American Express SafeKey helps prevent unauthorised online use of your American Express® Card by confirming your identity with a dynamic
One-Time Password (OTP) for each transaction you make with participating online merchants.
Yes, American Express provides online protection for all our customers through our Internet Fraud Protection & Guarantee*. American Express SafeKey is launched as a part of our continuous efforts to let our customers shop in a safer and more secure online environment.
*We will guarantee protection against fraudulent transactions on your Card, provided you have taken the responsibility to notify us immediately, and you have complied with your Card’s Terms and Conditions.
No, you do not have to pay for this service. However, please check with your mobile and/or email service provider to see if charges for SMS or email apply to your mobile and/or email account.
You are automatically enrolled for American Express SafeKey. There is no additional step that you need to take for your existing Cards, when you get new Cards, or when you open additional new accounts. All you need to ensure is that your mobile number and/or email address on file with American Express is updated for all of your American Express Cards. This also includes Supplementary Cards that you hold.
You can proactively confirm the mobile phone number and email address you have on file, for all your American Express Cards either by logging in online at https://www.americanexpress.co.in or by calling the Helpline number mentioned at the back of your Card.
When you enter your American Express Card number for payment at a participating online merchant, an American Express SafeKey window will appear automatically. You will be prompted to enter your OTP which will be sent to your mobile phone and/or email address that you have on file for that account. Once your OTP is verified, your online transaction will be processed.
When you check out with American Express SafeKey, the masked mobile phone number and email address that we have attempted to send the OTP to, are displayed. We will attempt to send the OTP to both your mobile phone and your email address; if one is not updated, you can use the other to obtain the OTP that was sent. If both of them are not updated, please click the update contact details link on the OTP entry screen displayed on the merchant page. On the update contact details screen, please correctly answer the security questions and your correct mobile phone number and/or email address. Once completed, another OTP will be sent to these new details, and you can complete your purchase. If you experience any difficulty, please call the Helpline number mentioned at the back of your Card.
The OTP helps to protect you against online fraud. It is a secure way to authenticate that the customer using an American Express Card for an online purchase is the rightful owner.
You will receive your OTP via SMS and/or email depending on what contact details you have put on file for your American Express Card that you are using for your purchase.
No. This measure only applies for purchases made at merchant websites that support the American Express SafeKey authentication protocols.
Yes, you need to provide your mobile number or email address to receive an OTP via SMS and/or email. The SMS facility is only available for mobile members in India. If you do not have an Indian mobile number, you can receive the OTP via email only.
You can update your contact details in multiple ways including: over the phone, when you log in at https://www.americanexpress.co.in to manage your account online, or via the update contact details link on the OTP entry page during check out. Any updates you make to your contact details for your account alerts will automatically apply to SafeKey.
The OTP is valid for 10 minutes from when it is generated.
Participating online merchants will display the American Express SafeKey logo on their websites.
If the merchant is not American Express SafeKey compliant, you will not be asked for your OTP. Only American Express SafeKey merchant sites require the American Express SafeKey OTP.
Yes, the account numbers for each Card are different and different contact details can be added for each Primary, Additional, and Supplementary Card you have associated with your account. Simply ensure that the correct contact details are updated on file for each Primary, Additional, and Supplementary Card.
No, each Card can have a different mobile number or email address associated with it. If a mobile number or email address has not been put on file for the Additional and Supplementary Cards, please update the details on file for the Cards as needed.
No, the contact detail update for the Additional or Supplementary Card will not change any details on file for the Primary Card or other Additional/Supplementary Cards. It applies to the Unique Card only.
The OTP is valid for 10 minutes after it is generated by the transaction. If you click the “Resend OTP” button within that 10 minutes window, then the same OTP will be re-sent to you. If you click “Resend OTP” button after the 10 minutes window expires, then you will need to start the entire transaction process again which will generate a new OTP.
If you ever suspect that fraudulent contact information changes or purchases have been made on your American Express Card account, please contact Customer Services immediately to report it by calling the Helpline number mentioned on the back of your Card.
No, you can only use Cards issued by American Express Banking Corp., India, excluding Business Travel Account (BTA) and Prepaid Cards.