Do all the online purchase transactions require additional authentication?

No, only participating online merchants will require additional authentication in order to complete transactions. If you failed to receive the Push Notification via SC Mobile App, an OTP will be sent to the principal/ supplementary cardholder’s valid mobile telephone number via SMS.

Does my supplementary cardholder enjoy this service?

Supplementary cardholders can use the same service to proceed the online transaction by inputting the name printed on the supplementary card. By then Supplementary cardholder will be asked to authenticate the transaction via SC Mobile App, or input the OTP which sent to the registered mobile telephone number.

What are the benefits of additional authentication?

The additional authentication provides added assurance by authenticating you while using your Standard Chartered Visa Card / Mastercard when making payments to participating online merchants.

Do I need to register my Standard Chartered Credit/ Debit Card to enjoy this service?

No registration is required to enjoy this service. However, SC Mobile App authentication service is only applicable to cardholders who have registered SC Mobile Key in the SC Mobile App. OTP authentication service is only applicable to cardholders who have a valid local mobile number or international mobile number (only applicable to debit card) registered with the bank. Activate SC Mobile Key in your SC Mobile App Learn more

Can I enjoy the benefit of this service at online stores that are not participating in the service?

No, but the service has become available to more and more online stores now.

What should I do if I do not receive the OTP?

OTP is only applicable to (a) the Principal Credit Card Cardholder and its Supplementary Cardholder with a valid Hong Kong mobile phone number registered with the credit card system of the Bank, and (b) the Debit Card Cardholder with a valid Hong Kong mobile phone number or International mobile phone number registered with the debit card system of the Bank. If you do not receive your OTP within 30 seconds after submitting your request, you may click “Resend OTP” to request for another one. You should also check if your mobile phone number registered with the system of the Bank is updated.

Can I receive an OTP when I am overseas?

We will send the OTP according to your mobile phone number in our record. If you are overseas or using overseas mobile service providers, the service provider may not support international SMS. Please consult your service provider and / or hardware supplier for details.

What happens if I key in a wrong OTP for many times?

You will not be allowed to click “Resend OTP” to request for another one if you have input a wrong OTP for a few times. Please restart the entire online purchase transaction again.

When does the OTP expire? What should I do if I am not able to confirm the transaction before the OTP expires?

The OTP is only valid for a certain period after it is issued. You can click “Resend OTP” to request for another OTP if the OTP has expired.

Do I need to register the ecommerce tokenization service before transaction?

No, customer is not required to have any special registration as the process is between merchant and card issuers only.

What I need to do in order to make a transaction with an e-commerce tokenization service?

E-commerce tokenization service will not impact to customer because tokenization is the process between online merchant and Visa or Mastercard. The online transaction procedures will remain unchanged, customer is required to key in the credit/ debit card details including account number, name and expiry date as showed in online merchant website.

When proceeding a refund, transaction enquiries at merchants, should I provide merchant with token number or card number?

Please quote your credit/ debit card number for refund; refund should be arranged in the same credit/ debit card number.

When will the token being suspended or deactivated by the online merchant?

Each credit/ debit card will be mapped with a unique token number. If the card information has been deleted from the online merchant website, then the token may be deactivated by the merchant. Also, If there is a new credit card info shared by customer to merchant, then the old token will be deactivated and a new token will be created.

How can I know whether the merchants is subscribing to token service?

E-commerce tokenization service will not impact to customer because tokenization is the process between online merchant and Visa or Mastercard. Thus, this is invisible to customer.

Where can I find the token number?

You do not need the token number, your card will work seamlessly across multiple different devices and merchants each.

Secure Online Shopping – Standard Chartered HK

Personal

Business

Cross Border

Digital Banking

This hyperlink will bring to you to another website on the Internet, which is published and operated by a third party which is not owned, controlled or affiliated with or in any way related to Standard Chartered Bank (Hong Kong) Limited or any member of Standard Chartered Group ( the "Bank").

The hyperlink is provided for your convenience and presented for information purposes only. The provision of the hyperlink does not constitute endorsement, recommendation, approval, warranty or representation, express or implied, by the Bank of any third party or the hypertext link, product, service or information contained or available therein.

The Bank does not have any control (editorial or otherwise) over the linked third party website and is not in any way responsible for the contents available therein. You use or follow this link at your own risk. To the extent permissible by law, the Bank shall not be responsible for any damage or losses incurred or suffered by you arising out of or in connection with your use of the link.

Please be mindful that when you click on the link and open a new window in your browser, you will be subject to the terms of use and privacy policies of the third party website that you are going to visit.

Proceed to third party website

The additional authentication service by using SC Mobile App or One-time Password (OTP) is a security feature for online payment transactions. It provides added assurance by authenticating your identity when you make an online transaction with your Standard Chartered Visa card / Mastercard^® at designated online merchants carrying the following marks*:

*From June 2020 onwards, the authentication process is gradually upgraded to the latest EMV 3-D Secure version based on the new global payment industry specification. The service logos provided by Visa card and Mastercard® which are displaying on the OTP servicing page will also be updated accordingly as shown below.

Authenticate online transaction by SC Mobile App

If you have activated the SC Mobile Key in your SC Mobile APP, you will be requested to authenticate the online transaction via the SC Mobile App.

Step 1

When you are performing an online transaction which requires additional authentication. Click the push notification of relevant transaction from the SC Mobile App or open the App

Step 1

Step 2

Carefully review the transaction details such as merchant name and transaction amount to ensure they are correct and click “Approve”^, otherwise click “Reject”.

^ Once the authorization for the transaction is approved, the Bank cannot cancel the transaction unilaterally for you.

Step 2

Step 3

Click “Done” to return to the merchant’s site

Step 3

If you have not activated the SC Mobile Key or fail to authenticate the online transaction via SC Mobile Key, an OTP will be sent to the principal/ supplementary cardholder’s valid mobile telephone number via SMS and the OTP must be entered online to complete the transaction. Supplementary cardholders can input the name printed on the supplementary card to send the OTP to their registered mobile telephone number instead.

Please note that OTP can only be sent to a valid mobile telephone number registered in the credit/ debit card system of the Bank. If you have not registered a mobile telephone number, you cannot make online transactions at participating online stores.

To improve the security of transactions that are completed without physical presentation of credit/ debit cards, an email or SMS will be sent to you as a notification for such transactions. CNP transactions that may trigger email, SMS or Push Notification on SC Mobile App include but are not limited to:

．Online transactions
．Mail / telephone orders

Please note that CNP transactions may be declined if you do not have a valid mobile telephone number registered in the credit/ debit card system of the Bank.

For credit card, a valid mobile telephone number refers to a local Hong Kong 8-digit mobile number, with international mobile telephone numbers excluded. For debit card, a valid mobile telephone number refers to a local Hong Kong 8-digit mobile number or a valid international mobile number. If you would like to update your registered mobile telephone number with the Bank, you may submit your request via the following channels:

Select “Services” > “Edit Personal Details” after logging in to SC Mobile App or log in to Online Banking and click “Personal Details” to update mobile number
Download the Change of Contact Information Form for Individual Client and mail it back to the Bank
Visit any one of our branches to submit the Change of Contact Information Form for Individual Client

Visa and Mastercard’s new credit/ debit card e-commerce tokenization service, makes your credit/ debit card account details invisible and protected during the online payment process. The tokenization service allows payments in the online merchants to be processed without exposing actual account details that could potentially be compromised. As part of this service, Standard Chartered strives to bring you the latest and most secure technology for credit/ debit card payments, for your peace of mind while shopping. Now, you can experience a seamless and more secure online payment.

OTP is not applicable to cardholders of Standard Chartered UnionPay Dual Currency Platinum Credit Card.

From 23 May 2024, we have updated the Terms of Service. Please click here for the updated Terms of Service.

You're about to leave our website

Enjoy a peace of mind shopping experience

Additional Authentication for Online Transactions

Authenticate online transaction by SC Mobile App

Step 1

Step 2

Step 3

One-time Password (“OTP”)

Card-Not-Present (“CNP”) Transactions

Maintaining a valid mobile telephone number

Tokenization

Terms and conditions

Remarks

FAQs