No More OTPs for UAE Banking: Guide to New 2026 Payment System

UAE phases out SMS OTPs by March 2026 — how the new in-app, biometric payment approval flow works.

Why the Change?

UAE banks are phasing out SMS One-Time Passwords (OTPs) for online transactions and replacing them with in-app transaction approvals. This shift aims to provide faster and more secure authentication for customers.

How the New System Works

The traditional SMS OTP system, while once revolutionary, has become increasingly vulnerable to sophisticated cyber threats. Rising incidents of phishing attacks, SIM-swap fraud, and OTP interception have prompted UAE's financial regulators to mandate a more robust security framework.

Implementation Timeline

The new in-app authentication system leverages push notifications, biometrics, and smart pass PINs to create a multi-layered security approach that is both more convenient and significantly harder for fraudsters to compromise.

Key Takeaways

Here's a step-by-step guide to the new payment approval process:

Authorisation Prompt

When you initiate a payment, an authorisation prompt appears on the payment screen. Instead of waiting for an SMS, you'll be directed to verify the transaction through your banking app.

SMS Alert

You'll receive an SMS alert notifying you of the pending transaction. This alert directs you to open your banking app to complete the verification.

Pending Payment Notification

Upon opening your banking app, you'll see a pending payment notification. This displays all transaction details including the merchant name, amount, and timestamp.

Review Window

A review window opens with complete transaction details. You have a 2-minute timer to review and approve or reject the transaction. This time-limited window adds an extra layer of security.

Final Approval

To complete the transaction, enter your smart pass PIN or use biometric authentication (fingerprint or facial recognition). Once approved, the payment is processed immediately.

Enhanced Security

March 2026: Full discontinuation of SMS OTPs expected

Faster Processing

In-app authentication is significantly harder to intercept compared to SMS OTPs, reducing fraud risk.

Better Control

No more waiting for SMS delivery delays – approvals happen instantly through push notifications.

Biometric Options

Contact GSS Group or email info@gsstechgroup.com.