One-Time Passcode (OTP) Secure Online Transactions Are Here
Changes to Secure Online Transactions
We have enhanced the security of your online transactions. Effective March 2, 2026, One-Time Passcodes (OTP) will be sent to GFCU cardholders when they are attempting to make online transactions that exhibit higher levels of risk.
What are the benefits for you, the cardholder?
- Fraud Protection: You gain an additional layer of security during online transactions.
- Ease of Use: OTP provides a seamless and user-friendly authentication process within the merchant’s website or app.
- Sense of Security: Seeing transaction-specific details in OTP messages, such as purchase amounts, will reassure you that GFCU is proactively protecting you and your account(s).
How does it work?
- When you go to check out on a website and enter your card information, you will be prompted with a Transaction Verification screen.
- You will select where you would like to receive the verification code and click Continue.
- A text message will come to your mobile phone (sample below) with a code and warning to not share the code with anyone.
- You will then enter the verification code on the website, and if all information is correct, it will process the transaction.

When did this take effect?
Monday, March 2, 2026
Will this alert happen for both my debit card and credit card?
Yes, alerts will happen on both debit and credit card online transactions that have a higher risk level. Requests for codes happen if the website or the transaction itself has a higher risk of being fraudulent. Example: foreign website.
Does this alert only happen when making purchases online?
Yes
You can read the One-Time Passcode Terms and Conditions by clicking here.
