Bank Transaction Messaging Ban in the UAE: Banks are replacing SMS and email one-time passwords (OTPs) with transaction approval inside their apps. The change concerns approvals, not ordinary bank alerts.
Quick Answer
The bank transaction messaging ban in the UAE refers to the reported move away from SMS and email one-time passwords for approving banking transactions. Banks are replacing these codes with approval through their mobile apps, including biometric authentication or app PINs.
Ordinary bank transaction alerts are not banned. The reported change concerns transaction authentication. Implementation dates and available alternatives depend on the individual bank’s notices.
If an unauthorized payment occurs, report it to your bank immediately, preserve transaction records, and follow the bank’s complaint procedure. An unresolved complaint may be escalated to Sanadak, subject to its requirements.
bank transaction messaging ban uae: approval changes
| Point | What applies | Source |
|---|---|---|
| The directive | Banks must phase out SMS and email OTPs and move to app-based or biometric authentication | Central Bank directive, as reported |
| Timeline | Press reports describe a phase-out from 25 July 2025 with a March 2026 target. Banks have announced their own dates, so implementation has not been uniform | Gulf News; AIR News; bank notices |
| Example of a bank’s date | Sharjah Islamic Bank discontinued SMS OTPs for online transactions on 10 June 2026 | Sharjah Islamic Bank notice |
| What continues | Ordinary transaction alerts and account notifications, and any alternative authentication options an individual bank offers | Bank notices |
| What replaces OTPs | Approval inside the bank’s mobile app, using biometrics or an app PIN | Bank announcements |
| Why | SMS and email codes are exposed to phishing and SIM-swap fraud | Central Bank directive, as reported |
| Fraud prevention | The Central Bank Law includes a dedicated article on fraud prevention for licensed institutions | Federal Decree-Law 6/2025, Art 149 |
The directive itself has not been published, so this guide describes only what press reports and banks’ own notices say. Check your bank’s notices for its timetable and the authentication options it offers. The customer protection chapter of the Central Bank Law includes the fraud prevention article.
Important: Transaction Approvals and Banking Alerts Are Different
An OTP is used to authenticate or approve a transaction. A banking alert simply informs the customer about activity on an account.
The reported transition concerns the use of SMS and email OTPs for transaction authorization, not a blanket prohibition on SMS notifications. Customers should check their own bank’s official notices before changing how they approve payments.
Facing a Dispute Over an Unauthorized Bank Transaction?
Discuss the transaction records, bank’s authentication process and relevant correspondence with Leaders Advocates. Understanding how the payment was authorized can help assess the dispute and available legal options.
What customers should do
- Update your bank’s app, register your device and turn on notifications, or app approvals will fail.
- Approve only transactions you started, after checking the amount and the merchant in the app.
- Never share an app PIN, a code or your login with anyone, including callers who claim to be from the bank.
- If a payment you did not approve goes through, report it to your bank at once.
Mobile Banking Approval Safety Checklist
Before approving a banking transaction, check that the request is genuine and matches the payment you intended to make.
- Use your bank’s official mobile application.
- Keep the application and device software updated.
- Check the merchant, recipient and amount before approving.
- Reject unexpected approval requests.
- Do not share your banking PIN, passwords or verification codes.
- Contact the bank through its official channel if an approval request appears suspicious.
Was a Payment Made Without Your Approval?
Report the transaction to your bank immediately and preserve relevant records. Leaders Advocates can discuss the bank’s response, transaction evidence and potential complaint procedures.
If something goes wrong
- Report the unauthorized transaction to your bank in writing and keep the reference number.
- Ask the bank to block the card or account and to investigate.
- If there is no written response within 15 calendar days, or you are not satisfied, escalate to Sanadak, the Central Bank’s ombudsman unit.
- If you were defrauded, file a police complaint. Taking money online by deception is an offense under the Cybercrimes Law (Article 40).
- Keep screenshots, messages and app records of every step.
Evidence to Preserve After an Unauthorized Payment
Keep copies of available records before filing a banking complaint or seeking legal advice:
- The transaction date, amount and reference number.
- Bank account or card statements showing the disputed payment.
- Relevant app notifications and approval records available to you.
- Emails, messages or suspicious payment requests.
- The written complaint sent to your bank.
- The bank’s complaint reference number and response.
- Any Sanadak or police complaint reference numbers.
Need Help With a Sanadak Banking Complaint?
If your bank has not resolved a disputed transaction, discuss the complaint history, supporting evidence and applicable Sanadak procedures with Leaders Advocates.
If you have lost money through an unauthorized transaction, you can send us the details on WhatsApp.
Questions about the end of SMS and email OTPs in the UAE
To discuss a banking dispute, speak to our lawyers on WhatsApp.
Related reading
Sources
Gulf News report on the OTP transition
Sharjah Islamic Bank authentication notice
Need Legal Help With an Unauthorized Bank Transaction in the UAE?
Leaders Advocates can discuss unauthorized payments, suspected banking fraud, disputed app approvals, bank investigations and Sanadak complaint procedures. The available legal response depends on the transaction evidence, account arrangements and circumstances of the alleged fraud.
