Transaction Authentication

What is PAC?

PAC is system generated 6-Digit Authentication Code. Each PAC is unique and acts as an additional layer of security to protect your banking transaction. Always treat each PAC with care and do not share your PAC.

How does PAC work?
  1. On Confirmation screen, tap on “Request SMS PAC”
  2. Once you have received the SMS, enter the 6-digit Authentication Code into the transaction screen. Ensure the serial number shown on screen matches the serial number in your SMS.
  3. Tap on “Submit” to complete the transaction
  4. On PB engage MY, PAC is only applicable to transactions including Device Binding, PB SecureSign Registration, SecurePIN Management and Challenge Question Enrolment.
How do I register my mobile phone number to receive PAC?

Kindly visit any of our Public Bank or Public Islamic Bank branches to register or change your mobile phone number.

Can I use the same PAC for multiple transactions?

No, every transaction requires a separate PAC.

What is SecureSign Token?

SecureSign Token is a password protected security device that generates a dynamic, time- sensitive security code for transaction approval in PBe and PB engage MY’s secondary device

Who can apply for SecureSign Token?

New and existing PBe and PB engage MY user

Where can I get one?

You may apply for the token at anyPublic Bank or Public Islamic Bank branch

How much does it cost?

RM 50.00 per token.
Note: The service fee is currentlywaived until further notice.

What precautions should I take to secure the SecureSign Token?

Set up a 6-digit PIN immediately upon receipt of the token. Always keep the PIN secret and the token safe. Do not leave the token unattended or share it with anyone. Avoid weak PINs such as 123456, 282828, 444444, etc.

What if I have forgotten the PIN for SecureSign Token?

You have a maximum of six (6) attempts to enter the correct PIN. Failing which, the token will be locked. The token will display a 7-digit LOCK PIN each time you switch on the token.
Please proceed to your nearest branch to unlock the token.

Who should I contact for assistance if my token is damaged or lost?

Please report immediately to PBe Customer Support at 603-2170 8000 to have the token deactivated. Get a replacement token at any branch. The token cost is waived until further notice.

What is PB SecureSign?

PB SecureSign is a digital security token integrated into your PB engage MY mobile banking application. It allows you to authenticate your banking transactions easily and safely via biometric (i.e. fingerprint / Touch ID / Face ID) recognition or 6-digit SecurePIN.

Who can apply for PB SecureSign?

As long as you have registered PAC or SecureSign Token, you can register PB SecureSign in PB engage MY app.

How do I apply for PB SecureSign?

Just login to your PB engage MY app and you will be prompted to activate PB SecureSign automatically, unless if you have previously activated PB SecureSign in another device. You will need to unbind the previously bound device in the app’s Settings > Device Management.

What are the steps to register PB SecureSign?
  1. Keyin your registered IC number / Passport number / Armed Force number with the Bank for verification
  2. Create your new 6-digit SecurePIN
  3. Re-enter your new 6-digit SecurePIN for confirmation
  4. Enroll for biometric authorisation (optional)
  5. Authorise your PB SecureSign activation via registered PAC or SecureSign Token.
What are the steps to activate PB SecureSign?

Once registered, you can activate your PB SecureSign via either ONE (1) of the following methods:

  • Activate PB SecureSign via Public Bank’s ATM / CRM; or
  • Activate PB SecureSign via any Public Bank’s Branch; or
  • Email to for assistance
What is SecurePIN?

SecurePIN is a 6-digit personal identification number (PIN) created by you during PB SecureSign activation. SecurePIN will be used to authorise banking transactions hence it must always be kept secret and never be disclosed to anyone. Avoid weak PIN such as 123456 or 333888 and avoid using your date of birth, ID number or mobile number as your SecurePIN. *For PB engage DuitNow QR user, your 6-digit QR payment PIN will be your SecurePIN

Can I activate PB SecureSign in all my PB engage registered devices?

No. PB SecureSign can onlybe activated in (1) one registered device at one time.

What is PB SecureSign (Push Notification)?

PB SecureSign (Push Notification) is an authentication method available when you performed transaction using PBe or other registered device. A push notification will be sent to your PB SecureSign activated device for approval.
Simply tap on the Push Notification or launch the PB engage MY app to retrieve the pending transaction. Please verify the transaction details before approving the transaction.

What is SecurePAC?

SecurePAC is a 6-digit One Time Password (OTP) generated by PB SecureSign. It is used to approve transactions above RM10,000.00.

What if I have forgotten my SecurePIN / My SecurePIN is locked / Can I change my SecurePIN?

You can reset your SecurePIN via following steps:

  1. Login to PB engage MY
  2. Go to “Settings”
  3. Tap on “SecurePIN Management” to reset your SecurePIN
How does PBe Challenge Questions work?

The PBe Challenge Questions provide an extra layer of security to protect your account. If the Bank detects any unusual activity or transactions that are deemed high risk, you will be prompted with a challenge question for authentication.

Can I set up PBe Challenge Questions on PB engage MY?

Yes, you can set up the PBe Challenge Questions via PB engage MY if you have registered for PBe but have not enrolled your PBe Challenge Questions.

Can I choose not to set up PBe Challenge Questions?

No, this security feature is required for all PBe users

Can I change the PBe Challenge Questions via PB engage MY?

No, you can only change the PBe Challenge Questions via PBe.