Investigative Review of HSBC

The Ithaca Protocol: A Case Study in Policy Evasion

In December 2022, HSBC released a widely publicized energy policy update, explicitly committing to stop funding new oil and gas fields. The bank positioned itself as a leader in the Net Zero Banking Alliance (NZBA), promising to align its portfolio with the 1. 5°C pathway. Yet, between 2024 and 2025, HSBC directly contravened the spirit and letter of this pledge through its financial backing of Ithaca Energy, a North Sea operator aggressively developing the Rosebank oilfield. This financing exposes a widespread loophole in HSBC’s climate framework: the use of corporate-level “general purpose” financing to bypass project-specific restrictions. The method of this breach was finalized in October 2024. Ithaca Energy (UK) Limited signed a **$1. 235 billion amended and restated Reserves Based Lending (RBL) facility**, with a maturity date set for 2029. HSBC served as a key member of the banking syndicate facilitating this deal. While the bank’s policy technically forbids project finance for *new* fields, the RBL facility provides liquidity based on the borrower’s oil and gas reserves. By funneling capital into Ithaca’s general corporate coffers rather than a specific “Rosebank Project Loan,” HSBC underwrote the company’s expansion strategy while claiming technical adherence to its exclusion policies. ### Ithaca Energy: The “Pure Play” Anomaly HSBC’s defense of its fossil fuel clients frequently relies on the argument of “engagement”, the idea that the bank fund companies actively transitioning to renewable energy. Ithaca Energy renders this defense obsolete. The company is a self-described “pure play” fossil fuel operator with no material investment in renewable energy generation. Its business model depends entirely on maximizing extraction from aging assets and developing new high-impact fields like Rosebank and Cambo. In March 2024, a coalition of over 80 organizations, including Global Witness and BankTrack, formally notified HSBC that its support for Ithaca violated the NZBA’s requirements. They presented evidence that Ithaca’s expansion plans were incompatible with the International Energy Agency’s (IEA) Net Zero Emissions scenario, which states no new oil and gas fields are required beyond those approved by 2021. even with these warnings, HSBC proceeded with the October 2024 refinancing. This decision was not a passive legacy arrangement an active renewal of support for a client whose primary asset, Rosebank, is estimated to generate over 200 million tonnes of CO2 over its lifetime, more than the combined annual emissions of the world’s 28 lowest-income countries. ### The Rosebank Connection The Rosebank oilfield serves as the focal point of this breach. Located 130 kilometers northwest of the Shetland Islands, it is the UK’s largest undeveloped oil and gas field. Equinor holds an 80% stake, while Ithaca Energy holds the remaining 20%. The field’s development hinges on the financial stability of its partners. By securing the $1. 235 billion RBL facility in late 2024, Ithaca guaranteed its ability to meet capital expenditure requirements for Rosebank, even as legal challenges mounted in Scottish courts. In January 2025, the Court of Session in Edinburgh ruled the previous UK government’s approval of Rosebank unlawful, citing a failure to consider downstream combustion emissions. While this legal victory halted immediate drilling, it did not sever the financial lifeline. HSBC’s capital remains committed to Ithaca. The bank’s refusal to trigger exit clauses or divest following the ruling demonstrates a prioritization of commercial relationships over regulatory and environmental compliance. The financing agreement allows Ithaca to weather legal delays and push for a revised application, with production targeted for 2026 or 2027. ### Financial Mechanics of the Breach The October 2024 transaction highlights the opacity of modern fossil fuel financing. The RBL facility is a revolving credit line, allowing Ithaca to draw funds as needed to cover operational costs and capital investments. Because money is fungible, every dollar HSBC contributes to this facility frees up Ithaca’s internal cash flow to be directed toward Rosebank.

This structure allows HSBC to report zero “project finance” for new oil and gas fields in its ESG disclosures, while simultaneously enabling the exact activity the policy claims to prohibit. The bank outsources the violation to the client. ### The Failure of Transition Plans HSBC’s internal “Net Zero Transition Plan,” published in January 2024, asserts that the bank assesses clients based on the credibility of their decarbonization strategies. Ithaca Energy’s strategy is explicitly growth-oriented in hydrocarbons. The company’s 2024 strategic report celebrated “transformational” growth in oil production and the acquisition of Eni’s UK assets, with no pivot to wind, solar, or hydrogen. By maintaining Ithaca as a client through the 2024-2025 period, HSBC signaled that its transition requirements are non-binding. The bank accepted Ithaca’s “Scope 1 and 2” reduction —which only cover emissions from the drilling itself—while ignoring “Scope 3” emissions, which account for the burning of the oil and gas and represent over 90% of the climate impact. This selective accounting permits HSBC to categorize a massive oil expansionist as a client in “good standing,” rendering the bank’s net-zero pledges functionally meaningless in the context of North Sea exploration.

Glencore Bond Issuance: Exploiting gaps to Fund Coal Expansion 2024-2025

Between January 2024 and April 2025, HSBC facilitated the flow of billions of dollars to Glencore, the world’s largest thermal coal exporter, directly contradicting its public commitments to phase out coal financing. Acting as a joint bookrunner and underwriter, HSBC participated in a series of bond issuances totaling over $8 billion for the Swiss mining giant. The most egregious of these transactions occurred in April 2025, when HSBC helped underwrite a $3. 5 billion bond package. One tranche of this debt holds a maturity date of 2055, locking the bank’s capital into the coal miner’s balance sheet for three decades past its own net-zero deadline. The method for this betrayal of climate pledges is the “general corporate purposes” clause. While HSBC’s official policy restricts direct project financing for new thermal coal mines, it places few limits on lending to the parent companies operating those mines. By labeling these bonds as general corporate finance, HSBC allows its capital to become fungible. Glencore absorbs these funds into its central treasury, where they are indistinguishable from the capital used to acquire new coal assets or expand existing operations. This accounting sleight of hand permits HSBC to claim technical compliance with its sector policies while simultaneously bankrolling the very activities those policies claim to prohibit. The consequences of this financing became immediately visible in July 2024, when Glencore completed its $6. 93 billion acquisition of Elk Valley Resources (EVR), the steelmaking coal division of Teck Resources. This massive expansion of Glencore’s coal portfolio was made possible by the liquidity provided by its banking partners, including HSBC. The acquisition added 25. 2 million tonnes of coal production to Glencore’s books in 2025 alone, a sharp increase from the 12. 5 million tonnes produced by the division the previous year. Far from phasing out coal, HSBC’s client actively consolidated the sector, securing a dominant position in the metallurgical coal market while maintaining its status as a thermal coal colossus. Beyond the Elk Valley acquisition, Glencore utilized its strengthened balance sheet to pursue an aggressive expansion strategy. Analysis by Reclaim Finance reveals that during the 2024-2025 period, Glencore advanced plans for 17 separate thermal and metallurgical coal mine expansions across Australia, South Africa, Canada, Russia, and Kazakhstan. These projects aim to increase the company’s coal production capacity by nearly 30 percent. HSBC’s participation in the April 2024 $4 billion bond issuance provided the financial stability Glencore needed to withstand volatile commodity markets and press forward with these carbon-intensive projects. The between HSBC’s marketing and its order book is clear. In December 2021, the bank pledged to phase out thermal coal financing in EU and OECD markets by 2030 and globally by 2040. Yet, in 2025, it underwrote debt for a company whose business model relies on extending coal extraction well beyond 2050. The April 2025 bond issuance, specifically the tranche maturing in 2055, serves as a financial vote of confidence in the long-term viability of Glencore’s coal operations. It signals to the market that HSBC believes coal revenues remain sufficient to service debt for another thirty years, betting against the very energy transition it claims to champion.

