Your guide to - HSBC Malaysia guide to. 1. 4 Introduction 2. ... Welcome to HSBC Bank Malaysia...

68
Issued by HSBC Bank Malaysia Berhad (Company No. 127776-V) Dikeluarkan oleh HSBC Bank Malaysia Berhad (No. Syarikat 127776-V) Your guide to

Transcript of Your guide to - HSBC Malaysia guide to. 1. 4 Introduction 2. ... Welcome to HSBC Bank Malaysia...

Issued by HSBC Bank Malaysia Berhad (Company No. 127776-V)Dikeluarkan oleh HSBC Bank Malaysia Berhad (No. Syarikat 127776-V)

Your guide to

1. Introduction

2. The Services

3. Registration For The First Time

4. Password Reset

5. Authorising Transactions

6. Banking Services - Account Balances and Statement Download

7. Banking Services - Transfers

8. Banking Services - Open Time Deposits

9. Banking Services - Pay Bills

10. Other Banking Services

11. AutoPay Services

12. Internet Trade Services

13. Frequently Asked Questions

CONTENTS

4 3

4 4

4 19

4 27

4 32

4 34

4 36

4 39

4 41

4 42

4 45

4 53

4 58

HSBC’s Business Internet Banking

CM

B06

7

Page 3HSBC’s Business Internet Banking

Welcome to HSBC Bank Malaysia Berhad’s (HSBC) Business Internet Banking (BIB). As a delegate of your company, you can now easily access your company’s accounts with HSBC any time, anywhere through BIB. Inside this guide, you’ll find general information on BIB, with simple guidelines that take you through every step you need to know about the service. Security tips and a comprehensive list of frequently asked questions are also included, assuring that you have maximum protection and guidance when you bank online.

To provide added security for your company, a set of security controls and support are included so you can access BIB with extra peace of mind:

4 128-bit encryption

4 Username and Password control

4 Security Device, Security Device PIN and Security Code

4 Delegation with control

4 Automatic time-out

At HSBC, we take the privacy and confidentiality of our customers’ information very seriously and will never request your company, personal or financial information via email. To help safeguard your business accounts and transactions, please also keep aware of the following:

4 Never follow a link within an email to access a BIB session. In fact, no email from HSBC will contain a hyperlink to the Business Internet Banking logon page.

4 Log on to BIB directly from your browser. This will help you to avoid entering a false site.

4 HSBC will never ask for your BIB logon details or account information via email. Such information includes your Username, Password, Account Number, account balances etc.

4 Advise us immediately if you receive a suspicious email asking you to enter your BIB logon details. DO NOT act on it even if it appears to be from HSBC.

For any questions or to report a suspicious email, please contact our Internet Banking Helpdesk at 03-8321 5511.

Note :

1. Please ensure you have your BIB ID (i.e. the Electronic Banking Number [EBN] in the EBN Portfolio Advice), PIN mailer containing your Password and the physical Security Device with you when you register for BIB for the first time.

2. The screen content shown in this guide is for reference only. Please refer to your own screen content when registering and using our BIB services.

1. Introduction

HSBC’s Business Internet Banking

Page 4HSBC’s Business Internet Banking

It’s easy to access BIB. To enjoy the benefits and convenience that come with this user-friendly system, all you need is the following:

4 A computer with a phone line or broadband internet connection.

4 An operating system using Microsoft WindowsTM ME, NT4.0, 2000, XP Home or XP Professional for PC users, MAC OSX.

4 A browser using Microsoft Internet ExplorerTM 6.0 or 7.0 or Netscape® Communicator 6.21-7.2 (Netscape Communicator 6.0-6.2 is not supported), Firefox 2.0 for PC users.

BIB has been tested on Microsoft Internet ExplorerTM 6.0 or 7.0 or Netscape® Communicator 6.21-7.2 on Microsoft WindowsTM.

2.1 Service features

HSBC’s BIB offers your company a wide array of services. The following is a summary of the services available:

4 Real time status on account balances

4 Online statement information up to last two statement cycles of current account

4 Telegraphic Transfers (TT) or Demand Drafts (DD) for payment to overseas suppliers

4 Cashier Orders for local payments – delivered to a beneficiary or collectable from a branch of your choice

4 Effect local payments to other accounts with participating IBG Banks via MEPS InterBank GIRO (IBG)

4 Immediate fund transfer to own accounts/third party accounts within HSBC’s branch network

4 Utility bill payments

4 Forward dated transactions

4 Ordering of cheque books

4 Placing of stop payment instructions on cheques

4 Exchange rate and interest rate enquiries

4 Download statements in Quicken, CSV or text formats

4 Administration control – Single or Dual

4 Dual authorisation and access controls

4 Creation of Secondary Users online

4 Autopull for new accounts

4 Activity log

4 AutoPay for bulk transfers

4 Internet Trade Services

2. The Services

Page 5HSBC’s Business Internet Banking

2.2 Types of Users – Primary User and Secondary User There are two types of users in BIB, namely Primary Users and Secondary Users and a total of 20 users can be nominated to access BIB.

Primary User

A Primary User has the highest authority among the BIB users. His/Her authority is determined by the authorised signatories of the company at the time of the BIB application.

4 A Primary User can perform transactions on the company’s accounts according to his/her transaction daily limits.

4 Each Primary User may be assigned with different daily account limits.

4 A Primary User can also change the authority and limits of another Primary User online.

4 A Primary User can set-up/amend the Account Control Set-up for accounts that the company has allowed to be accessed via BIB. If the company has signed up for Autopull service to automatically link all new accounts, the Primary User will receive secured email to advise him/her of the new accounts which have been opened and are available for him/her to set up the control.

4 The Primary User can create Secondary Users online, as well as assign daily limits, provide access rights and select accounts for each Secondary User. If your company has signed up for Dual Administration Control, it is advisable to have similar limits for both Primary Users to ensure successful creation of Secondary User(s).

Your company must nominate at least one Primary User for Single Administration Control and two Primary Users for Dual Administration Control, to set up BIB.

The nomination of Primary Users and selection of number of Primary Users for Single/Dual Administration Control are performed during BIB application. The nomination of Primary Users and their limits can be subsequently revised by using a BusinessConnect Amendment Request Form.

Secondary User

Any employee of your business/company can be a Secondary User. Secondary Users are responsible for the day-to-day operations of the company accounts. The Primary User(s) nominated by your company may create up to a maximum of eighteen (18) Secondary Users.

4 A Secondary User can perform transactions on the company’s accounts according to his/her transaction daily limits.

4 The nomination of Secondary Users and selection of the number of Secondary Users for single/dual payment authorisation are performed by the Primary User(s) online and can be subsequently revised by the Primary User(s).

4 The daily limits of Secondary Users are determined by the Primary User(s).

4 The services the Secondary Users can perform and the accounts he/she can access are also determined by the Primary User(s).

Please note that the Secondary User is required to present himself/herself at the nearest HSBC branch with a copy of his/her Identity Card/Passport and the Security Device Acknowledgement letter or User Details printout duly signed by the Primary User for verification by HSBC staff. Otherwise the Secondary User will not be allowed to perform transaction via BIB.

2. The Services (Continued)

Page 6HSBC’s Business Internet Banking

2.2 Types of Users – Primary User and Secondary User (continued)

The following table gives an overview of the differences between a Primary User and Secondary User:

3- Available, 5- Not Available, All services above are only available to the company if these services have been applied for.

Create / Authorise New Secondary User (including defining transactions daily limits)

Assign / modify / Authorise Account Control (including authorisation limits per signature group per account)

Modify / Authorise modification of existing user profile (including modifying transactions daily limits)

View Activity Log of all users

Non Administrative Entitlements

View Account Balance and transaction History

Pay / Authorise Bill Payments

Make / Authorise Transfer transactions

Administrative Entitlements

Make / Authorise autoPay transactions

Rate enquiry

Services (Stop Cheque and Cheque Book Request)

Statement and Advices

View Activity log (self)

View profile (self including Transaction Limits, Signature Groups etc)

Internet Trade Services

Service PrimaryUser

SecondaryUser

3 5

3 5

3 5

3 5

3 3

3 3

3

3

3

3

3

3

3

3 3

3

3

3

3

3

3

3

2. The Services (Continued)

Page 7HSBC’s Business Internet Banking

2.3 Administration Control - Single or Dual Administration Control

Administration Control is only available for Primary Users to manage all Administrative Entitlements online. There are 2 types of Administration Control:

4 Single Administration Control – Only 1 Primary User is required to make a change in the Administrative Entitlements (as given above). For e.g. when a Primary User creates a new Secondary User, this Secondary User is created in the system immediately without any need for another Primary User to authorise the new user creation. Similarly if the limit of an existing user is modified by a Primary User, the modified limit will take effect immediately without requiring any authorisation by another Primary User.

