Dynamic linking is a payment security control that binds a customer’s approval to the specific transaction being authorized, including details such as the payee and amount. If those details change, the approval should no longer be valid for the altered payment.
This matters because a successful login or one-time password can confirm access without proving that the customer approved a particular transfer. In an attack, malware may exploit an authenticated banking session to initiate or alter a payment. Dynamic linking helps limit that risk by requiring transaction-specific authorization and by ensuring the bank executes the details the customer approved.