Know your rights. Use them.
Banks count on customers not knowing the rules. Here is what HSBC is required to do, how to put it in writing, and how to escalate when it doesn’t. No lawyer, no claims company.
General information for UK customers, not legal advice. Checked against official guidance, linked below.
Payments that won’t stop
Subscriptions, memberships and “free trials” often take money through a recurring card payment, also called a continuous payment authority (CPA). It’s different from a Direct Debit. The FCA’s rules are clear:
- You can cancel with HSBC directly. HSBC must stop the payments even if you haven’t contacted the business.
- Timing: ask HSBC (or the business) by the end of the business day before the next payment is due.
- Any payment taken after you cancel is unauthorised. HSBC must refund it, and any related charges, immediately.
- The name doesn’t matter. “Guaranteed payment”, “recurring transaction”, “continuous authority”: you can still cancel through your card issuer.
- Banks must not send you away. In 2013 the FCA reminded banks they must cancel these payments themselves and not insist you contact the merchant.
You still owe any genuine debt to the business; cancelling the payment doesn’t cancel a contract. Recurring card payments are not covered by the Direct Debit Guarantee.
Direct Debits
You can cancel a Direct Debit at any time by telling your bank. Under the Direct Debit Guarantee, if an error is made in the payment of a Direct Debit, by the organisation or your bank, you’re entitled to a full and immediate refund of the amount paid from your bank.
A complaint that counts
- Use the words “formal complaint”. Phone calls get lost. Put it in writing (secure message, email or letter) and ask for a reference.
- Stick to facts and dates: what you asked for, when, who you spoke to, what happened, what it cost you.
- Say what you want: refunds, charges and interest reversed, compensation for distress and inconvenience, credit file corrected.
- Keep everything: statements, screenshots, call times, names, reference numbers.
- Know the deadline. HSBC must send a final response within 8 weeks. For complaints about payment services (card payments, Direct Debits, transfers) the limit is usually 15 business days, or up to 35 in exceptional cases if HSBC tells you why.
The Financial Ombudsman
The Financial Ombudsman Service is free and independent. You can go to it once HSBC has sent its final response, or if the deadline has passed without one. You normally have six months from the final response to refer your complaint.
The Ombudsman can tell HSBC to put things right, including refunds and compensation for distress and inconvenience. You don’t need a claims company, which would take a cut.
Get the call recordings
If staff were rude, cut you off, or told you something was done when it wasn’t, get your own evidence. Under UK data protection law you can make a subject access request for your personal data, including call recordings and notes HSBC keeps about you. It’s usually free, and HSBC normally has one month to respond. Use the template below. If HSBC doesn’t respond, you can complain to the Information Commissioner’s Office.
If you’ve been scammed
If you were tricked into sending money by bank transfer (an “authorised push payment” or APP scam), contact HSBC immediately. Under the Payment Systems Regulator’s rules, in force since 7 October 2024, most APP scam victims must be reimbursed, up to a limit, unless the bank can show an exception applies. Report it quickly, and complain formally if you’re refused.
Chargeback & Section 75
If you paid for something that never arrived or was faulty, chargeback (debit, credit and prepaid cards) lets your bank try to reclaim the money from the seller’s bank. It has time limits, so ask quickly. For credit-card purchases over £100 and up to £30,000, Section 75 of the Consumer Credit Act makes the card provider jointly liable with the seller.
Template letters
Copy, fill in the brackets, send by HSBC secure message, email or post. Keep a copy.
Cancel a recurring card payment
Subject: Cancel recurring card payment — [merchant name] Dear HSBC, Please cancel the recurring card payment (continuous payment authority) set up with [merchant name] on my [debit/credit] card ending [last 4 digits] on account [sort code / last 4 digits of account number]. I am withdrawing my consent to any further payments to this merchant with immediate effect. The FCA confirms that a card issuer must stop recurring card payments when the customer asks, even if the customer has not contacted the merchant, and that any payment taken after cancellation is unauthorised and must be refunded promptly, with any related charges. [If payments have already been taken after an earlier cancellation:] I first asked you to cancel this on [date] by [phone/branch/app/letter]. Since then, the following payments have been taken: [dates and amounts]. Please refund these as unauthorised transactions, with any charges or interest caused. Please confirm in writing that the authority has been cancelled and that no further payments will be allowed. If you do not resolve this, please treat this letter as a formal complaint and send me your final response. Yours faithfully, [Name] [Date]
Formal complaint
Subject: FORMAL COMPLAINT — [short description] Dear HSBC Complaints Team, This is a formal complaint. Please log it and send me a written acknowledgement and complaint reference. What happened: [Set out the facts in date order: what you asked for, who you spoke to, what you were told, what went wrong.] The impact on me: [Money lost, charges, stress, time spent, effect on your health or family.] What I want you to do: [For example: refund £X, refund charges and interest, compensation for distress and inconvenience, correct my credit file, written apology.] Please send me your final response within the time limits that apply. I understand that if I am unhappy with your response, or you do not respond in time, I can refer my complaint to the Financial Ombudsman Service. Yours faithfully, [Name] [Account: sort code / last 4 digits] [Address, phone, email] [Date]
Subject access request (call recordings)
Subject: Subject access request Dear HSBC Data Protection Officer, Under Article 15 of the UK GDPR I request copies of the personal data you hold about me, including: - recordings and transcripts of telephone calls between me and HSBC from [date] to [date] - notes, chat logs and complaint records about me in that period - records of my instructions to cancel or block payments, and what was done with them My details: [full name, address, date of birth, account sort code / last 4 digits]. Please respond within one month of receiving this request. Yours faithfully, [Name] [Date]
Official guidance
7 sources- Exhibit ARecurring card payments (continuous payment authorities)Financial Conduct Authority · fca.org.ukOfficial record
- Exhibit BFCA reminds banks of their obligations when cancelling Continuous Payment AuthoritiesFinancial Conduct Authority · June 2013 · fca.org.ukOfficial record
- Exhibit CHow to complainFinancial Ombudsman Service · financial-ombudsman.org.ukOfficial record
- Exhibit DGetting copies of your information (subject access request)Information Commissioner’s Office · ico.org.ukOfficial record
- Exhibit EThe Direct Debit GuaranteeDirect Debit (Bacs) · directdebit.co.ukOfficial record
- Exhibit FGetting your money back if you paid by card or PayPalCitizens Advice · citizensadvice.org.uk
- Exhibit GAPP scams reimbursementPayment Systems Regulator · psr.org.ukOfficial record