DSAT to introduce two-factor authentication for Northbound Macau vehicle scheme

Authorities will roll out dual-authentication login for the “Northbound Travel for Macau Vehicles” scheme starting May 15, in a bid to curb unauthorized booking bots and protect user data, the Transport Bureau (DSAT) announced yesterday.

The move comes as complaints mount over so-called third-party “grabber” services and automated scripts that exploit the system, making it nearly impossible for regular users to secure quotas during peak holiday periods.

The popularity of the cross-border scheme continues to heat up, with slots becoming extremely difficult to obtain on weekends and public holidays.

Under the new security measure, users will be required to enter both their account password and a one-time verification code sent to their registered mainland mobile number or email address. The system will also mandate periodic password updates. Officials said the changes align with mainland China’s cybersecurity requirements and aim to ensure the platform’s stable and secure operation.

The DSAT urged users to verify that their contact information remains valid and functional to receive verification codes. Those needing to update their mobile number or email can do so by logging directly into the system. For further assistance, online customer service is available via the “Guangdong E-Port” WeChat public account.

The bureau also issued a warning against using unverified third-party booking services. “The system stores applicants’ identity documents and photo images,” the agency said in its statement. Members of the public are urged not to use unknown booking services to avoid personal data leaks or potential financial losses.

As the “Northbound Travel for Macau Vehicles” scheme continues, the upcoming dual-authentication requirement represents the latest attempt by authorities to patch existing loopholes while safeguarding both system integrity and user privacy.