What it means

An extra layer of security

Before you complete a sensitive request that requires greater protection, you’ll get a prompt to enter a one-time verification code.

After your password, it serves as a second check to make sure it’s really you accessing your account.

No more personal verification questions

Don’t worry about having to remember the answers to your personal verification questions anymore. The one-time verification code replaces them.

Unique verification codes

A new 6-digit one-time verification code is generated for each sensitive transaction or request, but you’ll only need to enter the code once during each online banking session.

Each code is unique, and we’ll never contact or ask you to reveal the code over the phone.

How it protects

Register for online or mobile banking
Update your contact information
Add a new or change an existing Interac e-Transfer® contact
Add payees1
Make large payments
Reset your password

How it works

STEP 1

Select your contact method

Choose to get the code via text, push notification or voice call from the dropdown menu.

  Note: For account security, we no longer send one-time verification codes to personal or free email services and can’t leave a voicemail message.

Check which international numbers we can send verification codes to Opens in a new window..

Step 2

Enter your one-time verification code

Once you receive the code, enter it into the box to complete your transaction.

  Note: Verification codes expire in 10 minutes, so enter it as soon as possible to complete your transaction. If you enter your 6-digit one-time verification code incorrectly 3 times in a row, the code will expire.

Fraud prevention

We want to protect you from scams. Fraudsters may contact you, pretending to be a member of CIBC’s fraud team. They may claim your account’s been compromised due to suspicious activity. They may also ask you to share a 6-digit one-time verification code with them to protect your account. If anything like this happens, disconnect the call immediately and call the number on the back of your card.

Learn more about banking fraud about how CIBC is supporting Ukraine.

Ways to receive the code

Push notification

This is the most convenient way to get the code, especially while travelling, as all you need is to be connected to a Wi-Fi network. Push provides a stronger method of security and doesn’t require connection to a national cell phone network. 

You can receive the one-time verification code directly on your mobile device for most requests or transactions, with the exception of:

  • Registering for online or mobile banking
  • Resetting passwords 
  • Foreign Exchange (FX) transaction 

Text message 

Get the one-time verification code via text message. It’s convenient, arrives instantly and is easy to access in most countries while travelling. Make sure to enter the code within the body of the text message and not the number from which you got the text. Also, keep in mind that data charges may apply. 

Voice calls

If receiving a phone call is more convenient for you, get the one-time verification code via voice call. Make sure

  • your contact information is up-to-date so you can choose the one you need, and
  • that you say something to activate the recording when you answer the call.
Select phone providers may block toll-free numbers which prevents you from receiving the one-time verification code through a voice call. Check with your phone provider if you don’t receive the one-time verification code from CIBC.

What to do before you travel

Review your settings

Make sure the device you’ll be travelling with is set up to receive push notifications. Keep in mind you can only enable push notifications on one mobile device at a time. 

Confirm your contact information

Make sure your contact information is up-to-date. If you use a phone number registered to a region outside of Canada or the U.S., make sure it's an international number we can send verification codes to Opens in a new window..

When outside of a Wi-Fi network, make sure roaming is on, keeping in mind that data charges may apply.