• CIMB Pulse
  • Banking With Us
  • Digital Services
  • Promotions
  • Help & Support
  • Quicklinks
Newsroom & Awards
Investing My Money
Travel Tips
Planning For My Future
Thinking About Insurance
Investments
Other Services
CIMB Clicks
Current Promotions
FAQ
Rates & Charges
Download Center
Regulations & Policies
Security & Fraud

Important Notice:

CIMB Clicks In-app Authentication for Online 3D-Secure (3DS) Card Transactions

 

Dear Valued Customers,​

To better protect your account, from 26 June 2026 onwards, the way you authenticate your online card transactions at 3D-Secure (3DS) merchants will be authenticated in-app via CIMB Clicks instead of SMS-One Time Passwords (OTPs).​

What is 3D-Secure (3DS)​

3-D Secure (3DS) protocol is a global security standard used to authenticate online card transactions. During checkout, you will be prompted to verify your purchase via a push notification on your CIMB Clicks app. Once the transaction is approved through your Digital Token, your purchase will be processed and completed.​

How to authenticate your online transactions​

  • If you have CIMB Clicks, ensure that your Digital Token is activated and Push Notifications are enabled. SMS OTP will no longer be sent to your mobile number registered with the bank.​

To authenticate your online transaction:​

  1. Tap on notification to launch CIMB Clicks​

  2. Verify and tap on “Approve” to confirm your transaction. Ensure that you are approving the correct transaction based on the merchant’s name, transaction currency and amount, and account.​

  3. Upon clicking “Approve”, acknowledgement page displays the approved transaction.​

  4. Return to the merchant’s app or website and transaction is completed.​​

     

  • If you do not have CIMB Clicks, authentication will continue to be via SMS-OTP sent to your mobile number registered with the bank. We would like to encourage all customers to set up CIMB Clicks and the Digital Token for a more secure authentication.​

This change does not apply to:​

  • Supplementary cardholders; and​

  • Cardholders whose primary identification is a Malaysia ID.

                                                                                                                                       

 Information is correct as at 26 May 2026.