4 Dual Administration Control – 2 Primary Users are required to make a change in the Administrative Entitlements (as given above). For e.g. when a Primary User creates a new Secondary User, another Primary User needs to authorise the creation before the Secondary User is created in the system. Similarly if the limit of an existing user is modified by a Primary User, the modified limit will only take effect after it is authorised by another Primary User.

The type of Administration Control is selected by the Authorised Signatories of the Company at the time of applying for BIB service.

Your company must also nominate one Primary User to set up BIB for Single Administration Control and two Primary Users for Dual Administration Control.

If your company has signed up for Dual Administration Control it is advisable to have same limits for both Primary Users to ensure successful creation of Secondary User(s) and/or effecting changes to existing users.

2. The Services (Continued)

Page 8HSBC’s Business Internet Banking

2.4 Daily Limits There are five [5] daily limits for each user of your company’s BIB portfolio. These limits are determined by your business/company during BIB application and can be revised later according to your business needs by using the BusinessConnect Amendment Form.

2. The Services (Continued)

Transaction Category

Transfer to own accounts[Company and User Level]

Transfer to designated payee[Company and User Level]

Transfer to non-designated payee[Company and User Level]

Bill Payment[Company and User Level]

AutoPay[Company and User Level]

All Transaction limit[Company Level]

Maximum Daily Limits

These are the daily limits set for transfer of funds between the accounts of your company that you have requested us to link.

These limits control the daily amount of funds that can be transferred from your company’s portfolio of accounts to designated third parties or other beneficiaries that you have specified. These include transfers to other HSBC accounts; telegraphic transfers to overseas beneficiaries (TT), Demand Draft, Cashier Orders, MEPS InterBank GIRO (IBG). These beneficiaries must be advised to HSBC for maintenance for each user.

These limits control the daily amount of funds that can be transferred from your company’s portfolio of accounts to third parties or other beneficiaries that you have not previously specified. This includes transfers to other HSBC accounts; telegraphic transfers to overseas beneficiaries (TT), Demand Draft, Cashier Orders, MEPS InterBank GIRO (IBG).

These daily limits control the amount of funds that can be paid to the merchants under the ‘Bill Payments’ function in BIB.

These limits control the daily amount of funds that can be transferred from your company’s portfolio of accounts to third parties or other beneficiaries via AutoPay transfers.

This limit controls the maximum amount of funds that can be transferred from your company’s account(s) for each day.

Page 9HSBC’s Business Internet Banking

2.5 Authorisation Matrix User Access, Transaction Daily Limits and Account Control

The Authorisation Matrix enables setting up of transactions limits for each account. There are 3 types of Authorisation Matrix settings available to the company. Each type of Authorisation Matrix setting facilitates different combinations of signature authorisation requirements. The table below summarises the mapping between the Authorisation Matrix setting and signature authorisation requirements:

The company will select the Authorisation Matrix setting at the time of applying for BIB.

To ensure that transactions are conducted according to the predefined transaction daily limits, the following steps have to be completed:

2.5.1 User Access and Signature Group - ‘Transaction’ or ‘Input & Enquiry Only’

All users (Primary and Secondary) will have either ‘Transaction’ access or ‘Input & Enquiry Only’ access. All users having ‘Transaction’ access have to be assigned either to ‘Signature Group A’ or ‘Signature Group B’ if the company selects Simple Authorisation or Dual Authorisation with two signature groups under the Authorisation Matrix setting. If the company selects Dual Authorisation with one signature group, the users will automatically be assigned ‘Signature Group A’.

All users having ‘Input & Enquiry Only’ access will be assigned ‘Signature Group I’. Users having only ‘Input & Enquiry Only’ Access cannot authorise a transaction but can enter a transaction, which then needs to be authorised by a user from ‘Signature Group A’ or ‘Signature Group B’ (depending on the transaction limit explained in Section 2.5.2 and 2.5.3).

The selection of Signature Group can be done by the Primary User at the time of creation of a new user (as given in Section 2.6 of this guide) or by changing an existing user profile by using the option ‘Existing User’ in the ‘Access & Security’ menu available on BIB.

Please note that the Secondary User created online by Primary User is required to present himself/herself at the nearest HSBC branch with a copy of his/her Identity Card/Passport and the Security Device Acknowledgement letter or User Details printout duly signed by the Primary User for verification by HSBC staff. Otherwise the Secondary User will not be allowed to perform transaction via BIB.

2. The Services (Continued)

Authorisation Matrix Setting

Simple Authorisation

Signature Requirement

A, B

Dual Authorisation with one signature group A, AA

Dual Authorisation with two signature groups A, B, AA, AB, BB

Page 10HSBC’s Business Internet Banking

2.5.2 User Transaction Daily Limits All Users having ‘Transaction’ access should have daily limits assigned to them for the each of the following types of transactions

4 Transfers within own portfolio

4 Transfers to Designated Payees

4 Transfers to Non Designated Payees

4 Bill Payments

4 AutoPay Payments*

* Applicable only if the company applies for AutoPay service

This can be done by the Primary User at the time of creation of a new user or by changing an existing user profile by using the option ‘View/Change/Delete User’ in the ‘Access & Security’ menu available on BIB. The Users’ Transaction Daily Limits cannot exceed the Company Limits as provided by the company in the BIB section of the BusinessConnect Application Form submitted to HSBC.

The User Access, Signature Group and Transaction Daily Limits can only be viewed or modified for users already created in the system by Primary User(s) through the tab ‘View/Change/Delete User’ in the ‘Access & Security’ menu available on BIB. The Primary User can modify the transaction daily limits of any users up to his/her own transaction daily limits for each type of transaction.

2.5.3 Account Control The Primary User has to set Signature Group limit(s) for each account through the ‘Account Control’ option available under the ‘Access & Security’ menu on BIB.

The Signature Group limit(s) will control the maximum value for each transaction that may be authorised by the Signature Group. However, authorisation of any transaction is also subject to the user’s Transaction Daily Limit and the Company Limits, whichever is lower.

For example, a User assigned with Signature Group ‘A’ may have a Daily Bill Payment limit of $5,000 but under Signature Group A, a limit of $1,000 may have been set for single ‘A’ Signature Group. Hence if he wishes to make a bill payment of $1,500 he will need to break into 2 transactions i.e. for $1,000 and $500.

Depending on the Authorisation Matrix selected by the Company at the time of applying for BIB, the relevant signature groups will be shown in the Account Control Screen.

2. The Services (Continued)

Page 11HSBC’s Business Internet Banking

2.5.3 Account Control (continued)

4 Simple Authorisation Matrix: Any one User (from Signature Group A or Signature Group B) can individually authorise a transaction up to the respective limits stated in the Matrix for A and B.

4 Dual One Group Authorisation Matrix: Users, either individually or jointly with another user, from Signature Group A only can authorise transactions up to the respective transaction limits set for the individual user and joint users i.e. the options available will be A and A+A.

2. The Services (Continued)

Page 12HSBC’s Business Internet Banking

2.5.3 Account Control (continued)

4 Dual Two Group Authorisation Matrix: Users, either individually or jointly with another user, from Signature Group A and/or Signature Group B can authorise transactions up to the respective limits set for the individual user(s) and different combinations of joint users i.e. the options available will be. A, B, A+A, B+B and A+B.

2. The Services (Continued)

User

User “O”

Non-designated Payee Transfer Limit

15,000

User “P” 25,000

User “Q” 35,000

Signature Group

A

A

B

User “R” 45,000B

Further assume the following Account Control (Dual Two Group Authorisation Matrix) has been set up for Account 1

All Transactions Limits

10,000

Linked a/c Transfers & Time Deposits

10,000

30,000 30,000

40,000 40,000

20,000 20,000

50,000 50,000

Signature Required

A

B

AB

AA

BB

The following example shows how the signature groups can be used.

