Help & Support
Digital Banking - OCBC OneToken
-
What is OCBC OneToken?
OCBC OneToken is a digital token installed in your mobile phone to replace your SMS OTP for all Internet and Mobile Banking (Online Banking) services. This function is only available in the OCBC Malaysia Mobile Banking app. -
What are the benefits of using OneToken?
Your banking needs in one device. The OCBC OneToken can be accessed anywhere you go, without the hassle of additional devices.
OCBC OneToken can only be registered to one device at a time. Only OTPs generated on your registered device can authorise your transactions.
OneToken integrates seamlessly with the OCBC Malaysia Mobile Banking app. You can easily authenticate your transactions with just a few taps on your mobile device.
-
How to activate OneToken?
- Launch your OCBC Malaysia Mobile Banking app.
- Key in your Login ID.
- Confirm your security image and phrase.
- Key in your Password.
- Tap on ‘Request activation’ when prompted to set up OCBC OneToken.
- Tap on ‘Confirm’ to confirm your mobile number.
- Expect a call from us within 48 hours from your activation request as your OCBC OneToken now requires further confirmation by our bank. Or you may visit our branch for assistance.
Note: For better security of your accounts, you can only log in to OCBC Online Banking after 12 hours from the successful activation of your OneToken.
For more details, please refer to the OCBC OneToken page.
-
How do I access OCBC OneToken?
- Launch OCBC Malaysia Mobile Banking app.
- Tap on the 'OneToken' icon on the login screen.
- For Transactions of less than RM10,000, select 'One Time Password' for 6-digit OTP.
- For Transactions of RM10,000 and above, select 'Challenge Code' to retrieve your 6-digit OTP and proceed with the transaction.
-
If I do not wish to opt in for OCBC OneToken and would like to remain on SMS OTP, can I still perform my online banking activities?
No, you are required to activate OCBC OneToken to perform your online banking activities. -
How many devices can I activate my OCBC OneToken on?
For the security of your accounts, you can only activate OCBC OneToken on ONE phone at a time. -
What happens to my OCBC OneToken if I change/lose my phone?
Your OCBC Malaysia Mobile Banking app is still secure and accessible only with your Login ID and password.
- Just download the OCBC Malaysia Mobile Banking app on your new mobile phone.
- Log in using your Login ID and Password and register for OCBC OneToken using your new device.
- Once this is done, the OCBC OneToken will be automatically disabled on your old mobile phone.
-
How do I authorise online transactions using OCBC OneToken?
For most transactions, you will still be required to enter a 6-digit OTP manually.
However, for selected transaction types — specifically:
- Funds Transfer
- Financial Process Exchange (FPX)
- DuitNow Online Banking & Wallets (DOBW)
- DuitNow QR
You will receive a push notification on your registered mobile device.
Simply tap the notification to open the OCBC Malaysia Mobile Banking app, then tap ‘Approve’ to authorise the transaction.
-
Why am I not receiving any push notifications?
Please ensure that you:
- Your device is connected to the Internet;
- Your device is not on ‘Do Not Disturb’ mode and
- You have enabled push notifications for OCBC Malaysia Mobile Banking app in your device settings.
-
I accidentally deleted the push notification. What should I do?
Go back to the screen where you were asked to authorise the transaction, then click on ‘Resend a new notification’. You can request this up to 3 times, with a 15-second interval between attempts.
-
How long is the push notification valid for authorising a transaction?
The push notification sent to your mobile device is valid for 3 minutes.
You must approve or reject the transaction within this time frame.
If the notification expires, go back to the screen where you were asked to authorise the transaction, then click on ‘Resend a new notification’ to request a new one.