Directive on Mandatory Multi-Factor Authentication (MFA) for Internet Trading Portals

Back to Notice Board
BSEC
Document Reference: Ref: BSEC/SRI/2026/04 High Priority
Published September 05, 2026
In exercise of the powers conferred by Section 20A of the Securities and Exchange Ordinance, 1969, the Commission hereby directs all registered stock brokers, including TREC Holders of DSE and CSE, to enforce Multi-Factor Authentication (MFA) for all client internet trading portals and mobile applications.

Key Compliance Directives:
1. Mandatory two-factor authentication (2FA) via SMS/Email OTP or Biometric fingerprint/face recognition upon login.
2. Automatic session termination after 15 minutes of user inactivity.
3. Instant notification alerts to the registered mobile number upon order placement and fund transfer requests.

All clients of Global Securities Limited are requested to ensure their mobile numbers and email addresses are updated in CDBL records.