Software m-Token Postbank

Home
Digital Banking
Software m-Token Postbank
Back

In order to increase the security of online payments through e-Postbank and online card transactions, we implemented a new tool for payment confirmation.

m-Token Postbank is a mobile application used for payment authorization in a secure and easy way. m-Token Postbank performs two-factor authentication of the user and creates a dynamic linking between every transaction and confirmation of such transaction, which meets the regulatory requirements imposed by the updated Payment Service Directive (PSD2).

With m-Token Postbank, you have the freedom to manage your finances remotely without need of complex installations that require technical knowledge. All you need is a smartphone with Android (5.1+) or iOS (9.0+) operation system.

 Important notice! After registration for m-Token every third-party payment should be confirmed with the application.
  • How to request and activate m-Token Postbank:

1. Install m-Token Postbank application from the App Store, Google Play или AppGallery. The usage of application is free of charge.

2. Log in to your e-Postbank profile. If you do not have a registration, you can register online here or visit the nearest bank office.

3. Request a software token through your Internet banking > Profile > m-Token management > Request new m-Token.

  • If you did not request a software token during your initial login to the application, you can activate it later when initiating a transfer by clicking the "Activate m-Token Postbank" button.

You will receive two activation codes - via Viber/SMS and e-mail, sent respectively to the mobile number and to the e-mail address, provided by you to the bank. Start the m-Token Postbank application on your mobile device and enter the two codes received in the appropriate fields.

4. Set a 6-digit PIN code for access to the application.

  • How to use m-Token Postbank for transfers through e-Postbank?
 

1. Create a transfer to a third party through your internet banking. When you are sending the payment,  a new confirmation window will appear on the screen for m-Token confirmation.

2. You will receive a Push notification on your mobile device. Open the notification and log-in to m-Token Postbank with your PIN or biometric data. Check the payment details and confirm the payment.

If you do not receive the Push notification, you can select "QR Code authorization" in the window for software token confirmation in e-Postbank. The QR code contains the payment details which will be displayed at the screen of application. You have to scan the code after unlocking the m-Token Postbank and selecting "QR Code authorization". Confirm the payment in the application after making sure that the data is correct.

  • What are the benefits of using a software token:

1.Easy and quick activation process – you have to start software token activation through your e-Postbank profile, menu Security >> Token management without visiting bank branch.

2.Does not require installation of different components and settings – all you need is a smartphone with compatible version of the operating system.

3.Easy and secure access - the application is accessed with a PIN or biometric data. During the activation, you will be required to choose a 6 digits PIN.  After login the application, you will have an option to set biometric for login.

4.Fast and convenient payment confirmation - you will receive a push notification on your smartphone for every payment, which you have to confirm. After opening the notification, you will see information about the details of the transaction that you confirm and you will be able to confirm or reject the transaction.

5.High security - for each operation ordered through e-Postbank you will receive its details on your phone before confirmation. This way, you will have confidence that the payment transaction is correctly entered and will be executed the way you ordered it.

  • What are the functionalities of m-Postbank:

1.Authorize payments ordered through e-Postbank

2.Confirm card payments at merchant sites marked with Mastercard Identity Check and Visa Secure

3.Change your PIN code or set biometric for login

4.You can migrate the token to a new device (when changing your smartphone you can migrate the token easy and fast with no need of new activation).

 

I. General information

  • What is m-Token Postbank?

m-Token Postbank is a mobile application for smartphones. The application ensures strong customer authentication and payment confirmation in a secure way when confirming various payment and non-payment financial operations in an online environment. m-Token Postbank ensures maximum payment security and fully complies with the regulatory requirements of the Payment Services Directive (PSD2).

  • What do I need to use m-Token Postbank?

To use the m-Token Postbank software token, you need to have a smartphone with iOS 8+ or Android 5.1+ and internet access. You can download it from the App Store, Google Play and App Gallery respectively, depending on your operating system.

  • How do I activate m-Token Postbank?

You can activate m-Token Postbank through your e-Postbank Internet banking profile. After login into e-Postbank, select Security menu >> Token Management.

In order to activate token and to confirm your payments we need to have your correct data – mobile phone number and email address.

In case you want to request change of your correspondence information you should visit the nearest bank office. 

  • How many tokens can I have?

Each user can have only one software token, which is used to confirm transfers in all his e-Postbank profiles (in case there are more than one) and online card transactions. The token will be automatically added to all profiles.

  • How many tokens can have on one device?

Only one software token per device.

  • What should I do if I change my smartphone?

