Mobile Token and Biometric Credential Authentication Service

How to activate Mobile Token?

Please open CCB (HK&MO) Mobile App and read the following instruction for activating the Mobile Token:

Step 1	Click “Activate Mobile Token” in the menu of main page.
Step 2	Input your Online Banking Username and Password for logging on to Mobile Banking.
Step 3	Read and accept the Terms and Conditions.
Step 4	A SMS with 6-digit One-Time Password will be sent to your registered mobile phone number. Input the One-Time Password to proceed.
Step 5	Set up a 6-digit Mobile Token Password. Input the Password again to confirm.
Step 6	The application of Mobile Token service is completed. For security reason, Mobile Token will be effective in about 6 hours. We will notify you by email and SMS once it is effective. Then you can use your 6-digit Mobile Token Password with the Mobile Token activated device to log on to Mobile Banking or use Mobile Token Password/generate one-time Security Code to authenticate designated Mobile/Online Banking services.

How to activate Biometric Credential Authentication?

Biometric Credential Authentication Service will be available to activate upon the effective of Mobile Token in Mobile Banking. You may continue to apply for Biometric Credential Authentication Service after applied for activating Mobile Token; or follow below steps for activation of the Service if Mobile Token is effective:

Step 1	After logging on to Mobile Banking, you can go to "Left Menu" > "Security Center" > "Manage Biometric Credential Authentication" to activate the Service.
Step 2	Verify your biometric credential.
Step 3	Read and accept the Terms and Conditions of Biometric Credential Authentication Service.
Step 4	Input the SMS One-Time Password sent to your mobile phone number registered with the Bank via branch.
Step 5	The Activation of Biometric Credential Authentication Service is completed. Upon the effective of Mobile Token, you can use your biometric credential with the activated device to log on to Mobile Banking and/or to authenticate designated Mobile Banking services.

activate Biometric Credential Authentication

How Mobile Token works on Online Banking?

You can through the below steps to generate one-time Security Code, for authenticating the designated Online Banking transactions:

Step 1	Open CCB (HK&MO) Mobile App (not required for logon).
Step 2	Tap on “Generate Security Code” in the menu of main page, then select “Generate Security Code”.
Step 3	Enter the 6-digit Mobile Token Password. You may also select Biometric Credential Authentication Service (if activated) for authentication.
Step 4	One-time Security Code is generated. Enter the Code on Online Banking according to the on-screen instruction to authenticate your transaction / instruction.

You can through the below steps to generate one-time Transaction Confirmation Code, for authenticating the designated Online Banking transactions:

Step 1	Open CCB (HK&MO) Mobile App (not required for logon).
Step 2	Tap on “Generate Security Code” in the menu of main page, then select “Generate Transaction Confirmation Code”.
Step 3	Enter the 6-digit “Transaction Information Code” which is instructed on Online Banking. You may also select Biometric Credential Authentication Service (if activated) for authentication.
Step 4	One-time Transaction Confirmation Code is generated. Enter the Code on Online Banking according to the on-screen instruction to authenticate your transaction/instruction.

How Mobile Token works on Mobile Banking?

You can through the below steps to use Mobile Token Password for authenticating the designated Mobile Banking transactions (such as FPS Transfer):

Step 1	Tap the designated functions and logging on to Mobile Banking, then enter the required transaction information.
Step 2	Tap “Confirm” if the entered transaction information is correct.
Step 3	Enter the 6-digit Mobile Token Password. You may also select Biometric Credential Authentication Service (if activated) for authentication.
Step 4	Transaction is completed.

With the new “QR Code Login" function, you can scan the QR Code displayed on the Online Banking Login page with your mobile token-activated device, to login Online Banking after completing the authentication, which is safe and convenient!

For security reason, please do not share your QR Code to others.

Benefit of using “QR Code Login”

Without the need to keep Username and Password in mind, to improve the user experience
Without the need to enter Username and Password information manually, to protect your information security

How to use “QR Code Login"?

Step 1	Open CCB (HK&MO) Mobile App (not required for logon), and tap "Scan" icon in the upper right corner of the homepage.
Step 2	Scan the QR Code displayed on the Online Banking Login page.
Step 3	Read the Login details and click “Log in to Online Personal Banking".
Step 4	Enter the 6-digit Mobile Token Password. You may also select Biometric Credential Authentication Service (if activated) for authentication.
Step 5	Successful Login to Online Banking after authentication is completed.

Mobile Token

What is Mobile Token?
Mobile Token is a new feature within CCB (HK&MO) Mobile App ("Mobile Banking"). Upon activation of Mobile Token, you will no longer need physical security token and SMS One-Time Password for 2-factor authentication of designated Online Banking and Mobile Banking services in a safe and convenient way.
What is Mobile Token Password?
Mobile Token Password is a 6-digit security code at your choice. By entering the Mobile Token Password, you can easily log on to Mobile Banking and authenticate designated Online Banking/Mobile Banking transaction.
Can I activate Mobile Token on multiple devices?
For security reason, you can only activate Mobile Token on one device.
If I have to change a mobile device, how do I transfer Mobile Token in the new device?
Please call our Customer Service Hotline at (852) 277 95533 during operating hours, or visit any of our branches to request for deactivating Mobile Token. Upon the effective of deactivation, you may activate Mobile Token in your new device again.
Can I use Mobile Token and physical Security Token at the same time?
No, you can only use either one of them at the same time. When you activate Mobile Token, your physical Security Token in hand will be deactivated automatically, vice versa.
If I forget my 6-digit Mobile Token Password, what should I do?
You can go to Mobile Token Logon page in CCB (HK&MO) Mobile App and click “Forgot Mobile Token Password” to reset Mobile Token Password.

Biometric Credential Authentication

What is Biometric Credential Authentication Service?
Biometric Credential Authentication Service is a convenient and secure alternative that allows you to use your biometric credential stored on your mobile device for logon to CCB (HK&MO) Mobile App ("Mobile Banking") or authentication to designated Mobile Banking services.
Which operating systems and mobile devices are Biometric Credential Authentication Service available on?
Biometric Credential Authentication Service is applicable on Apple iPhone 5s or later models with Touch ID/Face ID function and operation system on iOS 14.0 or above; and for biometric credential enabled compatible android devices with operation system on v8.0 or above.
Can I use Biometric Credential Authentication Service before activation of Mobile Token?
No, Biometric Credential Authentication Service will be available to activate upon the effective of Mobile Token in Mobile Banking. You may continue to apply for Biometric Credential Authentication Service after applied for activating Mobile Token; or activate the Service once your Mobile Token is effective.
Under what situation would the Biometric Credential Authentication Service be deactivated?
- Your Online Banking Username or Password has been updated
- The biometric credential setting in your mobile device has been changed
- The biometric credential authentication of the mobile device is deactivated
- Your biometric credential cannot be recognized by the mobile device for three times consecutively
- Your Mobile Token Service is deactivated
Can I use Biometric Credential Authentication Service if someone else’s biometric credential is stored on my mobile device?
When you activate Biometric Credential Authentication Service, any biometric credentials stored on your mobile device can be used to log on Mobile Banking. Therefore, you are strongly recommended to store your own biometric credential only on your mobile device.
If I re-install CCB (HK&MO) Mobile App, do I need to activate the Biometric Credential Authentication Service again?
Yes, you need to reactivate Biometric Credential Authentication Service by activating Mobile Token in Mobile Banking first.

Comprehensive Protection for Your Online Banking Account