HSBC Australia agrees to pay a penalty of about $35 million after admitting it failed to protect customers from scams, following action by Australia’s corporate regulator. Multiple reports say the regulator found weaknesses in how HSBC responded to and prevented unauthorised transactions involving customers. The accounts describe a scam affecting more than 1,000 customers between January 2020 and August 2024, involving impersonation scams in which criminals claimed to be HSBC staff. Sources state the scammers used text messages and spoofed phone numbers to persuade victims to make transfers of large sums of money. One report indicates the transactions linked to the scam approach roughly A$35 million in total, tied to unauthorised transactions. The penalty is presented as a significant regulatory outcome, with at least one outlet describing it as among the first of its kind internationally. HSBC’s agreement reflects an admission of shortcomings in protecting customers and responding to scam risk. The reports do not indicate whether the bank accepted fault beyond the regulator’s findings, but they consistently describe the same timeframe, customer count, scam method, and penalty amount.