Security


Sparkle Icon NEW FEATURE
Popular keywords:

Two-factor Authentication


To safeguard the security of your online banking account, we have implemented upgraded login security measures for DBS digibank HK and DBS iBanking. After entering your username and password or using biometric login when logging in to online banking, you must use two-factor authentication (2FA) methods via mobile or Secure device for identification. This provides extra protection for your account.
  1. Enter your username and password
  2. If you have set up the Digital Token on your device, you can log in to DBS digibank HK seamlessly
  3. If you have not set up the Digital Token on your device, you need to log in to DBS digibank HK using SMS OTP or your Secure Device
  4. To log in according to step 3, please enter the One Time Password sent to you via SMS or the Secure Device PIN to complete two-factor authenticate.

New Device Detection


A new measure to protect you against unauthorised access to DBS digibank HK

1. What is New Device Detection notification?

New Device Detection is a security measure to notify customers when we detect a new mobile device being used for the first time to log in to DBS digibank HK.




2. Can I opt out of the New Device Detection notifications?

Customers cannot opt out of the New Device Detection notifications as this measure is intended to help customers detect any unauthorised login from a new mobile device.


3. Is it possible for customers to receive New Device Detection notifications even when they are using a device that they have used to log in to DBS digibank HK before?

There are 3 possibilities:

  1. The Bank's New Device Detection system ("System ") captures customers' mobile device information for DBS digibank HK logins from 3 Sep 2023 and onwards. For DBS digibank HK logins before 3 Sep 2023, the mobile device information would not be in the System's record and therefore, any subsequent logins would trigger the New Device Detection notification.


  2. The System captures customers' last 5 mobile devices used to log in to DBS digibank HK. If the mobile device used for DBS digibank HK login is not one of those 5 devices, this will trigger the New Device Detection notification as well


  3. The customer's last DBS digibank HK login is more than 2 years ago.

Secure device


The secure device, on top of the current SMS One Time Password ("SMS OTP"), is implemented as an additional gateway to enhance internet and mobile banking security.

It is designed for tightening the authentication process. For certain internet and mobile banking transactions that require a higher level of authentication, security clearance is further enhanced with the simultaneous use of SMS OTP and Secure Device.

Please click here to find out the mode of authentication required for various types of banking services.

It is free of charge for first time applications for the Secure Device and for replacements due to out of battery. In case of loss, theft or malfunctioning of the Secure Device, a fee of HK$100 will be charged for a replacement of the Secure Device.

The Serial Number is printed at the back of your Secure Device.

After received your secure device, please log in to DBS iBanking and activate it.

You can follow the steps below to activate your secure device:

  1. Login to DBS iBanking
  2. Select “Request” in the top menu, then select “Activate Secure Device”

  3. Enter the 6-digit One Time Password sent to your mobile phone, then click “Login”

  4. Enter the 10-digit Serial Number (excluding the hyphens) which can be found at the back of your new Secure Device

  5. Follow the steps to enter the Secure PIN, then click “Submit”

  6. Activation completed.

If you do not activate the Secure Device, you will not be allowed to perform certain transactions on DBS iBanking. Please click here for details.

If you are an existing DBS iBanking customer, you may request for a Secure Device at any of our branches in Hong Kong or through DBS iBanking (just click on "Request", then "New Secure Device").

For each new DBS iBanking customers, the Secure Device will be sent to you by post.

Each DBS iBanking account can only register for one Secure Device. You cannot apply for more than one Secure Device as back up or share with other customers.

Press and hold "OTP " or "Sign1 "or "Login " to turn on the Secure Device. Press "Login " to turn off the Secure Device.

With the implementation of the Secure Device, depends on the services you selected, you are required to use your Secure Device and / or SMS OTP to authenticate your transactions.

Please click here for more information.

As a form of protection, the Secure Device will automatically power off if not in use after a short period of time.

If the Secure Device is out of battery, you can still log in to DBS iBanking and use SMS OTP but you will not be allowed to perform certain transactions. You may apply a new one without handling fee through DBS iBanking.

Once your new Secure Device has been activated, your old Secure Device will no longer be valid for login or authorizing any transactions on DBS iBanking. You may either discard the deactivated Secure Device yourself or pass it to our branch staff for proper disposal.

If you have entered a wrong number into your Secure Device, press "Login" button to delete your last entry. Press and hold "Login" button to clear all your inputs.

