Multi-Factor Authentication (MFA) Solution
Tradelink’s Multi-Factor Authentication (MFA) solution combines FIDO (Fast IDentity Online) global standard biometrics, trusted device binding, and recognised digital certificates to deliver comprehensive security for online transactions and user logins in high-volume operational environments.
Globally Recognised Security Standards
Tradelink as a FIDO Alliance Member Since 2018
Tradelink has been an active member of the FIDO (Fast IDentity Online) Alliance since 2018. As a pioneer in identity management and cybersecurity in Hong Kong, Tradelink is committed to advancing globally recognised passwordless and strong authentication standards. By embedding official FIDO specifications deeply into our Multi-Factor Authentication (MFA) platform, we deliver enterprise-grade security that meets the most stringent international compliance benchmarks.
Fully Compliant with the Latest HK SFC Guidelines on Phishing-Resistant Authentication
On 9 July 2026, the Hong Kong Securities and Futures Commission (SFC) issued a regulatory circular highlighting the inherent phishing risks associated with One-Time Passwords (OTPs). The SFC mandates that all licensed internet brokers and Virtual Asset Trading Platforms (VATPs) phase out SMS and email OTPs for customer logins and device binding within 12 months, transitioning fully to phishing-resistant authentication solutions (such as Passkeys and trusted device binding). Major brokerages are required to adopt these measures immediately.
Tradelink’s Multi-Factor Authentication (MFA) solution fully meets the latest SFC regulatory standards. Powered by FIDO (UAF / FIDO2) global biometric standards (including facial recognition) and trusted device binding, alongside officially recognised digital certificates, we empower financial institutions to achieve seamless regulatory compliance and eliminate account takeover risks.
Why do Regulated Sectors (Banks & Brokerages) need Tradelink MFA?
In response to SFC regulatory directives requiring the phase-out of SMS and email OTPs, alongside HKMA cybersecurity expectations, Tradelink’s MFA solution enables institutions to:
Phase Out OTPs & Upgrade to Phishing-Resistant Authentication
Support High Concurrency & Massive User Bases
Flexible Policy Configuration
Backed by Financial-Grade Recognition
Elevate Your Security and Efficiency with Tradelink’s MFA Solutions
5
M+
1.4
M+
1200
+
Is your business vulnerable to persistent password attacks and phishing risks?
Of the security incidents reported to the Hong Kong Cyber Security Incident Coordination Centre in 2025, spoofing and fraudulent attacks accounted for 57%.
Tradelink MFA Features: Biometrics, Device Binding & Digital Certificates
FIDO Standard Biometric Authentication
Tradelink MFA supports biometric authentication based on international FIDO standards, highlighting powerful facial recognition capabilities alongside fingerprint and voice recognition to deliver a secure, passwordless login experience:
- Full FIDO Architecture Support: Adopts FIDO Universal Authentication Framework (UAF) and FIDO2 / WebAuthn standards, supporting multiple authentication factors on a single platform for unified management and scalability.
- Versatile Verification & Facial Recognition Modes: Supports “1:1 identity verification” (leveraging facial recognition or biometrics to confirm if the user matches their registered identity) and “1:N identity identification” (cross-referencing facial profiles against a pre-registered database for rapid identification).
- Deep Financial Workflow Integration: Offers end-to-end coverage for online banking and securities service logins, transaction confirmations, and high-risk operational workflows.
- Stringent Privacy Protection: Sensitive biometric templates are encrypted and stored exclusively within the user’s personal mobile device security chip (e.g., Secure Enclave / TEE), eliminating central database breach risks and adhering strictly to the Personal Data (Privacy) Ordinance (PDPO).
- Liveness Detection: Built-in anti-spoofing mechanisms effectively block presentation attacks, including photos, videos, and AI deepfakes.
Trusted Device Binding
Establishes a strong cryptographic binding between user accounts and designated "trusted devices", ensuring only authorised mobile phones, tablets, or terminals can complete the MFA process. To strictly adhere to SFC guidelines requiring the initial device binding process itself to be phishing-resistant, Tradelink provides flexible and secure initial FIDO device onboarding workflows:
- eKYC Remote Onboarding Solution: Integrates with full eKYC workflows for robust identity verification.
