UAE Banks To End SMS And Email OTPs By March 2026

Currently, when people do online banking, they often receive a one-time password (OTP) on their mobile phone through SMS or on their email. They use this OTP to complete the transaction safely. But now, the UAE Central Bank has said that banks must stop using SMS and email OTPs. Instead, they must move to using app-based authentication.

This means that when you want to transfer money or pay a bill, you will no longer get a code by SMS or email. You will need to use your bank’s app to confirm the transaction securely within the app itself.

Stay informed with the latest news. Follow DXB News Network on WhatsApp Channel 

Why Are Banks Doing This?

The main reason for this big change is security. Cybercriminals have been finding ways to steal OTPs sent through SMS or email. Some common tricks they use include:

• SIM swapping: This is when someone tricks the mobile company to give them your phone number. Then they receive your OTPs and steal your money.

• Phishing: This is when you get fake messages or emails that ask for your OTPs. If you share them, criminals can misuse your bank account.

Because of these risks, SMS and email OTPs are not fully safe anymore. The new app-based authentication will be much more secure because it works directly inside your bank’s mobile app with extra safety features.

When Will This Change Happen?

The UAE Central Bank has given banks time until March 2026 to fully stop using SMS and email OTPs. However, the process will start from Friday, July 25, 2025. It will happen slowly so that customers have time to adjust to the new system.

Here is the timeline:

• From July 25, 2025: Banks will start introducing app-based authentication.

• Until March 2026: Both SMS/email OTPs and app-based authentication will be available to some customers during the transition.

• By March 2026: SMS and email OTPs will be stopped completely for all customers.

What Did The Banks Say?

A spokesperson from one of the banks said: “As per the directives issued by the UAE Central Bank, the practice of receiving OTPs via SMS or email will be phased out. Customers can now complete online transactions easily by selecting the ‘Authentication via App’ feature in their bank’s smart application.”

This means you should download your bank’s app, update it to the latest version, and learn how to use the in-app authentication. The banks are ready to help customers with this change.

What Is App-Based Authentication?

App-based authentication means you will confirm your transactions within your bank’s app itself. Here is how it usually works:

1. You log in to your bank app.

2. You make a transaction, such as sending money to someone.

3. Instead of receiving an OTP by SMS or email, the app will ask you to confirm the transaction inside the app. This may be through:

   • A notification that you tap to approve

   • Face recognition or fingerprint

   • A special PIN or password set within the app

This method is safer because:

• It is connected directly to your bank app, which has advanced security.

• Even if someone steals your phone number, they cannot access your bank app without your password, fingerprint, or face scan.

How Will This Affect Customers?

For customers who are used to SMS OTPs, this change may take some time to get used to. But banks say this is for the safety of all users. Here are some points customers need to remember:

• Update your bank app: Make sure your app is the latest version to use the new feature.

• Learn how to authenticate: Banks will guide you on how to use the in-app authentication. Follow their instructions carefully.

• Stay alert: Do not share your bank app password with anyone. Always keep your phone locked when not using it.

Part Of UAE’s Digital Transformation

This change is part of the UAE government’s plan to make banking safer and more modern. The UAE is working towards becoming a smart nation with strong digital systems in every sector, including banking.

The UAE Central Bank has also been introducing other technology-focused steps, like setting up a ‘sovereign AI’ company with tech firm Presight. This shows that the country wants to stay ahead in digital innovation.

Will OTPs Be Gone Immediately?

No. OTPs via SMS and email will not disappear immediately. Banks will continue to provide them for some customers during the transition period until March 2026. But after that, they will not be available.

What Should Customers Do Now?

Here are simple steps you can follow:

1. Check your bank app: See if it has an update for app-based authentication.

2. Enable app authentication: Go to your app settings and activate this feature if available.

3. Learn the process: Banks will share videos and guides. Read or watch them to understand how to use this new method.

4. Keep your app password safe: Do not write it down where people can see it.

5. Contact your bank if confused: Customer care teams are ready to help you during this change.

The UAE is making this move to ensure that customers’ money stays safe from cybercriminals. While using OTPs via SMS and email was easy, it had some risks. With app-based authentication, your bank transactions will be much more secure.

This change is part of a bigger plan to modernise the country’s financial system and protect customers better. So, it is important for everyone to understand these new changes and adapt to them as soon as possible.