3-D Secure

New way of confirming online
payments for higher security.


High security

Two-factor confirmation of online payments.


Benefits

Improved protection for cardholders.


Strong authentication

Risk reduction of unauthorized use of cards by a third party.

Safe
online payments

With the PSD2 Directive, the European Banking Authority (EBA) introduces a strong authentication requirement, which requires the use of two out of three elements proving that the payer is the real cardholder of the card used for online payments. It is a combination of:

  • what we have - mobile phone,
  • what we are - biometrics,
  • what we know - PIN number.

SKB bank will for persons with an account in the bank, introduce confirmation of online payments in MOJ@SKB mobile bank. Customers who do not have a MOJ@SKB mobile bank will be able to confirm online payments in the Rekono OnePass application.

Online payment verification
process
in MOJ@SKB mobile bank

1

Push message

You will receive a push message on your mobile phone when completing a payment transaction. When you click on the message, you will be redirected to MOJ@SKB mobile bank, where you will perform authentication or enter your PIN number.

If you do not have push messages activated, you can find a request for confirmation of online payments in MOJ@SKB mobile bank in the selection menu (Menu-Confirm online payments).

A precondition for receiving push messages is an updated MOJ@SKB mobile bank (last updated on 21st December 2020) and at least one login into the mobile bank after the update.

2

Information about the transaction

In MOJ@SKB mobile bank, more detailed information about the transaction and a confirmation or rejection button will appear on the screen. 

3

Transaction signature

If you confirm the transaction with a click on the button "Sign" and enter your PIN number, you will receive a message about the successfully signed transaction and your purchase will be successfully completed.

How do I get access to
mobile app MOJ@SKB?

1.

Get an activation code 

Tell us your wishes and arrange everything for obtaining the activation code in the outlet or get the code through SKB NET online bank if you are already an user.

Get an activation code through SKB NET online bank  

2.

Download the app to your phone

The app supports mobile phones with Android and iOS operating systems.


3.

Safe activation

Quickly and simply activate the app in the outlet or if you already use SKB NET, activate it through the SKB NET online bank with .

Activate through the online bank  

 

MOJ@SKB
mobile bank

  • Quick overview of balance, of last three transactions and transactions in waiting on the log-in page, prior to signing into mobile bank.
  • Easy payment of bills/payment slips by using templates which will not require additional confirmation from you by a PIN number.
  • Payment of bills/payment slips by using the »photo payments« function which enables you quick and accurate preparation of electronic payment order simply by scanning the QR code. The data from the payment slip are automatically transferred to the payment order in the app; then, only your confirmation of the payment order follows.
  • The »Pay to me« function enables the creation of QR code and data on your personal account, which you can simply send to the person from which you are expecting a transfer.
  • Early repayment option of obligations on credit cards.
  • With one app, you will be able to manage also finance of your company or your relatives which have authorized you on their accounts and other banking products.
  • By using the generator of one-time passwords, you will easily access SKB NET or PRO SKB NET internet bank.

Online payment verification
process 
in Rekono OnePass app

1

Push message

You will receive a push message on your mobile phone when completing a payment transaction. When you click on the message, you will be redirected to the Rekono OnePass application, where you will have to enter the PIN number or. to authenticate with fingerprint/face recognition.

2

Information about the transaction

In the Rekono OnePas application, more detailed information about the transaction and a confirmation button/rejection button will appear on the screen. 

3

Payment confirmation

Clicking on the "Confirm payment" button will complete your purchase successfully.

How do I get access to
Rekono OnePass application?

1.

Download the app 

The application supports phones with Android and iOS operating systems.

 
      

2.

Online account
activation

Enter the required information to create a Rekono user account. After successfully entering the data and checking the ownership of the device and e-mail, it is necessary to add information about the bank and payment card to confirm online payments.

3.

Adding a bank and payment card

Select SKB bank and enter the last 6 numbers of your payment card, tax number and PIN number. When the bank and all your payment cards at this bank will be successfully added your app will be ready to confirm online payments.

Rekono OnePass
app

  • the application is developed in accordance with the latest development standards - includes and uses all the functionalities and sensors offered by the devices (biometric authentication, scanning the QR code using the device's camera, push notifications and other security mechanisms);
  • provides easier and faster access to the Rekono account, its management and access to functionality;
  • enables greater control over the Rekono user account and an improved and faster two-factor authentication mechanism.

Digital banking

  • It includes MOJ@SKB mobile bank, SKB NET online bank and Flik immediate payments.
  • Included in the price of package MOJ S, MOJ M or MOJ L.
  • Complete overview of managing personal finance.
  • Remote operations, without visiting the outlet.
  • Saving time and money as performing banking services is faster and cheaper than in the outlet.
  • Use anywhere and anytime – 24 hours per day, year-round.
  • Easy and secure operations by using modern security technologies which ensure security at the highest possible level.

 

Frequently asked questions

Why is it no longer considered secure to verify online payments via SMS?

