Help Centre

Common Login Errors

Incorrect Password

There are a few reasons you may receive this notification:

• Incorrect password entry. Passwords are case sensitive.
• Your RBC PayEdge password must be updated every 90 days. When you go to sign in after this time, you will receive an expired password notification. Use the Forgot Password link on the sign-in page to reset your password. You will receive an email with a link to create a new password which expires in 24 hours. Please ensure you select a new password that meets the security criteria.

Too many login attempts

You have ten attempts to login to your account. After the tenth try, you will be locked out for 30 mins. After this time has passed, you may try again.

Incorrect Two Factor Authentication

The two-factor authentication code is only valid for 5 minutes. If you do not enter it within the 5 minute window, you can click ‘Resend Code’ and another code will be sent to your mobile number. Note: if you receive multiple Authentication Codes at any time, please use the most recent code to sign in. The codes are case-sensitive and must be entered exactly as displayed.

Two Factor Authentication code not received

If you have recently changed your mobile number, but have not changed it in the RBC PayEdge platform, you will need to update it to receive your Two-Factor Authentication (2FA) code.

Contact your Super Admin who can update your mobile number under Settings, Manage Access, Users. Once the Super Admin has updated your mobile number, you can verify it under Settings,Manage Profile, User Settings.

FRAUD PREVENTION CHECKLIST

• It is recommended that payment initiation and approval responsibilities are assigned to two separate individuals whenever possible.
• Access official RBC PayEdge login sites directly from RBC’s website
• Ensure Two-Factor Authentication (2FA) set-up is complete
• An approval rule for payments in RBC PayEdge is recommended
• Remove inactive users promptly
• Audit all tokens regularly and never share tokens with anyone
• Physically secure hardware tokens
• Monitor account activity daily and reconcile cash inflows and outflows regularly
• Never leave your computer unattended and log out after each session
• Use secure networks only (no public WiFi)
• Look for the lock icon and https:// in your browser’s address bar / URL
• Clear browser cache and temporary files regularly
• Keep anti-virus, firewall and anti-spyware updated
• Download security patches from software providers
• Review approval rules and logs regularly