CIMB To Require Biometric SecureTAC Approvals Starting 19 September 2026

CIMB will begin requiring biometric authentication or device passcode for approving SecureTAC transactions from 19 September 2026, eliminating passwords as an authentication method. Customers can use Face ID, fingerprint, or device passcode via the CIMB OCTO app to verify SecureTAC requests. When initiating a transaction on CIMB Clicks Web or a merchant site, a SecureTAC notification appears on the primary device linked to the CIMB OCTO app, displaying transaction details for approval or rejection.

If approved, identity verification is necessary using biometric methods or device passcode. Non-enabled authentication methods will trigger an error message requiring setup before retrying the transaction. This change follows CIMB's January 2026 introduction of mandatory SecureTAC approvals for selected transactions, which now applies to all transactions through CIMB Clicks Web and merchant websites.

Customers are advised to enable Face ID, fingerprint, or device passcode on their primary device and the CIMB OCTO app before the new requirement takes effect. A failed SecureTAC approval does not suspend Clicks ID or deduct funds.