How we protect your online purchases
Strong Customer Authentication (SCA) regulations add an extra layer of security at checkout, making it even easier to approve your online payments and safer to shop online.
How it works
- You can still use your debit or credit card, but now we'll ask you to confirm your identity through Visa Secure or Mastercard Identity Check. You can do this in our App using Face ID, your fingerprint or security details.You can still use your debit or credit card, but now we'll ask you to confirm your identity through Visa Secure or Mastercard Identity Check. You can do this in our App using Face ID, your fingerprint or security details.
- If you don't have our App, don't worry – you’ll still be sent a one-time passcode, but we’ve added an extra layer of security using behavioural biometrics to help us confirm it’s you. To make sure you and all cardholders get your passcodes, please log on to your online account and check your phone number is correct.If you don't have our App, don't worry – you’ll still be sent a one-time passcode, but we’ve added an extra layer of security using behavioural biometrics to help us confirm it’s you. To make sure you and all cardholders get your passcodes, please log on to your online account and check your phone number is correct.
- The web pages you see when making a payment may look slightly different from the mobile screens below. The web pages you see when making a payment may look slightly different from the mobile screens below.
What is a one-time passcode?
- It’s is a six-digit code that we may send to your phone when you buy things online, to check it's you. We'll ask you to choose the phone number we send it to, then prompt you to enter the code to complete the payment.It’s is a six-digit code that we may send to your phone when you buy things online, to check it's you. We'll ask you to choose the phone number we send it to, then prompt you to enter the code to complete the payment.
- How do I know the passcode is from Tesco Bank? How do I know the passcode is from Tesco Bank?
- You'll see the sender of the text is 'Tesco Bank' and will include the name of the company you're making a purchase to.You'll see the sender of the text is 'Tesco Bank' and will include the name of the company you're making a purchase to.
- Treat your passcode as you would your PIN – never share it with anyone and remember, Tesco Bank will never ask you for this passcode.Treat your passcode as you would your PIN – never share it with anyone and remember, Tesco Bank will never ask you for this passcode.
What to do when you're asked to authorise a payment
- When you pay for something on a website or app, occasionally you'll be asked to authorise your payment in our App. You'll have 10 minutes to do this before the payment times out.When you pay for something on a website or app, occasionally you'll be asked to authorise your payment in our App. You'll have 10 minutes to do this before the payment times out.
- If you have push notifications turned on, we'll send a message to your mobile asking you to authorise the payment. Tap on the notification to be taken straight to the in-app authorisation page.If you have push notifications turned on, we'll send a message to your mobile asking you to authorise the payment. Tap on the notification to be taken straight to the in-app authorisation page.
- If you don't have push notifications switched on you can just tap on our App from your phone's home screen.If you don't have push notifications switched on you can just tap on our App from your phone's home screen.
Confirming your payment
- Check you're happy with the amount of your purchase and that the card details you're using are right.Check you're happy with the amount of your purchase and that the card details you're using are right.
- If you want to go ahead, just select 'Authorise'. Or, if you need to, you can cancel or report a suspicious payment from here too.If you want to go ahead, just select 'Authorise'. Or, if you need to, you can cancel or report a suspicious payment from here too.
- You'll confirm your identity using your preferred log in method.You'll confirm your identity using your preferred log in method.
- Now select 'Done' and go back to the retailer's website or app.Now select 'Done' and go back to the retailer's website or app.
Completing your payment
- Now you're back on the retailer's website or app, select the I've authorised the payment button.Now you're back on the retailer's website or app, select the I've authorised the payment button.
- The retailer will let you know you've successfully made your order.The retailer will let you know you've successfully made your order.
Behavioural Biometrics information
If you don’t use our Mobile App, to improve the security of your purchases we’ll send you a one-time passcode and also use something called ‘behavioural biometrics’. This helps us make sure it’s you making the purchase. The one-time passcode is still a secure code we’ll send to confirm it’s you.
Behavioural biometrics look at the unique ways you interact with your devices when you verify your identity while making an online payment. We’ll use things like the way you move your mouse, the speed you type and swipe. We’ll look to build up a profile of you over time which can help us check it’s you and not someone else making the purchase.
We only use this information to help protect you and don’t access or share any private data held on your device.
To meet our SCA requirements we use behavioural biometrics to make sure all of your online payments are as secure as possible to protect you from fraudsters making a payment using your card details. Fraud is on the rise in the UK and fraudsters often trick people into handing over their security information.
Behavioural biometrics do not require you to remember a password that can be mistakenly given to fraudsters, instead it allows us to build up a profile so that we can recognise it’s you without any effort on your part. The more confident we can be in authenticating your payment, the safer you are.
Our privacy policy gives more detail about how we use behavioural biometrics and our lawful grounds to process this data for this purpose.
Have more questions?
Get the answer you need by asking a question in the Community, a place to search for answers and find support, as well as ask questions and share knowledge with other customers.
Contact us, we're here to help
If you'd rather speak to someone, that's not a problem. Call our UK-based customer team on 0345 300 3511*. Our technical helpdesk lines are open 8am to 10pm, seven days a week.
If you have difficulties with your hearing or speech, contact us through the Relay UK app. You can find out how to use Relay UK on their website.
*This number may be included as part of any inclusive call minutes provided by your phone operator.