First Direct has deployed pattern-blocking rules inside its logged-in live chat after fraud analysts traced a summer uptick in authorised push payment losses to scripts that open with friendly account queries and pivot within minutes to fake crypto investment desks, according to customer-security staff briefed on the change. The HSBC-owned digital bank did not publish a press release; the controls appeared in app and online banking chat flows in mid-September with a short security-centre note.
What households see in the statement
Claire Whitfield’s beat is the bill you actually pay: when chat becomes a scam vector, the household cost is the transferred pounds, not an abstract fraud statistic. First Direct’s chatbot already routes unrecognized transactions and mortgage queries; the new layer scans outbound customer messages and inbound agent templates for keyword clusters associated with “recovery rooms” and unregulated crypto brokers. When a script matches, the session halts with a fraud warning and a prompt to call the published 03 456 100 100 line—not a callback number supplied in chat.
The bank’s public fraud pages distinguish APP scams—where the customer authorizes payment—from unauthorized card fraud. Crypto investment pitches sit in the APP bucket First Direct describes as fake funds promising high returns on gold, property or digital assets. Chat referrals matter because victims report feeling reassured by “being inside the bank app” even when the eventual payee is an unknown Faster Payments account.
Why live chat became the channel
First Direct markets chat as seriously secure because users are already authenticated. Scammers exploit that trust by coaching victims to paste wallet addresses or to open secondary “investment” accounts while still in a chat window. Summer case reviews showed repeated phrases—“regulated UK desk,” “coin allocation window,” “compliance hold”—that human agents could miss under volume. Automated blocking is blunt: legitimate customers discussing cryptocurrency payments may need to phone instead, matching the bank’s existing guidance that crypto transfers face limits and elevated checks.
The security centre already warns that professional websites and social posts do not prove legitimacy, and that FCA register checks matter. Chat blocks are the operational echo of that prose.
Costs and APR context
First Direct’s current accounts do not charge monthly fees, but APP losses hit overdrafts and savings earmarked for mortgages. Under reimbursement rules for Faster Payments scams, outcomes depend on bank investigations and customer vigilance standards. Slowing chat scripts aims to cut incident volume before payments leave the account—cheaper for the bank than post-loss remediation and less devastating than a cleared savings pot.
Credit card customers face separate chargeback paths; chat pitches often push debit transfers instead because they settle instantly. Whitfield’s desk notes that missing a mortgage payment after a scam transfer triggers an entirely different fee stack—another reason First Direct wants chat to fail closed.
Issuer mechanics
First Direct sits inside HSBC UK’s fraud intelligence sharing; new patterns can propagate to sister brands after validation. Engineers trained the filters on redacted chat logs and on National Crime Agency bulletins, then staged rollout to twenty-four-seven agent queues. Agents received scripts to explain why a conversation ended abruptly, reducing duplicate contacts from frustrated legitimate users.
Customers who need crypto-related payment guidance are pointed to the bank’s cryptocurrency help page, which documents limits and the lack of FSCS protection on exchange balances—language the chat block screen now mirrors.
What to do if you are targeted
First Direct’s published advice unchanged: stop, challenge, protect—call on the number on your card, use the 159 stop-scams service to verify callers, and report to Action Fraud. Chat blocks are not a substitute for those steps, but they remove a minute-by-minute coaching channel scammers relied on in July and August case files.
For UK households, the practical read is simple: if an in-app chat suddenly sounds like an investment hotline, the bank would rather end the session than let the script run—and you should pick up the phone on a number you looked up yourself.
