SMS One Time Passcode (OTP)
To help you bank safely, we may need to text you a code to make sure it’s you buying online or carrying out other actions.
What is an SMS One Time Passcode (OTP)?
An OTP is a unique 6-digit code. It helps to keep you safe from fraud.
More about One Time Passcodes
There are various times where you could get one, such as when you buy online or change your address.
We’ll send a passcode to your mobile phone to check it’s you online.
Please make sure we have your current mobile number.
Once we send a passcode, a pop-up should appear on your screen. You’ll need to enter the code into this pop-up to confirm it’s you.
If you enter the wrong OTP a set number of times, you’ll need to call us before starting again.
You won’t be charged for receiving an OTP.
An OTP is for your eyes only. Never share it with anyone, not even your bank. Only enter the code when prompted on screen.
If anyone calls to ask for an OTP, hang up the phone. This is a common scam that fraudsters use.
Fraudsters will use all kinds of reasons to try to get an OTP from you, such as:
- Refund your account.
- Secure your account.
- Stop a payment.
Remember: nobody should ever call to ask for a code.
Before you use a passcode, check the payment details to make sure you’re buying:
- The item you want.
- At the right price.
- From a genuine seller.
You can get straight forward, impartial advice on how to avoid scams from Take Five.
You can report a crime or get general advice from Action Fraud. They help banks and other companies combat fraud.
They offer advice on how to keep yourself and your devices safe from fraud.
UK Finance is there to support customers and to help make sure it's safe to bank.
The PRA is part of the Bank of England. Their role is to make sure banks act safely and reduce the chance of them losing money.
The FCA is there to make sure banks work well so customers are protected and get a fair deal.
CIFAS can help to protect your identity. They can stop fraudsters from using your details to apply for things in your name.
This is a government site that gives advice on how to stay safe online.
This is part of the FCA site. You can use it to check on an investment or pension deals to help you avoid scams.
Halifax does not control the content of any of the websites linked to on this page.
Halifax will never ask you to:
- Share your account details like user ID, password and memorable information.
- Tell us your Personal Security Number (PSN) for Telephone Banking.
- Tell us your PIN code or card expiry date.
- Move money to another account.
Halifax is a division of Bank of Scotland plc. Registered in Scotland No. SC327000. Registered Office: The Mound, Edinburgh EH1 1YZ. Bank of Scotland plc is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority under registration number 169628.