A one time passcode (OTP) service is a security feature provided by Royal Bank of Scotland. When you make an online transaction with your Commercial or Business Card after 14 September 2019, you may receive an OTP by text to your registered mobile phone number.

OTPs are not required for all online transactions, however, occasionally you will be asked to carry out the OTP authentication. Simply enter the OTP when prompted to authenticate your transaction.

In addition to online transactions, you may find that we also need to send you an OTP when you login to ClearSpend or CardsOnLine.

No. Registration is not required. We'll send the OTP to your registered mobile phone number.

Please make sure we have your up to date mobile number.

The OTP service via text is free within the UK. If you’re overseas or using an overseas service provider, your service provider may levy charges. Ask your telecommunication service provider for details.

Using an OTP provides extra protection against online fraud. If fraudsters obtain your card information, they won't be able to use it for online transactions without the OTP.

Yes. The OTP expires 10 minutes after you receive it. If you can't enter the OTP to complete your transaction before it expires, you may have to restart the transaction.

We’ll block your card after three unsuccessful attempts. If this happens, please call the number at the back of your card to get it unblocked.

If you’re overseas and using overseas mobile service providers, the service provider may not support the receipt of international texts. Remember to activate your roaming service to ensure you can receive the OTP.  Ask your telecommunication service provider for details.

Report it to your mobile service provider immediately. If your commercial or business card information is stolen, they won't be able to receive your OTP and use it for online transactions.

No. As a part of the Payment Services Directive 2 (PSD2), we must introduce Strong Customer Authentication. Using an OTP will be the only way to authenticate online transactions. So it's important to make sure we have your up to date your mobile phone number.