Smarter Safer Approvals - Upgrade from SMS OTP

Cyber threats are evolving rapidly, and traditional one-time passwords (OTPs) are no longer enough to keep advanced hackers at bay. Your financial safety is our absolute priority, which is why we upgraded your account with a multi-layered defense system.

Your RCBC Pulz app has been updated to replace SMS OTPs with biometrics (Face ID or fingerprint) and in-app push prompts for authorizing select transactions.

Replacing SMS OTPs with biometric authentication provides stronger protection against unauthorized transactions and helps better secure your account. This ensures that no transaction will proceed unless you personally approve it.

Follow these easy steps to activate this security feature:

STEP 01:

Enable Biometrics and In-App Notifications on your device (Note to creatives, we need to revise the current visuals to clearly communicate the steps per device)

iOS Devices

Android Devices

BIOMETRICS


  • Go to Settings > Face ID & Passcode (or Touch ID & Passcode).

  • Ensure that iPhone Unlock is toggled ON

BIOMETRICS


  • Go to Settings > Security and Privacy > Biometrics. 

  • Select Fingerprint Unlock or Face Unlock. Register your Face or Fingerprint data if you haven't already.

IN-APP NOTIFICATIONS


  • Go to Settings > Notifications > find the RCBC Pulz app

  • Ensure that Allow Notifications is toggled ON

IN-APP NOTIFICATIONS


  • Go to Settings > Notifications > App notifications, find the RCBC Pulz app

  • Ensure the Notifications is switched ON

 

STEP 02:

Enable Biometrics in the RCBC Pulz app

  • Log-in to your RCBC Pulz app
  • Go to Security at the bottom navigation bar
  • Ensure that Biometrics is toggled ON

Activating these features instantly protects your account against credential theft and phishing scams, keeping your hard-earned money exactly where it belongs—safe with you.

---------------------------------------------------------------------------------------------------------------

I. Understanding the Security Upgrade

1. What is the biggest change in how I log in and approve transactions?

The most significant change is that the RCBC Pulz app now uses security features built directly into your smartphone/device to verify your identity. This process is faster and significantly safer than waiting for and manually typing a text message code (SMS OTP) for every transaction.

2. Why are you shifting away from SMS OTPs?

SMS text messages are vulnerable to sophisticated cyber-attacks, such as "SIM swapping," where criminals intercept your codes. Our new system uses a multi-layered defense tied specifically to your physical smartphone/device. This makes it virtually impossible for remote attackers to access your account without having your actual smartphone/device in their hand.

3. How do these new features protect my account?

We have created a powerful defense through:

  • Unique Device Identification: Your account is "bound" to your trusted smartphone/device. Even if someone steals your password, they will be blocked if they try to log in from an unauthorized smartphone/device.

  • Convenient Verification: Instead of typing codes, you simply confirm a Push Prompt or use your unique fingerprint/face scan.

4. Is the bank stopping the use of SMS OTPs entirely?

We are significantly reducing our reliance on them. Biometrics (Face ID/Fingerprint) and Push Prompts are now the primary methods for daily banking. While SMS OTPs may still be used for specific non-transactional actions like enrollment or web application logins, they are no longer the standard for daily activities.

---------------------------------------------------------------------------------------------------------------

II. Setting Up Your Security

5. How do I set up Device Binding?

Device binding happens automatically when you register your primary smartphone/device. Please note that registering a new smartphone/device will automatically deregister and replace your old smartphone/device. To register a new device please follow the step-by-step process in question #8 of the RCBC Pulz Single Device Access FAQ. 

6. How do I enable Biometric login?

You can enable this directly within the RCBC Pulz app:

  1. Log in on your registered smartphone/device.

  2. Navigate to the Security tab at the bottom of the screen.

  3. Toggle the Biometrics switch to ON.

    • Note: The app uses the secure data already stored in your smartphone/device’s hardware.

7. How do Push Prompts work?

If Biometrics are not enabled and you perform a sensitive action (like a high-value transaction), a notification will appear on your screen:

  • Review the details (Name of Transaction, Date & Time).

  • Simply tap "Approve" or "Reject."

  • The transaction completes securely in seconds—no SMS OTP required.

---------------------------------------------------------------------------------------------------------------

III. Troubleshooting & Recovery

8. What if I lose my smartphone/device or get a new smartphone/device?

The system is designed to handle this securely:

  1. Install RCBC Pulz on your new smartphone/device.

  2. Upon login, the app will identify the new smartphone/device and guide you through the Secure Device Switching process.

  3. Once the new smartphone/device is approved, the old smartphone/device is instantly deactivated.

Note: To update your mobile number for the switching of device, please visit an RCBC branch or fill out the CIU form online

9. What if I don't receive a Push Prompt?

  • Check Settings: Ensure "Notifications" are turned ON for RCBC Pulz in your smartphone/device’s system settings.

  • In-App Check: If you don't see a notification, open the app; the prompt will usually appear as an In-App Notification push prompt on the home screen.

10. Can I still use SMS OTPs if I can't use Biometrics?

  • Mobile App: Yes, for non-transactional features like enrollment.

  • Web App: Verification will be routed through either an SMS OTP or a Push Prompt based on your active security profile.

  • Fallback: If neither Biometrics nor SMS can be used, a Push Prompt will be sent to your registered smartphone/device as the primary verification method.

11. What if my notifications are turned off?

Transactions cannot be authorized without push notifications enabled. If you initiate a transaction while notifications are disabled, you will be prompted to update your device settings before you can proceed. 

12. How do I ensure I am fully protected?

To take full advantage of this defense:

  1. Register your primary smartphone/device (Refer to the Single Device Policy).

  2. Enable Biometrics and Notifications in both your smartphone/device’s system settings and the RCBC Pulz app.

---------------------------------------------------------------------------------------------------------------

IV. Account Enrollment Changes

13. Can I still use the app during the 24-hour holding period?

Yes, you can access your Dashboard to view your accounts. However, all transactional features will be temporarily disabled until the 24-hour period ends.

V. Huawei Section:

14. How does the security upgrade differ for Huawei devices compared to iOS and Android?

While the experience on iOS and Android devices remains seamless, there is a slight difference for Huawei users:

  • Security Upgraded Features: For new security features, push prompts serve as the primary authentication method. Biometrics may only be available after you have already logged in.
  • Existing Features: All standard features, including OTP and existing biometric functionality, remain unchanged.