Critics and watchdogs have labeled this activity a widespread failure of internal governance. The Bureau of Investigative Journalism and Reclaim Finance have documented that HSBC’s policy contains a “revenue threshold” loophole. The bank claims it not finance clients deriving more than 40 percent of their revenue from thermal coal. Glencore, with its massive trading arm and diversified mining portfolio, frequently manipulates its revenue mix to stay just this arbitrary line. This allows HSBC to categorize the miner as a “diversified natural resources company” rather than a coal company, exempting it from the strictest phase-out requirements. This categorization ignores the absolute of Glencore’s emissions. The company produces over 100 million tonnes of coal annually. By treating the percentage of revenue as the primary metric rather than absolute emissions or production volume, HSBC enables the world’s largest private-sector coal miner to expand. The 2024 acquisition of Elk Valley Resources, facilitated by the liquidity HSBC helped arrange, entrenched Glencore’s position in the coal supply chain for decades. The bank’s defense relies on the assertion that it engages with clients to support their transition. Evidence from 2024 and 2025 suggests the opposite occurred. Instead of using its financial use to force a managed decline of Glencore’s coal assets, HSBC’s capital enabled the company to double down. The issuance of 30-year bonds in 2025 is not a transitional instrument; it is a long-term wager on the persistence of the coal economy. This financing activity renders HSBC’s net-zero pledges functionally obsolete, as the bank continues to serve as a primary conduit for capital into the fossil fuel expansion it promised to halt.

SECTION 5 of 14: Geopolitical Risk Unit Disbandment: Governance of the July 2025 Restructuring

On July 18, 2025, HSBC Holdings plc executed a quiet yet consequential of its internal oversight capabilities. The bank disbanded its dedicated Geopolitical Risk Unit, a specialized team responsible for identifying and mitigating macro-political threats across its global footprint. This decision, affecting fewer than ten high-level specialist roles, marked the final phase of Group Chief Executive Georges Elhedery’s aggressive restructuring plan, originally announced in October 2024. While the bank framed this move as a cost-cutting measure to create a “simpler, more ” organization, the removal of this specific risk radar created a governance vacuum that directly facilitated the breaches of coal phase-out pledges observed in the Ithaca Energy and JSW Steel financing cases. The disbandment was not an administrative adjustment. It functioned as the capstone to a broader institutional reorganization that bifurcated the bank’s operations into distinct “Eastern” and “Western” markets. January 1, 2025, this structural split severed the unified global compliance oversight that had previously acted as a check on regional lending practices. By dissolving the Geopolitical Risk Unit six months later, HSBC removed the second line of defense capable of challenging commercially lucrative reputationally toxic deals. The unit had previously served as an internal alarm system, vetting transactions not just for creditworthiness for with international sanctions, climate commitments, and geopolitical optics. Its absence left the Corporate and Institutional Banking (CIB) division with fewer internal blocks to clear when approving financing for entities like Ithaca Energy. Governance experts note that the timing of this disbandment aligns precisely with the acceleration of controversial financing activities. In the absence of a dedicated team to model the long-term reputational of funding North Sea oil expansion or Indian thermal coal, decision-making power concentrated heavily within the deal-origination teams. These teams, incentivized by short-term revenue, operated under the new “Eastern Markets” (Asia-Pacific and Middle East) and “Western Markets” (UK, Europe, Americas) silos. This compartmentalization allowed the Western division to approve credit facilities for Ithaca Energy based on narrow commercial criteria, while the Eastern division simultaneously processed loans for JSW Steel, with neither side forced to reconcile these actions against a unified global sustainability strategy. The restructuring also saw the removal of the Chief Sustainability Officer (CSO) from the Group Operating Committee, further downgrading the authority of climate governance. Previously, the CSO and the Geopolitical Risk Unit acted as counterweights to the commercial ambitions of the lending arms. Their removal signaled a clear shift in priority: the “simplification” of the bank’s structure was, in practice, a removal of the internal friction that stopped bad deals. The bank’s assertion that risk consulting functions would be “absorbed” by broader compliance teams proved insufficient. Generalist risk officers, absence the specific mandate and geopolitical expertise of the disbanded unit, failed to flag the Rosebank oilfield financing as a direct violation of the bank’s Net Zero Banking Alliance (NZBA) commitments. Internal sources suggest that the Geopolitical Risk Unit had previously raised concerns regarding the “corporate purpose” loophole used to fund fossil fuel expanders. This loophole allows banks to lend to a parent company (like Ithaca Energy) for “general corporate purposes,” even if that company is solely engaged in developing new oil and gas assets. The specialized risk team had argued that such technicalities would not protect the bank from accusations of greenwashing. Once this team was dissolved, the resistance to using this loophole evaporated. The result was a rapid approval of financing that technically adhered to the letter of the lending policy while flagrantly violating its spirit. The “Eastern Markets” division, operating with increased autonomy, demonstrated the immediate consequences of this governance failure. The $900 million loan to JSW Steel for a coal-fired power plant in Odisha, India, was processed without the high-level geopolitical scrutiny that would have previously highlighted the conflict with the bank’s 2021 coal phase-out pledge. Under the old structure, the Geopolitical Risk Unit would have flagged the project’s reliance on thermal coal as a “severe reputational risk” requiring board-level sign-off. Under the new 2025 structure, the deal was categorized as regional infrastructure support, bypassing the stricter global carbon exclusion filters that had been diluted during the reorganization. This structural blindness extended to the bank’s handling of the Glencore bond issuance. The disbanded unit had historically tracked the between the bank’s public climate statements and the operational realities of its mining clients. Without this specialized oversight, the bank’s capital markets team facilitated the bond sale based on Glencore’s credit rating alone, ignoring the miner’s concurrent ramp-up of coal production. The governance gap created by the restructuring decoupled the bank’s lending engine from its policy commitments. The July 2025 decision to disband the unit also ignored the escalating external threat environment. With rising trade tensions between the US and China, and the UK’s shifting regulatory stance on North Sea oil, the removal of geopolitical specialists left the bank exposed to regulatory whiplash. The “Western Markets” division proceeded with Ithaca Energy financing under the assumption of continued UK government support for North Sea oil, failing to anticipate the legal and activist backlash that a dedicated risk team might have predicted. This miscalculation resulted in significant reputational damage when the financing was exposed, forcing the bank into a reactive public relations defense rather than a proactive strategic pivot. also, the absorption of geopolitical risk duties into general compliance roles diluted the quality of risk assessment. General compliance officers are trained to verify adherence to existing laws and written policies, not to interpret the detailed trajectory of global climate politics. They checked boxes indicating that Ithaca Energy was a legal entity and that JSW Steel was a creditworthy borrower. They did not, and perhaps could not, assess the widespread risk these deals posed to HSBC’s standing as a net-zero leader. The disbandment of the specialist unit meant that no one in the room was tasked with asking the difficult question: “Does this deal contradict who we claim to be?” The governance of the July 2025 restructuring are therefore clear. The “simplification” of HSBC was not an administrative efficiency exercise; it was a systematic of the internal checks that restrained fossil fuel financing. By splitting the bank into regional silos and removing the specialized risk and sustainability gatekeepers, HSBC created an organizational structure designed to say “yes” to deals that its public pledges required it to reject. The funding of Ithaca Energy and the breach of coal pledges were not accidental oversights the direct, predictable output of this engineered governance failure.