Assume Company ‘X’ has 4 users with the following daily limits for transfers to non-designated payees:

Page 13HSBC’s Business Internet Banking

2.5.3 Account Control (continued)

Any transaction in Account 1 will need to adhere to the above rules. Some examples of transaction procedures based on these rules are given below:

Please note:

4 For all types of transactions (including future dated transactions) the User’s relevant Transaction Daily Limit will be reduced by the transaction amount immediately.

4 If the User’s limit is insufficient for the transaction amount, he will be regarded as an Input user and his/her limit will not be reduced. Instead the limit will be deducted from the next User(s) who approves the transaction.

4 If the transaction requires dual authorisation, both Users’ limits will be reduced by the whole amount of the transaction.

Tips for Authorisation Matrix set-up:

4 The transaction limit set-up for individual user(s) ‘A’ in Signature Group A must be lower than the limits for the dual authorisation combinations of ‘A+B’ and ‘A+A’.

4 The transaction limit set-up for individual user(s) ‘B’ in Signature Group ‘B’ must be lower than the limits for the dual authorisation combinations of ‘A+B’ and ‘B+B’.

4 There’s no hierarchy between the Signature Groups A and B as the transaction limit set-up for Signature Group A can be higher than the limit for Signature Group B or vice versa.

4 Please do not set the transaction limit for any dual authorisation higher than the Company Transaction Daily Limit as no users will be able to approve the transaction.

Please note, that any change in account control is an administrative function and would need dual authorisation if you have selected Dual Administration control as explained in Section 2.3 above.

2. The Services (Continued)

Transactions Amount

10,000

Comments

Any user can individually perform the transaction.

15,000 Though the BB dual authorisation is also applicable, since the individual ‘B’ signature limit is higher that the transaction amount, the transaction will beprocessed directly by the individual ‘B’ signature limit.

25,000 User ‘O’ from signature group A only has transaction daily limit of $15,000. Hence he can only prepare but not authorise this transaction.

Signature RequiredOptions

1. A2. B

1. B2. AB3. AA

1. AB2. BB

50,000 None of the user limits are high enough to authorise this transaction although dual authorisation under Signature Group ‘BB’ has been defined to approve a transaction of up to 50,000. This transaction cannot be completed.

1. BB

User

1. User O or P2. User Q or R

1. User Q or R2. User O or P &

User Q or R3. User O & P

1. User P & User Q or R

2. User Q & R

N/A

Page 14HSBC’s Business Internet Banking

2.6 Online Creation of New Secondary User

The Primary User(s) appointed by your company can now create new Secondary Users online hence eliminating the need for submitting an application to the Bank for new Secondary Users.

For the creation of Secondary User, the Primary User(s) can assign

4 Accounts that the Secondary User can access.

4 Transaction daily limits (up to the Primary User’s own limits).

4 Service entitlements the Secondary User can perform.

4 Signature group which the Secondary User will belong to i.e. A or B or Input and Enquiry only.

The Primary User can also modify the transaction daily limits, service entitlements, account access and signature group of any users in the company.

The Primary Users can create Secondary Users on line through ‘Create New User’ option available under ‘Access & Security’ menu available in BIB.

Enter the Secondary User’spersonal details

2. The Services (Continued)

Select the Accounts that the Secondary User may access

Select the Services (bill payment, transfers, AutoPay, etc) that the Secondary User may use

Page 15HSBC’s Business Internet Banking

Finally assign the Secondary User to a ‘Signature Group’ (i.e. ‘A’, ‘B’ & ‘I’) and also set the Daily Limit for different types of Transactions.

2.6 Online Creation of New Secondary User (continued)

HSBC will then send a BIB ID, BIB Password and a Security Device to the new Secondary User. The user will be able to login to BIB only after receiving these items.

The Secondary User’s BIB ID will be included in the Security Device Acknowledgement Letter [SDAL]. The SDAL needs to be acknowledged by a Primary User and return the signed SDAL together with a copy of the new Secondary User’s Identity Card or Passport to HSBC within 15 days from the date of online Secondary User creation.

The Secondary User created online will be able to login to BIB and enter transactions but he/she will not be able to authorise transactions until the signed SDAL and documents are submitted to and verified by HSBC. HSBC reserves the right to restrict the BIB access of the new user if the SDAL and documents are not submitted and verified within the stipulated time.

Please note that creation of a new Secondary User is an administrative function and would need dual authorisation if you have selected Dual Administration control as explained in Section 2.3 above.

Note :

The Secondary User created online by Primary User is required to present himself/herself at the nearest HSBC branch with a copy of his/her Identity Card/Passport and the SDAL or User Details printout duly signed by the Primary User for verification by HSBC staff. Otherwise the Secondary User will not be allowed to perform transaction via BIB.

2. The Services (Continued)

Page 16HSBC’s Business Internet Banking

2.7 Access & Security Pending Dual Authorisation

If a User Access or Account Control set up was entered by a Primary User under Dual Administration control, then such instructions will be shown as pending authorisation under the ‘Access & Security’ Option in the ‘Authorisation’ menu on BIB. Please do note that such instructions will not be processed till they are authorised by the other Primary User through this option.

2. The Services (Continued)

2.8 Autopull

Autopull function will enable newly opened accounts to be automatically accessible via BIB. Customer no longer needs to write in to link newly opened account(s) to BIB.

If your company has applied for this function to be enabled, a secured email will be sent to the Primary User each time a new account is opened to advise the Primary User of the new account. The Primary User will then need to perform the Account Control set up for this new account as well as assign which Users are to be granted access to the new account.

Page 17HSBC’s Business Internet Banking

2.9 Activity Log

A Primary User will be able to view his/her own activities / transactions as well as those done by any other User (Primary & Secondary users) through BIB.

A Secondary User will only be able to view his/her own activities / transactions through BIB. However a Primary User can perform change user maintenance to allow any Secondary Users to view the activity logs of other users in the company.

2. The Services (Continued)

Page 18HSBC’s Business Internet Banking

2.10 Security Device and Security Code

By requiring the use of Security Device to access to BIB in addition to your BIB ID and Password, you can be assured your business information is protected by one of the most sophisticated online security systems. At the touch of a button, the Security Device generates a unique, single use Security Code that must be entered every time the user logs on to BIB. For added security, your Security Device is PIN protected where a PIN will be required to unlock your Security Device before each use. As each user will have his/her own device, only the users nominated by your company will be able to access the business accounts.

The Security Device will be sent to you together with your BIB ID and Password after successful application for BIB / Secondary User creation. If you have not received any one of the items, please call our Internet Banking Helpdesk at 03-8321 5511.

In addition to that, when you perform any instructions or transfer transactions, you will be required to enter the unique, single-use security code generated by the Security Device. Please refer to details below:

This feature will ensure a superior level of protection for your business and financial information from a large variety of online threats, including Phishing, Key Logging/Trojan, Shoulder Surfing and Screen Capturing.

For more info, please refer to www.hsbc.com.my/sd.

2.11 General Assistance and Technical Support

Should you require assistance with your BIB logon or the activation of your Security Device, please contact our Internet Banking Helpdesk 03-8321 5511.

2. The Services (Continued)

Type of Security Code

Security Code

Transaction Data Signing Code

Re-authentication Code

Security Code Format

123456

123 456

123 456

How to Generate?

Customer press on the device to generate the Security Code

Customers input specific information into the device (e.g. beneficiary account number) and press to generate the Transaction Data Signing Code

Customer press the on the device to generate the Re-authentication Code

Example of Function

Required to log on to Business Internet Banking

Verification for higher risk transaction such as payment to 3rd party beneficiaries

Verification of lower risk transaction such as authorizing a pending instruction

3

Page 19HSBC’s Business Internet Banking

Click on Business Internet Banking ‘Register’ button

Enter the Password provided by HSBC

Enter the 10-digit BIB ID provided by HSBC

After your company’s application for BIB is approved, all users are required to go through a registration process before using BIB. To register, you should have the following in hand:

1. The mailer containing the BIB ID

2. The mailer containing the BIB Password

3. The physical Security Device

Registration can be performed by accessing our website at online@hsbc Business Internet Banking ‘Register’ button.

