Elderly parent’s fixed deposit turned into an insurance policy?
A guide to complaining about bank mis-selling: busting the “you signed it” myth and the HKMA’s protections for vulnerable customers
By Kyle | Rightly guest columnist
IG: kyle_12.13 · Threads: kyleee_ovo
Last updated: 2026-10-13
Summary / quick guide
If an elderly family member went to the bank to place a fixed deposit but was sold a long-term savings insurance policy by a relationship manager (RM), the family may still have a legal basis to seek cancellation of the contract and a full refund of the principal – even though the policy “has been signed” – if the bank breached the HKMA’s four mandatory procedures for “Vulnerable Customers” aged 65 or above (such as mandatory full audio recording, independent supervisor review and extreme liquidity assessment).
Fixed deposit turned into an insurance policy? 3 common misleading sales pitches and traps
Many older people walk into a bank branch with a simple aim: renew a maturing fixed deposit, or put their retirement savings somewhere safe to earn interest. But frontline relationship managers (RMs) carry heavy insurance and wealth-management sales targets (KPIs). They often use older customers’ trust in the bank, bring them into the VIP wealth room and use a carefully designed sales pitch:
“Uncle Chan, a normal fixed deposit only pays a bit over 3% now. We have a limited-quota special savings plan in-house with a guaranteed return of over 5% for the whole term. Leave it for five years and you get it back – principal guaranteed with high interest, just as safe as a fixed deposit!”
The fatal trap in these sales tactics is that frontline staff deliberately blur the key terms:
- Blurring the concepts (hiding that it’s insurance): deliberately using words like “special plan”, “safe interest” and “internal savings quota”, and never mentioning that it is in fact a long-term life insurance policy underwritten by a third-party insurer.
- Concealing the lock-in period and liquidity: playing down the “premium payment period” or “breakeven period” as a “deposit period”. The customer thinks the money is locked up for five years, but has actually signed a contract lasting ten years or even for life. If they need money for medical emergencies in the first few years and surrender the policy, the surrender value may cost them 30% to 70% of the principal.
- The fast iPad signing trap: frontline staff flip quickly through pages on a tablet, ticking boxes for the customer in the lengthy risk profiling questionnaire (RPQ) and policy terms. Before the customer can read the content, they are told to sign in a particular blank space.
Signed it, so nothing can be done? The HKMA’s “suitability obligations” and when a full refund is possible
When the family raises questions, the bank branch’s first line of defence is always: “The customer signed everything that day to confirm they understood the terms, the risk assessment (RPQ) was fully completed, and the procedure was completely lawful.”
Under Hong Kong’s financial regulatory framework, a signature is not a bank’s get-out-of-jail-free card.
Under Hong Kong common law principles and the Hong Kong Monetary Authority (HKMA)’s supervisory guidelines, signing a contract does not mean the bank has met its “Suitability Obligations”. If frontline staff misled the customer during the sale, did not adequately disclose liquidity risks, or breached the special protection procedures for older customers, regulators and the courts will not simply treat it as valid informed consent, even if the contract is fully signed. With the right evidence, there is a full legal basis to seek rescission of the contract and a full refund of principal (Full Refund / Rescission of Policy).
What is a “vulnerable customer”? The HKMA’s 4 mandatory compliance procedures for customers aged 65 or above
The Code of Banking Practice drawn up by the HKMA and the Hong Kong Association of Banks, together with related supervisory circulars, sets very strict compliance red lines for handling “Vulnerable Customers”. Anyone meeting any of the following is a key protected customer: aged 65 or above, lower level of education (such as junior secondary or below, or unable to read), relying on a pension or savings to live, or lacking investment experience.
When selling to a vulnerable customer, a bank cannot just follow the usual process and “get a signature”. It must activate four mandatory protection procedures:
1
Mandatory full audio recording of the sale (Pre-Sale Audio Recording)
For non-principal-protected investments or insurance products with long lock-in periods, the explanation of product features, withdrawal restrictions and risk disclosures must be fully recorded (Voice Log). If frontline staff only read a script on tape at the final signing stage, or steered the customer before recording began, this is a serious regulatory breach.
