Out-of-Band Authentication
Enjoy Secure Online Transactions
Out-of-Band Authentication (OOB) is an additional layer of security that helps protect your online card transactions. Instead of relying solely on One-Time Passwords (OTPs) sent via SMS or email, you can now securely approve transactions using the HBZ Mobile Banking App.
With this feature, online purchases made with your HBZ Debit Card can be instantly authenticated through a push notification sent to your registered mobile device, providing a faster and more secure approval experience.

Benefits
Enhanced Security
Directly approve transactions through the HBZ Mobile App, reducing the risk of fraud or unauthorised access.
Faster Approvals
No need to wait for an OTP via SMS or email. Approve transactions instantly with just a tap.
Convenience
Complete purchases quickly and securely from anywhere using your mobile device.
Alternative Authentication
Get OTP authentication via SMS/email, if needed as the option remains available.
Eligibility & Requirements
- Available for HBZ Debit Cardholders
- Requires an active HBZ Mobile Banking App
- Cardholder’s mobile device must have push notifications enabled for HBZ App
How Does It Work?
Select Approval
At the checkout page of an eligible online purchase, choose “HBZ Mobile App” as your preferred authentication method.
Receive a Push Notification
A secure push notification will be sent to your registered mobile device via the HBZ Mobile Banking App.
Follow On-Screen Instructions
Open the HBZ Mobile App and review the transaction details displayed on your screen.
Authorise the Transaction
Confirm and approve the transaction within the app to complete your purchase securely.
Learn More About Out-of-Band Authentication
1. Online Purchase Checkout
- When making an online purchase with your HBZ Debit Card, the system will prompt you to authenticate the transaction
- Select “HBZ Mobile App” as your preferred authentication method
2. Transaction Approval via HBZ Mobile App
a) Approving with Push Notification (Recommended)
If push notifications are enabled on your HBZ Mobile App:
- A secure push notification will be sent to your registered mobile device
- Tap the notification to open the HBZ Mobile App
- Review the transaction details
- Click “Approve” to complete your purchase
b) Approving Manually (If No Notification is Received)
- If you do not receive a push notification or it is disabled:
- Open the HBZ Mobile App
- Navigate to Pending Transactions in the app
- Select the transaction awaiting approval
- Click “Approve” to authenticate the purchase
A secure fallback option appears to ensure successful transaction approval.
Transaction Completion
- Once the transaction is approved via the HBZ Mobile App, the online purchase is processed successfully
- If the transaction is not approved within a specified time, it may be declined for security reasons
- Ensure that you have downloaded and updated the HBZ Mobile Banking App
- Enable push notifications for the HBZ app on your device settings
- Use your registered mobile device for authentication
If you experience difficulties approving your transaction:
- Ensure your HBZ Mobile App is updated to the latest version
- Check that Push Notifications are enabled for the app
- Verify that your mobile device is connected to the internet
- If issues persist, you can still approve transactions using the traditional OTP method sent via SMS or email
For further assistance, please contact us at 0808 164 2242.
Frequently Asked Questions
For any questions pertaining to our Out-of-Band Authentication services, feel free to view our FAQs page.
Contact Us
Head Office & Moorgate Branch
Habib Bank Zurich plc
Habib House, 42 Moorgate
London, EC2R 6JJ, United Kingdom
Email us:
customerservice.uk@habibbank.com
- Customer support is available Monday to Friday, 9:00 am – 5:00 pm, excluding UK bank holidays
- Calls are charged at service providers’ rates and all calls may be monitored and recorded