3.1 Registration Process

Enter your BIB ID and the Password and click ‘Continue’.

3. Registration For The First Time

Page 20HSBC’s Business Internet Banking

3.2 Create Username

3.3 Set Your Password

3.2 Create Username

Security Tipsa. We strongly recommend that you do not use easily identified words or number such as names, birthdays, phone

numbers or ID card numbers etc as your password.

b. Use a combination of upper and lower case letters and numbers for your password.

c. Both primary users and secondary users must exercise maximum caution to keep their usernames, passwords and Security Device PIN confidential to prevent unauthorised access to the business accounts.

d. Change your BIB Password and Security Device PIN on a regular basis and never disclose password to anyone.

e. Ensure that your Security Device is always kept in your safe custody. If you forget your Password and/or Security Device PIN, lose your Security Device, or suspect any unusual account activity, you should call our Internet Banking Helpdesk at 03-8321 5511 immediately.

3. Registration For The First Time (Continued)

You are required to create a Username of your choice. Your Username should be something that you can easily remember, yet not easily guessed by anyone else.

You will be required to change your Password at this screen.

Page 21HSBC’s Business Internet Banking

3.4 Set up Security Questions and Answers

You can now perform Online Password Reset should you forget your password in future. To enjoy the convenience of re-setting your password online, you will be asked to set up 2 Security Questions and Answers which will be used to verify you in the event you need to reset your password in future.

1. Select Security Question 1 from the drop down list and key in the answer

2. Select Security Question 2 from the drop down list and key in the answer

3. Congratulations, you have now set up the Security Questions and Answers

3. Registration For The First Time (Continued)

Page 22HSBC’s Business Internet Banking

3.5 Registration Acknowledgement Page

3.6 Logon and Activation of Security Device

After you have successfully registered for BIB, you are required to use your new Username and Password to logon to BIB. The system will prompt you to activate your Security Device immediately.

3. Registration For The First Time (Continued)

Once you have successfully registered for BIB, an Acknowledgement Page will be displayed. When you next logon to BIB, make sure you click on the ‘Logon’ button on the Home Page.

Key in the Username you have created.

Page 23HSBC’s Business Internet Banking

3.6 Logon and Activation of Security Device (continued)

3. Registration For The First Time (Continued)

Key in the password you have created.

Page 24HSBC’s Business Internet Banking

3.6 Logon and Activation of Security Device (continued)

3. Registration For The First Time (Continued)

Enter the serial number with this format: nn-nnnnnnn-n

Page 25HSBC’s Business Internet Banking

3.7 Account Summary Page

After the Security Device is activated, the Account Summary page will be displayed and you may continue to perform transactions via BIB.

You may proceed to perform transactions via BIB. To login next time you will only need to use the correct user ID, password, Security Device PIN and the security code (from linked security device).

Once the registration process is completed successfully, the company’s account summary page will be displayed.

The ‘Logoff’ button logs you off and thus terminates your BIB session completely and securely. If you wish to access to BIB again, you must re-logon.

3. Registration For The First Time (Continued)

Page 26HSBC’s Business Internet Banking

3.7 Account Summary Page (continued)

Please note the following steps need to be completed for enabling transactions through BIB:

1. For customers using BIB for the first time, the Primary User must set up the Account Control and assign signature group limits for all accounts linked to BIB using ‘Account Control’ option under ‘Access & Security’ menu before the users can start transacting.

2. For new accounts that are linked for the first time to BIB the Account Control signature group limits must be set up for the new account (using ‘Account Control’ option under ‘Access & Security’ menu) before the users can start transacting in the new account.

3. All Users, although they may have been assigned transaction daily limits and Signature Group, will need to return the Security Device Acknowledgement Letter [SDAL] duly signed by any Primary User of the company and the relevant documents (e.g. copy of Identity Card or Passport of the User) before he/she can authorise any transaction.

4. The Secondary User created online by Primary User is required to present himself/herself at the nearest HSBC branch with a copy of his/her Identity Card/Passport and the SDAL or User Details printout duly signed by the Primary User for verification by HSBC staff. Otherwise the Secondary User will not be allowed to perform transaction via BIB.

Please note that for item 1 and 2, these tasks are administrative functions and would need dual authorisation if you have selected Dual Administration control as explained in Section 2.3. Please refer to the Section 2.5.3 for further details on the Account Control features given above.

3. Registration For The First Time (Continued)

Page 27HSBC’s Business Internet Banking

In the event that you have forgotten your Password, you can perform Online Password Reset by entering a new Password of your choice and answering the 2 Security Questions which you have set up earlier when you registered for the BIB service (see Section 3.4).

If you fail to answer the Security Questions correctly, you will be asked to perform Offline Password Reset. Please print the copy of the Offline Password Reset Acknowledgment Page and have it signed by a Primary User of the company at the bottom of the page and delivered to the branch of the company’s account to reset your password.

Alternatively, you may complete the Business Connect Amendment Form and submit to your branch of account. You can download the BusinessConnect Amendment Form from online@hsbc.

4.1 Online Password Reset

Click Forgotten Your Password

4. Password Reset

Page 28HSBC’s Business Internet Banking

4. Password Reset (Continued)

4.1 Online Password Reset (continued)

Key in Security Code from Security Device

Page 29HSBC’s Business Internet Banking

4.1 Online Password Reset (continued)

Answer Security Question 1 correctly

Answer Security Question 2 correctly

4. Password Reset (Continued)

Page 30HSBC’s Business Internet Banking

4. Password Reset (Continued)

4.1 Online Password Reset (continued)

Password reset – please use this new password for the next logon

You may proceed with your BIB transactions

Page 31HSBC’s Business Internet Banking

4. Password Reset (Continued)

4.2 Offline Password Reset Acknowledgement Form

If you fail to answer the 2 Security Questions correctly, you will be required to submit the Password Reset Acknowledgement Page to the Bank for manual reset.

Please print the copy of the Offline Password Reset Acknowledgment Page and have it signed by a Primary User of the company at the bottom of the page and delivered to the branch of the company’s account to reset your password.

*Note – this page must be signed by a Primary User nominated by your company

Page 32HSBC’s Business Internet Banking

A message will be displayed to inform the user that he/she has exceeded the transaction limit. The transaction will be held in the Authorisation queue.

5.1 Authorising Transactions

Authorisation in BIB means approval of transactions. This allows your company to delegate different staff to have different levels of access to your company’s accounts. A user can authorise transactions up to his/her transaction daily limits and/or signature group limits as per Account Control set up. If a user creates a transaction but does not have the sufficient limit to authorise, the transaction must be approved by other users with sufficient limits.

If a transaction entered by a user needs authorisation as per the Authorisation Matrix, then such transactions will be shown as pending authorisation under the ‘Instruction Pending’ Option in the ‘Authorisation’ menu on BIB. Please do note that such transactions will not be processed till they are authorised through this option.

5.2 Transaction Exceeded User’s Limit

5. Authorising Transactions

Page 33HSBC’s Business Internet Banking

5. Authorising TRANSACTIONS (continued)

5.3 Transaction Pending for Authorisation

If a user creates a transaction but does not have sufficient limits to authorise, the transaction must be approved by another user(s) with sufficient limit in accordance with the signature requirement set up in Account Control.

The second authoriser must approve the transaction on or before the value date i.e. the date the transfer is to be effected. Otherwise the transaction will not be executed.

If a submitted transaction exceeds all the signature groups and/or company limits, the transaction will not be effected and the user will be prompted to enter a smaller amount for the transaction.

5. Authorising Transactions (Continued)

Page 34HSBC’s Business Internet Banking

6. Banking Services – Account Balances and Statement Download

You can view on a real time basis, the current position of your company’s current account balances, time deposit balances, overdraft facility and term loan outstanding.

6.1 Checking Account Balances

You can view transactions for up to two previous statement cycles of your company’s Current Business-Vantage or BusinessVantage-i Account.

