SecureSign Token

What is Digital Signing?

Digital Signing is a process whereby a transaction performed through PBe is approved by the authorizer(s) based on a SecureSign Code generated by the SecureSign Token. The SecureSign Code generated is unique to that particular token issued to the authorizer and the PIN activated.

What is SecureSign Token?

SecureSign Token is a digital signing process to confirm and approve financial transactions performed via PBe. Authentication of the transaction is through the digital signature made by the authorizer.

Is it secure using SecureSign Token?

SecureSign Token uses Two Factor Authentication technology and digital signature solution to authenticate and secure online banking transactions. The token is secured with PIN and uses advance encryption standards.

What is PB SecureSign (digital token)?

PB SecureSign (digital token) is a digital security token attached to your PB engage MY mobile banking application as your alternative authentication method in PBe. It can replace your existing hard token for authenticating internet and mobile banking services. Click here for more information.

Although PB engage MY app can be installed on multiple mobile devices, you are allowed to activate PB SecureSign digital token on 1 device only (primary device).

Is it secure using PB SecureSign (digital token)?

PB SecureSign brings you the convenience of banking online without the need to carry your physical hard token around. Other than convenience, digital token is just as secure using biometric recognition or 6-digit SecurePIN.

How do I approve PBe transactions using PB SecureSign (digital token)?

You may approve transactions using PB SecureSign (Push Notification) or PB SecureSign (SecurePAC).

How do I approve PBe transactions using PB SecureSign (Push Notification)?

Select the transaction you wish to make. For transaction amounting to RM10,000 or lower, you will be required to authenticate with PB SecureSign (Push Notification).
At the Confirmation page, tap “Confirm” and you will be prompted with a 120 seconds timer on PBe. Simultaneously, a push notification will be sent to your PB engage MY app for approval. Verify the transaction details and tap “Approve” before the countdown timer ends and your transaction will be processed accordingly. Please ensure PBe displays transaction acknowledgement page before you initiate another transaction or logout from PBe.

Note: Please ensure that you have enabled push notification on the app to receive the push notification. Otherwise, launch PB engage app and you will be prompted with the transaction approval screen.

How do I approve PBe transactions using PB SecureSign (SecurePAC)?

Select the transaction you wish to make. For transactions more than RM10,000, you will be prompted with a selection of PB SecureSign (SecurePAC) and SecureSign Token (hard token) at the Confirmation page, depends on your eligible authentication method.

After selecting PB SecureSign (SecurePAC), you may retrieve the 6-digit code from PB engage through clicking “PB SecureSign” from the app’s pre-login side menu. (No login to PB engage is required)

After successful biometric or SecurePIN authentication, you will be prompted with a 6-digit SecurePAC. Key in the 6-digit code on PBe’s Confirmation page and your transaction will be processed accordingly.

Is there any service fee using SecureSign? How do I subscribe for this service?


Amount (inclusive GST at 0%)

PB SecureSign (Digital Token)

No charge

SecureSign Token (Hard Token)

RM50.00 per token* (one time charge)

* Waived effective 1 October 2014

How long does it take for me to receive a SecureSign Token?

Generally 7 working days or earlier depending on stock availability.

How do I replace the SecureSign Token in the event that it is damaged or the battery is low?

Warranty of the product is 6 months from date of issuance. A replacement can be requested from your account holding branch with the charges waived. Depending on the usage and normal conditions, the battery should be good for 4 years or more.

What precautions should I take to secure the hard token?

Activate your personalized PIN (6 digits) immediately upon receipt of the token. Always keep the PIN secret and the token safe. Do not leave the token unattended or share it with anyone else. For added security, change the PIN on a periodical basis. Try to avoid weak PINs such 123456, 282828, 444444 etc. Without the token, transactions cannot be performed without your knowledge nor authorization.

What if I forgot the SecureSign Token PIN?

You have six attempts at the PIN. After which, the token will be blocked with the ‘Unblock Code’ displayed. You have to proceed to your Account Holding Branch personally to have the token unblocked at no cost.

I did not receive any Push Notification on my device to approve my transactions

Please ensure your Push Notification is turned on for PB engage MY at your device settings.

I approved a PBe transaction with PB SecureSign. The transaction is displayed as 'Success' on my PB engage MY app but my account was not debited

Please do not close the PBe transaction page until the Reference Number page is displayed to ensure the transaction is fully processed.

I entered the SecurePAC but received an error stating that the SecurePAC is invalid

The SecurePAC is only valid for 60 seconds. Please enter the SecurePAC on PBe or PB engage MY before the timer on PB engage MY runs out.

What if my SecureSign Token is damaged or lost, who do I contact for assistance?

If your token is spoilt or lost, please report it immediately to PBe Customer Support at 03-2170 8000 or contact the branch to have the token deactivated. A new token can be issued by the branch at no cost.