If a transaction requires authentication, you will be prompted during the payment process on the merchant’s website or app.
Merchants that support 3D Secure typically display card scheme logos such as “Verified by Visa” or “Mastercard SecureCode” on their payment page.
When authentication is required, you may receive one of the following:
•A push notification via the CIMB Mobile App, or
•An SMS One-Time Password (OTP) if you do not have the CIMB Mobile App or have not activated the Digital Token
Please follow the on-screen instructions to complete your authentication and proceed with your transaction.
If push notifications are disabled or the notification was missed, you can still approve your transaction by opening the CIMB Mobile App and tapping Digital Token on the pre-login screen.