AmBank Drops SMS OTP For Online Card Transactions From October 
Author Avatar

AmBank will stop sending SMS one-time passwords (OTPs) for online card transactions from 1 October 2026. From that date, all online purchases made with AmBank credit cards, Islamic credit cards-i, and debit cards will require authorisation through AmSecure, an in-app approval feature on the AmOnline App.

If you already use AmSecure, you don’t need to do anything. If you’re still on SMS OTPs, you will need to activate AmSecure before October or else you won’t be able to complete online card purchases.

AmSecure Ties Authorisation To Your Device

SMS OTPs work by sending a code to your registered mobile number, which you enter to confirm a transaction. AmSecure replaces this with a push notification sent directly to your AmOnline App, where you review the transaction details and tap “Authorise” to approve, or reject if something looks wrong.

An SMS OTP can be intercepted or redirected if your phone number is compromised, a method behind many SIM-swap frauds. AmSecure ties the authorisation to your mobile phone, which makes it much harder for a third party to approve a transaction without physically having your phone.

Setting Up AmSecure Before The Deadline

First-time activation of AmSecure has to be done at an AmBank ATM. It cannot be completed remotely. This is a one-time step that links your AmOnline App to your device.

Once that’s done, enable push notifications so that authorisation requests reach you in time. Open AmOnline, tap “More”, go to “Notification Settings”, and toggle on “In-app Notifications”. Without notifications enabled, you may miss the approval prompt mid-transaction. After that, approving a payment means opening the app, selecting “AmSecure Authorisation”, checking the transaction details, and tapping “Authorise”.

AmBank introduced AmSecure in early 2025, so some cardholders may already be set up. If you don’t know whether it’s working for you, open the app and check whether the “AmSecure Authorisation” option appears in the menu.

The ability to reject a transaction in real time is a great  upgrade over SMS OTP. With AmSecure, an unauthorised attempt shows up as a push notification on your phone, and a single tap stops it before any money moves. 

Follow us on our official WhatsApp channel for the latest money tips and updates.

0 0 votes
Article Rating
SHARE

Comments (0)

Subscribe
Notify of

0 Comments
Most Viewed Articles
Post Image
Bank News
Bank Negara Malaysia Revises Financial Product Disclosure Standards
Christina Chandra
- 25th May 2026
Bank Negara Malaysia (BNM) has revised its policy document on Product Transparency and Disclosure, setting new standards for […]
Post Image
Bank News
Be U By Bank Islam Is Moving To BIMB Mobile
Christina Chandra
- 26th May 2026
Bank Islam is consolidating its digital banking services under BIMB Mobile, with Be U closing on 31 July […]
Post Image
Bank News
RM1 Interbank ATM Withdrawal Fee Scrapped From July 1
Eloise Lau
- 16th June 2026
Starting next month, you can withdraw cash from any bank’s ATM in the country without paying the RM1 […]
Post Image
Bank News
alrajhi bank To End Gold-i Services From July 2026
Eloise Lau
- 4th June 2026
alrajhi bank Malaysia will discontinue all Gold-i services in all of its branches effective 1 July 2026. If […]

Related articles

Related Posts Image
Related Posts Image
Related Posts Image
Related Posts Image