Personal e-Banking Security


To ensure online protection and provide you safe and secure e-Banking services, we have implemented the following online security measures. 

In the meantime, you can also help safeguard your account information and data privacy. Please read the FAQs on Privacy and Security and visit Security Information Centre for more information.

Online Security Measures

Log on


When you log on to Personal e-Banking (Desktop version) with a new browser, you must choose whether to "Trust this browser".

After trusting a browser, you can log on via the same browser by entering the password or one-time security code only. No additional verifications needed. But you will be required to trust your browser again when there are certain changes on your device or browser, such as software version, to secure safety.

When using a new / untrusted browser to log on, we will need additional verification (enter a one-time SMS verification code or one-time security code) to confirm your identity.

This security measure protects your Personal e-Banking (Desktop version) against unauthorised log-on.


The Mobile Security Key / Security Device employs two-factor authentication to ensure data privacy and protect particularly high-risk transactions in Personal e-Banking. The Mobile Security Key is a digital version of the Security Device within Hang Seng Personal e-Banking mobile app. You can generate one-time security codes for verification purposes when you perform designated transactions with either your Mobile Security Key or physical Security Device.

Effective from 1 July 2022, we no longer issue a physical Security Device to Personal e-Banking customers (except for those with accessibility needs). Customers may download Hang Seng Personal Banking mobile app and switch to Mobile Security Key for more convenient banking services.

Transaction Signing

For added online protection when you perform any high -risk transactions, you are required to enter transaction-specific information into the Mobile Security Key / Security Device to generate a unique security code that will authorise the respective instruction in Personal e-Banking. This additional transaction verification function further prevents fraudulent attacks and ensures high-risk transaction will be made only for the account you specify.

Mobile Security Key

Learn more about Mobile Security Key

Security Device

What can you do with the Security Device

  • Transfer to Non-registered accounts / payees (including small value limit)
  • Pay bills to e-Merchants
  • Enroll to e-Bills
  • Set up Direct Debit Authorisation
  • Raise daily transfer and bill payment limit
  • Register new payee
  • Register Cross-Border View & Transfer services
  • Trading securities and other investment products
  • Request for ATM Card Replacement
  • Reset Card PIN or Request new Phone PIN
  • Report Card lost and card replacement
  • Update Personal Particulars
  • Reset Personal e-Banking passwords
  • Replace Security Device


To safeguard your Security Device from easy access by third parties in case of loss, it is PIN-protected. You will have to set a PIN before the first time you use it and this PIN will be required to unlock the device before each use.

For any queries, e.g. instructions for setting up or replacing your Security Device, please visit Frequently Asked Questions.


You will receive a SMS notification when you have completed the following transaction in Personal e-Banking:

  • Transfers to non-registered 3rd-party accounts
  • Bill payment to payee under “e-merchants” category
  • Raise daily transfer and bill payment limit
  • Register new payee
  • Set up / amend Direct Debit Authorisation to designated beneficiaries
  • Change of personal particular
  • Reset password via “Forget password(s)”
  • Reset Card PIN

To conduct the above transactions, you must have your mobile number registered in our record. Please note that your SMS message will not be forwarded even if you have subscribed to an 'SMS Forwarding' service provided by a telecommunications service providers in Hong Kong.

To review and update your registered mobile number, please visit Customer Services > Account Maintenance > Personal Particulars after logging on to Personal e-Banking.

Other online security measures

If you want to make bill payments to payees under the category of Banking and Credit Card Services, Brokers, Other Financial Institutions, or Sports and Leisure, you will need to complete pre-registration at one of our branches.

You will notice the bank's URL address begins with “https” when you have established a secure session with Hang Seng Personal e-Banking. Most desktop browsers will display a padlock icon either in the address bar or near the top of the browser to indicate you are accessing genuine Personal e-Banking services.

If a session is unattended or inactive for a certain period, it will be terminated automatically to prevent unauthorised access to your bank account.

Useful information