Page 35HSBC’s Business Internet Banking

6. Banking Services (Continued) – Account Balances and Statement Download

6.2 Download statement details

Statements can be downloaded in any of the following formats:

4 QFX (Quicken 2004 for Windows/Quicken 2005 for MAC)

4 QIF (Common Interchange Format)

4 Common Spreadsheets (Comma Delimited Format)

4 Text Format

You can download transaction details in Common Spreadsheet, Quicken and text formats. The data in Comma Delimited file can be imported to most of the commonly used spreadsheet programmes.

Page 36HSBC’s Business Internet Banking

You can make an immediate fund transfer, make a future transfer or set-up recurring transfers to overseas suppliers or to third party accounts within HSBC.

7. Banking Services - Transfers

You can make:

4 Immediate fund transfers to your company’s accounts/third party accounts within HSBC’s branch network

4 Overseas Telegraphic Transfers (TT) or Demand Drafts (DD) for payment to your overseas suppliers

4 Cashier Orders for local payment to be delivered to a beneficiary or to be collected from a branch of your choice

4 MEPS InterBank Giro transfers to participating banks

7.1 Make a Transfer

Page 37HSBC’s Business Internet Banking

7. Banking Services - Transfers (Continued)

7.2 Telegraphic Transfer to an Overseas Beneficiary

The payment instruction will not be executed the same day if payment is submitted after the Bank’s cut-off time. Please refer to ‘Cut-off time’ option on the left hand navigation menu for the relevant cut-off times.

You can input the Foreign Exchange (FEX) contract number here if you have one. Otherwise please leave this field blank.

Page 38HSBC’s Business Internet Banking

7. Banking Services - Transfers (Continued)

7.3 FEX Contract Take Up

7.4 Currency Calculator - Foreign Currency Enquiry

Message to indicate that a FEX contract number has been entered. Transaction will be processed manually by the Bank to take up the FEX contract.

You can view the latest indicative exchange rates when you wish to make payments in foreign currency.

Page 39HSBC’s Business Internet Banking

8. Banking Services – Open Time Deposits

The Open Time Deposit function enables you to place new time deposits for your company, place or change maturity instructions and enquire on the latest interest rates.

You can check the relevant Time Deposit Interest Rates by clicking the ‘Interest rate enquiry’ button.

8.1 Checking Time Deposit Interest Rates

You can view the Time Deposit interest rates on the interest rate enquiry screen.

By clicking the ‘Check balance’ button, you can obtain an overview of your company’s account balances, overdraft limit and available balance and term loan outstanding.

Page 40HSBC’s Business Internet Banking

8. Banking Services – Open Time Deposits (Continued)

8.2 Changing Maturity Deposal Instructions On Time Deposit

You can update or change the maturity instruction of your company’s Time Deposit.

Page 41HSBC’s Business Internet Banking

9. Banking Services Pay Bills

You need to set up a list of the merchants your company wishes to pay online (with the respective bill account numbers) by using the ‘Add Payee’ function. Once the payees have been setup, you can simply select the pre-defined bill account number to make payments to the respective payees.

Page 42HSBC’s Business Internet Banking

10.1 Change BIB Password

Your Password is important. For security reasons, it is advisable to change your Password once every 30 days. When changing your Password, please be guided by the Security tips in section 3.3.

10. Other Banking Services

10.2 Change Security Questions

You can change the Security Questions which will be prompted should you forget your password at point of logon and wish to reset your password online.

Page 43HSBC’s Business Internet Banking

10.3 Stop Cheque Instructions

You can place Stop Cheque Instructions online. However, the instruction can only be executed if the cheque has not been presented for payment at the time the instruction is given.

10. Other Banking Services (Continued)

10.4 Cheque Book Request

You can place an order for new cheque books

Page 44HSBC’s Business Internet Banking

10. Other Banking Services (Continued)

10.5 Send Secured Email to the Bank

Select the subject in the drop down box.

You can type in any message pertaining to your company’s account/transaction or any issue you would like to highlight the attention of HSBC.

Page 45HSBC’s Business Internet Banking

AutoPay is a bulk payment transfer method where in a single transaction you can make payment to as many as 100 beneficiaries with accounts in HSBC or accounts in any MEPS Interbank GIRO participating financial institutions. You can use this function to make salary payment to your staff or payment to your regular set of vendors, etc.

You can perform AutoPay via 3 methods i.e.

1. File upload using csv format

2. Selecting a Registered Beneficiary

3. Manual input of Beneficiary details

11. AutoPay Services

User can choose any of the methods mentioned above for making payments to beneficiaries.

Page 46HSBC’s Business Internet Banking

11. AutoPay Services (Continued)

11.1 AutoPay via csv File Upload

Details of the payments to the beneficiaries must first be created in a csv format file consisting of the following columns in the specified order.

Step 1: Type in MS Excel the beneficiary details in the following format:

Note :

4 The account number must be in digits only without any space in between

4 The bank codes / abbreviations representing the financial institutions supported for AutoPay are listed in the table below. Please input the correct bank code / abbreviation to ensure your AutoPay payment is effected correctly.

Financial Institutions BankCode

AFFIN BANK PHBM

AFFIN ISLAMIC BANK AISK

ALLIANCE BANK MFKB

AL RAHJI BANKING AND INVESTMENT CORPORATION

RJHI

AGROBANK BKPM

AMBANK AMYB

AMISLAMIC BANK AMID

BANK ISLAM BIMA

BANK KERJASAMA RAKYAT BKRM

BANK MUAMALAT BMMB

BANK OF AMERICA BAMY

BANK SIMPANAN NASIONAL BKSN

BANK OF TOKYO-MITSUBISHI UFJ BTMA

BNP PARIBAS MALAYSIA BERHAD BNMY

CIMB BANK BBUM

CITIBANK CITH

CIMB ISLAMIC BANK CTIJ

DEUTSCHE BANK DEUM

Financial Institutions BankCode

HONG LEONG BANK MUIB

HONG LEONG ISLAMIC BANK HLIB

KUWAIT FINANCE HOUSE KFHM

JP MORGAN CHASE BANK CHAH

INDUSTRIAL AND COMMERCIAL BANK OF CHINA (MALAYSIA) BERHAD

ICMN

HSBC BANK HBMB

MAYBANK MBKB

Page 47HSBC’s Business Internet Banking

11. AutoPay Services (Continued)

11.1 AutoPay via csv File Upload (continued)

Step 3: Click Yes. (Please take note that once you have saved it in CSV format, do not reopen using Excel as it will cause the account format to be truncated and fail to be uploaded.)

Step 2: Save the file in CSV format.

Financial Institutions BankCode

MIZUHO BANK (MALAYSIA) BERHAD

MZCA

OCBC BANK OCBM

PUBLIC BANK PUBBOCBC AL-AMIN BANK OCBD

RHB BANK DCMB

Financial Institutions BankCode

RHB ISLAMIC BANK RHBATHE ROYAL BANK OF SCOTLAND AABMSTANDARD CHARTERED BANK CATMSUMITOMO MITSUI BANKING CORPORATION

SUTU

UNITED OVERSEAS BANK UOBM

Page 48HSBC’s Business Internet Banking

11. AutoPay Services (Continued)

11.1 AutoPay via csv File Upload (continued)

Step 4: Login to BIB and select ‘Make ACH Payment‘ from the menu. Proceed to click ‘Browse‘ and select the created csv file to import and click ‘Open‘

Step 5: The selected file will be populated in the ‘File Path’ file. Click ‘Retrieve’.

Page 49HSBC’s Business Internet Banking

11. AutoPay Services (Continued)

11.1 AutoPay via csv File Upload (continued)

Step 6: The details will be populated in the Beneficiary Details section. Proceed to key in the relevant details and click ‘Pay’ and follow the instructions to complete the transaction.

Page 50HSBC’s Business Internet Banking

11. AutoPay Services (Continued)

11.2 Maintaining Registered AutoPay Beneficiary

Beneficiaries can be registered through the ‘Manage ACH Beneficiaries’ option available in the menu. All registered AutoPay beneficiaries can be viewed from the ‘AutoPay Beneficiary Summary’. You can maintain up to 200 beneficiaries.

To add new beneficiaries, click ‘Add’ and complete the details on Beneficiary Name, select the Bank from the dropdown list and input the Account Number.

Page 51HSBC’s Business Internet Banking

11. AutoPay Services (Continued)

11.3 AutoPay Template

For payment to a regular set of beneficiaries, you can create an AutoPay template by selecting ‘Make ACH Template’ from the menu.

