SMS One Time Passcode (OTP)

To help you bank safely, we may need to text you a code to make sure it’s you buying online or carrying out other actions.

What is an SMS One Time Passcode (OTP)?

An OTP is a unique 6-digit code. It helps to keep you safe from fraud.

More about One Time Passcodes

  • There are various times where you could get one, such as when you buy online or change your address.

    We’ll send a passcode to your mobile phone to check it’s you online.

    Please make sure we have your current mobile number.

  • Once we send a passcode, a pop-up should appear on your screen. You’ll need to enter the code into this pop-up to confirm it’s you.

    If you enter the wrong OTP a set number of times, you’ll need to call us before starting again.

    You won’t be charged for receiving an OTP.

  • An OTP is for your eyes only. Never share it with anyone, not even your bank. Only enter the code when prompted on screen.

    If anyone calls to ask for an OTP, hang up the phone. This is a common scam that fraudsters use.

    Fraudsters will use all kinds of reasons to try to get an OTP from you, such as:

    • Refund your account
    • Secure your account. 
    • Stop a payment.

    Remember: nobody should ever call to ask for a code.

  • Before you use a passcode, check the payment details to make sure you’re buying:

    • The item you want.
    • At the right price.
    • From a genuine seller.
  • Take Five

    You can get straight forward, impartial advice on how to avoid scams from Take Five.

    Action Fraud

    You can report a crime or get general advice from Action Fraud. They help banks and other companies combat fraud.

    Get Safe Online

    They offer advice on how to keep yourself and your devices safe from fraud.

    UK Finance

    UK Finance is there to support customers and to help make sure it's safe to bank.

    Prudential Regulation Authority (PRA)

    The PRA is part of the Bank of England. Their role is to make sure banks act safely and reduce the chance of them losing money.

    Financial Conduct Authority (FCA)

    The FCA is there to make sure banks work well so customers are protected and get a fair deal.

    CIFAS

    CIFAS can help to protect your identity. They can stop fraudsters from using your details to apply for things in your name.

    Cyber Aware

    This is a government site that gives advice on how to stay safe online.

    ScamSmart

    This is part of the FCA site. You can use it to check on an investment or pension deals to help you avoid scams.

    Bank of Scotland does not control the content of any of the websites linked to on this page.

Think you’ve fallen for a scam?

You should contact us right away if you think you’ve been scammed. We can then guide you on what to do next.

Contact us now

Add or change your telephone number

Use these steps to add or change your telephone number:

It's easy to add or update your telephone number.

Use our Mobile Banking app, log in to Internet Banking. visit us in branch or call us to add or update this.

More about adding or updating your phone number

Bank of Scotland will never ask you to:

  • Share your account details like user ID, password and memorable information.
  • Tell us your Personal Security Number (PSN) for Telephone Banking. 
  • Tell us your PIN code or card expiry date.
  • Move money to another account.

Bank of Scotland plc. Registered in Scotland No. SC327000. Registered Office: The Mound, Edinburgh EH1 1YZ. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority under registration number 169628.