The critical vulnerability in the existing confirmation of online payments is one which allows a potential attacker to take control of the user's phone number without the knowledge of the telecommunications operator - such abuses have occurred in the past.

Is the request to confirm the online payment limited in time?

The request to confirm the online payment is limited in time to 7 minutes and 30 seconds. If you do not confirm it within this time, the claim will expire and the online payment will not be made, so you will have to repeat the purchase.

What should I do if I already have MOJ@SKB mobile bank?

If you already have MOJ@SKB mobile bank, you do not need to do anything and you are ready for a new way of confirming online payments. We will inform you in advance about the exact introduction of this via SMS. For this purpose check if you have the correct contact information. You can do this via the selection menu in MOJ@SKB mobile bank (Menu-User data). In case the displayed data is incorrect or missing, click '…' at the bottom right and select Edit my data.

What should I do if I already have SKB NET online bank and I don't have MOJ@SKB mobile bank yet?

If you are already an user of the SKB NET online bank, you can activate MOJ@SKB mobile bank within SKB NET.

What should I do if I don't have MOJ@SKB mobile bank and SKB NET online bank yet?

You can quickly and easily arrange it by visiting the branch. Make an appointment at a personal banker or through the Contact Center on +386 1 471 55 55.

As a natural person I have MOJ@SKB mobile bank, but as a legal entity I do not have it. What does this mean for confirming online payments?

Rekono OnePass operates at the user level and does not distinguish between physical and legal users. When a payment card holder activates one card at a certain bank, all payment cards at that bank are activated. In practice, this means that when a payment card holder activates Rekono OnePass, he uses it to confirm all online payments, regardless of whether he has a MOJ@SKB mobile bank as a natural person.

How can I verify online payments if I don't have a smartphone?

If you do not have a smartphone, you can confirm online payments using Rekono services. On the Rekono website, select Control Panel, create an account, and activate 3D-Secure. To activate, it is necessary to set a 4-digit static password, add a bank and specify Rekono SMS OTP.

Why do I still receive SMS OTP when making certain online purchases?

The PSD2 regulation prescribes strong authentication for the area of the European Union (EU) - in the area outside the EU, such online shopping will continue to take place via a one-time password received in the SMS OTP. Also, certain merchants within the EU may not yet have migrated to the new standard and will therefore continue to validate online payments via one-time SMS OTP passwords.

Display all

Frequently asked questions

Why do I still receive SMS OTP when making certain online purchases?

The PSD2 regulation prescribes strong authentication for the area of the European Union (EU) - in the area outside the EU, such online shopping will continue to take place via a one-time password received in the SMS OTP. Also, certain merchants within the EU may not yet have migrated to the new standard and will therefore continue to validate online payments via one-time SMS OTP passwords.

How can I verify online payments if I don't have a smartphone?

If you do not have a smartphone, you can confirm online payments using Rekono services. On the Rekono website, select Control Panel, create an account, and activate 3D-Secure. To activate, it is necessary to set a 4-digit static password, add a bank and specify Rekono SMS OTP.

Is it safe to enter card information in the Rekono OnePass app?

The personal data (PIN number) entered by the user is never stored in the mobile application or on Rekono systems, as the connection to the user is made via BankartID, which is a tokenized value. A mobile app, not Rekono as a system, never stores sensitive data. All downloads are made in a secure way - in encrypted form, with the PAN encrypted on the user's side.

As a natural person I have MOJ@SKB mobile bank, but as a legal entity I do not have it. What does this mean for confirming online payments?

Rekono OnePass operates at the user level and does not distinguish between physical and legal users. When a payment card holder activates one card at a certain bank, all payment cards at that bank are activated. In practice, this means that when a payment card holder activates Rekono OnePass, he uses it to confirm all online payments, regardless of whether he has a MOJ@SKB mobile bank as a natural person.

Do you need to pay for Rekono OnePass usage?

Rekono OnePass is free of charge for SKB payment card holders.

For whom is Rekono OnePass intended for use among business persons?

For payment card holders who do not have the conditions to obtain MOJ@SKB mobile bank (they are not authorized on the account or the company uses MULTI SKB NET).

For whom is Rekono OnePass intended to be used between natural persons?

For payment card holders who do not have an open personal account with SKB d.d. and pay card account obligations with another bank and proxies.

Can there be multiple online payment confirmation requests in Rekono OnePass at the same time?

Yes. In the Rekono OnePass app you may have several requests to confirm online purchases, all with time limits.

Is the request for confirmation of online payment in Rekono OnePass limited in time?

The request to confirm the online payment in the Rekono OnePass application is limited to 5 minutes. If you do not confirm it within this time, the claim will expire and the online payment will not be made, so in this case you will have to repeat the purchase.

Why is it no longer considered secure to verify online payments via SMS?

The critical vulnerability in the existing confirmation of online payments is mainly the vulnerability that allows a potential attacker to take control of the user's phone number without the knowledge of the telecommunications operator - such abuses have occurred in the past.

Display all

Are you perhaps also interested in