All saved AutoPay template can be viewed from the ‘Manage ACH template’ menu.

Page 52HSBC’s Business Internet Banking

11. AutoPay Services (Continued)

11.4 AutoPay Payment Set Up

To view all AutoPay payments that have been set up, please select ‘Manage ACH payment’ from the menu and then select the account.

1. Select Account

2. Select which AutoPay details to view.

Page 53HSBC’s Business Internet Banking

12. Internet Trade Services

Trade Customers can now access their import and export accounts through Business Internet Banking. Through the Internet Trade Services (ITS) function customers can complete, save and securely transmit their Documentary Credit (DC) applications and amendments to HSBC for onward processing.

The following services are available online through ITS:

4 Account Information

4 Import Documentary Credit

4 Import Bill Instructions

4 Export DC Transfer

4 Templates and Lists

4 Trade Facilities

4 Trade Authorisations

12.1 Account Information

Allows user to view the following

4 Pending DCs – details all DCs which the user is still working on and has not yet been delivered to the Bank for processing

4 Outstanding DCs – includes information for Pending DCs but also lists DCs which have been submitted to the Bank and are being processed. Also includes DC amendments which are either pending authorisation or have been submitted to the Bank.

4 Margin Deposits – lists all Margin Deposits held on the company’s accounts

4 Outstanding Bills – lists all Bills requiring action

4 Paid Bills – details of paid bills, including date of payment

4 Loans – easy access to all Trade Loan details including related reference numbers

4 Shipping Guarantee/Airway Bill/Delivery Order – all details available for the customer to view

Page 54HSBC’s Business Internet Banking

12. Internet Trade Services (Continued)

12.2 Import Documentary Credit

Allows user to create Import DC applications and Import DC amendment requests and submit them to HSBC online with the following available options:

4 Create an Import DC application

4 Change or delete an Import DC application

4 Create an Import DC amendment

4 Change or delete an Import DC amendment

12.3 Import Bill Instructions

This function can be used to view a list of all Bills Awaiting Instructions. The user can submit to HSBC, Bill Acceptance Instructions and Bill Payment instructions and view history of the Bill through this option.

Page 55HSBC’s Business Internet Banking

12. Internet Trade Services (Continued)

12.4 Export DC Transfer

This function can be used to view all details of Export DCs for the selected accounts. The user can submit to HSBC, Transfer DC Instructions with the following options:

4 Partial transfer with substitution of invoices

4 Partial transfer without substitution of invoices

4 Full transfer of credit in its entirety

Page 56HSBC’s Business Internet Banking

12. Internet Trade Services (Continued)

12.5 Templates and Lists

Users can create (& save) / edit / delete frequently-used templates and clauses to reduce input time. The following templates can be created (& saved) / edited / deleted:

12.6 Trade Facilities

A list of all trade facilities granted to the company will be displayed including the total amount of the facilities and the outstanding and available amounts. From here the user can select to view any of the details on any DCs, Bills, Loans or Shipping Guarantees attached to the facilities.

4 Applicant

4 Beneficiary

4 DC Template

4 Payment Clauses

4 Invoice Clauses

4 Transport Clauses

4 Packing List Clauses

4 Other documents Clauses

Page 57HSBC’s Business Internet Banking

12. Internet Trade Services (Continued)

12.7 Trade Authorisations

All instructions awaiting authorisation will be displayed through this screen. The authoriser will be defined as per the Authorisation Matrix (please see Section 2.5).

To use this ‘Trade Service’, please access the Trade Service option on the left hand menu and select an Import or Export account and the appropriate category from the drop down options. After selection of the account and category, click on ‘Go’ to request for the required information. A new window will open which contains the required information.

Page 58HSBC’s Business Internet Banking

13. Frequently Asked Questions

13.1 General Enquiries

Is BIB available 24 hours a day?Yes, BIB is available 24 hours a day, 7 days a week. However, some transactions made outside the Bank’s cut-off time will be processed on the next day. For further information, please refer to the ‘Cut-off times’ option on the left hand navigation menu of BIB.

Can I access BIB when I’m abroad?Yes. All you need to do is to ensure that you remember your BIB ID/Username, Password, Security Device PIN and have your Security Device with you while you are abroad.

Is BIB service secured?At HSBC, we are committed to improving online security for our customers. Security is our top priority. Your financial information is protected by:a. Username and Password,b. Security Device PIN, c. Security Device,d. 128-bit Secure Sockets Layer (SSL) encryption, ande. Automatic ‘time-out’

Each time you access BIB, your Username, Password, Security Device PIN and a unique Security Code generated by the Security Device must be entered. If there is no activity after 10 minutes, your BIB session will be terminated automatically to prevent unauthorised access.

Do we need to pay any charges to subscribe for the service?A monthly fee of RM20 will be imposed on all BIB customers. The first Security Device is provided free of charge. However, the second and subsequent Security Device(s) will attract a charge of RM50 per device. A charge of RM50 is levied for each replacement of Security Device due to loss, damage (except if the Security Device is damaged on arrival) or battery replacement (if the Security Device is issued for more than one year).

How do we register for BIB service?You need to complete the Business Connect Application Form and provide details of each Primary User whom your company has nominated to have access to BIB.

Upon completion of the Application Form, please submit it to the HSBC Branch where your company maintains an account. The Branch will review your Application Form and thereafter forward it to our Central Processing Centre to setup your BIB service. Each User will receive a unique Electronic Banking Number or BIB ID, Password and Security Device which will be mailed separately to the correspondence address of your company. A signed acknowledgement is required from each user before their transaction limits are enabled by the Bank.

How many users can we nominate?Depending on your business and financial control requirements, you may nominate up to twenty (20) users with at least one (1) Primary User must be selected for Single Administration Control and two (2) Primary Users for Dual Administration Control for the BIB service.

Can BIB users access Business Telephone Banking (BTB) service?You can nominate BIB users to access Business Telephone Banking as well by completing the BTB section of the Business Connect Application Form.

If I open a new account after registering for BIB, will it be automatically added to BIB?Yes it will, if your company has signed up for Autopull function. With Autopull, newly opened accounts will be accessible via BIB automatically. The Primary User will receive a secure email via BIB to advise him/her of the new account for him/her to set Account Control as well as assign access to users in the company. If you have not signed up for Autopull, in order to link the account, your company will have to submit a Business Connect Amendment Form to the Bank.

Page 59HSBC’s Business Internet Banking

13. Frequently Asked Questions (Continued)

13.2 Security - Overview

What is the difference between ‘X’ – Close and ‘LOG OFF’?The ‘X’ closed button allows you to end your BIB session without logging off from your business page. The ‘Log Off’ button logs off and thus terminates your BIB session completely and securely. If you wish to access BIB again, you must logon again.

What shall I do if I suspect that there are fraudulent transactions on my account?You should immediately contact our Internet Banking Helpdesk telephone number 03-8321 5511.

How are my Username and Password used?Your Username is your unique identification when you access BIB. You can choose your own Username and Password when you register with us online. Each Username should be unique and the Password should contain 6 to 30 alpha-numeric characters. After the registration and initial set-up process, your Username and Password will enable you to securely access BIB.

What shall I do if I forget my logon Password?If you have forgotten your Password, you can perform Online Password Reset by answering correctly the 2 Security Questions which you have set up earlier. After you have done so, you may enter the new Password of your choice. If you are unable to answer the Security Questions correctly, you will be asked to perform an Offline Password Reset. To do this, you will need to print the copy of the Offline Password Reset Acknowledgement page, request any Primary User of your company to sign at the bottom of the page and deliver it to the Branch of Account to reset your Password.

Please refer to Section 4 of this guide to perform Online Password Reset.

Can I change my logon Password?Yes. You can change your Password online any time by selecting the ‘Services’ navigation menu on the left and by clicking ‘Change BIB Password’ after logging on to BIB. Your new Password should contain 6 to 30 alpha-numeric characters and must be different from your Username and your previous Password. Passwords are case sensitive.

For security reasons, it is advisable to change your Password once every 30 days.

Can I change my Security Questions?Yes. You can change your Security Questions online any time by selecting the ‘Services’ navigation menu on the left and by clicking ‘Change Security Questions and Answer’ after logging on to BIB.

