UAE Banks Phase Out OTPs, Move to Secure App-Based Verification by 2026

The UAE’s banking sector is preparing to eliminate one-time passwords (OTPs) sent via SMS and email as part of a major shift toward more secure digital authentication. Under new guidelines set by the UAE Central Bank, banks have begun replacing traditional OTP codes with in-app verification methods, such as push notifications and biometric security like fingerprints or facial recognition. This means customers will soon authorise transactions directly through their banking app rather than entering codes from text messages, addressing vulnerabilities like phishing and SIM-swap fraud.

The transition is being rolled out gradually, beginning with some digital and card transactions, and is expected to be fully implemented by March 2026. Leading UAE banks, including Emirates NBD, have already started adopting these new systems, giving customers a more seamless and secure experience with faster approvals and fewer SMS delays. As part of the wider move, users are encouraged to update their mobile banking apps and enable in-app security features ahead of the full phase-out of traditional OTPs.