AmBank Drops SMS OTP For Online Card Transactions From October 
Author Avatar

AmBank will stop sending SMS one-time passwords (OTPs) for online card transactions from 1 October 2026. From that date, all online purchases made with AmBank credit cards, Islamic credit cards-i, and debit cards will require authorisation through AmSecure, an in-app approval feature on the AmOnline App.

If you already use AmSecure, you don’t need to do anything. If you’re still on SMS OTPs, you will need to activate AmSecure before October or else you won’t be able to complete online card purchases.

AmSecure Ties Authorisation To Your Device

SMS OTPs work by sending a code to your registered mobile number, which you enter to confirm a transaction. AmSecure replaces this with a push notification sent directly to your AmOnline App, where you review the transaction details and tap “Authorise” to approve, or reject if something looks wrong.

An SMS OTP can be intercepted or redirected if your phone number is compromised, a method behind many SIM-swap frauds. AmSecure ties the authorisation to your mobile phone, which makes it much harder for a third party to approve a transaction without physically having your phone.

Setting Up AmSecure Before The Deadline

First-time activation of AmSecure has to be done at an AmBank ATM. It cannot be completed remotely. This is a one-time step that links your AmOnline App to your device.

Once that’s done, enable push notifications so that authorisation requests reach you in time. Open AmOnline, tap “More”, go to “Notification Settings”, and toggle on “In-app Notifications”. Without notifications enabled, you may miss the approval prompt mid-transaction. After that, approving a payment means opening the app, selecting “AmSecure Authorisation”, checking the transaction details, and tapping “Authorise”.

AmBank introduced AmSecure in early 2025, so some cardholders may already be set up. If you don’t know whether it’s working for you, open the app and check whether the “AmSecure Authorisation” option appears in the menu.

The ability to reject a transaction in real time is a great  upgrade over SMS OTP. With AmSecure, an unauthorised attempt shows up as a push notification on your phone, and a single tap stops it before any money moves. 

Follow us on our official WhatsApp channel for the latest money tips and updates.

0 0 votes
Article Rating
SHARE

Comments (0)

Subscribe
Notify of

0 Comments
Most Viewed Articles
Post Image
Bank News
RM1 Interbank ATM Withdrawal Fee Scrapped From July 1
Eloise Lau
- 16th June 2026
Starting next month, you can withdraw cash from any bank’s ATM in the country without paying the RM1 […]
Post Image
Bank News
HSBC Gives Primary Cardholders Final Say On Supplementary Card Online Payments 
Eloise Lau
- 10th July 2026
If you have given a supplementary credit card to your child or a family member, you are about […]
Post Image
Bank News
alrajhi bank Malaysia Launches First Visa Credit Cards
Iman Aminuddin
- 16th July 2026
alrajhi bank Malaysia has launched its first Visa credit cards, the Visa Platinum Credit Card–i and Visa Signature […]
Post Image
Bank News
Spider-Man Brings A Brand New Day To Hong Leong Bank Cards
Eloise Lau
- 10th August 2026
Hong Leong Bank (HLB) is releasing a set of limited edition cards and umbrellas tied to the film […]

Related articles

Related Posts Image
Related Posts Image
Related Posts Image
Related Posts Image