There is no particular usage associated with this button at this moment.

For security reason, if you lost your secure device, please contact our 24-hour Customer Service Hotline at 22908888 to deactivate your lost secure device immediately.

If your secure device is damaged, you could request replacement through DBS iBanking.

If your secure device is damaged, you can request replacement following the steps below:

DBS iBanking (Highly recommend)

  1. Login to DBS iBanking

  2. Select “Request” at right of the top menu

  3. Select “New Secure Device”

  4. Input the “One time password” you received on your phone, then click “ Next”

  5. Select “Replacement”  in Request/Replacement Reason choice, select the request reason “Damage” , then click “Next”

You have successfully requested a new Secure Device.

Note:

  • Replacement, due to damage, will be subject to a HKD$100 fee

    The new secure devices will send to you within one week

Branch

You can go to branch in person to request new secure device

Note:

  • Replacement, due to damage, will be subject to a HKD$100 fee

  • The new secure devices will send to you within one week

If your secure device is out of battery, you can request replacement through DBS iBanking.

Before the secure device is out of battery, there have the sign "BATT" is displayed on the LCD which means the Secure Device will run out of battery soon. You may request for a new Secure Device as replacement by following steps:

DBS iBanking (Highly recommend)

  1. Login to DBS iBanking

  2. Select “Request” at right of the top menu

  3. Select “New Secure Device”

  4. Input the “One time password” you received on your phone, then click “ Next”

  5. Select “Replacement”  in Request/Replacement Reason choice, select the request reason “Battery Flat”, then click “Next”

You have successfully requested a new Secure Device.

Note:

  • The new secure devices will send to you within one week

Branch

You can go to branch in person to request new secure device

Note:

  • The new secure devices will send to you within one week

Digital Token


The Digital Token is a security enhancement, which enables you to use your mobile phone to authenticate all your bank transactions, both online and on your Mobile.

Yes, if you have a physical Secure Device, please keep it securely for backup, such as a login password reset.

The Digital Token increases the security of your DBS digibank HK app with enhanced encryption security and multi-layered protection against malware targeting mobile applications.

Since your Digital Token is linked with your mobile device instead of your SIM card, no special arrangement is needed after you have changed the SIM card or mobile phone number on your device with your registered Digital Token.

If you have changed your mobile phone number, please update the bank records via DBS iBanking. Your Digital Token or a physical Secure Device is required when updating personal information.

For account security purposes, an email OTP will be sent to your email address when you conduct first-time high-risk transactions (e.g. add a payee).

The Digital Token works on any mobile device with iOS 11.0 or higher (for Apple iOS Devices) or Android 6.0 or higher (for Android Devices).

If the Digital Token is not supported on your mobile device, DBS digibank HK app will not display any messages about your Digital Token. Please request a physical Secure Device via DBS iBanking.

For your account security, we suggest you use the latest versions of the operating system, applications and browser.

Your DBS digibank HK app are accessible only with your username and password, or biometrics. If you have lost your mobile device, simply:

Log in to DBS digibank HK app and perform the one-time setup on your new mobile device. Upon setting up your token on a new mobile device, the Digital Token will be automatically disabled on your lost device.

You may also log in to DBS iBanking to deactivate your registered Digital Token.

Alternatively, you may reach out to our 24-Hour Customer Service Hotline on 2290 8888 or any branch to disable your Digital Token immediately.

High-risk transactions include but are not limited to adding a payee, funds transfer to non-registered payee, and updating your personal particulars.

No. For account security purposes, you are only allowed to set up your Digital Token on one mobile device.

For your security, if you have logged in using biometrics, your DBS iBanking password is required as an additional form of authentication for high-risk transactions.

As good practice, you are advised to remove all other stored fingerprints on your mobile device as these can be used to access your mobile banking app.

To ensure you receive timely push notifications each time you transact on internet banking, please enable push notifications in your settings and ensure your mobile device has good network connectivity.

If you do not receive any push notifications, you may simply launch your mobile banking app and there will be screen prompts to guide you to your pending authentications.

If the issue of not prompting any authentication message persists, you may select "Digital Token" from DBS digibank HK app before logging in or restart the application and try again.

Yes, simply launch your DBS digibank HK app and there will be on screen prompts to guide you to your pending authentications.

