
The Central Bank of the UAE has mandated the phase-out of SMS and email one-time passwords (OTPs) by March 2026, citing rising fraud risks and inefficiencies. From July 2025, banks will roll out new authentication systems such as passkeys, biometrics, and UAE Pass integration. The shift aims to enhance security, reduce costs, and modernize digital banking.