CIMB Bank has announced a new security measure for its CIMB OCTO mobile banking app, requiring all new and existing users to complete electronic identity verification (eKYC) when performing a first-time login. This applies when activating the app on a new device or following a device reset, starting from 6 October 2025.
According to the bank, the introduction of eKYC is part of its efforts to strengthen online banking security and curb fraudulent activities, in line with regulatory initiatives against financial scams. As part of the new procedure, users must undergo a 12-hour cooling-off period after initiating their first-time login. Once this period has ended, an SMS notification will be sent to confirm that the app is ready for use.

The eKYC process involves verifying a user’s identity through both document verification and facial recognition, allowing the entire process to be completed online. The system currently only supports MyKad as a valid identification document, while users who rely on other forms of ID will need to visit the nearest CIMB branch for manual verification.
CIMB added that this new requirement is designed to make the activation process more secure while maintaining ease of use for customers. Further information and guidance on completing the eKYC process can be accessed through the CIMB OCTO app or by contacting the bank’s Consumer Contact Centre.
(Source: CIMB [official website])