If the issue of not prompting any authentication message persists, you may select "Digital Token" from DBS digibank HK app before logging in or restart the application and try again.

You can enable push notifications by following steps:

Log in to DBS digibank HK -> Go to "More" -> Select "Research & Marketing Setting" -> Turn on "Push Notification"

You can still use your Secure Device to authenticate the transactions conducted on internet and mobile banking.

A Secure Device is not necessary to set up your Digital Token. You may set up your Digital Token by receiving a One Time Password from your email and SMS.

If you have lost your Secure Device, please reach out to our 24-Hour Customer Service Hotline on 2290 8888 or any branch to disable your Secure Device.

By opting out of Digital Token, you will not be able to perform designated internet and mobile banking transactions.

But you can set this up later by logging in to DBS digibank HK app, and selecting "More" -> "Manage Digital Token" anytime.

The Digital Token works on any mobile device with iOS 11.0 or higher (for Apple iOS Devices) or Android 6.0 or higher (for Android Devices).

For your account security, we suggest you use the latest versions of the operating system, applications and browser.

With your Digital Token, you may update your email address in “Update Personal Details” via DBS iBanking.

However, you will need to verify this once with the additional One Time Password sent to your current email address for the first-time high-risk transaction with Digital Token.

Alert Service


Alert Service provides you with instant notifications of your banking and/or investment activities status. You can choose to be notified by e-mail or Short Messaging Service (SMS) when certain transactions have taken place.

Three types of alerts are available, including:

1. My DBS iBanking Alerts

  • eStatement

  • Update of Personal Details

  • Increase DBS iBanking Daily Limits

  • Funds Transfer to Third Part Accounts

  • PayFast

  • Transfer Settings

  • Bill Payment or e-Bill/e-Donation to Designated Payees

  • Funds Transfer to My Account

  • Bill Payment or e-Bill/ e-Donation

  • e-Bill/ e-Donation Receipt

2. My Financial Management Alerts 

  • Current Account Overdrawn 

  • Cashline Payment Reminder 

  • Credit Card Payment Reminder 

3. My Investment Alerts

  • eAdvice - Wealth Advice

  • eAdvice - Contract Note

 

No, the service is free of charge.

Please check with your mobile phone service provider about the charges for receiving SMS Alerts.

You may not be able to receive Alerts with one of the following reasons:

  1. You have given an invalid e-mail address.

  2. Your e-mail box is full.

  3. You have given an invalid mobile phone number.

Should you have any enquiries, please call our Customer Service Hotline at 2290 8888 (press 6 in main menu).

For SMS Alerts: you can choose to receive in either English or Chinese based on your DBS iBanking logon language.

For e-mail Alerts: you will receive English/Chinese bilingual alerts.

You can subscribe to My Alerts (except the mandatory ones) via DBS iBanking.

To do so:

  1. Select “Manage My Alerts” under “Preference” at the top right corner

  2.  

  3. Enter the 6-digit One Time Password sent to your mobile phone

  4.  

  5. Click “Subscribe” button of the alert you would like to apply

  6.  

  7. Select “Delivery Mode” and “Display Language”, then click “Next”

  8.  

  9. Verify details, and follow the instructions to go through the identity authentication process with your secure device. Click “Submit” after inputting Secure PIN

  10.  

  11. Setting completed.

  12.  

You can change the settings of My Alerts (except the mandatory ones) via DBS iBanking.

To do so:

  1. Select “Manage My Alerts” under “Preference” at the top right corner

  2.  

  3. Enter the 6-digit One Time Password sent to your mobile phone

  4.  

  5. Click “Amend” button corresponding to the alert you would like to change

  6.  

  7. Change “Delivery Mode” or “Display Language”, then click “Next”

  8.  

  9. Verify details, and follow the instructions to go through the identity authentication process with your secure device. Click “Submit” after inputting Secure PIN

  10.  

  11. Setting completed.

  12.  

You can stop My Alerts (except the mandatory ones) via DBS iBanking.

