Australia’s ASIC said a federal court ordered HSBC to pay a $35 million penalty over scam protection failures. ASIC reported findings that the bank’s admissions and agreed facts showed inadequate controls that harmed scam victims.

ASIC reported that a federal court ordered HSBC to pay a $35 million penalty after findings related to scam protection failures. The regulator said the court action stemmed from serious issues in HSBC’s scam-related risk management and control environment. ASIC highlighted that HSBC’s admissions and agreed facts supported the conclusion that the bank’s systems and handling were insufficient to protect customers from scams. The enforcement centers on the concept that financial institutions are expected to implement effective scam prevention and response controls, especially when customers are at risk of fraud involving impersonation, coercion, or deceptive payment requests. ASIC characterized the outcome as a major consumer-protection signal for how regulators expect banks to handle scam-related conduct—both in preventing exposure and in responding appropriately when scam risk is present. While the story is not a single “arrest,” it functions as a fraud deterrence measure by focusing on institutional accountability. For consumers, the key takeaway is that scam losses can be tied not only to criminals’ tactics but also to weaknesses in how banks detect and intervene in scam attempts. The case suggests heightened scrutiny of banks’ controls around scam detection, escalation, and protective measures.