Financial Process Exchange (FPX)

Darn.
I prefer TAC though.
Did my shopping via Shopee on my desktop pc.
Easier to browse items, TAC and stuff.
Some old phones are not compatible with Secure2u app.





This post has been edited by Chastain: Apr 10 2023, 08:21 AM

what is FPX ?

Good and finally use Secure2u. I think it will help reduce scam case.

Financial Process Exchange

ya, but whats that ? fund transfer ?

What about usage on Maybank2u on PC? Still using TAC?

Nothing you can do about it. Other banks are also changing to app based approval or have already done so. eg. CIMB now also app based.

You have to click "APPROVE" that pops up on your phone registered with Secure2u.

why now secure2u use MAE to approve..i want to use maybank2u not MAE to approve my secure2u..how to enable it on Maybank app

"Financial Process Exchange (FPX) is a Malaysia-based payment method that allows customers to complete transactions online using their bank credentials. Bank Negara Malaysia (BNM), the Central Bank of Malaysia, and 11 other major Malaysian financial institutions are members of the PayNet Group, which owns and operates FPX. In order to pay with FPX, customers are redirected to their online banking environment where they have to perform two-step authorisation. The exact customer experience varies depending on their bank. The FPX payment flow is well understood and intuitive to Malaysian customers"

Good move. If you want to argue on basis of phone not supported, means your phone is way too old to be secure itself and thus should be upgraded as well

Not necessarily. Infact even easier to scam old pipu

Right now mbb try to push everyone using their new app MAE , not cool man, not all people using latest phone so cannot update, so M2U app cannot already, MAE required new phone, how to get Secure2u

Already 2023, which phones are not compatible with bank apps or SecureTAC?

I find it easier with SecureTAC because no need to enter the TAC manually.

My shopping and banking apps are on a separate phone with a separate number. When I shop on another phone and click pay, the other phone will notify me with payee details, and only need to click Approve to proceed. So simple even a 90-year old grandpa can do it.

Still using m2u for approval though

its not right to force all to use MAE just to get secure2u, other banks use their own app for approval

Probably won't cover everything. Still I believe it is better than sms otp.


It's an order by Bank Negara.
https://soyacincau.com/2022/09/26/bnm-says-...-against-scams/



This post has been edited by CPURanger: Apr 10 2023, 09:52 AM

Its about time SMS TAC needs to go. If your phone does not support it (i'm guessing you are using a non-smartphone?) then its about time you upgrade it. Many scams come out from SMS TAC as the SMS can be easily replicated.

But sometimes i get confused between M2U and MAE as it overlap between each other. Sometimes the verification comes thru the former, and some the latter. Relinquishing SMS TAC is fine but the system should be refined more.

something wrong with this m2u and mae..why mine cannot secure2u from m2u ZZzz

I thought Maybank already phased out usage of m2u and now completely shifted to mae

so m2u is useless now?

Scammer be like “okay now I need your help to press to authorise the transaction, then you can proceed with our RM5 musang king. No no it’s completely safe. It’s verification check to check if you’re a legit customer and not abuser of our legendary promo!

Actually I think banks should also follow big tech and do automatic IP block for suspicious logon if different IP and device is detected. This way you can
1) reduce phishing attempts
2) secure account in case of leaked creds
3) inform user about suspicious login and attempted scam

This post has been edited by KekTart: Apr 10 2023, 10:35 AM

I think more and more bank moving away from TAC. And going to apps authorization.

even though for security, i find those requirement of must set password/ fingerprint screen lock annoying. Should've request us key in a pin in the app before approve a transaction, and not mess with general phone function

It is better & more secure. There is only 1 device can be registered with the bank at 1 time. If you are changing the device, you need to update registration & deactivate the registration with other devices.

Yes, at least for me and my father as we cannot even do anything with m2u app now. And I'm forced to buy new phone for him so he can use mae app to approve transactions. I'm not sure how the other guy above said he can still use m2u

Not possible block IP lah bro coz all ISP does not reserve IP wei....

Bank has done their part. user has to be responsible too. ignorant is so overrated coz most ppl kena scammed due to greed.

U can still shopped using web and approved using smartphone.
No need to use the same device for shopping & approving FPX.

See below

Safer la , so later u can't complain no receive tac but money lost

Ambank lagi diu, start 1 July android 9 unsupported die die mau 10. How to approve ini maciam

My os 12 aldy 3 yr old phone , u punya antic how many years ?

And this stupid move force to use app cause need very carefull when reload like ewallet, because need open bank app to approve, wrong press back button on ewallet app may cancel reload

I've just completed an online purchase just now, using M2U app to approve.

Personally I think its their migration process from M2U to MAE, it cant be done overnight, and security is a big thing now, hence, kena ada dua platform running the service until fully onboarded onto the MAE.

Samseng note 8 boss, still gooding and kuat

the thing u use to pay for stuff online

Yes, or just buy pin from lazada, lol.
----
For the android requirement, I checked Alipay, it required Android 5.0, target Android 10.
I guess the problem is most bank don't wanna accept the risk caused by old phone, but why it is accepted if it is SMS tac, lol.

but its very troublesome as business ACC you need another phone for MAE.

need another phone for MAE?

yes guess they cannot do anything if so they have to force all user to download MAE

Not much choices.