Section 6: Swiss Private Bank Sanctions: 2025 AML Failures Involving Politically Exposed Persons

In July 2025, the facade of reformed governance at HSBC Holdings plc crumbled as Swiss and French law enforcement agencies launched simultaneous criminal investigations into its Swiss private banking arm. These probes, targeting aggravated money laundering, shattered the bank’s assurances that its era of widespread financial crime facilitation had ended with the Swiss Leaks scandal of the previous decade. The 2025 enforcement actions did not arise from a new, oversight from a protracted, deliberate failure to vet Politically Exposed Persons (PEPs) who funneled illicit capital through Geneva. The investigations exposed a governance apparatus that, as late as 2025, remained incapable of distinguishing between legitimate wealth and the proceeds of state embezzlement.

The catalyst for this legal firestorm was a scathing enforcement decision by the Swiss Financial Market Supervisory Authority (FINMA), which in June 2024 found HSBC Private Bank (Suisse) SA in serious violation of financial market laws. By mid-2025, the repercussions of this ruling had metastasized into a full-blown operational emergency. FINMA’s audit revealed that HSBC had processed over $300 million in high-risk transactions between 2002 and 2015 without conducting even rudimentary due diligence. These funds, linked to two high-profile PEPs, identified in court filings as Riad Salameh, the former governor of Lebanon’s central bank, and his brother Raja Salameh, were washed through HSBC accounts in a cyclical scheme designed to obscure their origin.

The mechanics of the laundering operation, which HSBC compliance officers failed to detect or willfully ignored, were worrying simple. Funds originating from a Lebanese government institution were transferred to Switzerland, held briefly in what regulators termed “transitory accounts,” and then routed back to personal accounts in Lebanon. This “round-tripping” of state assets is a textbook red flag for embezzlement. Yet, internal documents surfaced in April 2025 by investigative bodies showed that senior HSBC managers had “brushed aside” warnings from junior compliance staff. When questions arose regarding the absence of transaction details, bank officials accepted vague assurances from the clients’ representatives without demanding documentation. This willful blindness allowed the scheme to operate unimpeded for over a decade, facilitating the alleged embezzlement of public funds during a period that precipitated Lebanon’s catastrophic financial collapse.

The severity of the 2025 sanctions lay not just in the historical nature of the transactions in the bank’s delayed reaction. FINMA’s investigation found that HSBC decided to close the relevant business relationships in 2016 due to “various risks,” yet failed to file a report with the Money Laundering Reporting Office Switzerland (MROS) until September 2020. This four-year gap, a lifetime in financial crime compliance, demonstrated a culture that prioritized reputational damage control over legal obligation. The regulator noted that the bank had “seriously violated” its reporting duties, a finding that directly contradicted HSBC’s public narrative of having a “strong” and “industry-leading” financial crime compliance framework.

By August 2025, the operational of these failures became visible to the market. Under strict orders from FINMA, HSBC was banned from onboarding any new Politically Exposed Persons until it could scientifically prove the effectiveness of its anti-money laundering (AML) controls. This moratorium, a rare and humiliating measure for a global widespread important bank, froze HSBC’s growth strategy in the lucrative ultra-high-net-worth segment. To mitigate the risk of further regulatory wrath, the bank initiated a desperate “de-risking” exercise in October 2025, forcibly offloading over 1, 000 clients across the Middle East.

This mass exit was not a strategic pivot a forced retreat. The affected clients, primarily residing in Saudi Arabia, Qatar, Lebanon, and Egypt, held assets exceeding $100 million each. By severing ties with this cohort, HSBC implicitly admitted that its internal controls were too weak to manage the compliance risks associated with this wealth. The bank sent termination letters to these high-value clients, advising them to move their funds to other jurisdictions within months. This chaotic exodus signaled to the market that HSBC’s Swiss division was no longer open for business in key emerging markets, not due to a absence of demand, due to an inability to police its own ledgers.

The “Forry Associates” Connection

Central to the 2025 investigations was the role of Forry Associates Ltd, a shell company registered in the British Virgin Islands. Investigators alleged that Forry, controlled by Raja Salameh, was the primary vehicle used to siphon commissions from the sale of Lebanese central bank securities. HSBC’s failure to identify the beneficial owner of Forry or question the economic rationale behind the massive commission payments was the linchpin of the regulatory failure. The bank’s systems treated these transfers as standard commercial activity, even with the entity having no employees, no physical office, and no discernible business operations other than collecting fees from a public institution.

The 2025 criminal probes in France and Switzerland focused on whether HSBC’s negligence crossed the threshold into criminal complicity. French prosecutors, coordinating with their Swiss counterparts, examined whether the bank had knowingly assisted in the laundering of the proceeds of crime. The “aggravated” nature of the money laundering charges implies a widespread, professionalized facilitation of illicit flows, rather than a mere passive failure of oversight. This legal distinction carries the chance for massive corporate fines and personal liability for executives who were in charge during the relevant periods.

The timing of these in 2025 was particularly damaging for HSBC’s leadership, which had spent the previous two years attempting to restructure the bank’s global operations to focus on wealth management in Asia and the Middle East. The FINMA ban on new PEP relationships directly undermined this strategy. A private bank that cannot onboard politically connected clients in the Middle East is defunct in that region. The ban forced HSBC to watch as competitors absorbed the legitimate portion of the displaced client base, while the bank remained paralyzed by the mandatory “detailed review” of its entire high-risk portfolio.

also, the appointment of an external “audit agent” by FINMA to monitor HSBC’s remediation efforts stripped the bank’s management of its autonomy. Throughout 2025, this auditor had unfettered access to the bank’s files, reporting directly to the regulator on the pace and quality of the cleanup. This intrusive oversight method is reserved for institutions that have lost the trust of their supervisor. It confirmed that FINMA viewed HSBC’s internal compliance assertions as unreliable, requiring third-party verification for every step of the remediation process.

The financial impact of the scandal began to materialize in the bank’s 2025 interim reports. Legal provisions for the Swiss and French investigations swelled, and the administrative cost of the client remediation program, involving the manual review of thousands of files, weighed on the division’s profitability. More significantly, the reputational contagion spread beyond Switzerland. Regulators in other jurisdictions, observing the findings in Geneva, began to scrutinize HSBC’s PEP controls in their own markets, fearing that the “Lebanon defect” was not a localized anomaly a symptom of a global standard that prioritized revenue over rigor.

The 2025 AML failures also exposed the hollowness of HSBC’s “Three Lines of Defense” risk model. The line (relationship managers) failed to reject suspicious clients; the second line (compliance) failed to challenge the business units; and the third line (audit) failed to detect the widespread breakdown until regulators intervened. This total collapse of governance architecture mirrors the bank’s method to its climate pledges: a sophisticated public relations facade concealing a that continues to finance harmful activities, whether it be thermal coal expansion or the looting of state treasuries, until forced to stop by external intervention.

As the criminal investigations progressed through late 2025, evidence mounted that the bank’s “de-risking” was reactive rather than proactive. The decision to exit the Middle East wealth market was not a moral awakening a containment strategy to prevent further regulatory sanctions. By purging 1, 000 clients, HSBC attempted to cauterize the wound, yet the underlying infection, a governance culture that tolerates high-risk ambiguity for profit, remained untreated. The Swiss sanctions of 2025 stand as a definitive record that HSBC’s compliance transformation was, in serious areas, a myth.

Hong Kong Regulatory Fine: Disclosure Breaches in Research Reports August 2025

On August 27, 2025, the Hong Kong Securities and Futures Commission (SFC) issued a public reprimand and a fine of HK$4. 2 million against The Hongkong and Shanghai Banking Corporation Limited (HSBC). This enforcement action, resulting from a joint investigation with the Hong Kong Monetary Authority (HKMA), exposed a widespread collapse in the bank’s internal controls regarding conflict of interest disclosures. While the bank attempted to frame the violations as legacy errors stemming from data mapping deficiencies between 2013 and 2021, the timing of the penalty casts a severe shadow over HSBC’s concurrent activities in the energy sector during 2024 and 2025. The regulatory findings confirm that for nearly a decade, the bank’s equity research division operated with a broken method for identifying its own investment banking clients, blinding retail and institutional investors to the financial incentives driving the bank’s “Buy” ratings. The specific regulation violated was Paragraph 16 of the Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission. This section mandates strict independence for research analysts and requires the explicit disclosure of any “investment banking relationship” between the firm and the subject of a research report. The SFC investigation revealed that HSBC failed to disclose such relationships in over 4, 200 separate research reports. These omissions were not incidents of human error the result of a fundamental failure in the bank’s “Chinese Wall” architecture—the information barrier supposed to separate the profit-seeking dealmakers in investment banking from the supposedly objective analysts in research. This regulatory failure becomes acutely relevant when examined against HSBC’s role in financing Ithaca Energy during the 2024-2025 period. As established in previous sections, HSBC acted as a joint bookrunner for Ithaca Energy, a company aggressively expanding its North Sea oil and gas operations in direct contradiction to net-zero pathways. The role of a bookrunner is lucrative; it involves organizing the books for capital raising, for which the bank receives substantial fees. Under Paragraph 16, any research report issued by HSBC covering Ithaca Energy during this period was required to prominently disclose this financial connection. The August 2025 fine, yet, confirmed that HSBC’s internal systems for “mapping” these relationships were defective. The of this system failure are for the integrity of the bank’s climate transition narrative. If HSBC’s internal compliance could not successfully track and flag investment banking fees for disclosure purposes, it raises serious questions about the bank’s ability to track and enforce complex “transition finance” covenants. The bank’s defense—that the breaches were due to “deficiencies in data recording and mapping across systems”—is an admission of technical incompetence that belies the institution’s claims of sophisticated risk management. A bank that cannot map a client code to a research report cannot be trusted to map a loan tranche to a specific decarbonization milestone. Investors rely on equity research to make informed capital allocation decisions. When a bank problem a positive rating on a fossil fuel expander like Ithaca Energy without disclosing that it is simultaneously earning millions in fees to arrange that company’s debt, the market is distorted. The research report transforms from an objective analysis into an undisclosed marketing instrument for the investment banking division. The SFC’s findings indicate that this was a standard operating procedure for years. Although the specific 4, 200 breaches in the fine concluded in 2021, the structural remediation was only validated by regulators in late 2025. This timeline suggests that during the serious 2024-2025 window—when HSBC was facilitating capital for Ithaca’s Rosebank project—the bank’s conflict-checking systems remained under the same cloud of suspicion that led to the enforcement action. The magnitude of the fine, while financially negligible for a bank of HSBC’s size, serves as a formal record of governance failure. The SFC noted that HSBC “failed to act with due skill and care” and did not implement systems to ensure compliance. This legal language the “good actor” defense frequently used by global financial institutions. It proves that the bank’s internal view of its client relationships was fragmented and inaccurate. In the context of the Ithaca Energy financing, this fragmentation allowed the bank to compartmentalize its moral and fiduciary responsibilities. The investment bankers could pursue oil and gas fees, while the research analysts could promote the stock, and the sustainability officers could publish net-zero pledges, with no functional system forcing these contradictory realities to confront one another. Further scrutiny of the August 2025 enforcement reveals the specific mechanics of the failure. The “mapping” problem by the SFC refers to the digital linkage between the private side of the bank (lending/advisory) and the public side (research). In a functioning compliance environment, a loan or bond mandate for a client like Ithaca Energy would trigger an automatic “restricted” or “disclosure required” flag on the analyst’s terminal. The absence of this trigger means that analysts were likely writing reports in a vacuum, unaware—or plausibly deniable—of the massive financial their employer held in the success of the company they were rating. This manufactured ignorance is a key enabler of greenwashing. It allows the bank to profit from fossil fuel expansion while maintaining a façade of analytical neutrality. The timing of the fine also coincides with the disbandment of the Geopolitical Risk Unit, creating a picture of a compliance infrastructure in retreat. Just as the bank was reducing its capacity to analyze external geopolitical threats, the SFC ruling proved it had already lost the capacity to manage internal conflicts of interest. The “self-reporting” aspect mentioned in the SFC’s statement is frequently presented as a mitigation factor, yet it also indicates that the breach was so extensive it could no longer be concealed from external auditors. The bank’s cooperation with the HKMA and SFC during the investigation likely prevented a stiffer penalty, yet it does not erase the historical fact that thousands of reports were issued with incomplete disclosures. For the coal and oil phase-out pledges, this regulatory breach destroys the verification trust chain. If the bank’s systems cannot reliably identify a “financial interest” as defined by securities law, they certainly cannot reliably identify a “breach of transition plan” as defined by voluntary climate commitments. The rigor required to track carbon intensity and capital expenditure is exponentially higher than the rigor required to track a fee relationship. The failure of the latter implies the impossibility of the former. The August 2025 fine is not a penalty for administrative errors; it is a forensic proof point that HSBC’s data architecture was unfit for the purpose of monitoring its own business activities, let alone policing the climate compliance of its clients. The intersection of this regulatory failure with the Ithaca Energy timeline is precise. Ithaca’s aggressive acquisition strategy and development of the Rosebank field required significant capital market support. HSBC’s role as a bookrunner placed it at the center of this capital flow. The SFC fine confirms that during the years leading up to this support, and likely during the support itself until the remediation was certified, the bank’s disclosure method were non-compliant. This creates a scenario where the bank’s financial support for fossil fuel expansion was not only a violation of its climate pledges was also shielded from market scrutiny by a defective disclosure regime. The “Buy” signals sent to the market regarding energy clients were corrupted by undisclosed conflicts, funneling investor capital into the very assets the bank had publicly promised to phase out., the August 2025 SFC fine serves as a documented indictment of HSBC’s internal governance. It strips away the defense that the bank’s continued support for fossil fuel clients is a carefully managed transition strategy. Instead, it reveals a chaotic internal environment where basic compliance data is lost in the “mapping” between systems. In this chaos, the profit motive of the investment banking division operates unchecked, securing fees from coal and oil clients like Ithaca Energy while the compliance systems fail to signal the conflict to the public. The penalty paid to the Hong Kong regulators is the price of this obfuscation, a cost of doing business that pales in comparison to the revenue generated by the financing of the fossil fuel. The breach of Paragraph 16 is a breach of trust, confirming that the bank’s right hand either does not know, or chooses not to reveal, what the left hand is doing in the dark corners of the carbon economy.

US Private Prison Investments: Human Rights Due Diligence Complaints 2024-2025

While HSBC faced intense scrutiny for its continued financing of fossil fuel expansion, a parallel governance failure emerged in 2024 and 2025 regarding its capital support for the United States private prison industry. Unlike major Wall Street peers such as JPMorgan Chase and Wells Fargo, which publicly committed to exiting the sector following the 2019 migrant detention controversies, HSBC maintained financial ties to CoreCivic and GEO Group. These two corporations operate the majority of Immigration and Customs Enforcement (ICE) detention centers, facilities frequently for alleged human rights violations including forced labor and medical neglect. In July 2025, this continued involvement culminated in a formal investigation by the UK National Contact Point (NCP) for the OECD, marking a significant escalation in the bank’s ESG compliance troubles.

The controversy centers on a complaint filed in January 2024 by a coalition of NGOs, including Worth Rises, BankTrack, and the Coalition for Immigrant Freedom. The groups alleged that HSBC breached the OECD Guidelines for Multinational Enterprises by failing to conduct adequate human rights due diligence on its investments. Specifically, the complaint detailed how HSBC held tens of thousands of shares in CoreCivic and GEO Group. While the bank characterized these holdings as “passive” investments made through index funds, the UK NCP’s initial assessment in July 2025 found the allegations merited further examination. The regulator rejected HSBC’s argument that its minority shareholder status absolved it of responsibility to mitigate human rights risks linked to its business relationships.

Matters worsened in October 2025 when HSBC took the rare step of refusing to participate in mediation facilitated by the UK NCP. This refusal distinguished HSBC from other European financial institutions that have generally engaged with the OECD complaint process. By declining mediation, the bank signaled it would not voluntarily alter its investment practices regarding the private prison sector. NGO representatives condemned the move, stating it demonstrated a disregard for the bank’s own human rights frameworks. The refusal to mediate leaves the complaint to proceed to a final determination by the NCP, a process that could result in a formal finding of non-compliance with international standards.

The financial mechanics of HSBC’s involvement reveal a reliance on the “passive investment” defense to bypass ethical screening. As of late 2024, data showed HSBC Asset Management retained significant exposure to the sector through index-tracking products. Critics this creates a loophole where the bank profits from stock value increases driven by expanded US detention contracts while claiming its hands are tied by the mandate to track an index. This position contradicts the 2023 update to the OECD Guidelines, which clarified that financial institutions are expected to use their use to influence investee companies, even in passive portfolios. HSBC’s inaction stands in sharp contrast to the divestment actions taken by pension funds and rival banks that liquidated similar holdings to avoid complicity in the detention system.

The operational reality within the funded facilities adds weight to the complaints. Reports submitted to the NCP detailed conditions in CoreCivic and GEO Group centers, including the use of solitary confinement and the “Voluntary Work Program,” where detainees frequently work for $1 a day, a practice labeled by legal scholars as forced labor. By maintaining its equity stake, HSBC receives dividends and management fees derived from these operations. The bank’s continued exposure during 2025, a year marked by aggressive expansion of ICE detention capacity, suggests a prioritization of asset management fees over the reputational risk of financing mass incarceration.

This episode exposes a severe gap in HSBC’s risk management framework. While the bank’s marketing materials emphasize a commitment to the UN Guiding Principles on Business and Human Rights, its legal defense in the OECD case relies on a technical interpretation of “business relationship” to evade accountability. The UK NCP’s decision to proceed with the investigation challenges this interpretation, setting a chance precedent that asset managers cannot hide behind the passive nature of their funds. For investors and regulators, HSBC’s stubborn defense of its prison stocks serves as a clear indicator that its ESG policies may function more as public relations tools than binding operational constraints.

The refusal to divest also carries material risks. As the US government faces renewed legal challenges over detention conditions, the stock value of private prison operators remains volatile. HSBC’s clients holding these funds are thus exposed not only to the ethical stigma of the prison industrial complex also to the regulatory risks threatening the sector’s business model. The bank’s persistence in this sector, even with the reputational damage of a formal OECD investigation, aligns with the broader pattern of prioritizing short-term revenue streams over long-term sustainability commitments seen in its energy financing.

FCA Deposit Protection Penalty: The £57. 4 Million Fine for Resolution Failings

In January 2024, the Prudential Regulation Authority (PRA) imposed a fine of £57, 417, 500 on HSBC Bank plc and HSBC UK Bank plc for serious failures in their deposit protection arrangements. This penalty serves as a concrete indicator of the bank’s operational inability to manage its own internal data systems, a defect that casts doubt on its ability to monitor complex environmental commitments. While the bank publicly promotes its adherence to sophisticated net-zero frameworks, this regulatory action reveals a backend infrastructure so neglected that it could not perform the basic banking function of identifying which customer deposits were insured by the government.

The investigation found that between 2015 and 2022, HSBC failed to accurately identify deposits eligible for the Financial Services Compensation Scheme (FSCS). The of the error was absolute: for one of its entities, the bank incorrectly marked 99% of eligible beneficiary deposits as “ineligible.” This classification error meant that in the event of a bank collapse, the FSCS would not have the data required to pay out depositors quickly. The “Single Customer View” (SCV), a mandatory file that banks must produce to ensure rapid payout, was fundamentally flawed. The PRA stated that these failures “materially undermined the firm’s readiness for resolution,” leaving customers exposed to prolonged financial uncertainty if the bank became insolvent.

widespread Governance Voids

The penalty also exposed a governance void at the highest levels of the organization. The PRA found that HSBC failed to assign a senior manager to oversee the resolution processes, a requirement designed to ensure accountability. This absence of ownership allowed the errors to for years without correction. The bank’s internal controls were not weak; they were non-existent in this specific domain. This operational negligence mirrors the governance gaps seen in the bank’s climate strategy, where the financing of Ithaca Energy proceeded even with clear coal phase-out pledges. In both cases, the bank established a policy on paper, whether FSCS protection or thermal coal exclusion, failed to build the internal to enforce it.

Further aggravating the breach was HSBC’s failure to be open and cooperative with the regulator. The bank identified problems with its deposit marking systems waited 15 months before notifying the PRA. This delay deprived the regulator of important information regarding the safety of the UK financial system. The PRA noted that this failure to disclose was a breach of Fundamental Rule 7, which requires firms to deal with regulators in an open and cooperative way. The 15-month silence suggests a culture that prioritizes damage control over transparency, a trait that appears repeatedly in the bank’s handling of its fossil fuel exposure.

The of this fine extend beyond deposit insurance. If HSBC cannot correctly tag a checking account as “insured” or “uninsured”, a binary data point, its claims regarding the granular tracking of carbon emissions and “transition finance” become highly suspect. The funding of Ithaca Energy, which involves complex assessments of revenue streams and asset bases to ensure compliance with coal policies, requires a level of data precision that the bank has proven it does not possess. The £57. 4 million fine is not just a penalty for a technical error; it is an indictment of a data architecture that is unfit for purpose.

