What it means
Before you complete a sensitive request that requires greater protection, you’ll get a prompt to enter a one-time verification code.
After your password, it serves as a second check to make sure it’s really you accessing your account.
Don’t worry about having to remember the answers to your personal verification questions anymore. The one-time verification code replaces them.
A new 6-digit one-time verification code is generated for each sensitive transaction or request, but you’ll only need to enter the code once during each online banking session.
Each code is unique, and we’ll never contact or ask you to reveal the code over the phone.
How it protects
Two-step verification applies to certain transactions and account changes as a way to verify your identity and confirm your request. So even if someone manages to access your account, they won’t be able to:
How it works
Select your contact method
Choose to get the code via text, push notification or voice call from the dropdown menu.
Note: For account security, we no longer send one-time verification codes to any email services and can’t leave a voicemail message.
Check which international numbers we can send verification codes to Opens in a new window..
Enter your one-time verification code
Once you receive the code, enter it into the box to complete your transaction.
Note: Verification codes expire in 10 minutes, so enter it as soon as possible to complete your transaction. If you enter your 6-digit one-time verification code incorrectly 3 times in a row, the code will expire.
We want to protect you from scams. Fraudsters may contact you, pretending to be a member of our fraud team. They may claim your account’s been compromised due to suspicious activity. They may also ask you to share a 6-digit one-time verification code with them to protect your account. If anything like this happens, disconnect the call immediately and call the number on the back of your card.
Ways to receive the code
This is the most convenient way to get the code, especially while travelling. All you need is to be connected to a Wi-Fi network. Push provides a stronger method of security and doesn’t require connection to a national cell phone network.
Receive the one-time verification code directly on your mobile device for most requests or transactions, with the exception of:
- Registering for online or mobile banking
- Resetting passwords
- Foreign Exchange (FX) transaction
Get the one-time verification code via text message. It’s convenient, arrives instantly and is easy to access in most countries while travelling. Make sure to enter the code within the body of the text message and not the number from which you got the text. Also, keep in mind that data charges may apply.
If receiving a phone call is more convenient for you, get the one-time verification code via voice call. Make sure
- your contact information is up-to-date so you can choose the one you need, and
- that you say something to activate the recording when you answer the call.
Select phone providers may block toll-free numbers which prevents you from receiving the one-time verification code through a voice call. Check with your phone provider if you don’t receive the one-time verification code from us.
What to do before you travel
Make sure the device you’ll be travelling with is set up to receive push notifications. Keep in mind you can only enable push notifications on one mobile device at a time.
Make sure your contact information is up-to-date. If you use a phone number registered to a region outside of Canada or the U.S., make sure it's an international number we can send verification codes to.
When outside of a Wi-Fi network, make sure roaming is on, keeping in mind that data charges may apply.