InApp OTP is a push notification that allows you to receive your 6-digit OTP via the HLB Connect App for the secured online transactions.

Security: InApp OTP is a more secure way of authentication and less likely to be intercepted as compared to SMS OTP. You will only be able to receive the InApp OTP from the registered device.
 

This is part of our continuous efforts to safeguard your online transaction against fraud in line with the industry’s direction to combat financial scams.

All Debit and credit cardholders. Cardholders who has HLB Connect App will receive OTP via InApp and customer who does not have HLB Connect App will continue to receive OTP via SMS.

This only impacts the secured online transactions. All other transactions such as point of sales transactions & contactless transactions are not affected by this initiative.

Customers will receive OTP via the HLB Connect App if you are a HLB Connect App user and have acknowledged & agreed in receiving OTP via push notification.

If you are an existing Connect App user and when you log-in to your Connect App, a message will be prompted, Card OTP >” We have enhanced your banking security by delivering the OTP directly to this app instead of SMS. This new method is not only faster but also much more secure, ensuring that only you have access to your OTP codes. Simply tap on the bell icon at the top left (Inbox) and select ‘Card OTP’ to view.”
 

No, there will be no charges incurred.

If you accidentally closed the app before pressing “Next”, you will continue to see the same message as per FAQ 5.

InApp OTP cannot be deactivated as it is part of our security measures to ensure a secure banking environment for you.

• If you uninstall without removing/unbinding the device from HLB Connect App, you will continue to receive OTP via InApp. 
• To remove/unbind the device from your HLB Connect, please follow the below steps:

i. Log in to your current device (the one where you have enabled Card OTP).

ii. Tap on ‘Menu’ > ‘App Settings’ > ‘Devices & Notifications’.

iii. Tap on ‘Remove’ button next to your ‘Current Device’.

· If you wish to remain with SMS OTP, please contact Hong Leong Contact Centre (HLCC). We highly recommend that you continue to use InApp OTP to safeguard your secured online transaction

If you did not receive any InApp OTP, you will have an option to click "Resend OTP". InApp OTP can only be resent a maximum of 3 times per transaction. More than that the transaction will be cancelled.
 

You will not receive SMS OTP as the bank has migrated all OTP to Card OTP in HLB Connect App.

In the event where the system detects that the InApp OTP was not sent during system maintenance, SMS OTP will be sent to your registered mobile number to avoid any disruption in making your secured online transaction.

No. However, once your internet connection resumes, you may find your OTP in the Card OTP’s inbox, which you can easily access by tapping the “Bell Icon” button on the top left of the homepage.

Yes, you will still receive the InApp OTP. All of your OTP’s will be stored in the Card OTP’s inbox, which you can easily access by pressing the “Bell Icon” button on the top left of the homepage.

No, supplementary cardholder will receive their InApp OTP to your own HLB Connect App as long as the supplementary cardholder has a Connect profile/user ID.