RBC 2-Step Verification

How RBC Ensures Your Security

We’re committed to keeping your money safe. We have introduced 2-Step Verification and Multi-Factor Authentication in RBC Online Banking^{1legal disclaimer} and the RBC Mobile^{1legal disclaimer} app.

More Ways We Protect Your Money

2-Step Verification for Sign-in

You'll be notified any time you (or someone else) logs into your account, giving you the peace of mind that your accounts and information are safe.

Set Up 2-Step Verification

Protect Yourself From Fraud

Beware of fraudsters who may contact you pretending to be RBC employees.

RBC will never call, text, or email you to ask you for personal information like your account number, PIN, verification code, or password.

Authentication Methods

Client Card + PIN

Tap your Client Card on your mobile device, then enter your PIN. You might have to confirm your identity using biometrics.

You’ll need:

The latest version of the RBC Mobile app.
Your RBC Client Card.
Your trusted device, if you’re using Online Banking.

Tip: Ensure your push notifications are turned on in your mobile device settings

ID Verification

Scan the QR code with your mobile device’s camera, upload a photo of your government-issued ID and take a selfie.

You’ll need:

The latest version of the RBC Mobile app.
A small government-issued ID card such as a valid driver’s license, photo ID card or passport.
Your mobile device, if you’re using Online Banking.

Push Notification

You’ll receive a notification on your trusted device asking you to allow the transaction. You may be asked to enter your PIN.

You’ll need:

The latest version of the RBC Mobile app.
Your trusted device, if you’re using Online Banking.

Tip: Ensure your push notifications are turned on in your mobile device settings

Text Message

You’ll get a text message on your mobile device with a one-time verification code.

You'll need:

An up-to-date phone number in your RBC Profile.
Your trusted device, if you’re using Online Banking.

Personal Verification Questions

You’ll be asked to answer one of the personal verification questions you set for your account.

Frequently Asked Questions

What is 2-Step Verification?

2-Step Verification provides an extra layer of security to your Online and Mobile banking experience. Every time you log into your account, after entering your username and password, you will receive a notification on a trusted device asking you to allow the login. We may also ask you to verify your identity to complete certain banking operations, like sending an Interac e-Transfer.

This ensures that even if someone has your username and password, only you will be able to access your banking information and carry out transactions.

What is a trusted device?

A trusted device is the device you will get a notification on whenever we ask you to verify your identity with 2-Step Verification. It can be any personal mobile device (smartphone or tablet).

You can only set up one trusted device for 2-Step Verification, so it should be one that you own and use often. Public or shared devices, like a family tablet, should not be used as a trusted device.

Once you have chosen your trusted device, ensure that you have the most recent version of the RBC Mobile app installed on it.

Do I need a mobile phone to use 2-Step Verification?

You will need a personal mobile device for 2-Step Verification. This can be either a mobile phone or a tablet.

How do I use 2-Step Verification if my phone is lost or stolen?

If you don't have access to your trusted device, you can use the ID verification method to authenticate your identity and access your account. Please note that you need a smartphone or tablet to complete the ID verification process, but it doesn't have to be your trusted device.

I have turned off 2-Step Verification. Why do I keep receiving the verification prompts?

If we notice any suspicious activity in your account, you may be asked to confirm your identity even if you have chosen to turn off 2-Step Verification. We do this to better protect your money online.

What if I'm not receiving push notifications?

We'll only send push notifications to your trusted device, so make sure you’re checking that device. Also, check that your device has the latest version of the RBC Mobile app and that your push notifications are turned on in your device's settings.

What happens if my Client Card is lost, stolen or locked?

If your Client Card is lost or stolen, you should lock it first and then report it as lost or stolen so we can send you a new one. Even if your card is locked, you can still bank online and complete the 2-Step Verification process with a government-issued ID.

What happens if my Client Card PIN is locked?

If your Client Card PIN is locked, you can authenticate with a government-issued ID like a passport or a driver's license. If this verification method isn't available, you can reset your PIN by going to an ATM or point of sale machine or visiting an RBC branch.

Download the RBC Mobile app Today

Or text “RBC” to 722722 and we’ll send you the link.
Standard message rates may apply.

RBC Online Banking is provided by Royal Bank of Canada. RBC Mobile is operated by Royal Bank of Canada, RBC Direct Investing Inc. and RBC Dominion Securities Inc.

For a definition of an unauthorized transaction and for full details regarding the protections and limitations of the RBC Digital Banking Security Guarantee, please see your Electronic Access Agreement (opens in new window) and your Client Card Agreement for personal banking clients, and the Master Client Agreement for business clients. This guarantee is given by Royal Bank of Canada in connection with its Online and Mobile Banking services. Cardholders are not liable for losses resulting from circumstances beyond their control provided they have taken reasonable precautions to protect their Client Card and PIN (if applicable) as set out in the Client Card Agreement. Formerly known as the RBC Online Banking Security Guarantee.