Stronger, simpler and smarter banking using Security PIN

A secure and seamless way to authenticate transactions via Mashreq Biz App.

How to register your mobile in a few simple steps:

Important points to remember:
1. Download or update Mashreq Biz App to the latest version. Log in and tap the ‘Increase security’ notification banner, then follow the instructions to register your mobile.
2. Ensure notifications are enabled on your mobile phone to continue approving transactions seamlessly.
3. In case you miss the app notification, open Mashreq Biz App → tap Security (bottom right, pre-login) → Approve transaction.

Benefits of Security PIN:

Enhanced Security

Robust encryption and verification protocols ensure every transaction is secure and protected.

Faster Approvals

Instant transaction approvals with minimal delays and maximum efficiency.

Secured connectivity

Works safely and effortlessly over Wi-Fi or mobile data.

View the Demo

Watch this video for step-by-step creation of Security PIN on Mashreq Biz App.

Watch Video

Frequently asked questions

: We have introduced enhanced, encrypted in-app authentications using Mashreq Biz App. Instead of authenticating a transaction with a one-time password (OTP) sent via SMS or using a hard token, you will now receive a push notification on your Mashreq Biz App to authenticate the transaction using your Security PIN or biometrics.
: A Security PIN is a secure digital authentication method that links your mobile to your online banking account. It allows you to approve transactions directly from your Mashreq Biz App, offering stronger protection and greater control.
: This new form of authenticating transactions through Security PIN delivers multiple benefits:
Secure: Reduces the risk of fraudulent usage on your card, such as phishing, OTP theft, social engineering and SIM-swap attacks.

Faster: No waiting for SMS OTPs or manually entering codes.

Smarter: Your Security PIN or biometrics is enough to authorise any transactions.

Convenient: All you need is your registered mobile and an active internet connection.
: This upgrade significantly strengthens protection against social engineering and card fraud:
SMS OTPs can be intercepted or stolen through phishing.

Mashreq Biz App authentication ensures only you can approve any transactions using your trusted mobile.
: Registering your mobile enhances your account security by reducing the risk of fraud and enabling safe payment authorisation. It ensures that only your verified mobile can access sensitive features.
: Yes. To maintain a consistent and secure experience across all business accounts, registering a Security PIN is required.
: Follow the steps below:
Download and/or update Mashreq Biz App from the Apple App Store or Google Play Store.

Register your mobile as a trusted one by enabling biometrics (face recognition or fingerprint) and setting up your Security PIN (select ‘Increase Security’ on the pre-login screen and follow the instructions).

Enable push notifications are enabled on both your mobile and Mashreq Biz App.
: Yes. Once you register your mobile via Mashreq Biz App, SMS OTPs will be replaced by push notifications, and all authentication will take place via the app.
: In line with the Central Bank of the UAE guidelines, Mashreq is enhancing security for transaction approvals. We strongly recommend registering your mobile via Mashreq Biz App as soon as possible to enjoy secure and seamless approvals for your transactions. We will gradually discontinue authentication via SMS OTP or hard tokens.
: The registration takes less than 5 minutes and involves just three simple steps:

Facial recognition (for customers with Emirates ID is registered with the bank)

Setting a Security PIN

Completing the registration
: No. For security reasons, only one mobile can be registered at a time.
: If your registered mobile is lost or stolen, simply register your new mobile. Once registered, the old mobile will automatically be removed from the system.
: Please ensure the following:

Your internet connection is stable

Your Mashreq Biz App is updated to the latest version

Push notifications are enabled on your mobile

You are using the same valid Emirates ID registered with the bank
: The Hard Token will remain active even after successful Security PIN registration.

It can continue to be used for “Forgot Credentials” scenarios.

If the client de-registers the Security PIN, the Hard Token will act as the fallback authentication mechanism.

The pre-login journey (Forgot Credentials) will continue to support authentication via Hard Token.
: Once a customer successfully registers for Security PIN, the default and mandatory Two-Factor Authentication (2FA) method becomes Security PIN.

The customer cannot actively choose Hard Token while Security PIN is registered and active.

If the customer opts out / de-registers the Security PIN, the Hard Token automatically becomes the fallback authentication method.

This ensures continuity of service without compromising security
: No, the Hard Token access will not be auto-disabled upon successful Security PIN registration.

Once Security PIN is registered, it becomes the primary and mandatory 2FA method.

The Hard Token remains:

A fallback mechanism (if Security PIN is de-registered), and

Available for specific flows such as Forgot Credentials / pre-login journeys (if applicable).

Hard Token will only be disabled if:

The client explicitly requests deactivation, or

The bank enforces a policy-driven migration (future decision).

Banking Solution