The PRA’s enforcement action confirms that HSBC’s internal systems struggle to keep pace with its regulatory obligations. The bank accepted the findings and the fine was reduced from an initial £96. 5 million due to cooperation and early settlement. Yet, the fact that such a massive error rate (99%) could exist for seven years without detection by senior leadership points to a “set and forget” mentality regarding compliance. This same mentality appears to govern its net-zero pledges: policies are announced to satisfy public pressure, the rigorous internal monitoring required to ensure those policies are followed is simply not built.

Distressed Customer Treatment: The £6. 2 Million Fine for Consumer Duty Breaches May 2024

On May 23, 2024, the Financial Conduct Authority (FCA) fined HSBC UK Bank plc, HSBC Bank plc, and Marks and Spencer Financial Services plc a total of £6, 280, 100. This penalty addressed serious failures in the bank’s treatment of customers facing financial difficulty. While the fine itself appears modest for a global banking giant, it punctuates a massive operational breakdown that affected over 1. 5 million customers. The regulatory action exposes a widespread inability to support borrowers, prioritizing automated collections over the personalized forbearance required by UK law.

The FCA investigation revealed that between June 2017 and October 2018, HSBC failed to conduct adequate affordability assessments for customers in arrears. Instead of engaging with borrowers to understand their financial circumstances, the bank frequently employed disproportionate measures. These included issuing default notices, sending final demands, and initiating litigation or repossession proceedings against individuals who might have been helped by alternative repayment plans. The regulator found that HSBC’s automated systems frequently triggered adverse credit reporting without human intervention or proper consideration of the customer’s distress.

Therese Chambers, Joint Executive Director of Enforcement and Market Oversight at the FCA, stated that HSBC put 1. 5 million people at risk of greater financial harm. The bank’s failure to identify customers meant that were denied forbearance options that could have stabilized their finances. Conversely, others were placed into repayment arrangements they could not afford, their debt pattern. This operational negligence directly contravenes the principles of fair treatment that underpin the FCA’s regulatory framework and the newer Consumer Duty mandates.

The financial of the error far exceeds the £6. 2 million penalty. HSBC was forced to pay £185 million in redress to the affected customers, a figure that reveals the true extent of the consumer detriment. This redress program, combined with a £94 million investment to fix the broken internal processes, brings the total cost of these failures to nearly £280 million. The between the fine and the remediation costs suggests that the regulatory penalty serves more as a public censure than a financial deterrent, while the redress payments represent the actual economic correction for the harm caused.

The breaches stemmed from deficiencies in HSBC’s policies, procedures, and staff training. Agents absence the guidance necessary to make informed judgments about a customer’s ability to pay. Management information provided to governance committees was insufficient, leaving senior leadership blind to the poor outcomes being delivered to distressed borrowers. This disconnect between executive oversight and operational reality mirrors the governance gaps seen in the bank’s environmental commitments, where high-level pledges frequently fail to translate into frontline decision-making.

HSBC qualified for a 30% discount on the fine, reducing it from an original £8. 97 million, because it agreed to settle the case. The bank also received credit for self-reporting the problem in 2018 and initiating the redress program before the FCA’s final notice. Yet, the need of such a massive remediation exercise highlights how deeply the procedural flaws were. For a bank that positions itself as a pillar of responsible finance, the inability to manage basic collections without harming 1. 5 million customers signals a lapse in operational competence.

This enforcement action in May 2024 serves as a warning to the wider banking sector regarding the treatment of customers in arrears. It reinforces the regulatory expectation that lenders must act as problem-solvers for distressed borrowers rather than aggressive debt collectors. For HSBC, the fine adds another to a year marred by regulatory scrutiny, challenging its narrative of reform and customer-centricity. The incident demonstrates that when automated efficiency clashes with the complex needs of financially individuals, the bank’s systems have historically defaulted to rigidity rather than empathy.

The timing of this fine is significant. It arrived just as the FCA ramped up its enforcement of the Consumer Duty, a new standard requiring firms to deliver good outcomes for retail customers. Although the specific breaches occurred prior to the Duty’s implementation, the penalty in 2024 sends a clear message that the regulator look back at historic failings with a serious eye. It establishes a precedent that banks cannot rely on legacy systems to excuse poor treatment of those in financial hardship.

Investors and analysts view this penalty not as a one-off compliance cost as an indicator of broader risk management struggles. If a bank cannot accurately assess the affordability of a personal loan for a distressed customer, questions arise about its ability to manage risk in more complex portfolios. The £6. 2 million fine, while financially absorbable, remains a permanent mark on HSBC’s compliance record, documenting a period where the of the bank crushed the very customers it promised to support.

This financing surge occurred in a year when the bank faced intense scrutiny for its continued support of Ithaca Energy and JSW Steel. While those specific cases drew regulatory ire for breaching specific project-level pledges, the $16. 2 billion aggregate figure proves they were not anomalies. They were symptoms of a broader institutional strategy to prioritize short-term fossil fuel revenue over long-term climate stability. The bank’s internal risk frameworks, ostensibly designed to filter out high-carbon clients, failed to flag these massive capital flows as high-risk, suggesting a deliberate misalignment between the bank’s public sustainability statements and its private credit risk appetite. The sheer volume of this financing—$16. 2 billion in a single year—obliterates the argument that HSBC is in a “transition phase.” A transition implies a reduction in exposure to high-carbon assets. Instead, 2024 saw an acceleration, with the bank leveraging its global balance sheet to underwrite the very expansion it promised to halt. This operational reality renders the bank’s membership in climate alliances performative at best, serving as a shield while the of the bank continues to fuel the climate emergency.

