If you have given a supplementary credit card to your child or a family member, you are about to get more visibility over how it is used online. From 30 July 2026, HSBC Bank Malaysia and HSBC Amanah Malaysia will change how online card transactions on supplementary credit cards and credit cards-i are authenticated, adding a checkpoint that protects the person who pays the bill.

The change applies to supplementary cardholders who do not have the HSBC Malaysia Mobile Banking app. If the supplementary cardholder already uses the app, nothing changes, and they can continue approving their own online transactions through it as they do now.

Both Cardholders Now Approve Each Online Payment

From 30 July 2026, online card transactions on a supplementary card without the app will need approval from both the primary cardholder and the supplementary cardholder before the payment goes through.

When the supplementary cardholder checks out on a merchant’s website, they will be prompted to request an SMS OTP. Before that OTP arrives, you receive an approval request as a push notification on your HSBC Malaysia Mobile Banking app, where you can approve or decline the transaction. If the push notification does not come through, you can also log in to the app manually to approve it.

Once you approve, the OTP is sent to the supplementary cardholder’s registered mobile number. They have three minutes to enter it and complete the payment. Both of you will then receive a notification confirming the approval. The supplementary cardholder is directed back to the merchant’s website, and both cardholders get a transaction alert.

You See Every Online Purchase Before It Happens

You are the one paying for whatever gets charged to a supplementary card, and with real-time approval, you find out about a purchase as it happens. If your teenager tries a late-night game top-up, or a scammer attempts to use your parent’s card details on an unfamiliar site, the transaction stops at your phone.

Your availability becomes part of the checkout. If your household uses the supplementary card for groceries or bill payments, time those purchases for when both of you are free to respond on your phones.

If you would rather not approve every transaction, get your supplementary cardholder to register for the HSBC Malaysia Mobile Banking app. That keeps their authentication process as it is today, with no approval requests coming to you. HSBC has published a step-by-step Digital Banking guide for registration, and recommends keeping the app updated with push notifications enabled on both the device and within the app itself.

For a refresher on how the responsibilities between primary and supplementary cardholders work, read our guide on whether you should give your family a supplementary credit card.

For questions, you can call HSBC Premier at 1300 88 9393, HSBC Bank Malaysia at 1300 88 1388, or HSBC Amanah Malaysia at 1300 80 2626.

Follow us on our official WhatsApp channel for more money tips and updates.