You do not need to deactivate the token if you change your device. For your convenience, there is an option in the Settings menu in the app to migrate the token from one to another device. Select Settings menu, after that Migrate token, the system requires a confirmation to for migration. After confirming that you want the token to be migrated to another device, the activation codes and QR code will appear on the screen. You have to enter the codes or to scan QR code in order to activate token to a new device.

  • I have more than one profile  (company and a personal account). Will the software token be active for all of my profiles?

Yes. The software token will be active for all profiles you have. Once you activate a software token, it will be automatically registered in all of your accounts.

  • Can I use the application on my smart watch?

No. You need a smartphone to use m-Token Postbank.

  • Can I install the application on my personal laptop/computer?

No. The application works on smartphones with Android or iOS.

After the migration, the token will only work on the new device.

II. Confirmation of payment transactions

  • What kind of operation need confirmation with token?

All internet and mobile banking operations (except for transfers between own  accounts), ONE wallet mobile wallet, Express banking digital zones, as well as credit, debit and prepaid card payments at merchants participating in the Visa Secure or Mastercard Identity Check programs , will be confirmed with m-Token Postbank.

  • How will I confirm the payments with m-Token?

When creating a new transfer or other action in digital channels, the system will require confirmation of payment with m-Token Postbank.

On the mobile phone on which m-Token Postbank is installed, you will receive a Push notification, which you must select to enter the application. After making sure that the data for the operation is correct, you have the opportunity to confirm it.

  • I didn’t receive push notifications. What can I do?

Check if notifications from the app are enabled on your device, and if notifications are enabled in Settings >> Permissions in the app.

  • How do I confirm a payment if I do not receive a push notification?

In case you do not receive push notifications, you can confirm your operations by starting m-Token Postbank. In the "Pending" menu you will find a list of all operations that are waiting for confirmation and whose validity has not expired.

Another way you can use to confirm transfers in e-Postbank is by scanning a QR code. After you have created the transfer in e-Postbank, select the "QR code" option. In the m-Token Postbank application, select the "QR code" menu and scan the code. Confirm the payment after making sure that the details are correct.

  • What should I do if I don't recognize the payment I received a notification for?

In case you do not recognize the transaction for which you received a notification from the application, you should cancel it and contact the Customer Service Center.

  • Can I confirm more than one payment at a time?

Yes, both with Push notification and QR code or directly in the "Pending" menu in m-Token Postbank.

Select the payments you want to confirm. Depending on the number of payments, you will see either details on each payment on the m-Token Postbank screen, or information about the first and the last recipient’s IBAN of the selected payments, the total number and the total amount of transfers (if the number of payments is lagre).

After confirmation in m-Token Postbank, payments should be sent via e-Postbank via the Send button.

  • I have already activated m-Token Postbank but I still cannot order transfers: 

- If you are registered online for the e-Postbank service, you need to visit a Postbank branch in order to get access to the full version of the service. After changing the registration you will be able to make transfers online.

- If you are registered for the service with passive rights you will not be able to make payments to third parties. You can request a right change at a Postbank branch.

  • What is the meaning of the control number when I confirm mass/payroll payment?

The control number is a calculated (SHA256) code that allows you to verify the batch payment file.

At your screen, you can see the first 5 and last 5 symbols of the hash code. When you confirm the file through m-Token, you have to check that these characters match on both screens (e-Postbank and m-Token Postbank). In case the numbers are different do not confirm the execution of the file!

  • How to make transfers through the m-Postbank mobile application?

In order to be able to make transfers through m-Postbank, you need to trust your mobile device through Certificate or QES.

 

III. Functionalities and technical issues related to m-Token Postbank

  • What should I do if I forget my PIN for access m-Token Postbank?

You need to request and activate a new software token. Open the app and select Menu Settings >> Deactivate Token. Confirm that you wish to deactivate the current software token and request and activate a new one in e-Postbank.

  • What should I do if I forget my PIN to access m-Token Postbank but I have already enabled access with biometric data?

In that case, you can continue to log in with already configured biometric data. To recover your PIN code, you need to activate a new token.

  • How do I deactivate m-Token Postbank?

You can deactivate the software token in two ways:

- Using your e-Postbank account, Profile menu >>  m-Token management >> Delete;

- Through the application m-Token Postbank, Settings menu >> Deactivate token.

  • What is the fee for using m-Token Postbank?

The application is free of charge.

  • Why is paying with m-Token Postbank more secure?
  1. The codes needed to activate m-Token Postbank are obtained through two independent channels - through an e-mail address and a mobile number that you have provided to the bank. The application can only be activated and used on one device that you own.
  2. Login to m-Token Postbank is done with a PIN code of your choice or with your biometric data.
  3. Any operation in the digital channels or with a card at a merchant participating in the secure payment programs Visa Secure and Mastercard Identity Check requires additional confirmation on your part.