The victim reads the code.

If you add your HSBC card to Apple Pay or Google Pay, you never enter a Secure Code for a coffee. Why? Because the moment you added the card, HSBC created a that lives inside your phone’s secure enclave.

For years, banking security was a dirty secret. Your "secret word" or "memorable date" was floating around in databases that were getting hacked constantly. If you used "Password123" for your gym membership and your bank, you were a thief’s lottery ticket.

HSBC Secure Code is a form of . It ensures that even if a fraudster obtains your login credentials, they cannot access your account or move money without a second, time-sensitive verification method.

HSBC is already piloting the successor in Hong Kong and the UK: .

Depending on your region and when you registered for online banking, your Secure Code may be delivered in one of three ways: