HSBC only gets a slap on the wrist