CIMB, one of Southeast Asia’s largest banking groups, has added biometric authentication to transaction approvals in its CIMB OCTO App, requiring customers to verify with Face ID or a fingerprint as part of its SecureTAC approval flow. The additional check appears after a SecureTAC approval is confirmed, adding one more layer of verification before a transaction is completed.
The change is part of a broader push to strengthen online banking security in Malaysia. CIMB said the biometric verification supports Bank Negara Malaysia’s directive to harden digital banking controls and combat financial scams, and positions the new step as a safeguard against unauthorized transactions. CIMB described biometric verification as one of its latest measures to combat financial scams.
The bank said biometric verification currently supports Face ID on iOS and fingerprint authentication for compatible devices. CIMB said the biometric prompt appears after SecureTAC approval in the app. By requiring a biometric prompt after the SecureTAC approval, CIMB said it is introducing another layer of authentication for higher-risk actions while keeping the flow within the existing app experience.
CIMB also pointed to existing measures already in place in the OCTO app, including SecureTAC itself, Lock Clicks ID, and a policy that ties the app to a single registered device. The bank said it uses eKYC for first-time logins and reminded customers to keep their operating systems and apps updated and to download only from official app stores.
Customers are also advised to remove the old device before a first-time login on a new phone, a step CIMB said helps reduce account takeover risks. The bank said the single-device policy is designed to keep approvals tied to a verified handset.
Within the group, CIMB Bank Philippines has previously rolled out selfie authentication with Jumio to strengthen customer verification workflows. The new OCTO App change extends that pattern of layered identity checks to approvals for everyday banking transactions.
CIMB framed the update as a balance between security and user experience, noting that biometrics allow customers to approve transactions quickly while adding assurance beyond PINs or device possession. The bank’s latest step mirrors a broader industry trend toward combining device binding, transaction approvals, and biometrics in a single flow.
Sources: CIMB Newsroom
—
By the ID Tech Editorial Team