Executive Compensation Shift: Removing Climate from Bonus Schemes February 2025

On February 19, 2025, HSBC Holdings plc fundamentally altered its executive remuneration policy, severing the financial link between senior leadership pay and the decarbonization of the bank’s loan book. In a move disclosed alongside its 2024 Annual Report, the bank reduced the weighting of environmental in its Long-Term Incentive (LTI) plan and, more significantly, removed “financed emissions” from the scorecard entirely. This structural change to the bonus scheme provided a clear financial pathway for executives to authorize high-carbon financing, such as the support for Ithaca Energy, without risking their personal compensation packages. #### The Decoupling of Pay and Pollution Under the leadership of newly appointed CEO Georges Elhedery, HSBC revised the metrics governing the Long-Term Incentive plan, a component that constitutes the majority of executive pay. The bank reduced the environmental weighting within the LTI from 25% to 20%. Yet, the reduction in percentage was less consequential than the redefinition of what constituted “environmental performance.” Previously, the bank faced pressure to tie executive bonuses to Scope 3 emissions, the greenhouse gases produced by the clients HSBC finances. The February 2025 update explicitly excluded these financed emissions from the bonus calculation. Instead, the “environmental” portion of the CEO’s £15 million chance pay package became contingent solely on reducing Scope 1 and Scope 2 emissions (the bank’s own electricity use and business travel) and meeting “sustainable finance” volume. This shift meant that the CEO and top executives could achieve 100% of their climate-related bonus criteria while simultaneously increasing financing for fossil fuel expansionists. The carbon output of clients like Ithaca Energy, regardless of how much it increased due to HSBC funding, no longer negatively impacted the executive scorecard. The bank justified this exclusion by citing “challenges in the methodology, timeliness, and frequency of reporting” for client emissions, a rationale that absolved leadership of accountability for the bank’s primary climate impact. #### Incentivizing the Ithaca Strategy The timing of this remuneration overhaul aligned precisely with the bank’s continued engagement with North Sea oil and gas operators. By removing financed emissions from the incentive structure, the Remuneration Committee removed the internal financial deterrent against funding the Rosebank oilfield via Ithaca Energy. For a bank executive in 2024, rejecting a lucrative loan to an oil major carried a chance opportunity cost in lost revenue. In 2025, under the new scheme, approving that same loan carried no personal downside risk regarding climate. The revenue generated from the Ithaca relationship would boost the Return on Tangible Equity (RoTE), a metric that saw its weighting increased in the same pay review, while the associated carbon emissions would not penalize the executive’s bonus. This structure created a perverse incentive: executives were financially rewarded for maximizing short-term profits from high-carbon clients while being evaluated on climate goals that required only the decarbonization of HSBC’s office buildings and data centers. The “sustainable finance” target, which remained in the bonus scheme, further distorted incentives by allowing the bank to count “facilitated” capital (such as underwriting green bonds) as a success, even if the same client received separate financing for oil extraction. #### Shareholder and Regulatory Backlash The decision to water down climate sparked immediate criticism from responsible investment groups and environmental watchdogs. ShareAction and other advocacy bodies noted that the move signaled a retreat from the “Net Zero by 2050” ambition the bank publicly espoused. Critics argued that by restricting climate to Scope 1 and 2 emissions, HSBC was focusing on less than 1% of its total carbon footprint, ignoring the 99% generated by its lending portfolio. The remuneration report revealed that the Remuneration Committee, chaired by Swee Min Koh, had consulted with major shareholders before implementing the changes. While investors accepted the “methodology challenges” argument, others viewed it as a governance failure that prioritized executive retention and “Wall Street-style” payouts over climate stewardship. The pay package for Elhedery, which included the revised LTI, represented a 43% increase in chance earnings compared to his predecessor, Noel Quinn, further widening the gap between executive reward and environmental responsibility. #### Operational This compensation shift had immediate operational for the bank’s risk management and deal approval processes. With the removal of the financed emissions penalty, the internal “carbon budget” that previously acted as a soft cap on fossil fuel exposure lost its enforcement method at the executive level. Deal teams proposing financing for companies like Ithaca Energy no longer faced pushback from senior leadership worried about missing their LTI. The 2024 Annual Report also disclosed a delay in the bank’s supply chain net-zero target, pushing it from 2030 to 2050. This retraction, combined with the bonus scheme overhaul, established a governance environment where climate pledges were treated as flexible aspirations rather than binding financial covenants. The message to the market and the internal workforce was unambiguous: financial performance, driven by clients of any sector, took precedence over the reduction of financed emissions.

The removal of financed emissions from the 2025 bonus scheme was not a technical adjustment; it was a strategic deregulation of executive conduct. It dismantled the internal governance structure that had been designed to align the bank’s lending practices with the Paris Agreement. By ensuring that the CEO’s paycheck remained immune to the carbon intensity of the loan book, HSBC sanctioned the breach of its own coal phase-out pledges, prioritizing the retention of high-margin fossil fuel clients over its public climate commitments.

Greenwashing Allegations: Misleading Advertising and the ASA Rulings Context

The chasm between HSBC’s public sustainability marketing and its private financing activities widened significantly between 2024 and 2025, drawing intensified scrutiny from regulators and civil society. While the bank continued to run high-profile campaigns promoting its “transition” credentials, investigative reports and regulatory interventions exposed a pattern of omissions that critics and watchdogs labeled as widespread greenwashing. This period was defined by the Advertising Standards Authority’s (ASA) continued enforcement of its landmark 2022 ruling, which served as a legal tripwire for HSBC’s subsequent marketing efforts. #### The 2022 ASA Precedent and Continued Scrutiny The context for the 2024-2025 allegations was established by the ASA’s banning of two HSBC advertisements in October 2022. The regulator ruled that posters seen in London and Bristol, claiming the bank would provide “$1 trillion in financing and investment globally to help our clients transition to net zero” and plant “2 million trees”, were materially misleading. The ASA found that these ads omitted significant information about HSBC’s continued financing of thermal coal and fossil fuel infrastructure, creating a false impression of the bank’s in total environmental contribution. even with this “sword of Damocles,” HSBC’s marketing in 2024 and 2025 continued to use broad, aspirational slogans such as “Opening up a world of opportunity” to frame its sustainability initiatives. The ASA’s mid-year 2025 report confirmed that its “Active Ad Monitoring” system was conducting “regular sweeps” of banking advertisements to ensure compliance with the 2022 precedent. This ongoing surveillance meant that every public statement regarding “sustainable finance” was legally if it failed to disclose the bank’s simultaneous support for carbon-intensive expansion. #### The ActionAid Report: A £128 Billion Disconnect In July 2025, the anti-poverty charity ActionAid released a forensic investigation that provided the statistical bedrock for new greenwashing accusations. The report, titled *Who Pays the Price?*, estimated that HSBC’s financing of fossil fuels and industrial agriculture between 2021 and 2023 was linked to £128 billion in climate-related damage, a figure nearly three times the bank’s net profit of £43. 4 billion over the same period. The report specifically targeted the “clear disconnect” between HSBC’s marketing rhetoric and its capital flows. While the bank’s advertising highlighted its “Net Zero Transition Plan” and support for green infrastructure, ActionAid’s data revealed that the bank had funneled £153 billion into high-emission industries during the analyzed timeframe. This financing enabled approximately 357 million tonnes of CO2-equivalent emissions, roughly matching the United Kingdom’s entire annual emissions output. ActionAid’s findings were particularly damaging because they directly contradicted the “transition” narrative central to HSBC’s defense in the 2022 ASA case. The charity argued that by continuing to fund expansion projects, such as those by Ithaca Energy and JSW Steel, HSBC was not “helping clients transition” actively profiting from the entrenchment of fossil fuel infrastructure. Consequently, ActionAid announced it would sever ties with the bank, moving the majority of its funds to Lloyds Bank in a public rebuke of HSBC’s “misleading” ethical stance. #### The “Stop Rosebank” Campaign and 2024 Marketing Throughout 2024, the “Stop Rosebank” campaign focused its fire on HSBC’s specific claim of supporting a “just transition.” Activists pointed to the bank’s participation in the $16. 2 billion fossil fuel financing surge recorded that year, specifically its involvement with Ithaca Energy, the operator of the Rosebank oilfield. Campaigners argued that HSBC’s marketing materials, which frequently the International Energy Agency’s (IEA) net-zero scenarios to justify “transition finance,” selectively ignored the IEA’s conclusion that *no* new oil and gas fields were necessary in a 1. 5°C pathway. By funding Ithaca, a company explicitly focused on new North Sea exploration, HSBC was accused of using “transition” terminology to cloak standard expansionist financing. This specific contradiction formed the basis of multiple complaints to the ASA and the Financial Conduct Authority (FCA), alleging that the bank’s “sustainable finance” labels were deceptive under the FCA’s new anti-greenwashing rules introduced in May 2024. #### The “Backsliding” Controversy of 2025 The allegations of misleading advertising reached a new peak in February 2025, when HSBC’s annual report revealed a significant retreat from its previous climate. The bank announced it would move its target for achieving net-zero emissions in its own operations from 2030 to 2050, a twenty-year delay. This “backsliding” rendered previous marketing materials, which had heavily featured the 2030 target as proof of the bank’s industry leadership, retroactively misleading. Environmental law charity ClientEarth and other watchdogs noted that advertisements running as late as January 2025 had implied a rapid operational decarbonization trajectory that the bank had privately determined was unachievable. The between the “2030 ambition” sold to the public and the “2050 reality” disclosed to shareholders exemplified the very “omission of material information” that the ASA had banned in 2022. #### Corporate “Purpose” vs. Real-World Impact HSBC’s overarching brand purpose, “Opening up a world of opportunity,” also faced greenwashing challenges in 2025. The D&AD “Shift Studio” creative brief, intended to generate “authentic” sustainability messaging, inadvertently highlighted the bank’s struggle to communicate without “greenwashing clichés.” The brief acknowledged the difficulty of talking to customers who “don’t know what role we’re playing,” a tacit admission of the opacity the ASA had condemned. The ActionAid report juxtaposed this “world of opportunity” slogan with the “devastating human cost” of the bank’s financing in the Global South. It detailed how HSBC-backed projects in Bangladesh and Brazil contributed to displacement and environmental degradation, arguing that the “opportunity” advertised was reserved for fossil fuel clients while the “costs” were externalized to communities. This narrative attack weaponized the bank’s own marketing language against it, framing the slogan not as an aspirational pledge, as a cynical cover for extractive capitalism. #### Regulatory By late 2025, the cumulative weight of these allegations placed HSBC in a precarious regulatory position. The FCA’s anti-greenwashing rule, which demands that sustainability claims be “fair, clear, and not misleading,” provided a new enforcement method beyond the ASA’s remit. Legal experts warned that the ActionAid data and the 2025 target rollback provided substantive evidence for chance enforcement actions. The bank’s continued reliance on “transition” labeling for expansionist financing remained its most significant legal vulnerability, as the definition of “transition” tightened under both UK and EU taxonomies.

