What is Second-Factor Authentication and how does it works?
Second-factor authentication (2FA) refers to the verification of a user with a unique and randomly generated password from a device that he/she owns that is linked to his/her online Service Provider.
A basic 2FA platform requires a user to receive a one-time password (OTP), either via a physical device, or through a text message to his/her personal electronic devices (such as handphone), to complete the transaction.
What is the purpose of 2FA?
The 2FA provides substantially better security and makes it much more difficult for an attacker to impersonate you and access your computer, accounts, or other resources.
Is 2FA compulsory for trading through POEMS?
Phillip Securities is committed to protecting the security of our customers, so we encourage you to use 2FA to safeguard your online trading. However, at this moment, 2FA is not compulsory.
Note: With the launch of 2FA, clients are required to update to POEMS SG iPhone App v1.3.12. Clients using iOS 4 and below must update their iOS to continue using this new version.
Will my transaction costs go up as a result of the brokers implementing 2FA?
No, your transaction fees will remain the same. Customers will not be required to pay for any additional costs.
What if I lost my 2FA OneKey device and urgently need to trade online?
You can contact your respective trading representative to execute the trades.
What do I need to utilize 2FA when I trade with POEMS?
You will need to register for a 2FA token - OneKey via POEMS and link it up to start using the 2FA feature.
What is OneKey?
OneKey is the product name of the 2FA security device from Assurity, a wholly-owned subsidiary of the Infocomm Development Authority of Singapore ("IDA").
How do I get my OneKey device?
You can login to POEMS and use the link provided to register for the OneKey device. This device is issued free to all Singapore Citizens and Permanent Residents who are account holders of Phillip Securities Pte Ltd.
Please follow steps below to obtain the OneKey device:
- Login to POEMS at www.poems.com.sg and click the 2FA banner to go to Assurity Web Portal for registration
- Follow the on-screen instructions on Assurity Web Portal to register for the 2FA device. For more information about registration guide, please visit http://www.onekey.sg/your-onekey/register.html
- Please activate the device after receiving it, for more information about activation guide, please visit http://www.onekey.sg/your-onekey/activate.html
- Link your 2FA device to POEMS
How about for foreigners who are residents of Singapore, can they sign up for 2FA?
*FIN holders will be able to sign up for 2FA by registering for their 2FA OneKey devices at the Assurity office. FIN cards and passports will be required for verification. Alternatively, they can register 2FA OneKey device directly via Assurity online portal (https://portal.assurity.sg).
For other foreign Passport holders, they will be able to register for their 2FA OneKey devices in the near future. More information will be provided in due course.
Assurity office address:
10 Anson Road
#06-19 International Plaza
*FIN refers to Foreign Identification Number, it is a unique identification number assigned to foreigners who are issued with immigration & work passes in Singapore.
How about Singaporeans who are residing overseas? How do they register and get their 2FA OneKey devices?
They can login to POEMS and use the registration link provided to register for the OneKey device. They are required to enter a mailing address and Assurity will distribute the device to the mailing address accordingly. However, please take note that the address MUST be a Singapore mailing address as per NRIC. Alternatively, if the client would like to use another mailing address, they are required to go down to OneKey Customer Care Centre for verification.
What is the cost of each device and how long can the battery last?
The first device issued to Singaporeans and Permanent Residences is free. Replacement devices cost SGD$11 inclusive of GST each. Devices for FIN holders and passport holders cost SGD$11 inclusive of GST.
The battery life on this device is expected to last for five years.
For more information, please refer to the Assurity’s website http://www.onekey.sg/faq.htm.
If I do not apply for 2FA OneKey device, will my access to POEMS be restricted?
Customers are encouraged to opt-in early for this feature. Currently, customers who choose not to use the feature will still be able to access POEMS.
When will I be required to use 2FA Onkey device for online trading?
Once you have successfully linked your OneKey device
to POEMS, for subsequent logins to POEMS Internet, you
will be required to enter a One-Time-Password (OTP) that
is generated by your OneKey device on certain modules
which required validation and authentication. However,
currently POEMS Mobile and ProTrader do not require 2FA.
For registration and linkage of your OneKey to POEMS,
login to POEMS Internet, click on the 2FA banner in the
Attention page and follow the on-screen.
What should I do if I lost my OneKey device?
Please contact the OneKey Customer Care Centre Help Desk at (65) 65663539 or log in to your OneKey account to suspend your device using your SMS OTP (One Time Password) and to get a replacement device from Assurity
* To suspend means to block the use of your token for a certain period of time and you can re-activate your device for use in the future.
For more information, please refer to the Assurity’s website at
How do I delink OneKey from my account?
Follow these steps to delink your OneKey:
Stocks >> ACCT MGMT >> 2FA-OneKey >> Link New OneKey >> Delink this OneKey
If I lost my mobile phone, how do I delink 2FA - Mobile?
You can login to Assurity OneKey Portal to delete the mobile number or call OneKey Customer Care Centre Help Desk at (65) 6566 3539.
How do I change my mobile number in 2FA POEMS?
Please login to Assurity OneKey Portal to update your new mobile number first followed by updating to POEMS under ACCT MGMT >> 2FA-OneKey module.
If I delink my existing 2FA now, and link up with my newly received 2FA OneKey device, how long will it take to activate?
The activation will take place with immediate effect.
Who should I contact if I encounter difficulties in 2FA login despite all credentials being keyed in correctly?
Please call OneKey Customer Care Centre Help Desk at (65) 6566 3539.
Can I apply and collect the 2FA OneKey device from Phillip Investor Centres?
No, you can apply online through POEMS and will receive the device by mail from Assurity within three working days upon successful registration. Alternately, you can register at Assurity Office and the device will be issued on the spot.
10 Anson Road
#06-19 International Plaza
Can I apply for both 2FA OneKey device and the SMS service?
Yes, you may apply for both. However, do note that the SMS service should serve as a backup.
Can I register foreign mobile number for SMS service?
No. You can only register using local Singapore mobile number. Currently, Assurity does not support SMS service for foreign mobile number.
If I key in the OTP wrongly, will my POEMS account be suspended?
No, your POEMS account will not be suspended.
Who should I contact when my 2FA OneKey becomes locked?
Please call OneKey Customer Care Centre Help Desk at (65) 65663539.
Am I able to linkup my joint account with my 2FA OneKey device that is also linked with an existing individual POEMS account?
Yes. For joint account holders, both parties can link their 2FA OneKey devices to the joint account. A client can also link OneKey to his/her own accounts.
At the moment, both account holders MUST link their 2FA OneKey devices to the joint account to enable the 2FA.
If joint account holders have existing 2FA OneKey devices each, can I linkup my personal/ individual POEMS account to both devices?
No. You can only link your personal/ individual POEMS account to your personal 2FA OneKey device.
I have an existing token with another broker, can I link it to my POEMS Account?
POEMS only supports 2FA OneKey device issued by Assurity.
If the other broker also supports the 2FA OneKey device by Assurity, you will be able to use the same device to link up with your POEMS account.
2FA tokens issued by other providers are not supported.
Where can I find out more information about OneKey device?
Please logon to http://www.onekey.sg/faq.html for more OneKey device details.