OCBC Velocity

Security Token

What is a Security Token

Security token refers to the use of a hardware device, system/ software or application for the purpose of One Time Password (OTP) generation that is uniquely binded to a user. For access to OCBC Velocity, each user is given either a hardware token or OCBC OneToken (digital token).

What are the transactions that require transaction signing

Transaction signing is required for the authorisation of all types of payments, eg. Cashier's Order, Demand Draft, Internal Transfer, Own Account Transfer, Telegraphic Transfer, RENTAS, GIRO, FPX, Stop Cheque and Bill Payment and trade transactions.

Transaction signing is also required for maintenance of user details by the company's designated user administrator.

It is not required for account balance enquiry.

Using the Token

All users are required to use either hardware token or OCBC OneToken to login to OCBC Velocity or OCBC Malayia Business Mobile Banking app.

For authorisers within the company, they will also use the token for approving transactions within OCBC Velocity or OCBC Malaysia Business Mobile Banking app.

Multiple Tokens

Each user is only allowed to activate ONE (1) token at any time.

New user can download OCBC Malaysia Business Mobile Banking app and activate OCBC OneToken. For organization that opted for hardware tokens, the new tokens in the OCBC Velocity Starter Kit are not pre-assigned. Each user can choose any one of the new tokens to complete a one-time registration and activation process upon first login.

Thereafter, the token is unique to the user who registered and activated the token.

Sharing a Token

It is not possible to share a token. Once a token has been registered to a user, the correct device must be used for login, otherwise the login will fail.

The token cannot be registered to another OCBC Velocity user. This protects and ensures the integrity of each user’s access to OCBC Velocity.

Mixed up Tokens

Each token has got its own unique serial number - on the back of the hardware token, or automatically assigned for user using OCBC OneToken.

Once a user has completed the one-time registration for their token, their user name/ ID will be registered to that token making this token unique to the user. The token cannot be registered to another OCBC Velocity user. This protects and ensures the integrity of each user's access to OCBC Velocity.

If the tokens have already been registered to their respective users, the correct device must be used for login, otherwise the login will fail.

For assistance, please call us at (603) 8317 5200 from Monday to Friday, 9am to 6pm (excluding public holidays), or send us email at bbcsc@ocbc.com.

Using the Token overseas

Yes you can use it overseas. The tokens have been designed to ensure that you will be able to use it anywhere even without internet connection. For security reasons, we recommend that you keep your token with you at all times and do not share your OCBC OneToken PIN with anyone.

Faulty/ Lost of Hardware Token

Faulty/ Lost of Hardware Token

All users are required to use either a hardware token or OCBC OneToken to login to OCBC Velocity or the OCBC Malaysia Business Mobile Banking app.

Steps you need to take:

  1. Fill up the Manage Velocity@Account form and tick “Switch to OCBC OneToken” under section “III. Replace Token”. Submit the completed form to the nearest OCBC branch. OCBC OneToken will be granted to the user 3 working days after the bank receives the completed form.
  2. After 3 working days, download the OCBC Malaysia Business Mobile Banking app on your mobile device.
  3. Log in to the mobile app with your credentials. When prompted for an OTP, click on “Login using SMS” and enter the OTP received.
  4. At the Activate OneToken screen, click on “Activate Now”. Follow the rest of the instructions that appear on your screen to set up OCBC OneToken on your mobile device.