When HSBC Pulled the Plug on Dot HSBC

In the ambitious early wave of custom top-level domains (TLDs), one of the boldest ideas to emerge from the 2012 ICANN new gTLD program was the concept of closed-dot-brands—exclusive, private namespaces owned and operated by a single brand. Among the major global corporations eager to secure their own TLD was HSBC, one of the largest banking and financial services institutions in the world. The bank applied for and was eventually granted rights to operate the .hsbc TLD, envisioning a future where customers would access banking services and official communications through domains like secure.hsbc or login.hsbc. But that vision never came to pass. Despite securing the TLD and clearing technical and regulatory hurdles, HSBC quietly abandoned its dot-brand project, leaving behind a cautionary tale about the disconnect between digital innovation and enterprise readiness.

HSBC’s application for the .hsbc TLD was part of a broader corporate trend during ICANN’s 2012 expansion, in which brands sought to gain greater control over their digital ecosystems. A dot-brand domain offered the promise of security, exclusivity, and streamlined branding. For a company like HSBC, operating in a sector where customer trust and fraud prevention are paramount, the move made strategic sense. In theory, migrating to domains like accounts.hsbc or updates.hsbc would eliminate customer confusion, reduce phishing attacks, and create a tightly controlled, highly secure online environment. It would also allow HSBC to phase out dependence on traditional domains like hsbc.com, which had long been a target of lookalike phishing campaigns.

The technical setup of the .hsbc TLD was approved by ICANN and delegated into the root zone in 2015. HSBC became both the registry operator and sole registrant of the TLD, effectively giving it full control over every domain under .hsbc. The bank made some preliminary moves to demonstrate operational capability: a small number of .hsbc domains were activated, such as home.hsbc and info.hsbc, which either redirected to existing web properties or hosted placeholder pages. The groundwork had been laid, and observers in the domain and cybersecurity communities watched to see how the financial giant would leverage its new namespace.

But years passed, and the .hsbc domain space remained curiously dormant. The anticipated migration of core services never occurred. Key online banking portals, regional websites, and corporate pages continued to operate under hsbc.com and its country-specific subdomains. Meanwhile, other major banks that had also secured dot-brand TLDs—such as Barclays (.barclays), BNP Paribas (.bnpparibas), and Citi (.citi)—began rolling out broader implementations of their new namespaces. By contrast, HSBC’s dot-brand presence stayed minimal, quietly signaling that the bank’s internal enthusiasm had waned.

Behind the scenes, the reasons for HSBC’s hesitation were multifaceted. Migrating to a dot-brand is no small task, especially for a legacy institution with decades of digital infrastructure built on traditional domains. Every customer-facing URL, backend system, email configuration, and regulatory protocol would need to be reworked to support the new TLD. In a highly regulated environment like banking, even minor changes to online interfaces can trigger compliance reviews across jurisdictions. The logistical complexity was compounded by internal resistance. Departments entrenched in legacy systems were reluctant to risk user confusion or operational disruption. The perceived benefits of the dot-brand TLD—greater control, brand security, reduced fraud—were ultimately outweighed by the effort, risk, and cost of full implementation.

Adding to the challenges was the evolving perception of dot-brand domains themselves. What had initially been marketed as a transformative branding opportunity began to look more like a novelty without widespread adoption. Web users were already conditioned to trust .com domains, especially in financial services. Customer behavior didn’t necessarily align with the futuristic vision that brands like HSBC had imagined. The technical benefits of owning a TLD didn’t matter if users still instinctively typed in hsbc.com.

By 2020, the writing was on the wall. HSBC began the formal process of terminating its .hsbc TLD. ICANN’s Registry Agreement Termination process was initiated, and the TLD was eventually removed from the root zone. It was one of several dot-brand TLDs to be quietly shuttered, joining a growing list of abandoned or underutilized namespaces from major corporations. The termination effectively closed the door on HSBC’s dot-brand experiment, relegating it to a digital footnote in the broader narrative of corporate domain management.

HSBC’s aborted .hsbc initiative remains a revealing case study in the limits of technical innovation within large, risk-averse organizations. The idea was sound: greater control over digital assets, fewer phishing threats, a branded walled garden on the internet. But the execution never left the starting blocks. It became clear that owning a TLD is one thing—integrating it meaningfully into the fabric of a global enterprise is something else entirely. Without a strategic mandate and cross-departmental alignment, even the most forward-looking digital assets can languish unused.

The .hsbc story also underscores the reality that not all domains are created equal in the public mind. While a dot-brand might offer theoretical security benefits, it competes against entrenched user habits, conservative IT departments, and complex compliance frameworks. For most companies, including HSBC, the dream of reimagining the web under their own namespace proved harder to realize than anticipated. The result was a quiet retreat—a subtle acknowledgment that in the battle between aspiration and implementation, the latter often wins.

In the ambitious early wave of custom top-level domains (TLDs), one of the boldest ideas to emerge from the 2012 ICANN new gTLD program was the concept of closed-dot-brands—exclusive, private namespaces owned and operated by a single brand. Among the major global corporations eager to secure their own TLD was HSBC, one of the largest…