Since the Coronavirus outbreak, WorldFirst has closely monitored the global situation. Our priority is to ensure continuity of service for our customers while taking appropriate measures to protect our employees.

Given the increase in UK cases, we have now encouraged employees to work remotely. They are able to operate normally using well-tested systems, and our teams are committed to ensure customer service is not impacted, but if there’s any delay in your calls or emails being answered please bear with us.

Standard SCA vs Authy App

With PSD2 casting a huge spotlight on the need to improve security in the payments space, ‘strong customer authentication’ (SCA) has been introduced as a key component in ensuring this happens.

Adding an extra layer of security onto the traditional username and password, two-factor authentication (2FA) is a crucial part of SCA. A common form of 2FA is the delivery of a one-time passcode that is sent to the mobile phone number associated to your account. Initially, Worldfirst delivered these codes by SMS. To greatly reduce the likelihood of fraudulent activity taking place should your login ever become compromised, Worldfirst are giving customers the choice to receive codes with the Authy app.

How it works

To further improve the authentication process, you can now use Authy, which allows a smoother, safer and quicker way to authenticate. With Authy, you will also have the option to authenticate on multiple devices, including mobile, tablet and desktop. Find out more here.

How we’re updating 2FA at login for our online platform

Currently we require you to enter your username and password along with a one-time passcode that is sent to the mobile phone number, associated with your account, via SMS. Whilst this is safe, WorldFirst remain committed to continue protecting customers against fraud and cybercrime, that’s why we have introduced Authy.

Authy provides you with the choice to authenticate via:

  • Authy App
  • Authy Chrome Extension/Web App
  • Authy Desktop App
  • SMS
  • Phone verification currently only applies to SMS authentication and does not yet apply when downloading the Authy App

Get started with Authy App (Android/iOS)

  1. Download the Authy App at: https://authy.com/download/ or from an appropriate app store for your device (Google Play Store or Apple App Store).
  2. You will be prompted to add your mobile number, including international dialing code. This number must be the same number registered to your WorldFirst account.
  3. You will be asked whether you wish to verify via phone call or SMS. Choose the option which most appeals and continue with on screen instructions.
  4. At this point you will be able to start using the Authy app to authenticate.

Get Started with Authy Chrome Extension (works on Mac OS, Windows, Chrome OS)

  1. Download the Authy App Chrome Extension at: https://authy.com/download/or the Chrome Web Store.
  2. Click on ‘add extension’.
  3. The Authy extension will be available to use and will be represented by a small red circular icon in the top toolbar.
  4. Click on this icon and you will be prompted to add the download and install the app – follow the on-screen instructions and you will be taken to the Chrome Web Store.
  5. Once this is installed, you will have to go through the setup process of adding your phone number (note: this must match the number you’ve registered with your WorldFirst account).
  6. You will be asked to verify via an existing device, SMS or phone call – choose the method which most appeals.
  7. Enter the verification code.
  8. Upon verifying you will be taken to a page where you will find a tile for WorldFirst. Click on this to retrieve authentication codes in future.

Get Started with Authy Desktop App (works on Mac OS, Windows 32/64 bit)

  1. Download the Authy Desktop App at: https://authy.com/download/.
  2. Select the version which correlates to the operating system (MacOS or Windows) on your device and click the download button.
  3. Navigate to the downloaded file location (this will be in your downloads folder) and double click the Authy file.
  4. Enter your phone number including country code (Note: this must be the same as the number associated with your WorldFirst account).
  5. You will be asked to verify via an existing device, SMS or phone call – choose the method which most appeals.
  6. Enter the verification code.
  7. Upon verifying you will be taken to a page where you will find a tile for WorldFirst. Click on this to retrieve authentication codes in future.

Note:

There are two different versions for Windows. Most Windows operating systems are 64bit but if you are running an older version of Windows just select the 32bit version and it will work absolutely fine.

Adding and managing beneficiaries with Authy

Once you have enrolled with Authy, you won’t have to input the 6-digit code each time you add or manage a beneficiary. Instead, you will receive a push notification. Simply click on this notification to be directed to a page prompting you to either ‘approve’ or ‘deny’ the new beneficiary. If you choose to verify with SMS, then you will receive a 6-digit code that you will need to input when you add or manage a beneficiary.

SCA at WorldFirst for our online platforms

Once you have enrolled with Authy, you won’t have to input the 6-digit code each time you book a trade or make a payment. Instead, you will receive a push notification. Simply click on this notification to be directed to a page prompting you to either ‘approve’ or ‘deny’ the trade or payment. If you choose to verify with SMS, then you will receive a 6-digit code that you will need to input when you book a trade or make a payment or add a beneficiary.

SCA at WorldFirst for our mobile platforms

If you use one of our WorldFirst apps we will be asking you at login, when you add or manage a beneficiary or when you make a payment to use your biometrics (fingerprint or facial recognition). If you have an older device that doesn’t support biometrics you will be asked to enter your unique pass code.

Can I avoid having to use 2FA on my WorldFirst account?

Customers based in the EEA, who have signed up to WFUK T&Cs or are affiliated or conduct business with an entity/person within the EEA cannot opt-out of 2FA/SCA.