2
Independent third-party witness and supervisor review (Independent Review)
The sale cannot be completed one-to-one, behind closed doors, by the commission-earning RM alone. The bank must arrange a supervisor-level staff member with no direct commission interest (such as the branch manager or a compliance officer) to independently confirm that the customer fully understands the policy structure and withdrawal restrictions.
3
Mandatory cooling-off confirmation period and reminder to bring a relative
Frontline staff must actively suggest that the older customer be accompanied by an adult relative. If the customer comes alone, the bank usually needs to set an extra cooling-off confirmation period before the formal application is signed, and must never pressure the customer into a long-term, large-premium policy on the spot.
4
Extreme liquidity and affordability assessment (Affordability Assessment)
Bank compliance guidelines forbid frontline staff from locking most of a vulnerable customer’s liquid assets (especially retirement savings) into a policy with no immediate liquidity. If the premium takes up more than a reasonable share of the customer’s available cash, the transaction is in itself an unsuitable sale (Mis-selling) under compliance review.
4 practical steps to fight back: how to get the voice log and go straight to the CHO (with official search guide)
If you meet mis-selling, don’t go and argue with branch counter staff (frontline staff can easily stall indefinitely by citing an “internal investigation”). The right path to a refund is these four steps:
Step 1
Use the Personal Data (Privacy) Ordinance to get the voice recording (DAR)
Under the Personal Data (Privacy) Ordinance (Cap. 486), customers have the right to send the bank a formal Data Access Request (DAR), requiring the bank to provide, within 40 calendar days, a copy of the complete phone and in-branch recordings of the sale (Voice Log). This is the strongest evidence to overturn misleading frontline sales talk.
Step 2
Go straight to the authorized institution’s Complaint Handling Officer (CHO)
Don’t call the branch or the general customer service hotline. Send your complaint letter directly to the head-office CHO responsible for coordinating regulatory complaints:
- Searching the HKMA’s official list: go to the HKMA website (hkma.gov.hk) → “Regulatory Resources” / licensing → “Authorized Institutions” → download the latest List of Complaint Handling Officers, which publishes each bank’s CHO full name, mailing address and dedicated complaint email.
- Dedicated complaint channels at major retail banks:
| HSBC | Customer complaints email customer.care.dept@hsbc.com.hk |
|---|---|
| Bank of China (Hong Kong) (BOCHK) | Complaints section email comments@bochk.com |
| Hang Seng Bank | Customer service and complaints complaint@hangseng.com |
| Standard Chartered | Customer care manager mailbox customer.care@sc.com |
Step 3
Know the Code of Banking Practice time limits (Statutory Timeline)
| Time limit | What the bank must do |
|---|---|
| Within 7 working days | Send a written acknowledgment with a case number and details of the officer handling it. |
| Within 30 calendar days | Complete a substantive investigation and send an initial or substantive reply. |
| 60 calendar days maximum | For complex cases, no more than 60 days in total, and a formal Final Response Letter must be issued. |
Step 4
Bring in outside regulatory leverage (HKMA complaint × FDRC mediation)
If the bank refuses a full refund in its Final Response, the family can take outside legal and regulatory action:
- 1Formally complain to the HKMA’s Enforcement Department: the HKMA will step in to investigate whether the branch has systemic mis-selling.
- 2Apply for mediation at the Financial Dispute Resolution Centre (FDRC): mediation fees are very low and the process is bound by “suitability obligations”. If mediation succeeds, banks usually refund the principal in full as a “Goodwill Settlement”.