What is SSL Encryption?SSL (Secure Sockets Layer) is a security standard which is commonly used in data communications over the Internet. It is used in BIB to allow you to exchange confidential information with us on the Internet in an encrypted manner. This means that no other parties can read the data you send to or receive from us.

Page 60HSBC’s Business Internet Banking

FREQUENTLY ASKED QUESTIONS (Continued)

13. Frequently Asked Questions (Continued)

13.3 Security Device - Overview

Why do I need a Security Device to access my Internet Banking service? What are the benefits of using a Security Device?At HSBC, we are committed to improving online security for our customers. The introduction of the Security Device means that BIB customers will have a form of two-factor authentication to access their BIB accounts. Two-factor authentication works on the basis of something only the user knows (Username and Password), and something the user has (Security Device).

Using the Security Device helps to protect your business from a large variety of internet fraud including phishing and Trojans that cannot otherwise be protected.

How do I request for a Security Device?The Security Device will be sent to your company’s correspondence address as maintained in our record together with your BIB ID and Password after your company’s application for BIB has been approved. For Secondary Users that are created online by the Primary User, the BIB ID, Password and Security Device will be sent to the company’s correspondence address as maintained in our record upon successful creation of the Secondary User.

Do I need to pay for the Security Device?The first Security Device is provided free of charge while the second and subsequent Security Device(s) will attract a charge of RM50 per device. A charge of RM50 is levied for each replacement Security Device due to loss, damage (except if the Security Device is damaged on arrival) or battery replacement (if the Security Device is issued for more than one year).

As the Device is manufactured and imported from an overseas vendor, the charge of RM50 is to cover the cost of the Device.

What should I do if my Security Device is stolen, lost or damaged?Please call our Call Centre 24-hour Internet Banking Helpdesk at 03-8321 5511 or send us an email through the ‘Contact Us’ function in our Website: www.hsbc.com.my immediately for deactivation. After which, your company is required to send in a Business Connect Amendment Form for a replacement Security Device to be sent to you by courier service.

How do I use the Security Device?Security Device PIN set up for the first time:

4 HSBC Security Device is unique as it is PIN-protected. For added security, you will have to set a 6-digit PIN during activation and this PIN will be required to unlock your Security Device before use.

4 Press and hold the green button for 2 seconds to turn on your Security Device.

4 Enter a 6 digit PIN code of your choice and press the yellow button.

4 Re-confirm by re-entering your 6-digit PIN.

4 If a message ‘FAIL PIN’ is shown on your Security Device, this reflects that your confirmation PIN did not match the first PIN entered. You will need to restart the PIN setup process by pressing the green button.

4 If a ‘NEW PIN not SAFE’ message appears on your Security Device display, this means that the new PIN that you have entered is not random enough and could be guessed, i.e. repeating or sequential numbers (eg 111111, 123456, 543210). Please restart the PIN setup process and choose another 6-digit PIN.

4 If a ‘NEW PIN CONF’ message appears on the device display, this means your PIN is successfully set up. Subsequently, whenever you want to use your Security Device, you will use this 6 digit PIN to unlock the keypad.

Page 61HSBC’s Business Internet Banking

13. Frequently Asked Questions (Continued)

13.3 Security Device - Overview Security Device Activation for the first time:

4 When you logon to Internet Banking, after entering your User ID and password, you will be asked to input the 10-digit serial number located on the back of your Security Device.4 Enter the 10 digit serial number.4 Press and hold the green button to turn on your Security Device.4 Enter your Security Device PIN.4 With “HSBC” displayed on the Security Device screen, press the green button to generate the security code.4 Enter this Security Code and click “Continue” to complete the activation process.

Logging On To Internet Banking:

4 Enter your user ID on the Internet Banking page.4 Enter your Internet Banking password that you have created during your Internet Banking registration.4 Press and hold the green button to turn on your Security Device. Then enter your Security Device PIN.4 With “HSBC” displayed on the Security Device screen, press the green button again. This will generate a security code.4 Enter the 6 digit security code displayed to you on the Security Device and click Continue.4 Now you are successfully logged on.

What should I do if the Security Code is not accepted?For security reasons, the Security Code is a unique number and is only valid for a certain period of time. If you input an expired Security Code when you logon to BIB, you will receive an error message. Please turn on and unlock your Security Device with your Security Device PIN and press the green button on the Security Device to obtain a new Security Code. If the problem persists, please call our Internet Banking Helpdesk at 03-8321 5511 for assistance.

Does the battery need replacing?The battery in the Security Device can last for three to five years, depending on the frequency of the usage.

The BATT message will be prompted when the battery of your Security Device is running low. Please request for a new Security Device by filling up the Business Connect Amendment Request Form which can be downloaded at www.hsbc.com.my.

Can I use the Security Device to logon to BIB when I am abroad?Once you have activated your Security Device, it will be required every time you wish to access BIB regardless of your location. The Security Device has been designed to be small, light and easily transportable and you can access to BIB everywhere in the world using the Device.

Page 62HSBC’s Business Internet Banking

13. Frequently Asked Questions (Continued)

13.3 Security Device - Overview I noticed that there are different ways to generate different types of security code. How do I generate the different security codes and what are they for? The new Security Device generates three types of security code which supports different functions in Business Internet Banking. Please refer to details below :

When do I need to input Beneficiary specific information into the Security Device? Beneficiary specific information is needed to be inputted into the Security Device to verify your instruction. You need to input beneficiary specific information into the Security Device when you are doing the following transactions:

4 Make 3rd party payments (i.e. MEPS, TT, Other HSBC / HSBC Amanah accounts)4 Make ACH payments4 Add new payees for bill payment4 Making changes to the beneficiary account number of a pending instruction

Type of Security Code

Security Code

Transaction Data Signing Code

Re-authentication Code

Security Code Format

123456

123 456

123 456

How to Generate?

Customer press on the device to generate the Security Code

Customers input specific information into the device (e.g. beneficiary account number) and press to generate the Transaction Data Signing Code

Customer press the on the device to generate the Re-authentication Code

Example of Function

Required to log on to Business Internet Banking

Verification for higher risk transaction such as payment to 3rd party beneficiaries

Verification of lower risk transaction such as authorizing a pending instruction

3

Page 63HSBC’s Business Internet Banking

13.3 Security Device - Overview You may also refer to the following table on how to input beneficiary specific information into the Security Device for different scenarios.

Make payment to 3rd party beneficiaries / add payee for bill payment.

Make ACH Payment

13. Frequently Asked Questions (Continued)

Type of Beneficiary / Merchant Account Number

Beneficiary / merchant account number that is less than 8 digits

Beneficiary / merchant account number that is less than 8 digits

Beneficiary / merchant account number contains alpha numeric characters

Beneficiary / merchant account number which contains solely of alpha characters

Input Method

Input last 8 digits

Add zero(s) at the beginning to make it an 8-digits number before input

Input last 8 digits and ignore alpha characters. If digits is less than 8 digits, to add zero(s) at the beginning to make it an 8-digits number before input

Input eight zero(s)

Example

123-45678-901

123456

123A4567BC89D123A456B

AFG

Digits To Be Input Into Security Device

45678901

00123456

2345678900123456

00000000

Type of Beneficiary / Merchant Account Number

Beneficiary / merchant account number with 8 or more digits

Beneficiary / merchant account number that is less than 8 digits

Beneficiary / merchant account number contains alpha numeric characters

Beneficiary / merchant account number which contains solely of alpha characters (applicable for Add Payee only)

Input Method

Input last 8 digits

Add zero(s) at the beginning to make it an 8-digits number before input

Input last 8 digits and ignore alpha characters. If digits is less than 8 digits, to add zero(s) at the beginning to make it an 8-digits number before input

Input eight zero(s)

Example

123-45678-901

123456

123A4567BC89D 123A456B

AFG

Digits To Be Input Into Security Device

45678901

00123456

2345678900123456

00000000

Type of ACH Payment

ACH payment with one entry

ACH payment with two or more entries

Input Method

Input last 8 digits of the beneficiary account number

Input first 8 digits of the combination of ‘Total entries’ and ‘Total amount’ (ignore decimal places).

