Device Binding/Management FAQs

What is device binding?

Device binding is a mandatory security feature that links your Subuk App username/user ID to a specific device (mobile or web). This ensures that only your trusted device(s) can access and perform transactions on your account.

Why is device binding required?

Device binding protects your account by:

  • Allowing access only from your trusted device
  • Blocking logins and transactions from unknown devices
  • Preventing fraud and unauthorized use

This feature is implemented as per State Bank of Pakistan (SBP) security guidelines.

Can I disable device binding?

No. Device binding is a mandatory security requirement from the State Bank of Pakistan and cannot be disabled.

How is my device bound to my account?

Your device is automatically bound during the successful registration process in the Subuk App.

How do I bind a new device (mobile or web)?

To bind a new device:

  1. Log in from the new device
  2. Enter the OTP sent to your registered mobile and email
  3. Complete in-app Biometric Verification (BMV) on your registered mobile device

Security Alert: After successful BMV, you can log in from the new device after 2 hours for security purposes.

How many devices can I use at the same time?

You can use:

  • One mobile device
  • One web device

How do I know if my device is successfully bound?

Once your device is successfully bound, a 2-hour security lock period will apply before you can log in.

How do I remove (unbind/flush) a device?

  1. Open Subuk AppHub MenuSettingsTrusted Devices
  2. Select the device you want to remove and tap ‘Remove’
  3. To log in again from the same device, you must complete the binding process

What should I do if my device is lost or stolen?

  • If you have another trusted device → Remove it yourself using the device removal steps
  • If not → Call MCB Islamic 24/7 Phone Banking at (042)-111-222-642 to request device removal immediately

Can I switch to a new phone without losing access?

Yes. On your old phone, remove the device:

  • Go to Subuk AppHub MenuSettingsTrusted Devices

Then install the Subuk App on your new phone and complete the binding process. Access will be available after the 2-hour security lock period.

What happens if I try to log in from an unbound device?

You won’t be able to access your account. The device binding process will start to link the new device, and you must complete it before logging in.

How can I use Subuk App on my web device (laptop or desktop)?

  1. Log in at digital.mcbislamicbank.com using your registered credentials
  2. Enter the OTP sent to your registered mobile and email
  3. Perform Biometric Verification (BMV) on your registered mobile device:
    • Open Subuk AppHub MenuSettingsTrusted Devices
    • Locate the pending web device and complete biometric verification
  4. After successful biometric verification, you can log in to Subuk App web after the 2-hour security lock
  5. If biometric verification is unsuccessful, visit your nearest branch for in-person biometric verification, then call Phone Banking to activate your device