Change of online card payments

Dear Client,

herewith we would like to inform you that, in accordance with the relevant EU Regulation*, two-factor client authentication is mandatory for online card payments in EEA Member States after 1 January 2021. The aim of this change is to increase the security of online purchases and to reduce the number of frauds.

Customers of Commerzbank Zrt. will need for their online card payments:

  • a 4-digit Internet Pin (iPIN) password and
  • a one-time code received in an SMS.

Without these being provided, customers will not be able to perform an online card transaction if the merchant is in the European Union.

Information about the iPIN password

The initial iPIN password will be characters No. 13 to 16 of the bank account number for your bank card, e.g. GIRO account number: 14220xxx–xxxx1234, iPIN: 1234; IBAN: (HUxx) 14220xxx xxxx1234 xxxxxxxx, iPIN: 1234.

This initial password shall be amended by 31 March 2021 with your debit card through an ATM connected to the network of Takarék Group (

Information about the one-time SMS code

The code to confirm your online purchase will be sent to the SMS notification phone number registered at our bank. If you have not provided such a phone number, or if your previous phone number is no longer current, or if your SMS notification phone number is not suitable for this purpose, you can report or change it to our bank.

IMPORTANT: Online card transactions may be rejected if no SMS code is available!

Please contact our colleagues for further information.

Kind regards

Commerzbank Zrt.

*Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication