YOUR EVERYDAY GUIDE TO MALAYSIAN BANKINGClear explanations. More informed choices.
Banking help

Lost phone or locked out?

Separate a missing device, forgotten login and restricted account—and find a route that works without the app.

A support agent speaking to a customer by headset

If the phone is missing or access may be compromised, secure the account first. A password reset alone may not remove the missing device’s access.

Choose your situation

Phone or SIM lost or stolen

  1. From a trusted phone, call the bank using the official number below. Explain that you cannot use the registered device. Ask it to secure access and advise on any affected cards.
  2. Contact your mobile provider to secure the missing SIM and arrange replacement. Tell the bank if your registered number is also unavailable.
  3. Ask the bank how to remove the old device and register the replacement. Verify any identity documents only through the channel it confirms.
  4. Check recent transactions once access is restored. Report unfamiliar activity immediately through urgent help.

GXBank: a verified route without the old app

GXBank’s personal-account FAQ says to call support if you cannot access the original device. Its self-service device-unbinding option requires a call from your registered phone number and your physical card: call +603 7498 3188 and choose option 1. If you lack either requirement, ask the support team for assisted recovery. After binding a new device, its stated 12-hour cooling-off period blocks outgoing transactions. GXBank’s device instructions.

Boost: a lost phone with Google Wallet

Boost directs customers with a lost or stolen Google Wallet device to its +603 8658 3033 (24/7 fraud hotline) to block the Boost debit card. This secures the card; ask separately about restoring account access. Boost’s lost-device guidance.

An older woman using a smartphone in Malaysia

AEON, KAF and Ryt: which recovery route applies?

AEON Bank

  • Replacing a phone while you still have the old one: the personal-account FAQ says to log in on the new device with your email and password, enter the emailed OTP and MyKad number, then approve the request on the old device. A 12-hour cooling-off period applies. Unlinking on the existing phone is under Settings → Account Settings → Unlink device, authenticated with biometrics/app PIN.
  • Old phone or SIM unavailable: the published device-change sequence needs old-device approval. Call +603 4816 8888 for assisted recovery. For a missing device, report any card provisioned on it as well.
  • Changed mobile number: ask Customer Support to update it. The FAQ gives 1–3 working days for contact-detail changes and a 12-hour cooling-off period for a phone-number change. An account restriction needs a separate review by the bank.
  • Forgotten password: choose Forgot Password in the official app, verify the registered email/MyKad and use the recovery code sent to that email to set a new password. A 12-hour cooling-off period applies. If you cannot access the registered email, contact support instead.

AEON personal-account FAQs: Account management. Ask support which identity checks apply if you no longer have the old device and when to expect an update.

KAF Digital Bank

KAF’s login FAQ directs customers to support. It warns that reinstalling causes a 12-hour cooling-off period with no app access. Call +603 8744 3331 or use official Wira KAF WhatsApp if your phone, SIM or credentials are unavailable. Explain whether you are replacing the device, changing the registered number or facing an account restriction.

Ask which identity checks and waiting period apply before reinstalling or changing your number. Use the hotline or WhatsApp for account recovery; the service charter restricts general email to non-account enquiries.

Ryt Bank

  • Before replacing a working phone: the published unpairing path is Profile/Settings → Security → Unpair device from account → Remove, followed by facial verification. Unpairing instructions.
  • Forgotten passcode: select Forgot Passcode and complete facial verification before setting a new one. Ryt also directs customers who reach the incorrect-attempt limit to reset it. Reset instructions · Incorrect-attempt lockout.
  • Changing a number with app access: Profile/Settings → View Profile → Mobile Number. Facial verification and an SMS OTP are required. If you cannot use the registered SIM, ask support how to complete verification. Phone-number instructions.
  • No old phone, no SIM or failed facial verification: call +603 5115 5115 during its published hours, or use email/the help-site ticket route in the directory. Ask for assisted device or number recovery. Ask which documents are needed and when to follow up.

These self-service steps address routine access. Suspected compromise needs immediate reporting; a bank-imposed restriction needs the bank’s review.

You still have the phone but cannot log in

Write down the exact error before making changes. Check the bank’s official maintenance notices and use the recovery option inside the official app. Avoid repeated PIN guesses. Reinstalling is not always a shortcut: GXBank lists reinstallation and factory resets among reasons device binding may need to be restored.

If an OTP does not arrive, tell support whether the registered SIM can receive ordinary messages and whether your phone number changed. Do not switch off security protections or install an app sent by a caller to “fix” access.

The account is restricted or under review

A restriction is different from forgetting a password. Ask the bank which action is restricted, what it needs from you, the secure submission channel and when it will next update you. Do not assume another transfer or a fresh account application will resolve it. There is no single verified recovery time across the five banks.

Illustration: your rent is due tonight, but a replacement-device cooling-off period is active. Ask about permitted access options, and contact your landlord early. An emergency balance accessible through a separate channel can help with future outages; it does not override the current bank restriction.

A person reviewing and signing documents at a desk

Prepare for the support call

Have your registered contact details, last successful login date, device-change date, exact error and existing case number ready. Ask what identity checks are needed; never read an OTP or PIN to an incoming caller. Record the recovery steps and any waiting period.

Contact options without app access

For suspected fraud at Boost, use +603 8658 3033 (24/7). Email suits non-urgent follow-up; do not wait for an email reply when money may be at risk.

Official sources

Reviewed 1 October 2026.

GXBank: missing original deviceGXBank: binding, IVR requirements and cooling-offBoost: lost Google Wallet deviceGXBank: official supportAEON Bank: official supportBoost Bank: official supportKAF Digital Bank: official supportRyt Bank: official supportAEON: personal account-management FAQsKAF: login and reinstallationKAF charter · effective 1 November 2025Ryt: change mobile numberRyt: unpair deviceRyt: forgotten passcodeRyt: incorrect-attempt lockout

What would you like to understand?