CIMB Bank Berhad and CIMB Islamic Bank Berhad will change how Google Pay contactless transactions are authenticated for CIMB credit card and credit card-i holders. From 27 January 2026, payments made through Google Wallet will no longer require a six-digit card PIN and will instead be verified directly on the user’s device.

The update applies to all Google Pay contactless transactions using CIMB credit cards that have been added to Google Wallet.

Device Security To Replace Card PINs

Once the change takes effect, payments will be authorised using device-level security such as Face ID, fingerprint recognition, device passcode, or similar authentication methods supported by the phone. This means cardholders will no longer need to key in their card PIN when making contactless payments via Google Wallet.

For users who have already added their CIMB Mastercard credit card or credit card-i to Google Wallet, the new authentication method will be rolled out progressively by Google. CIMB said the update is targeted to be fully completed by 31 March 2026.

No Action Needed From Cardholders

The change will be applied automatically. Cardholders do not need to re-register their cards, update app settings, or install additional software for the new authentication method to work.

Payments can continue as usual, with approval handled through the phone’s existing security features. For regular users of mobile payments, this may result in quicker and more seamless checkouts at contactless terminals.

Contactless Spending Limits Still Apply

Existing daily contactless spending limits will remain in place after the change. Cardholders can review or adjust their daily contactless limit using the CIMB OCTO App, up to a maximum of RM3,000.

If a transaction exceeds the daily contactless limit, payment can still be completed using the physical card through chip and PIN at the terminal.

Security Features Remain In Place

CIMB reiterated that card details are not stored on the phone or shared with merchants when using Google Pay. Transaction confirmations will continue to appear in the app, helping users track spending and identify any unauthorised activity.

In cases where a device is lost or stolen, users can lock the phone or perform a remote reset to prevent Google Wallet from being used.

What This Means For Everyday Spending

For CIMB cardholders who use Google Wallet regularly, the change simplifies contactless payments by relying on the phone’s built-in security rather than a separate card PIN. While the payment flow becomes more streamlined, existing spending limits and security controls remain unchanged, keeping everyday transactions both convenient and controlled.

Follow us on our official WhatsApp channel for the latest money tips and updates.