Two-Factor Authentication (2FA) adds an extra layer of security by requiring two forms of identity verification, significantly reducing the risk of unauthorised access to your FSMOne account.

In addition to your login ID and pre-determined password, the second layer of verification involves a possession factor in the form of a Digital Token generated by the FSMOne mobile app on your linked device.

Implementing 2FA at login helps ensure that access to your personal and financial information with FSMOne is granted only upon successful identity verification.

No, SMS OTP 2FA will be phased out gradually for Personal account logins and transaction approvals effective from 5 February 2026. 

We are moving the 2FA to Digital Token authentication via FSMOne mobile apps for a faster, more secure 2FA experience to provide you with stronger protection against unauthorized access.

Notes: 

Corporate Accounts may continue to use SMS OTP for account login and transaction approvals via website access only.

SMS technology is slower and increasingly vulnerable to scams like interception and SIM swapping. The FSMOne Digital Token provides instant, encrypted approval that is locked to your personal device.

The Digital Token is a security software token in the FSMOne Mobile application. This enhancement allows you to log in, perform transactions, and update your account details securely without the need for a physical token.

For devices with bio-metric feature, you have the option of linking the digital token to your device's bio-metric feature as an additional security measure upon setting up the Digital Token. After linking, you will be required to use your device's bio-metric recognition whenever you use the digital token. 

You may link your FSMOne account to any device with the following Operating System (OS) version:

Apple devices: iOS 12 and above.

Android devices: Android 7.0 and above e.g. Samsung, HTC, Huawei, etc. 

To set up the Digital Token, you are required to download the FSMOne app and log in to your account. 

Once you login to the account, you may will prompt to setup for Digital Token for your account and you may click on “Set Up Digital Token” to proceed.

You are only able to link ONE account to ONE Digital Token.

Your Digital Token must be set up for your Personal Account and will be bound to your personal mobile device.

For your Corporate Account, you may access it via the FSMOne website only and the account login and transaction approvals will continue to use SMS OTP authentication.

This separation ensures stronger security for Personal Accounts while maintaining operational flexibility for Corporate Accounts.

No, each Digital Token is strictly bound to ONE mobile device only. The Digital Token cannot be linked to multiple devices.

Website: 

Step 1: Login to your FSMOne account by key in User ID and Password

Step 2: Click on “Authentication Now” to request for Digital Token on the Digital Authentication page

Step 3: Click on the push notification and verify the 6-digit code before you proceed to authorise the account login.

Mobile Apps: 

Step 1: Login to your FSMOne account by key in User ID and Password.

Step 2: If biometric has been switch on for digital token, the biometric authentication will pop up to request for your approval. Otherwise, there is no biometric authentication needed. 

Step 3: Upon verified, the account login will be completed. 

Remarks: 

• If you do not receive any push notification, you are advise to check on your own device setting if the notification permission is allow for FSMOne apps.

• Alternatively, you can also approve your transaction via mobile apps by clicking on Menu >> Digital Token >> Authenticate Request >> Authorise.

Website :
Yes, you can login your account with different device with the Digital Token authentication from Apps. 

Mobile Apps :
You are only able to proceed with the device that registered with the Digital Token.

Website:

Step 1: Login to your FSMOne account.

Step 2: After placing an order online or performing an account update, submit the request and a push notification from FSMOne mobile apps will be sent to your device.

Step 3: Click on the push notification and verify the 6-digit code before you proceed to authorise.

Step 4: Upon verified, the transaction or account update will be approved successfully.

Mobile Apps:

Step 1: Login to your FSMOne mobile app.

Step 2: After placing an order online or performing an account update, submit the request.   

Step 3: If biometric has been switch on for digital token, the biometric authentication will pop up to request for your approval. Otherwise, there is no biometric authentication needed

Step 4: Upon verified, the transaction or account update will be approved successfully.

Yes, any biometric record saved on your mobile device prior to linking can be used to approve Digital Token authentication. However, if you attempt to add a new biometric record after linking, the system will not allow it.

This means that any biometric record stored on your mobile device may be used to approve transactions or account updates in your FSMOne account.

Important: For security reasons, we recommend linking your device using only your own biometric data for Digital Token authentication, as any stored face or fingerprint on your mobile device may allow access to your account.

There will be no interruption in the usage of your digital token. You can continue using your device as your Digital Token even after changing your device screen lock.

If you have not enabled biometric authentication for your Digital Token, disabling biometric records on your device will not affect your Digital Token usage.

However, if you have enabled biometric authentication for your Digital Token and later disable the biometric records on your device, you will not be able to complete authentication requests. You will be prompted to re-enable the biometric settings on your device in order to proceed.

Your digital token will only be valid for 60 seconds. If your digital token has expired, you may click on “Resend token” to request for a new digital token. 

You may download the FSMOne mobile apps in your new device and proceed to login by using your User ID and password. From there, the system will prompt you to unlink your digital token from your previous device and you may proceed to relink it with your new device with the step below.

Step 1: Click “Yes, Unlink This Device.” on the reminder pop out.

Step 2: On the next page, enter your NRIC / Passport number (for foreigners) and email address for verification.

Step 3: Once the information is verified, an SMS OTP will be sent to your registered mobile number to complete the Digital Token setup.

Upon completion of the linking, you will see the new device name and the linked date displayed in your account. The digital token will be automatically unlinked from your previous device once the linkage has successfully completed on the new device.  

You may provide your new mobile number by sending an email request to clienthelp.my@fundsupermart.com.

Thereafter, we will contact you to conduct a phone verification to update your new mobile number in our system. Once your new mobile number has been updated, you may proceed to register the Digital Token on your new device.

Code expired error message: 

The digital token is valid for 60 seconds upon generation. If the authentication is not done within 60 seconds, this will result in a failed authentication. Please proceed to tap on “Authenticate Now” again.

Error message after authorise the transactions/account update: 

Please verify that the system date and time settings on your device are set accurately to local time. The digital token generated need to synchronises each time you login to your account. 

Yes, you will still be able to receive the Digital token authentication from your linked device provided that there is internet connection for your device.