How do the approval options in the BBVA App work?

State-of-the-art approval options are a key component in digital banking security procedures. They allow you to confirm banking transactions directly via your registered device, without going through external channels such as text messages.

Unlike traditional methods, today's approval processes involve both your device and your identity. This not only makes transactions easier – they're also much better protected.

This article explains how the approval options work, how they differ from previous solutions, and why your smartphone plays a central role.

Earlier methods, such as receiving a TAN via text, use an external communication channel. The confirmation of transactions occurs via the cellular network, independent of the actual banking process. State-of-the art approval methods are changing this approach.

Now approval is given directly via a registered device, and usually within the banking app. Transactions are confirmed through a secure connection between the bank and the end device. For this reason, the crucial difference no longer lies in where a TAN arrives, but in which device is authorized to approve it.

Traditional options, such as TANs, PINs or passwords, rely primarily on knowledge.

New approval options combine several security factors:

• Possession: the registered device
• Identity: e.g. biometric features such as fingerprint or face recognition

This combination increases security, as a transaction cannot be initiated solely by knowing the login credentials.

With text-based processes, approval is granted via a separate channel. Users switch between the banking interface and the message. State-of-the-art solutions integrate the approval process directly into the process flow:  Transactions are confirmed within the App, without any disruptions in the transmission of data.

This leads to:

• faster processes
• less dependence on external factors
• a more consistent user experience
  

The important thing to note is that earlier options such as text message have not completely disappeared. They will continue to be used in certain cases. At the same time, banks are increasingly relying on app-based approval options, as these:

• are more closely linked to the device
• function independently of external channels
• enable additional security mechanisms
  

Biometric procedures are a key component of state-of-the-art approval options. Your identity is confirmed via unique characteristics such as fingerprint or face recognition.

Approval is granted directly via your registered device's biometric features. This ensures that only you can authorize transactions, without having to enter a PIN or password.

The approval via click is a secure, non-biometric approval option. It is based on a so-called soft token method where a unique, device-specific approval code is generated for each transaction.

The approval process occurs directly in the BBVA App:  With one click, the transaction is confirmed, and in the background a specific token is generated that is assigned to exactly this request and to your registered device.

From a technical point of view, the process for generating this token does not differ from that for biometric authentication. The only difference lies in how it is confirmed:

• Approval via biometrics also includes an identity verification.
• With approval via click, confirmation is obtained without any biometric verification.

This means that approval via click offers a device-based security solution that is equally valid, and is especially intended for users who consciously choose to avoid biometrics.

With secure approval methods, you can directly manage many banking transactions yourself – quickly and without going through customer service.

For example, you can:

• approve transfers
• confirm card payments
• authorize logins to your online banking
• manage transfer limits yourself, up to the preset maximum amounts

Activation takes only a few minutes and is done directly in the App:

• Open the BBVA App: In the Menu, go to Security and Data Protection > Signature and Access Methods
• Once activated, your device is registered.
• Confirmation: Depending on the situation, verification will occur via debit card or selfie, among other methods.