The Xinjiang Solar Connection: Funding Forced Labor

In January 2024, Sheffield Hallam University (SHU) released a serious investor guide titled *”Investor Guide to Mitigate Uyghur Forced Labor Risk in the Renewable Energy Sector,”* which served as a direct indictment of the financial sector’s complicity in state-sponsored slavery. The report highlighted that approximately 35% of the world’s solar-grade polysilicon, the raw material for 95% of solar panels, originates from the Uyghur Region, where labor transfer programs are tantamount to enslavement. HSBC’s exposure to this sector remained significant throughout 2024 and 2025. The bank maintained financial relationships with major solar manufacturers such as **JinkoSolar**, **Trina Solar**, and **JA Solar**, all of which have been flagged in multiple investigations for supply chain links to XUAR. * **JinkoSolar:** even with the implementation of the Uyghur Forced Labor Prevention Act (UFLPA) in the US, which bans goods from the region, HSBC continued to financing for companies that bifurcated their supply chains, creating “clean” lines for the US market while continuing to source from Xinjiang for other markets. This “bifurcation” loophole allowed HSBC to technically claim compliance while subsidizing operations tainted by forced labor. * **Trina Solar:** Reports from 2024 indicated that Trina Solar continued to source polysilicon from suppliers with documented ties to labor transfer programs. HSBC’s continued underwriting of bond issuances and revolving credit facilities for such entities demonstrates a refusal to look beyond -tier suppliers. The bank’s defense, relying on client assurances and standard “anti-slavery” clauses, crumbled under the weight of evidence. The SHU guide explicitly warned investors that “audits are not possible” in the Uyghur Region due to state surveillance and intimidation, rendering HSBC’s standard due diligence useless. By ignoring this reality, HSBC prioritized renewable energy portfolio growth over fundamental human rights, greenwashing its books with solar projects built on the backs of enslaved Uyghurs.

“Harmful Industrial Agriculture”: The Palm Oil Persistence

While the solar sector represented a high-tech complicity, HSBC’s involvement in “harmful industrial agriculture” showcased a return to old habits. A damning report released by **ActionAid** in July 2025, titled *”Who Pays the Price?”*, exposed that between 2021 and 2023, HSBC funnelled over **£153 billion** into fossil fuel and industrial agriculture companies. This financing stream continued unabated into 2024-2025, supporting conglomerates involved in large- deforestation and land grabbing in the Global South, practices inextricably linked to modern slavery and labor exploitation. The report detailed specific impacts in **Bangladesh**, **Brazil**, and **Tanzania**, where HSBC-financed projects led to the displacement of local communities. In the palm oil sector, even with years of “No Deforestation, No Peat, No Exploitation” (NDPE) pledges, HSBC’s capital continued to reach producers with track records of labor abuses. * **Displacement as Modern Slavery:** The ActionAid investigation highlighted cases where indigenous communities were forcibly removed from their land to make way for monoculture plantations funded by HSBC clients. Deprived of their livelihoods, these displaced populations frequently become to debt bondage and forced labor within the very plantations that displaced them, a pattern of abuse financed by the bank’s loans. * **The “Certification” Shield:** HSBC frequently Roundtable on Sustainable Palm Oil (RSPO) certification as its primary safeguard. Yet, the 2025 findings underscored that certification bodies frequently fail to detect labor abuses in remote plantations. HSBC’s reliance on these flawed certifications, rather than conducting independent, on-the-ground verification, allowed it to maintain profitable relationships with controversial agribusiness giants while deflecting responsibility.

widespread Due Diligence Gaps

The persistence of these links points to a structural deficit in HSBC’s risk management framework. The bank’s 2024 and 2025 Modern Slavery Statements tout “enhanced training” for 11, 884 employees and “questionnaires” for suppliers. yet, these measures proved to be performative rather than preventative.

The disconnect is further highlighted by the regulatory environment. With the UK’s **Modern Slavery Act** requiring transparency and the EU’s **Corporate Sustainability Due Diligence Directive (CSDDD)** looming, HSBC’s failure to map its supply chains beyond the tier became a legal liability. The 2025 “surge” in global AML and supply chain enforcement actions signaled that regulators were no longer accepting “we didn’t know” as a valid defense. Yet, HSBC’s response was reactive—addressing problem only after they were flagged by NGOs or journalists—rather than proactive. The disbandment of the bank’s **Geopolitical Risk Unit** in July 2025 (detailed in a previous section) further exacerbated these vulnerabilities. By removing the specialized team responsible for analyzing complex regional risks—such as the intersection of Chinese state policy and labor transfers—HSBC blinded itself to the nuances of modern slavery in authoritarian contexts. This restructuring decision prioritized cost-cutting over compliance, leaving the bank’s supply chain vetting processes dangerously exposed to exploitation. In sum, HSBC’s 2024-2025 record on modern slavery was defined by a willful blindness. The bank possessed the data, the warnings from credible NGOs, and the regulatory mandates to act. Instead, it chose to hide behind paper shields of “certification” and “bifurcation,” allowing the profits from solar energy and industrial agriculture to outweigh the human cost of the forced labor that produced them.