KUCHING: CIMB customers who have not enabled biometric authentication or a six-digit passcode on the OCTO app will no longer be able to complete certain web transactions from September 19.
The requirement comes as CIMB removes password verification for SecureTAC approvals and makes authentication through its OCTO mobile app compulsory.
The change covers transfers through CIMB Clicks Web and online merchant transactions, including online card payments.
Customers will have to approve transactions using Face ID, fingerprint scanning or their custom six-digit OCTO App passcode.
CIMB said the change was intended to strengthen security and protect customer accounts against unauthorised access and fraud, while bringing its authentication process in line with industry security standards.
When customers initiate a payment through CIMB Clicks Web or an online merchant site, a SecureTAC push notification will be sent to their primary phone.
They can tap the notification or open the SecureTAC menu in the OCTO app to review the transaction before selecting “Approve”.
The app will then require Face ID, fingerprint scanning or the six-digit OCTO App passcode before the payment can proceed.
Customers who have not set up any of these security features can still initiate transactions and receive SecureTAC notifications.
However, attempting to approve a transaction will trigger an error and the payment will be rejected until biometric authentication or an OCTO App passcode has been configured.
The six-digit passcode serves as a fallback when biometric verification is unavailable, including when a fingerprint scanner fails or facial authentication cannot be completed.
It is configured separately within the OCTO app and is different from both the customer’s phone screen lock and CIMB Clicks password.
Cancelling the authentication prompt or repeatedly entering an incorrect passcode will also result in the transaction being rejected.
CIMB said unsuccessful SecureTAC approvals will not lock a customer’s CIMB Clicks ID and no money will be deducted from the account.
Customers are advised to check their OCTO app security settings before retrying a failed payment and to contact CIMB’s support centre if problems persist after a second attempt.
