How UAE Bank App Approval Works at Checkout
With SMS codes being retired, paying online or logging in at a UAE bank now typically means approving the action in your banking app. The method turns your registered phone, the app, a PIN and your face or fingerprint into the key, which makes life harder for fraudsters who rely on stolen text-message codes.
The checkout flow
- You pay on a merchant’s website.
- A notification arrives on the phone registered with your bank.
- You open the app and review the transaction details.
- You approve it with a biometric check, such as facial recognition or a fingerprint, and your in-app PIN.
- You return to the merchant’s site to finish the payment.
Because the process needs your registered device and the banking app present in the authentication chain, a code intercepted elsewhere is not enough on its own.
Why you still get texts
A text message still arrives after a successful login or requested transaction. These are alerts, not approval codes. They give you a chance to review the activity and approve or reject it from within the app. The Central Bank requires licensed institutions to keep customers informed of account movements by text or email as they happen, while details remain available through phone and internet banking.
The fraud it targets
The layered approach is aimed at SIM card swapping, phishing, social engineering and intercepted verification codes. Central Bank guidance on fraud also points to capabilities such as detecting active calls and screen sharing, which scammers use to coach victims through approvals.
Only approve a request you started yourself, and never share app PINs or approve a prompt while someone on a call tells you to. For the rollout timeline and how to enable the feature, read our guide on the end of SMS OTPs at UAE banks.