To do so:

  1. Select “Manage My Alerts” under “Preference” at the top right corner

  2. Enter the 6-digit One Time Password sent to your mobile phone

  3. Click “Unsubscribe” button corresponding to the alert you would like to stop

  4. Verify details, and follow the instructions to go through the identity authentication process with your secure device. Click “Submit” after inputting Secure PIN

  5. Setting completed.

SMS Alerts will only be sent to the mobile phone number you have registered for receiving One Time Passwords (OTPs). To change that number, please login DBS iBanking, choose “Preferences” > ”Update Personal Details. Your request will take effect within 3 business days upon our receipt of the completed form.  You may also complete the DBS iBanking Application Form and return it to any of our branches in person. Your request will normally be processed within four business days from our receipt of your duly completed form.

You can use the high risk alert to identify whether the FPS proxy ID (i.e. mobile number / email address / FPS Identifier) / bank account number / Stored Value Facility (SVF) account number is flagged as "High Risk" to avoid any loss of money.

The high risk alert is generated based on information collected from scam reports and recorded in the Scameter of the Hong Kong Police Force. Please contact them at [email protected] if you think the FPS proxy IDs / bank account numbers / SVF account numbers are not tagged correctly.

No, DBS cannot do the deletion. The high risk alert is generated based on information collected from scam reports and recorded in the Scameter of the Hong Kong Police Force. Please contact them at [email protected] if you think the proxy IDs / account numbers are not tagged correctly.

The high risk alert is generated based on information collected from scam reports and recorded in the Scameter of the Hong Kong Police Force. If you suspect a crime case has occurred, please report to the Hong Kong Police Force at a police station or via Hong Kong Police Force e-Report Centre.

No, it is not guaranteed. The high risk alert message will only be shown if the recipient's FPS proxy ID / bank account number / SVF account number is included in the scam reports provided by the Hong Kong Police Force. If there has not been any report to the Police against a particular FPS proxy ID / bank account number / SVF account number, the proxy ID / account number will not be included in the high risk alert.

The FPS proxy IDs / bank account number / SVF account number flagged as "High Risk" in Scameter and included in the high risk alert are based on information collected from scam reports provided by the Hong Kong Police Force. If there has not been any report to the Police against a particular FPS proxy ID / bank account number / SVF account number, the proxy ID / account number will not be included in the high risk alert.

The high risk alert is generated based on information collected from scam reports and recorded in the Scameter of the Hong Kong Police Force. Please visit the webpage of Scameter for more details.

According to the record provided by the Hong Kong Police Force, your FPS proxy ID / bank account number / SVF account number is related to a scam report. Please contact them at [email protected] if you think the FPS proxy ID / bank account number / SVF account number is not tagged correctly.

The high risk alert is generated based on information collected from scam reports provided by the Hong Kong Police Force and updated from time to time on a daily basis. Please check again that the recipient is trustworthy before you proceed with the transaction.

The FPS proxy ID / bank account number / SVF account number flagged as "High Risk" in Scameter and included in the high risk alert are based on information collected from scam reports provided by the Hong Kong Police Force. If there has not been any report to the Police against a particular proxy ID / account number, the proxy ID / account number will not be included in the high risk alert.

You can check from Scameter (cyberdefender.hk) to see if it is flagged as "High Risk". When performing a transaction with use of FPS proxy ID (i.e. mobile number, email address, or FPS Identifier) / bank account / SVF account via DBS iBanking or DBS digibank HK app, a high risk alert message will be displayed for those FPS proxy IDs / bank accounts / SVF accounts flagged in the scam reports provided by the Hong Kong Police Force. You are advised not to make any transactions to the recipient unless you have carefully verified the recipient's identity and ensure that the recipient is trustworthy.

If you suspect you have been scammed, you may visit a police station or the Hong Kong Police Force e-Report Centre to file a report. In tandem, please report the case to our Customer Services Hotline at (852) 2290 8888.

The FPS proxy IDs / bank account number / SVF account number flagged as "High Risk" in Scameter and included in the high risk alert are based on information collected from scam reports provided by the Hong Kong Police Force. If there has not been any report to the Police against a particular FPS proxy ID / account number, the proxy ID / account number will not be included in the high risk alert.

Yes, you can, but please be reminded that the transaction has high risk of fraud. You are advised to always verify the payment details (including the recipient's identity) of every single transaction before making payment.

No result
No results found
Was this information useful?

We welcome your feedback

Information is easy to understand and find
Information is useful to answer your inquiries completely

Latest Offer

DBS e$aver Deposit Promotion ProSaver Account
  • ProSaver Account
    Save towards goal to earn high saving interest rate with flexibility in deposit and withdrawal