CIMB Malaysia will require customers to approve all transactions initiated through CIMB Clicks Web and merchant websites using SecureTAC in the CIMB OCTO mobile app by September 19.
The ASEAN bank says approval must be completed with Face ID, fingerprint authentication or the passcode configured on the customer’s primary device. A transaction cannot proceed if none of those authentication methods is active.
Customers will receive a push notification in the OCTO app after submitting an online transaction. They can also open SecureTAC from the app menu, review the details and choose to approve or reject the request before completing the device-level identity check.
The requirement moves the final authorization step away from the browser or merchant page and onto the registered mobile device. That creates a separate confirmation channel for transactions that originate on the web.
The customer must inspect the amount and recipient information in the approval request before authenticating. The OCTO app then returns the decision to the web transaction, keeping the final confirmation separate from the browser session where the payment began.
CIMB introduced biometric SecureTAC approvals in the OCTO app earlier this year. The new notice extends the control across all covered CIMB Clicks Web and merchant transactions rather than presenting biometrics as an optional feature for a narrower set of approvals.
The system relies on the authentication mechanisms built into the customer’s phone. CIMB receives the approval through its app, while the face, fingerprint or device-passcode check is handled by the enrolled device.
The change is part of a wider regional shift toward passwordless banking controls that combine registered devices, cryptographic authentication and transaction-specific approval prompts.
For CIMB customers, the practical requirement is to keep the OCTO app active on the primary device and configure either biometric unlocking or a passcode before attempting a transaction. If authentication is not configured, the app displays an error when the user tries to approve.
The policy covers transactions made through CIMB’s own web banking service as well as payments initiated on merchant websites. SecureTAC remains the point at which the customer sees the request and authorizes its completion.
Source: CIMB Malaysia
–
By the ID Tech Editorial Team
