News developments
UAE: Banks tighten security with biometrics and AI checks
Gulf News, 28 February 2026: UAE banks are strengthening digital‑security controls by phasing out SMS and email one‑time passwords and adopting biometric logins and AI‑based fraud detection.
Banks across the UAE have begun removing SMS and email‑based OTPs after new directives from the Central Bank required all licensed financial institutions to discontinue these methods by the end of next month. Under the updated authentication framework, customers now approve transactions directly within banking apps using biometrics, facial recognition or secure in‑app PIN verification.
Regulators stated that the shift forms part of a broader 2026 initiative aimed at strengthening fraud prevention, tightening AI governance and enhancing operational resilience. Fraud‑control specialists noted that the rules require new capabilities, including detecting active calls and screen‑sharing attempts, and encourage the use of behavioural intelligence to interrupt real‑time scams.
Industry experts explained that impersonation scams, phishing attempts and SIM‑swap attacks have increased, reinforcing the need to retire legacy authentication mechanisms. Banks confirmed that the new systems will support routine digital activities such as card payments, online shopping and transfers while reducing exposure to fraud.
The new security framework will continue rolling out across the sector, with smaller institutions now accelerating compliance to meet the Central Bank’s deadline.
For more news and content, try Lexis Middle East. Click on lexis.ae/demo to begin your free trial of Lexis® Middle East platform.
You can also explore the legal landscape by subscribing to our Weekly Newsletter.
Want to learn more about Lexis® Middle East? Visit https://www.lexis.ae/lexis-middle-east-law/.