| Country/Region | Personal Banking | Business Banking | Current Status | |----------------|------------------|------------------|----------------| | UK | Digital Secure Key (app) | Physical Secure Key | Physical discontinued for retail (2020) | | Hong Kong | Digital + Physical | Physical | Both available | | USA | Digital Secure Key | Physical (USB/NFC token) | Physical for business only | | Middle East | Physical + Digital | Physical | Physical common | | Canada | Digital only | Physical | Physical for business | | Mainland China | Digital Secure Key | Physical token | Physical available |
| Method | Security Level | Convenience | Cost | Phishing Resistance | |--------|----------------|-------------|------|----------------------| | HSBC Physical Secure Key | Very High | Low | High (hardware + postage) | Very High | | SMS OTP | Medium | High | Low | Low (SIM swap, SS7) | | Digital Secure Key (App) | High | Very High | Low | High (if app checks URL) | | Authenticator App (TOTP) | High | High | Zero | Medium (no transaction signing) | hsbc internet banking security device
: A small, handheld generator that creates one-time codes. | Country/Region | Personal Banking | Business Banking