Bank mis-selling complaint letter template (practical blueprint)
To: Complaint Handling Officer, [Bank name] Date: [Day] [Month] 202X Complainant: [Elderly customer’s name] (HKID no.: [XXXXXX(X)]) Policy / account no.: [XXXXXXXX] Re: Formal complaint and demand for full refund regarding suspected unsuitable sale (mis-selling) to a vulnerable customer by a branch relationship manager I am the above customer, [Elderly customer’s name] (aged XX, a “vulnerable customer” as defined by the HKMA). On [date], when I visited your [branch name] branch to renew a fixed deposit, the relationship manager [RM name / staff no.] allegedly used misleading statements to induce me to sign the above long-term savings policy. The specific breaches are as follows: 1. Deliberate concealment of the product’s nature and lock-in period: Frontline staff repeatedly described the plan as a “limited-quota special savings plan with a five-year guaranteed return higher than a fixed deposit”, never disclosed that it is a long-term life insurance policy underwritten by a third-party insurer, and never disclosed the large loss of principal from early surrender in the first few years. 2. Serious breach of the HKMA’s sales guidelines for vulnerable customers: During the sale, your bank did not arrange an independent second review (Independent Review) by a supervisor without a conflict of interest, and I was induced to sign before the recording started, making the recording a mere formality. 3. Failure to meet Suitability Obligations: The annual premium of HK$XX0,000 represents over XX% of my available retirement cash, seriously depriving me of liquidity for emergency medical needs. My demands: 1. Under the Personal Data (Privacy) Ordinance, provide a copy of the complete voice recording (Voice Log) of the sale within 40 days; 2. In strict accordance with the Code of Banking Practice, issue an acknowledgment within 7 days and start an independent investigation; 3. Based on the frontline mis-selling and procedural defects, rescind the contract in full and unconditionally refund all premiums paid (Full Refund). I reserve the right to make further complaints about the above breaches to the Hong Kong Monetary Authority (HKMA) and the Insurance Authority (IA). Complainant: [Signature] Phone: [XXXXXXXX] Address: [XXXXXX]
FAQ (must-read for readers and families)
Q1: Can I still get a full refund after the cooling-off period has ended?
Yes. The 21-day cooling-off period only applies to ordinary, unconditional policy cancellation. If frontline bank staff misled the customer, concealed the nature of the product or breached compliance procedures when selling, the contract lacked legally informed consent from the start. The victim is fully entitled to rely on “mis-selling”, citing common law and the HKMA’s Code of Banking Practice, to demand rescission of the contract and an unconditional full refund of principal (Rescission of Policy / Full Refund), regardless of the cooling-off deadline.
Q2: If my elderly parent has limited mobility or can’t read, can family members complain to the bank’s CHO on their behalf?
Yes. Under the Personal Data (Privacy) Ordinance, banks cannot disclose account information to unauthorised third parties. But the elderly customer only needs to sign a simple “Letter of Authorization” giving their child full authority to attend meetings, negotiate, request the voice log recordings and receive replies. The bank and the HKMA must then formally accept and deal with the authorised family member as required by law.
Q3: The bank insists “the customer signed in black and white to confirm the risks” and refuses a refund. What can I do?
A signature is not a bank’s shield against liability. The HKMA expressly requires banks to meet strict “Suitability Obligations” towards vulnerable customers. If the voice log shows frontline staff did not adequately disclose liquidity risks, or you can prove there was no independent supervisor review on site, a formal signature alone does not release the bank from its regulatory and contractual responsibilities. You can then escalate the case directly to the HKMA’s Enforcement Department and the Financial Dispute Resolution Centre (FDRC).
Q4: How long does it take to get the sales recording (voice log) from the bank? Can the bank refuse?
Under section 19 of the Personal Data (Privacy) Ordinance (Cap. 486), the bank must provide a copy of the recording within 40 calendar days of receiving a Data Access Request (DAR), and may not refuse on the grounds of “confidential internal investigation”. If the bank misses the deadline or makes excuses, you can complain directly to the Office of the Privacy Commissioner for Personal Data (PCPD) and the HKMA.
Related guides
All guides →
Was an elderly relative mis-sold by a bank?
RightlyHK’s free complaint tool is coming soon to help you organise evidence, write complaint letters and follow up step by step. Join the waitlist and we’ll tell you as soon as it launches.
By submitting, you agree that we will use your email only to tell you about our launch and updates, as described in our privacy policy. You can unsubscribe at any time.
This is a guest column. It is general information only and is not legal advice. RightlyHK is not affiliated with any bank or insurer mentioned in this article.