HSBC UK APP scam refunds: evidence and escalation

An APP scam is different from a stolen-card transaction: the customer is manipulated into authorising the transfer. For HSBC UK customers, the practical job is to stop further payments, report the scam immediately, preserve the transfer trail and understand the UK reimbursement rules without assuming every loss is automatically covered.

Identify the scam type and stop further payments

APP stands for authorised push payment. The defining feature is that you instructed HSBC UK to send the money because a fraudster manipulated the reason for the payment. Typical examples include impersonation scams, fake investments, romance scams and purchase scams where the recipient never intended to provide what was promised. That is different from a criminal simply stealing card details and spending without your authorisation.

This distinction matters because the evidence and reimbursement route differ. If a £3,120 Faster Payment left your HSBC UK account after you were told you were moving money to a safe account, that is an APP pattern. If the same £3,120 appears as card spending you never approved, start with the unauthorised-card route instead. Do not let the word 'fraud' blur two different processes.

Scams often arrive in stages. A first transfer may be followed by a supposed tax, verification payment, insurance charge or release fee. Stop immediately. Contact HSBC UK through an official route and say clearly that you believe you have been manipulated into making an APP scam payment. If another payment is scheduled or pending, tell the bank before doing anything else.

Do not spend an hour collecting screenshots while a second transfer is still possible. The order is money first, evidence second: prevent further loss, secure the account and communication channels, then assemble the record. HSBC UK is a large bank with digital, telephone and branch routes plus many customers who make international payments, so if one support channel is unavailable use another genuine route rather than returning to the fraudster for instructions.

Reimbursement rules, warnings and investigation timing

The UK APP reimbursement framework covers eligible Faster Payments and CHAPS payments between UK accounts. The standard maximum is £85,000 per claim. A payment firm can apply an excess of up to £100 in some cases, but not to vulnerable consumers. Firms can choose to be more generous than the mandatory framework, so the legal floor and the bank's own policy are not always identical. For HSBC UK, keep this point attached to the exact APP scam claim, with its date and case reference, so it cannot be confused with a separate issue later.

The framework also contains customer obligations and scope rules. A claim can fail because the payment type is outside scope or because the facts do not meet the definition. That is why a useful HSBC UK claim says what the fraudster represented, why you believed it, how the transfer was made and what warnings or checks appeared, rather than simply stating that you were scammed.

The PSR says most eligible consumers can expect reimbursement within five business days of making a claim. Where more information is genuinely needed, the firm can stop the clock while it gathers evidence, but an outcome must still be reached within 35 business days under the reimbursement process. A request for information is therefore not automatically a rejection or a sign that the bank is ignoring the claim. For HSBC UK, keep this point attached to the exact APP scam claim, with its date and case reference, so it cannot be confused with a separate issue later.

Keep a note of every request from HSBC UK. If the bank asks for the marketplace advert, investment chat or impersonation message, send the exact material rather than a reconstructed version. If you no longer have it, say so plainly. Fabricating or 'improving' evidence can damage a strong claim far more than admitting that one screenshot is missing.

Build a clean evidence file with a worked example

Imagine you sent £3,120 from HSBC UK after a caller claimed to be protecting your account. Ten minutes later, the caller demands another £480. The right move is not to negotiate. Stop, contact HSBC UK, report the first transfer as an APP scam and ask whether the recipient bank can be contacted or the payment traced. Then secure any password, email or phone account the fraudster may have compromised.

Your evidence file should show the call or message, the payment confirmation, recipient details, the warning screens you remember seeing, the moment suspicion arose and the time you reported it. Add the fraud case number. That chronology lets a reviewer see both the deception and your response without digging through unrelated bank statements or dozens of screenshots. For HSBC UK, keep this point attached to the exact APP scam claim, with its date and case reference, so it cannot be confused with a separate issue later.

Payment warnings are designed to interrupt scams, but a fraudster may coach the victim through them: 'choose family', 'say you know the person', or 'ignore the investment warning because this is a business transfer'. Record that coaching. The existence of a warning does not by itself describe what happened; the wording, timing and scammer's instructions are relevant to the overall evidence. For HSBC UK, keep this point attached to the exact APP scam claim, with its date and case reference, so it cannot be confused with a separate issue later.

Similarly, vulnerability can matter under the reimbursement framework. If illness, bereavement, disability, financial distress or another circumstance affected how you could protect yourself, tell HSBC UK rather than assuming the bank will infer it from transaction data. Vulnerability should be explained factually and only to the extent relevant to the incident.

Rejected claims, escalation and recovery-scam protection

A rejection letter should be more useful than 'we investigated and cannot refund'. Ask HSBC UK which part of the reimbursement framework or account terms it relied on and what evidence it considered. If a specific warning, recipient history or customer action is central to the decision, you need to know that before deciding whether a complaint has merit.

Payment-services complaints normally have a 15-business-day final-response target, with a 35-business-day limit in exceptional circumstances. If you remain dissatisfied after the final response, the Financial Ombudsman Service may be able to review the dispute. Keep the original scam evidence and the bank's reasoning together; the complaint is about the decision process as well as the amount lost. For HSBC UK, keep this point attached to the exact APP scam claim, with its date and case reference, so it cannot be confused with a separate issue later.

After a fraud loss, a person claiming to be a recovery agent may know your name, the amount or even the original scam story. That knowledge does not make them legitimate. Never send an upfront release payment to recover the £3,120, and do not give remote access to your device so somebody can 'trace' the transfer.

The safest recovery route remains the regulated one: HSBC UK, the relevant law-enforcement reporting route where appropriate, and the Financial Ombudsman Service if a complaint remains unresolved. If the incident involves an overseas merchant or transfer, separate the currency, exchange-rate and correspondent-bank questions from the fraud or dispute itself.

Sources and verification

• HSBC UK - official website
• Payment Systems Regulator - APP fraud reimbursement
• FCA ScamSmart
• Financial Ombudsman Service

HSBC UK: figures and process descriptions were checked against the provider's official material and current UK regulatory/consumer-protection sources. Product terms and support routes can change, so verify the live rule before acting on a later transaction. For HSBC UK, keep this point attached to the exact APP scam claim, with its date and case reference, so it cannot be confused with a separate issue later.