share your security codes with anyone, even someone claiming to be from HSBC.
Contact HSBC customer service to deactivate the old key. hsbc log in without secure key
This is where the rules are strictest.