BML enables OTPs for QR payments

Bank of Maldives has enabled One Time Passwords (OTPs) for all QR payments, as part of its plan to further enhance security for payments through its app.

According to BML, once updated, the BML Mobile Banking app will allow customers to make Scan to Pay transactions of any amount using an OTP that can be generated via Authenticator, SMS or email.

The bank said it has taken several steps to protect customers from scams that continue to be prevalent.

In December last year, the bank enabled authenticator apps to generate OTPs for all transactions processed via Internet and Mobile Banking to protect customers even if an email account has been compromised.

BML said it will continue efforts to protect its customers and will announce further enhancement to its security features at the end of March.

“Scams evolve over time, and we urge everyone to be aware of scam tactics and never share personal information with anyone,” said the bank.

BML advised customers to always be cautious:

• BML will never send SMS with website links. Even if it looks like it’s from BML, do not click on any links and do not enter your details. Remember that SMS or calls can be “spoofed” to seem like it comes from “BML” or another trusted party.
• Do not open suspicious texts, pop-up windows or click on links or attachments in SMS and emails.
• An OTP is used as a security measure. Never share any OTPs you receive with anyone, even if it seems genuine.
• Change your passwords frequently. This includes your banking password as well as email passwords.  Choose passwords that would be difficult for others to guess.
• Do not save your email or banking passwords on your browser. If your email account is compromised, saved Usernames and Passwords will be easy to access.
• Check the website links properly. Secure sites including Internet Banking will always have a “lock” symbol on the address bar. Never follow links to go to Internet Banking. Scammers can create web pages that look very similar to Internet Banking to lure you into entering your Username and Password.
• Check your notifications. BML will send Internet Banking login notifications to your registered email for every login. Change your password as soon as possible if you receive a notification that you do not recognize or if you think your credentials could be compromised.