Help And Support

OCBC Velocity - Security Token

Frequently asked questions
  • What is a security token?

    A security token is a hardware device, system/software or application that generates a One Time Password (OTP) that is unique to the user. To access OCBC Velocity, a user is given either a OCBC OneToken (digital token) or hardware token.

  • What is security token used for?

    All users need to use a security token to login to OCBC Velocity or OCBC Malaysia Business Mobile Banking app.

    For authorisers within the company, they will also use the token for approving transactions (payments, trade and administrative functions) within OCBC Velocity or from OCBC Malaysia Business Mobile Banking app.

  • Can a user have multiple tokens?

    No, a user is allowed to activate only ONE (1) token at any time.

    New users can download the OCBC Malaysia Business Mobile Banking app and activate the OCBC OneToken via the app.

    If your organisation has opted for hardware tokens, the nominated contact person for your company will receive an OCBC Velocity Starter Kit containing all the tokens to be distributed to the users. Each user can choose any one of the new tokens to complete a one-time registration and activation process upon first login. Thereafter, the token is unique to the user who registered and activated it.

  • Can security tokens be shared among users?

    No, each security token is pre-assigned to a unique user. As such, they can neither be shared nor registered with another user. This way, once a token has been registered to a user, the correct device must be used for login, otherwise the login attempt will be unsuccessful.

    The token cannot be registered to more than one OCBC Velocity user. This protects and ensures the integrity of each user's access to OCBC Velocity.

  • What happens if I mix up the security tokens?

    Each token has a unique serial number that is automatically assigned for user on OCBC OneToken or visible on the back of the hardware token.

    Once a user has completed the one-time registration for their token, their user name/ID will be registered to that token, making it unique to them. The token cannot be registered to another OCBC Velocity user. This protects and preserves the integrity of each user's access to OCBC Velocity.

    Once a token has been registered to a user, the correct token must be used for login or approval request(s), otherwise the request will be unsuccessful.

  • Can the token be used overseas?

    Yes, our tokens are designed to be used anywhere, even without internet connection. For security reasons, we recommend that you always keep your token with you and do not share your OCBC OneToken PIN with anyone.

  • What do I do if I have a faulty token or if I lose my hardware token?

    If your token has become faulty or gone missing, here are the steps you need to take:

    1. Fill up the Manage OCBC Velocity Account Form and tick "Switch to OCBC OneToken" under section "III. Replace Token". Submit the completed form to any OCBC branch nationwide. OCBC OneToken will be granted to the user within 3 working days after the bank receives the completed form.
    2. After 3 working days from your submission of the completed form in Step 1 above, download the OCBC Malaysia Business Mobile Banking app on your mobile device.
    3. Log in to the mobile app using your credentials. When prompted for an OTP, click on "Login using SMS" and enter the OTP received.
    4. At the Activate OneToken screen, click on "Activate Now". Follow the on-screen instructions to set up OCBC OneToken on your mobile device.

What is security token?