How to Approve an Online Card Payment with OCBC OneToken (3D-Secure)
Authenticate an online / e-commerce card payment with OCBC — approve it by push notification with OneToken in the OCBC app, or with an SMS OTP.
SingaporeAgent guide. Use these steps to walk the client through the process — the screenshots show exactly what they’ll see on screen.
When the client pays online at a 3D-Secure merchant, the payment is authenticated with OCBC OneToken. They approve it either by a push notification in the OCBC app, or with a one-time password (OTP) sent by SMS. Make sure OneToken is activated and push notifications are enabled for the OCBC app.
Before you start
- The OCBC app installed, with OneToken activated and push notifications enabled
- A stable network connection
- The client's mobile number registered with OCBC
💡 Tip: Always verify the merchant name and amount before approving. Even with OneToken active, some merchants still require an SMS OTP. If push notifications are off, open the OCBC app → More → OneToken → One Time Password to generate an OTP manually.
Frequently asked questions
The client didn't get a push notification — what now?
Check that OneToken is activated, push notifications are enabled for the OCBC app, and there's network signal. They can authenticate with the SMS OTP, or generate a manual OTP in the app instead.
- 1
Make the purchase
Complete the payment at a 3D-Secure merchant — OCBC sends a push notification.
- 2
Open the notification
Tap the push notification to open the OCBC app.
- 3
Confirm
Check the merchant name and amount, then tap "Confirm" to authorise the payment.
- 1
Get the OTP
If the merchant requires it, an OTP is sent by SMS to the registered mobile number.
- 2
Enter and submit
Check the merchant and amount, enter the OTP and submit.
Reference for assisting clients. Bank screens, steps and limits change often — always confirm the current process with OCBC Bank before advising the client.