Security is never associated with convenient. You want security, expects the trouble.

This post has been edited by nihility: Apr 10 2023, 01:38 PM

I heard if youre still uisng M2U app then you change/upgrade phone, you must use MAE since the new phone, and the M2U app is disabled forever for you , is it?

No no I don’t mean your kind of block. I mean check for suspicious sudden login from different IP address in combination of device type and mac address and many more (browser) fingerprinting techniques. If you try logon email or google from another location and new device you’ll see the email / 2FA authentication.

This is basically a fail safe IF your account gets compromised. Although not 100% safe but better than nothing.

This post has been edited by KekTart: Apr 10 2023, 04:40 PM

You are scammers preferred target. TAC is succeptible to social engineering

This! I agree!

Hmmm... Some good info here. Park for more.

downloading suspicious apps that read messages cant be fully avoided since not all of them got access to these scam awareness news

but if manually click into notification to approve pun kena scam.. seriously cant blame anybody but themselves

All other banks demand la . Even TnG also

So if I want to transfer funds from my M2U savings to Shopee ewallet, Secure2u is the only way?

i use cimb, yes i reload e wallet, i need open cimb app to click approved, then manual switch back to ewallet app
so not sure will get cancel or not if wrongly tap back on android

it does not auto switch back to rwallet, notpe i no shopee

Thank you
CIMB app huh?
I guess M2U also similar...using the app.
Haish!

when using SMS OTP, we just need pull notification to read OTP, no need switch app
very trouble if ppl frequent change phone every year, need keep update on app

Yeah just recently I tried to purchase from Lazada, when login to Maybank I was shocked to see the sms tac missing. They wrote there must use Secure2u. In the end no choice but to cancel transaction. Fucking pundek Maybank.

I don't recall maybank say they are phasing out m2u?

I tried reloading my Shopee wallet since yesterday, but failed. Like got error to just say top-up failed. Before this if want to reload, it brings to another page MSOS or something, where I key in the 6-digit code. So i take it now fails because I do not have the MAE app?

Since the launch of MAE.
Maybank Will Eventually Phase Out Maybank2u App, Will Be Replaced By MAE
PSA: Still using Maybank’s M2U app? You’ll have to switch to MAE if you have a new phone

When was that?
After April 5th?

Planning to reload my shopee ewallet as well.
So, I messaged M2U via Twitter.

They replied...



If still has to use Secure2u to reload ewallet...
Crap!!!
My old phone not compatible.
Time to upgrade phone...dunno when

This post has been edited by Chastain: Apr 14 2023, 06:10 PM

Some time after 5th April, but later give up dy. Time for you to upgrade your phone then!

there are many times when I use secure2u and after that, my app that need reload money closed or refresh

Maybank2u wait pop up then approve. No need buka MAE.

Why not use debit card?
Debit card still use SMS TAC.

even cimb pop up notofocation, i tap it still load cimb app, wait for load, then tap approve with full screen,
then need manual switch back to app that using, this stupid cimb app no respond to android back button, mean i need force close app

Sad. Just realised this today when my relative ask to top up Shopee.

I used to be a cheapskate loser like you. But then I spent RM400 to buy a sekenhand phone with lagdroid 12. Can use for another 3 years until banking apps kenot suppork again

This post has been edited by red streak: Apr 17 2023, 12:45 AM

I feel ashamed , your story will motivated me to find a phone for a better future

When we attempt to install MAE, our registered email must match with our Play Store email?
Play Store is associated with Google.
So we need to login using our email account. Gmail account.
Otherwise, error.
Or am I mistaken?

This post has been edited by Chastain: Apr 17 2023, 09:20 AM

Not in my case.

I find registering this secure2u very troubling.
Is it necessary to take selfie and mykad to complete the registering?

No need selfie but need to type IC Number only..
No capture done during the process.

I did on my side and my relative.

problem is i need to use secure2u to 2 differnet maybank2u account. phone only allow pair with 1 account. if u wan change account need to unlink and link back. then 24 hours only can do transaction

Really? It wants me to scan the hologram on my mykad and take photo of the front and back of my mykad.

Hah? I setup secure2u on my relative phone. Never ask to capture.
Using MAE right? Or first time setup MAE online banking?

Same like CIMB. One phone = One account.

Need to unlink before sign in to new account.

Yeah, first time setup MAE online banking.

First time got. Me as existing user so no need.
Make sure to select existing maybank user. Not press No Account.

I got this when trying to install MAE

Their Twitter asking for me my phone model number



This post has been edited by Chastain: Apr 18 2023, 04:34 AM

I got this when trying to install MAE.

Their Twitter asking for me my phone model number

Thanks for starting this topic. Troublesome and no assurance that my phone will be safe, so back to ATM and counter service.

I do online shopping
Since the items are not available via retail.
This Secure2u are making it things difficult.

Even DuitNow requires Secure2u
If not, at least can shopping via Touch N Go app.

Fucking scammers
They are the reason why no more TAC

Scammers are a problem.
Silly victims giving out TAC are a nuisance, but not the main problem.

