The change follows instructions from the Central Bank of the UAE (CBUAE) to phase out SMS and email OTPs for customer authentication. Banks began the transition on 25 July 2025, and the Central Bank set 31 March 2026 as the deadline for completing it.
How In-App Payment Approval Works
When you make an online payment, your bank sends an approval request to its mobile app. You open the request, check the merchant and amount, then approve or decline the transaction. If you approve it, the payment proceeds. Requests may expire after a short time, so you might need to restart checkout if you miss the notification.
Banks use different authentication systems. Emirates NBD uses Smart Pass in its ENBD X app, ADCB offers a Secure Digital Token, and Dubai Islamic Bank supports in-app approval using biometric authentication.
To use the system, you may need to update your banking app, register your device and enable the required security settings. Company cards work the same way, so everyone who makes payments for a business needs the banking app set up on their own phone.
Why Banks Stopped Using SMS OTPs
Text message codes can be stolen through SIM-swapping scams or phishing, in which criminals trick customers into sharing their codes. In-app approval reduces these risks by sending the request directly to a registered device. However, it does not eliminate fraud. Scammers may still pose as bank employees and persuade customers to approve transactions they did not initiate.
To stay safe, approve only payments you made yourself and always check the amount and merchant. If you receive a request you don't recognise, decline it and contact your bank directly. Since April 2026, UAE banks have been barred from contacting customers through WhatsApp and other messaging apps, so treat any message claiming to be from your bank on these platforms as suspicious.
Frequently Asked Questions
Can I still receive OTPs by SMS?
Most banks have moved away from SMS OTPs for online card payments. Alternative arrangements may vary by bank, so check with your provider.
Can I approve payments while travelling abroad?
Yes, provided you have an internet connection and access to your banking app. Unlike SMS codes, in-app approvals do not depend on receiving text messages through a foreign mobile network.
What happens if I change my phone?
You may need to register your new device and verify your identity before approving payments. Contact your bank if you need help restoring access.
