HSBC has stopped its Android banking app from running inside Samsung Secure Folder and Android Private Space, citing security risks that could hinder threat detection and fraud notifications. The unannounced change has left some customers unable to use mobile or web banking, particularly where desktop access depends on the app for multi-factor authentication.

Customers reported generic security warnings, failed app launches and difficulty activating an alternative installation. Some said they faced waits of five to 10 working days for an authentication token, while others criticised HSBC for not providing advance notice or clear support; the concerns have prompted questions about the FCA’s Consumer Duty requirements.