Banks are loaded financially can gang up, hire white hat hackers, to track down scammers and hackers, then hand them over to the authoritise.
Keep in mind, online banking has been around over decades, but MY banks refuse to this.
Instead banks blame depositors. While education is vital but then they don't educate depositors at time of a/c opening?

Recently, a bar council member is waging a lawsuit against a bank for funds suddenly gone missing. Point being, banks are not all innocent.
If banks really value depositors, they could have track down scammers and hackers.

I suspect banks want as many people to use their app to curb against crypto and other forms of currency.
Possibly even roll out their own digital currency, which I hear in China's social system, who knows if its true that they can switch off digital currency. Then cannot buy food, people will have to beg gov't.

Other methods for online shopping is credit card and preload a/c with debit card.
Debit card usually have RM8 fee per annum.
Anyway for now, I hope Secure2u works out.

With quantum computer and 5G rolling out, hackers will find a way, fast.

Do becareful as new technology often do not have mass trials, like mRNA vax.

Ur phone is older that android 9?

Android 5.1.1

This post has been edited by Chastain: Apr 20 2023, 09:46 AM

You mentioned banks want as many people to use their app
Got me thinking
The app belongs to cronies of banks

As a former banker and also been in a case where we investigated the hack, it traced all the way to China. We reported it to the authorities but it was deemed NFA as it was out of the jurisdiction of our authorities. Recently as well, a number of them originates from Myanmar which is also out of the jurisdiction.

I have seen cases where many people who fall scam was due to not really their own fault but by their own family members who took their money away. Other times as well, if it was a business account, it was another authorizer and partner who take the money and ran away. What you see reported on the news is only probably 20% of the real story.

Which bank are you referring to? For local banks, the big 5 banks developed the app in-house by staff. Yes, they do get vendors to help with certain integration or get help by external vendors to help them on the UI/UX and customer journey, at the end of the day, the bank still owns the code, in-house team supports that code base and maintain the platform. Not too sure which cronies you are referring to.

Remember last time the issue about MySejahtera (MySj)?
People claimed that govt using MySj to profit someone.
Same with Secure2u?

Maybe it's unrelated but I found that MBB MAE and CIMB OCTO apps are awfully similar. Almost like copy paste.

MySejahtera is MySejahtera as they used a local vendor and company (the app is registered under a separate Sdn Bhd). This case is because the government doesn't have a tech arm or a group of developers working under them (unlike Singapore which has the arm called GovTech), so they need to rely on third party vendors to manage their software and builds.

Secure2U is owned by Maybank. Each bank have their own version of an MFA authorisation token. Even international banks. Yes, they do use white labelled software vendors for the product for some banks and some banks built it up from scratch. Banks have their own in-house tech team to build, manage and support the software. They are public listed companies and have to report to Bank Negara for all vendor management which is in accordance to the RMIT guidelines (Risk Management) and also to adhere to procurement policies such as following the Corporate Liability provision under section 17A of the MACC Act 2009 (rolled out on 1 June 2020).

Once you start going through all of the banking apps, it all feels the same to be honest including those from overseas. A lot of the UIUX are inspired by the competition and a lot of decisions are done (choosing which UX path) is to get one that users are already familiar with. Much like when you design for Apple devices, you want to keep the UX path and flow as close to how Apple does as compared to trying to do something completely different and make it more complex (leads to loads of customer complaints).

I use 9 banking apps on daily basis. Some local banks some overseas banks. Only those 2 apps use the (almost) exact same UIUX.

Do you use DBS Mobile banking app? The UX that MAE and Octo uses are quite similar with that together with Revolut and other digital banks.

The thought process of the flow is this normally if you consider the mobile app landing, you would split up the screen into 3 sections. The top section is what is you want the user to see the most (some banks put the balance, some put important messaging and some put the latest offers there). It is the section in which most users will glance over.

The middle section is usually aligned with either shortcuts, most recent actions or quick action items. Most banks would put in last transaction items (like make a transfer to that same payee), or pay a certain bill. This section is usually designed to be dynamic as it would cater to each user's action or preference on the mobile banking app. Usually how they would design this is to allow the user to swipe left or right. Why this section? Because that is where the fingers are normally at when a user is holding the phone and with the emergence of large phones, even the thumb can reach the center but not the top.

The bottom section is where you would allow for it to be an up and down scroll motion. So that means you can put in a lot of information here, from past transactions, to new offers and marketing materials or other products (e.g. FD, Insurance and others).

What my point I want to say that as banks use vendors or companies to help them design the UIUX, some of them follow the same school of thought and some will try to make themselves different and yes, sometimes designs do overlap with each other as they use a whitelabel product from another vendor as well (e.g. KipplePay whitelabels their eWallet to other ewallet players).

Why still using so old device
Many app not supported

I only have m2u on my phone. No issues with using secure2u on m2u app. Just don’t download mae la

Just now using my dad's phone to install MAE.

OMG!
The registration, the pin #, OTP to our mobile phone #...
So fussy.

This post has been edited by Chastain: Apr 20 2023, 09:31 PM