BSN Replaces SMS OTP With BSNSecure For Online Payments

Bank Simpanan Nasional (BSN) is officially phasing out SMS One-Time Password (OTP) verification in favour of BSNSecure for authorising online payments in Malaysia. The transition takes effect starting this December, requiring customers to update their BSN mobile banking application to maintain access to secure transaction approvals. The move eliminates vulnerability to SMS-based interception and aligns with broader financial security measures across local banking institutions. Online banking users who do not update their mobile application face disruptions to payment authorisations once the legacy SMS OTP channel is retired.

Key Facts

The table below details verified technical and implementation facts regarding the retirement of SMS OTP by BSN. Effective December, the bank replaces telecommunication passcodes with the in-app BSNSecure authentication framework for all online payment approvals, mandating immediate mobile application updates across the existing Malaysian user base.

BSN will replace SMS OTP with BSNSecure across its online payment systems starting this December.

Why Is BSN Phasing Out SMS OTP for BSNSecure?

BSN is replacing SMS OTP with BSNSecure to strengthen online payment security across its digital channels starting this December. The shift moves transaction authentication directly into the official BSN mobile banking application, preventing common vulnerabilities associated with cellular SMS delivery. Customers must update their mobile app to keep all digital banking transactions operational.

The decommissioning of SMS-delivered passcodes targets fraudulent interceptions by confining approval prompts to authenticated mobile hardware. Under the new protocol, verification requests route exclusively through the bank's dedicated mobile software. BSN customers must update their mobile banking applications before December to ensure uninterrupted payment authorisation.

How Do Customers Prepare for the BSNSecure Transition?

Customers must update the official BSN mobile banking application on their smartphones ahead of the December transition window. Performing the application update ensures the device can receive BSNSecure authorisation prompts directly. Failing to upgrade the application will leave account holders unable to authenticate and complete online payments once SMS OTP support terminates.

The verification switchover requires no secondary hardware, relying entirely on the updated smartphone application. Users should verify app updates through official mobile storefronts to ensure compatibility with incoming security protocols. Online payments will require authentication exclusively via BSNSecure rather than SMS passcodes starting this December.

What It Means for Malaysian Buyers

Malaysian account holders using BSN online banking must transition to app-based authorisation before December to avoid transaction disruptions. The mandate applies to all online payments processed through the institution, requiring immediate software updates on user devices. This change directly impacts day-to-day digital retail transactions, bill settlements, and web-based merchant checkouts nationwide.

For BSN accountholders in Malaysia, the retirement of SMS OTP requires active smartphone app management. While app-based authentication eliminates transmission lags and telco network dependencies, users without compatible smartphones or updated applications will face payment processing lockouts. BSN account holders must rely on the BSNSecure app interface for all online payment approvals starting this December.

Common Questions

This section addresses essential operational queries regarding BSN terminating SMS OTP support in favour of BSNSecure authentication starting this December. Account holders must understand the specific transition timelines, necessary mobile banking application upgrades, and potential transaction failures that arise if devices remain unconfigured for the new security protocol.

When does BSN stop using SMS OTP for online payments?

BSN will phase out SMS OTP verification starting this December across all online payment facilities. From this date onwards, account holders must approve transactions via the integrated BSNSecure system within the mobile banking app rather than receiving numerical passcodes through standard cellular telecommunication networks.

What action must BSN customers take before December?

Customers must update their existing BSN mobile banking application to the latest version available on official app platforms. Updating the software ensures the device registers BSNSecure capabilities, allowing online transaction prompts to display and authorise securely without relying on legacy telecommunication SMS channels.

Will online payments work without the updated BSN mobile app?

Online payment transactions will fail to process if the BSN mobile banking app is not updated prior to December. Because the bank is fully decommissioning SMS OTP delivery, BSNSecure represents the exclusive authentication mechanism for completing web-based merchant checkouts and online banking transfers.

BSNSecure becomes the mandatory verification method for all BSN online payments starting this December.

Sources and Methodology

This dispatch derives its factual baseline from Lowyat.NET reporting on BSN digital banking infrastructure, verified in November 2026. Editorial verification confirmed the planned phase-out of SMS OTP in favour of BSNSecure starting December. No unstated technical specifications, pricing figures, or external financial projections were introduced into this report.

Primary reference: Lowyat.NET (https://www.lowyat.net/2026/409611/bsn-sms-otp-bsnsecure/). No currency conversions were required as no financial pricing figures were present in the source material. All details reflect verified publication data concerning BSN payment security protocols.