--- title: "Privacy risks to early users of PayMe mobile wallet app probed by Hong Kong watchdog" type: "News" locale: "en" url: "https://longbridge.com/en/news/271855786.md" description: "Hong Kong's privacy watchdog is investigating potential privacy risks for early users of HSBC's PayMe mobile wallet app. The Office of the Privacy Commissioner for Personal Data (PCPD) is reviewing issues related to the vulnerability of legacy users, particularly those who signed up before 2019 when default settings changed to private. Some users were unaware their transaction history could be viewed by friends. The regulator emphasizes the need for 'privacy by default' and that service providers must ensure users are informed about their privacy options. HSBC stated that existing users were notified about their privacy settings." datetime: "2026-01-08T00:30:55.000Z" locales: - [zh-CN](https://longbridge.com/zh-CN/news/271855786.md) - [en](https://longbridge.com/en/news/271855786.md) - [zh-HK](https://longbridge.com/zh-HK/news/271855786.md) --- # Privacy risks to early users of PayMe mobile wallet app probed by Hong Kong watchdog Hong Kong’s privacy watchdog is investigating risks to early users of HSBC’s popular PayMe mobile app after the Post discovered some remain unaware their personal details may have been exposed.\\nThe Office of the Privacy Commissioner for Personal Data (PCPD) told the Post on Monday that the compliance review would “look into all relevant issues, including the vulnerability of legacy users and the need for in-app prompts”.\\nThe watchdog said the bank must ensure the highest level of privacy protection by default.\\nThis follows HSBC’s statement that since 2019, users have been able to choose the level of visibility of their transaction history within the app.\\nOne of Hong Kong’s largest e-payment platforms, PayMe serves more than 100,000 local and online merchants, from retail shops to taxis across the city.\\nAt the centre of concern are early adopters of the app’s 3.2 million users who signed up during its initial phase as a peer-to-peer social payment app.\\nSome customers who adopted the app before 2019 were unaware that their transaction history could be viewed by friends within the platform.\\nIsaacson Ng, who started using PayMe before the default sharing setting changed to private, was shocked to learn from a Post reporter that he could access the payment records of a friend on the app.\\nHe said he was unaware that his own transaction history could be viewed by others, or that there was an option to set his app preferences to “private.”\\nAn accountant who joined PayMe before the default settings were made private in 2019 had a similar experience.\\n“I wasn’t sure \[about it\]. I never touched the settings at the beginning,” said the accountant, who identified himself only as Mr Lau. “No wonder my colleague once told me that people found out how much her husband gave her to buy a handbag.”\\nBut the Post’s check of the app on Wednesday revealed that transaction amounts by friends were no longer visible.\\n\\nSocial media users had previously expressed confusion over the feature.\\nThe regulator noted that users would be required to take “deliberate and informed action” to opt into any settings that lower their privacy, such as permitting others on the app to access their personal data.\\nBut it added that service providers should follow the principle of “privacy by default,” meaning the highest level of protection should be enabled automatically.\\n“Service providers of mobile applications should adopt appropriate measures to ensure that all users are aware of their rights and options for controlling their levels of privacy protection,” the regulator said.\\n“‘Private’ is the default setting for newly joined PayMe users since August 2019,” the bank said on its website.\\nFor those who joined before that date, the default remains “Friends”, allowing transaction records to be seen by them on the app unless manually changed.\\nHSBC told the Post that “all existing users were notified via email at that time about their options for public to private settings, and they can update their preferences at any time based on their privacy needs”.\\n“Since the launch of PayMe, the option to switch from public to private and vice versa, is always available to customers through the PayMe application,” the bank said. “We have not been notified of any privacy-related violations from regulators.”\\nA PCPD spokesman said that as the compliance check was ongoing, it “would not comment on the case at this stage”.\\n ### Related Stocks - [HSBC.US](https://longbridge.com/en/quote/HSBC.US.md) - [00005.HK](https://longbridge.com/en/quote/00005.HK.md) - [HSBA.UK](https://longbridge.com/en/quote/HSBA.UK.md) ## Related News & Research - [HSBC trims long Fnac Darty equity swap position by 654 shares-equivalent at EUR 35.27-35.29](https://longbridge.com/en/news/287643388.md) - [HSBC launches $4B clean energy facility, targeting China-Vietnam green trade](https://longbridge.com/en/news/287518523.md) - [Core42 raises $550mln from HSBC to scale global AI infrastructure](https://longbridge.com/en/news/287581683.md) - [HSBC, Temasek-Backed Pentagreen Capital's Finance Program Reaches $800 Million in Committed Capital](https://longbridge.com/en/news/287007793.md) - [HSBC showcases Asian strategy at investor seminar in Hong Kong](https://longbridge.com/en/news/287142074.md)