I downloaded the HSBC banking app for my UK bank to my mobile this summer  and use it occasionally here Thailand. It is useful but the security codes it generates for approval of a transaction fail because the time setting on HSBC servers (presumably in the UK) is checked against the time setting of the servers here that submit the request for the security code (i.e. based the phone's internet here in Thailand). Codes required to log on to HSBC online banking DO work but transaction approval codes that have to be requested via the app fail because of the timing issue between the servers.  Has anyone else had a similar problem? Is there a way round it?

 

I was okay using a manual fob for authorization codes until I downloaded the app (and didn't expect to be required to use the app).  I suppose it is the way forward, after all SCB just closed its online banking to get its customers all on its mobile app. Is it the same with the apps for all banks? Which bank is pain free?

 

I wonder if it is time look into using a VPN service. Are they the way forward? Do you use VPN and what for? How useful is it? Would for example a VPN service overcome the banking app timing hurdle I have stumbled into?  

 

Thanks in advance for your advice, with kind regards to all,

 

5

I leave my VPN switched on whenever I use a banking app on WiFi. 

 

I remember having problem loging in to Bitsamp (a crypto exchange). I used the Google Authenticator and Bitsamp didn't recognize the Authenticator number I entered. I surmised this could also have been due to a time setting problem.

 

Do you get an error message implying there's a time problem? Banking apps can fail in all kinds of ways. And when they fail banks these days don't bother much about doing anything about it. It's like it costs banks less to lose some of their customers than invest in ironing out bugs in apps.

18 hours ago, 503726 said:

I downloaded the HSBC banking app for my UK bank to my mobile this summer  and use it occasionally here Thailand. It is useful but the security codes it generates for approval of a transaction fail because the time setting on HSBC servers (presumably in the UK) is checked against the time setting of the servers here that submit the request for the security code (i.e. based the phone's internet here in Thailand). Codes required to log on to HSBC online banking DO work but transaction approval codes that have to be requested via the app fail because of the timing issue between the servers.  Has anyone else had a similar problem? Is there a way round it?

 

I was okay using a manual fob for authorization codes until I downloaded the app (and didn't expect to be required to use the app).  I suppose it is the way forward, after all SCB just closed its online banking to get its customers all on its mobile app. Is it the same with the apps for all banks? Which bank is pain free?

 

I wonder if it is time look into using a VPN service. Are they the way forward? Do you use VPN and what for? How useful is it? Would for example a VPN service overcome the banking app timing hurdle I have stumbled into?  

 

Thanks in advance for your advice, with kind regards to all,

 

5

I have the HSBC app and use it quite frequently. Initially I used the physical fob to generate codes and then later switched to the digital code generator in the HSBC app. However, since enabling bio-metrics within the app, I am no longer required to generate codes to authorize logging on to the app or executing transfers, payments etc. All authorisations are done via my fingerprint.  I have a VPN (Surfshark) but don't activate it when using the HSBC app even when out and about, as I have a permanent internet connection from a Thai sim card. I would only use the VPN if I was using a public wifi in a bar/hotel/cafe etc. Hope this info is of use to you.

If it's really a problem with the time:

my Android phone is set to automatically determine time zone.

But I could  change it to whatever I prefer.

You could try to change to UK time zone and see what happens.

 

Anyway would be a totally unprofessional programming at HSBC.

Usually times between IT systems are normalized to UTC based on local time and time zone 

 

 

1 hour ago, Mutt Daeng said:

I have the HSBC app and use it quite frequently. Initially I used the physical fob to generate codes and then later switched to the digital code generator in the HSBC app. However, since enabling bio-metrics within the app, I am no longer required to generate codes to authorize logging on to the app or executing transfers, payments etc. All authorisations are done via my fingerprint.  I have a VPN (Surfshark) but don't activate it when using the HSBC app even when out and about, as I have a permanent internet connection from a Thai sim card. I would only use the VPN if I was using a public wifi in a bar/hotel/cafe etc. Hope this info is of use to you.

 

 

Exactly the same here.

On 10/31/2025 at 5:35 PM, JackGats said:

Do you get an error message implying there's a time problem? Banking apps can fail in all kinds of ways. And when they fail banks these days don't bother much about doing anything about it. It's like it costs banks less to lose some of their customers than invest in ironing out bugs in apps.

 

Yes, the error says there is a timing difference between their recipient server and mine.

On 11/1/2025 at 8:12 AM, Mutt Daeng said:

I have the HSBC app and use it quite frequently. Initially I used the physical fob to generate codes and then later switched to the digital code generator in the HSBC app. However, since enabling bio-metrics within the app, I am no longer required to generate codes to authorize logging on to the app or executing transfers, payments etc. All authorisations are done via my fingerprint.  I have a VPN (Surfshark) but don't activate it when using the HSBC app even when out and about, as I have a permanent internet connection from a Thai sim card. I would only use the VPN if I was using a public wifi in a bar/hotel/cafe etc. Hope this info is of use to you.

 

Thanks for your reply MD.

 

Can you say a bit more about setting up of bio-metrics, it sounds like they may be a way forward. Did you set them up when you were here or would the set up be better done when in the UK. 

 

Thanks v much, I'd hate to mess this up unnecessarily. 

13 hours ago, 503726 said:

 

Thanks for your reply MD.

 

Can you say a bit more about setting up of bio-metrics, it sounds like they may be a way forward. Did you set them up when you were here or would the set up be better done when in the UK. 

 

Thanks v much, I'd hate to mess this up unnecessarily. 

I was living in Thailand full time when I set up biometrics in the HSBC app.

First of all you need to enable biometric access on your phone and add fingerprints etc. Set-up will vary with device. On my phone it's Settings>>Password and Security>>Fingerprint. 

Then go into the HSBC app and select the 3 horizontal lines at the top right of the screen. Then scroll down to "Keeping you safe"  and select "Manage Security". Then enable "Set up biometrics" and follow any instructions given.

Wow! I am very grateful to have your first hand experience shared, thanks v much, MD. I don't think I'd find the confidence to give it a go without it even though biometrics are so clearly the way forward.

 

I set up facial recognition at SCB here last week now that it has become available to foreigners. I wondered how long it will be before it'll be integrated that as a check on ATM or transactions in person, will we even need a card or bank book?  

I was asked by another institution (not HSBC) to use Microsoft Authentificator to reset a password yesterday and came to a block. I phoned the helpline in the UK. They said OTPs do not work on their system from outside the UK (not sure why) and Authentificator had to be used. The codes I generated here on Authentifactor all failed acceptance when submitted from my laptop here.

 

I remembered what J said in his posting above about surmising a time setting problem cause Authentificator codes fail so I asked the helpline to try a code on their keyboard that I generated here. It worked so the setting mismatch must be due to some other characteristic in the submission made from here. I hope VPN will sort it.