UAE banks to stop OTPs via SMS, email from July 25

Starting Friday, July 25, 2025, banks operating in the UAE will stop sending one-time passwords (OTPs) to customers through SMS or email for all electronic transactions and financial transfers. This includes both domestic and international transactions.

According to an official document, the decision follows directives issued by the UAE Central Bank. Customers are now required to use a smart mobile application for verification by selecting the 'Authentication via App' feature.

This move is part of the UAE’s broader digital transformation strategy aimed at modernising the financial infrastructure and increasing trust in digital banking services. Banks are encouraging users to update their mobile apps and begin using the in-app authentication system.

While the change may take time for some customers to adapt, it is expected to enhance security and reduce risks linked to traditional OTP methods. For now, OTPs via SMS and email will still be available to select users during a transition period. However, these methods will be fully phased out over the next 20 months.

Banks are advising customers to make the switch early to avoid disruptions and ensure continued access to secure digital transactions.