prompting ongoing scrutiny of the bank's practices.