- Simplified Facial Recognition Matching: Stores the user’s identity document securely on Tradelink’s or the client’s side. During initial device setup, the system utilises facial recognition capabilities to compare the user’s live selfie against their stored identity documents and photographs in real time, ensuring that device binding cannot be fraudulently intercepted or performed by phishers.
Logins from new, unauthorised devices mandate these rigorous re-binding and verification procedures, drastically mitigating account takeover (ATO) risks.
Integration with Recognised Digital Certificates (Digi-Sign)
Flexible Deployment Modes: On-Premises or Authentication-as-a-Service (AaaS)
Tradelink offers both local On-Premises server deployment and cloud-based Authentication-as-a-Service (AaaS) models, enabling organisations to balance security policies, network latency, and operational expenditure:
- On-Premises Deployment: Provides maximum infrastructure autonomy and direct control over core internal system integrations.
- Authentication-as-a-Service (AaaS): Significantly reduces time-to-market and lowers upfront hardware and routine maintenance investments.
Key Evaluation Factors for MFA Deployment:
- Time-to-Market: Speed of business compliance and operational rollout.
- Infrastructure Investment:Capital and operational expenditure for servers and network equipment.
- Maintenance & Technical Support:System upgrades, feature enhancements, and regulatory alignment.
- Scalability: Elastic expansion capacity to accommodate surging user bases and peak transaction volumes.
Trusted by Leading Institutions & Enterprises
Enterprise Use Cases
Online Banking & Wealth Management
Online Securities Trading Platforms
Government & Public Services
Mobile biometric authentication solution for The Hong Kong Jockey Club to handle thousands of user access per second
We are delighted to work with Daon and Tradelink to continue innovating and to deliver a seamless and secure mobile experience, so that it’s as fast and convenient as possible for our customers to take part in the excitement of the races via their own mobile devices.
Executive Director,
Customer and International Business Development of HKJC
Endorsed by Regulatory Authorities in Hong Kong
FAQs
What is Multi-Factor Authentication (MFA)?
Multi-Factor Authentication (MFA) adds one or more security verification layers beyond traditional username and password combinations. By requiring multi-step verification using at least two independent authentication factors, it significantly elevates the barrier against unauthorised account intrusion:
- What You Know: Passwords, personal PINs.
- What You Have: Authorised bound mobile devices, hardware security tokens.
- Who You Are: Facial recognition, fingerprint scanning, or voice recognition (Biometric Authentication).
Even if a password is compromised, reused, or harvested by phishing sites, MFA effectively prevents unauthorised logins and account takeover (ATO).
What is the FIDO Alliance & FIDO Standards?
Founded by global technology and financial leaders including Apple, Google, Microsoft, Visa, and Mastercard, the FIDO (Fast IDentity Online) Alliance aims to establish a unified global standard for passwordless authentication. Tradelink officially joined the FIDO Alliance in 2018, playing an active role in bringing world-class cybersecurity standards to the local market.
Why FIDO is Essential for Enterprise Cybersecurity?
FIDO standards utilise asymmetric public-key cryptography:
- Local Private Key Storage: Private keys remain encrypted within the security chip of the user’s personal device and are never transmitted to server endpoints, preventing systemic key leaks stemming from central database breaches.
- Automated Domain Matching Against Phishing: The FIDO authentication protocol automatically verifies the website domain name (Domain Matching). Even if a user accidentally visits a fraudulent phishing site, the device rejects the signature request, stopping phishing attacks at the source.
What are the Core Advantages of Tradelink’s FIDO Solution?
- Deep Technical Expertise: A FIDO Alliance member since 2018 with a seasoned cybersecurity team intimately familiar with Hong Kong’s financial regulatory framework.
- Financial-Grade Security & Proven Performance: Engineered for ultra-low latency, high concurrency, and maximum availability, meeting the rigorous Service Level Agreements (SLAs) of top-tier banks and licensed institutions.
Enterprise Case Studies - MFA Applications
Offer two-factor biometric authentication cloud-based service to a local listed securities firm’s clients to login online trading account
Banking & finance
Identity management
Contact us to learn more
Sales and Service Enquiries
| Tel: | (852) 2599 1600 |
| Email: | idm_sales@tradelink.com.hk |
Office Hours
8:30am – 6:00pm (Monday to Friday)