Leveling Up Security – Beyond the SMS OTP

(Article as of December 17, 2025)

We are upgrading your security to protect against modern cyber threats, creating a safer digital experience by shifting away from reliance on codes sent via text message (SMS OTPs) for daily transactions. We will soon use stronger security features built directly into your mobile application and registered phone.

Understanding the Security Upgrade

1. What is the biggest change for how I log in and approve transactions?
The biggest change is that your RCBC Pulz app will soon use security features built directly into your phone to verify your identity and approve transactions. This is a much faster and safer process than having to wait for and manually type in a text message code every time.

2. Why are you using these new security methods instead of relying on SMS OTPs?
SMS text messages are vulnerable to sophisticated cyber-attacks, such as criminals stealing your phone number to intercept your codes. Our new security features use a multi-layered defense that is tied directly to your physical phone, making it virtually impossible for remote attackers to gain access or approve transactions without having your device in hand.

3. How do the new security features protect my account?
These enhanced features create a powerful, multi-layered defense:

• Unique Device Identification: Your account is linked to your trusted phone. Logins attempted from any unauthorized device will be blocked, even if your password is known.
• Convenient Verification: Instead of manually typing codes, you will verify your identity using simple steps, such as confirming a notification sent instantly to your phone or using your unique fingerprint/face scan.

Setting Up the New Authentication Methods

1. How do I set up Device Binding?
Device binding automatically happens when registering your primary device. Registering a new device automatically deregisters and replaces the old one. To register a new device please follow the step-by-step process in question #8 of the RCBC Pulz Single Device Access FAQ.

2. How do I enable Biometric login (Face ID/Fingerprint)?
This can be enabled directly within the app's settings:

• Login to the RCBC Pulz App on your registered device.
• Navigate to the Security tab in the navigation bar on the bottom of the screen.
• Toggle the switch for Biometrics.

The app will use the biometric data already stored and secured within your phone's hardware.

3. How do Push Prompts work for transactions?
When you initiate a sensitive action (like removing your registered device, high-value transactions, etc.) and if biometrics is not enabled:

• A push prompt will instantly appear on your registered device asking if you approve or reject this action.
• The notification includes the location and time of the action being done.
• Review the action or transaction details (Recipient, Amount, etc.).
• The transaction is completed in seconds without typing any code.

Troubleshooting and Recovery

1. What if I lose my phone or get a new one?
This is a key scenario that the new system handles securely:

• You will need to install the RCBC Pulz app on your new phone.
• When you attempt to log in, the app will recognize it as a new device.
• You will be guided through a secure device switching process.
• Once the new device is approved, the old device is instantly deactivated, preventing unauthorized access.

 

2. What if I don't receive the Push Prompt?
First, check your phone's general settings:

• Ensure Notifications are turned ON for the banking app in your phone's system settings.
• If you still don't see it, open the app itself. The prompt will usually appear on the home screen as an In-App Notification.

 

3. Can I still use SMS OTPs if I can't use Biometrics?
For the mobile application, yes you may use SMS OTPs for non-transactional features such as enrollment. However, the use of SMS OTPs remains unchanged for the web application. If biometrics and SMS OTPs cannot be used, a push prompt will be displayed on the registered device instead for the verification process.

4. What if I have my notifications turned off for RCBC Pulz? How will I be able to use the other features/transactions in RCBC Pulz

If Notifications are disabled and you are currently about to use the feature/transaction, a popup will appear in which it will redirect you to your phone's settings to turn on RCBC Pulz notification.

5. How do I enable Biometrics (Face/Fingerprint ID) and Push Notifications for the app?

For iPhone

1. Biometrics: Go to Settings > Face ID & Passcode (or Touch ID & Passcode). Enter your phone PIN and ensure "iPhone Unlock" is on. Then, open our app, go to settings/profile, and toggle on Face ID/Touch ID.
2. Notifications: Go to Settings > Notifications. Scroll down to find our app, tap it, and toggle Allow Notifications to ON.

For Android

1. Biometrics: Go to Settings > Security and privacy > Biometrics. Select "Face recognition" or "Fingerprints" to register your data. Once set, open our app's settings to enable biometric login.
2. Notifications: Go to Settings > Notifications > App notifications. Find our app in the list and tap the switch to turn it ON.

 

6. All things considered, what do I need to do to ensure I can take full advantage of this multi-layered defense feature in RCBC Pulz app?

First, nominate and register your primary device for RCBC Pulz. More information on the Single Device Policy can be found here. https://www.rcbc.com/rcbc-pulz-will-move-to-single-device-access-effective-january-5-2026.

Second, we strongly recommend you enable both Biometrics (Face/Touch ID) and Push Notifications in both places: your Device Settings and the RCBC Pulz App itself. Refer to question #How do I enable Biometrics (Face/Fingerprint ID) and Push Notifications for the app? of this FAQ for instructions on how to turn these on your device settings.