If digits is less than 8 digits, add zero(s) at the beginning to make it an 8-digits number before input

Example

Total entries: 1Total amount: $10,000Beneficiary account number: 123-45678-901

Total entries: 153Total amount: $123,456.90

Total entries: 8Total amount:$73,456.40

Digits To Be Input Into Security Device

45678901

15312345

00873456

Page 64HSBC’s Business Internet Banking

13. Frequently Asked Questions (Continued)13. Frequently Asked Questions (Continued)

13.3 Security Device - Overview When do I need to input the Security Code / Re-authentication Code only without inputting beneficiary specific information? Security Code would be inputted during the initial log on into Business Internet Banking together with your Internet Banking password.

As for Re-authentication Code, customer can perform single signing by inputting the Re-authentication Code when you are doing the following actions:

4 Authorizing a pending instruction4 Create / Modify User Access Rights4 Apply Cashier’s Order / Demand Draft

How would I know how to use the Security Device to generate the appropriate security codes required?Simply follow the steps shown in Business Internet Banking where there would be instructions on which button to press on the Security Device’s keypad to generate the security code that is required.

You may obtain more info from www.hsbc.com.my/sd.

Page 65HSBC’s Business Internet Banking

13. Frequently Asked Questions (Continued)

13.3 Security Device - Overview (continued)

13.4 Management Control - Overview

How many types of users can be created for BIB?There are two types of users in BIB, namely Primary Users and Secondary Users.

How are the access rights and limits set-up in BIB?The access rights and limits for Primary Users are set up by HSBC in accordance with the information provided in the Business Connect Application Form by the company. The Primary User will determine the access rights and limits of the Secondary Users when they create the Secondary Users online. The limits which may be assigned to the Secondary User will be up to the Primary User’s own limits.

Who can be a Primary User in BIB?A Primary User can be the authorised signatory of your business/company or someone who has the authority to authorise transactions of higher value on behalf of the company. As the Primary User will be given the function to set up Secondary Users online as well as assign transaction limits to each Secondary User, you should consider nominating higher-ranking employees in your business/company to be the Primary Users.

How many Primary Users are allowed in BIB?Depending on your business and financial control requirements, you may nominate up to twenty (20) users with at least one (1) Primary User must be selected for Single Administration Control and two (2) Primary Users for Dual Administration Control for the BIB service.

Who can be the Secondary Users in Business Internet Banking?The Primary User can appoint anyone to be a Secondary User. Secondary Users are responsible for the day-to-day operations of the business/company accounts and they basically share the same functions and access rights as that of a Primary User with the exception of the Administrative functions (please refer to Section 2.2 for more details) which only Primary Users are entitled to. However, depending on your business requirements and for control purposes, the Primary User may wish to assign lower daily limits to Secondary Users or to allow certain category of Secondary Users to perform transaction preparation only.

How many Secondary Users are allowed in BIB?Depending on your business and financial control requirements, you may nominate up to twenty (20) users with at least one (1) Primary User must be selected for Single Administration Control and two (2) Primary Users for Dual Administration Control for the BIB service.

Page 66HSBC’s Business Internet Banking

FREQUENTLY ASKED QUESTIONS (Continued)

13. Frequently Asked Questions (Continued)

13.5 Management Control - Dual Authorisation

What does authorisation in BIB mean?Authorisation in BIB means approval of transactions. This allows different users to have different levels of access to your business accounts. A user can authorise transactions up to his/her transaction daily limits and within the signature group limits in the Authorisation Matrix under Account Control Set-up.

If a user creates a transaction but does not have sufficient limits to authorise the transaction, the transaction will fall under the ‘Instruction Pending’ queue and must be approved by other users with sufficient limits.

If the user has sufficient limit but the transaction is above the single signature group under the Authorisation Matrix limit for selected Account, the transaction will either be sent to the ‘Instruction Pending’ queue if there are other Users within the company with sufficient limits or the user will be asked to reduce the transaction amount.

Under ‘Dual Authorisation’, what is the time window for the second authoriser to approve the transaction after the first authoriser has submitted the transaction?The second authoriser must approve the transaction on or before the value date. Otherwise, the transaction will not be executed and will remain in the ‘Instruction Pending’ queue.

Under ‘Dual Authorisation’, can the second authoriser amend the transaction details after the first authoriser has submitted the transaction?The second authorisers can change the amount of the transaction, or delete the entire transaction submitted by the first authoriser.

Under ‘Dual Authorisation’, can the first authoriser notify the second authoriser to approve the urgent transactions via BIB?No. BIB currently does not provide this function. The two (2) authorisers must contact each other directly. Alternatively, the authoriser must logon to BIB to check on the ‘Instruction Pending’ function to check on any outstanding/urgent transactions to be approved.

Under ‘Dual Authorisation’, is the transaction counted towards the daily limits of the authoriser who approved the transaction?Yes. The transaction will be deducted from the transaction daily limits of the authoriser(s) who approves the final transaction. If the transaction requires dual signatures, the transaction daily limits for both authorisers will be deducted with the whole transaction amount.

Page 67HSBC’s Business Internet Banking

FREQUENTLY ASKED QUESTIONS (Continued)

13. Frequently Asked Questions (Continued)

13.6 Banking Services - Account Balance

How far back can I trace the account transaction history?You can view or check the last 90 days transactions online by entering the date range search at the Account History page.

Can I download the statement details?Yes. You can download statements simply by clicking on the ‘Download Transaction Details’ located at the Account History page. Statements can be downloaded in any of the following formats:

4 QFX (Quicken 2004 for Windows/Quicken 2005 for MAC)

4 QIF (Common Interchange Format)

4 Common Spreadsheets (Comma Delimited Format)

4 Text Format

The data in Common Spreadsheets (CSV format) can be imported to most of the commonly used spreadsheet programmes or accounting systems.

Page 68HSBC’s Business Internet Banking

FREQUENTLY ASKED QUESTIONS (Continued)

13. Frequently Asked Questions (Continued)

13.7 Banking Services - Transfers

How long does it take for the transfer funds to be deposited into the designated account?If you select ‘Transfer now’ to any other HSBC banking accounts, the transferred funds will be deposited in the designated HSBC account immediately.

What happens if I want to make a foreign currency transfer on a public holiday?If the transaction date falls on our public holiday, the transaction will be processed on the next business day.

How can I check the exchange rate when transacting in foreign currencies?You can select ‘Currency Calculator’ on the left hand navigation menu in order to obtain an indicative rate for reference. Please note that this indicative rate may differ slightly from the actual exchange rate used at the time of the transaction.

Do I get a reference number for each payment I make?Yes. A unique transaction reference number is automatically generated for each payment transaction executed.

Do I need to have sufficient funds in my account when I make a forward-dated payment?It is not necessary to have sufficient funds in your company’s account at the moment when you make a forward-dated payment. However, your company’s account needs to have sufficient funds on the value date of the payment.

How do I set up the bill payment function?Each user must set up a list of merchants or payee by clicking on the ‘Add Payee’ function. Once the users have set up the function, they can select the pre-defined payee to make payments.

Security Tips

To prevent unauthorised access to BIB, the following security tips must be observed:

4 Before you logon to BIB, please ensure that all other Internet sessions are closed.

4 Verify that you are connected to the genuine HSBC website by checking on the web server’s certificate.

4 Ensure regular download and application of security updates and patches to your PC/ browser as and when they are available.

4 Ensure you install virus detection software and regularly update your virus definition.

4 Install a personal firewall that prevents hackers from accessing your computer, especially if you have to connect to the Internet for a prolonged period of time.

4 Do not leave your PC unattended. Use physical lock, password protected screen savers and create a Windows password to limit unauthorised access.

4 Know everyone who uses your computer.

4 Do not open e-mail attachments from unknown sources. Do not install pirated software.

4 You should use the ‘LOG OFF’ button to leave Business Internet Banking to ensure that you log off from the services securely.

4 Do not access Internet banking accounts through hyperlinks embedded in email.

4 Avoid accessing BIB from cyber cafes or shared computers.

4 Closely monitor the transactions posted to your accounts so that anomalies can be detected and remedial actions can be taken promptly.

4 Call our Internet Banking Helpdesk 03 8321 5511 if you suspect any unusual account activities or you have Password/Security Device problems.