Credit card app

ONBOARDING

Credit card app

ONBOARDING

Credit card app

ONBOARDING

UI/UX

Ownership

Quality control

Role

SR. UX Designer

Company

DKB Code Factory

Team

PO, Dev, QA

Platform

iOS, Android

Year

2023
2024

I redesigned the onboarding flow for a credit card app, ensuring users could easily register, verify their identity, and activate their account while meeting bank-requirements

My Part in the Puzzle

I worked on the onboarding flow for a credit-card-app, adapting it to new security requirements and ensuring consistency across a multi-brand setup. A major part of the project involved introducing biometric authentication (Touch ID / Face ID) for payments and settings, both to meet regulatory needs and improve user experience.

Background: The DKB bank wanted to expand its mobile offering with a dedicated credit card as a whitelabel management app. I joined the card-team after the MVP release and became responsible for app-wide design quality, new feature flows and maintaining and updating the library between the brands.

The big challenge was to create an onboarding which meets all the security requirements but at the same time is not an overload

Sparring sessions, testing, handover for iOS, Android

Creating of the onboarding

Finding balance between Business vs. security vs. user

Communication, quality UI/UX control of 3rd party implementation

Defining of edge and error cases

Tasks / Problem statement

Data analysis and user reviews showed that SMS-based verification was costly, unreliable abroad, and vulnerable to phishing. My role was to redesign the onboarding process to reduce SMS dependency, enhance trust, and create a smoother, more secure activation experience.

ANALYISIS

ANALYISIS

Issues

Outdated SMS verification, high costs

Problems with getting smsTan abroad

Missing security bank-requirements

Bounce rates and generic error cases

Goal

Improved Onboarding process

Biometrics for payments, settings, login

Fulfill security bank-requirements

Defined edge and error cases

Old flow approach

Issues

We gathered insights from stakeholder workshops, user reviews, and research findings to
uncover recurring pain points in the existing onboarding flow.

Move Tracking Consent

Move the tracking consent screen to appear immediately after login to ensure accurate analytics. The consent must fee non-intrusive and offer transparent options.

Clarifying Push Notification Value

Improve the communication, as some users perceive a push as spam. Clearly explain their purpose and value and find a better positioning.

New authentication logic

Update the authentication logic so SmsTAN is used only as a fallback when biometrics and PIN are already activated.
Biometrics - PIN as new method.
SMS is problematic due people traveling don’t always have access to number.

Consistent UX

Ensure that the Ul and UX for smsTAN, PIN, and biometric authentication (provided by a third party) fully align with our design system and brand standards.

Improve Error Handling

Redefine and improve error cases, which were previously too generic. Provide clear, context-specific messaging for different input fields and states to reduce drop-offs.

Edge & If-Cases

Designing clear fallback paths for scenarios like outdated app versions, new cards, or regulatory changes to minimize bounce-rate.

Third-Party Challenges

To meet new security requirements and speed up release, stake holders decided to implement a 


third-party authentication solution (Seal One) into the native app. While this supported business
goals around compliance and time-to-market, it introduced several challenges.

Coordination

Close collaboration and repeated testing between internal and external development teams were required. Regulatory and technical dependencies led to frequent re-prioritization.

Shifting priorities

Regulatory updates and technical dependencies required frequent re-prioritization during the design and implementation phase affecting also the information architecture.

Design ownership

UX and UI had to be aligned with a third party, including white-label branding and shared components to ensure a consistent user experience.

Error Handling

Error and fallback states were partly defined by the third party and needed UX refinement to match our standards and regulations.

New onboarding sketch

The onboarding is a bit longer due to new security requirements, but pays off later. Users set a PIN,
confirm it once via SMS, and verify the device — fast biometric confirmation for future logins, payments,
and settings. PIN stays as a fallback, SMS is a one-time thing.

The onboarding is a bit longer due to new security requirements, but pays off later. Users set a PIN,
confirm it once via SMS, and verify the device — fast biometric confirmation for future logins, payments,
and settings. PIN stays as a fallback, SMS is a one-time thing.

White label goes colour

I was responsible for maintaining the component library, including designing new components and testing them across brands.

A white-label design system powering one app across three brands. Shared components use semantic tokens instead of fixed colors, allowing fast brand switching while ensuring consistent UI across all products.

Let’s go with the flow - ONBOARDING

Login & Tracking

Challenge: App tracking at the beginning as a requirement.
Brand colours are defined. Not much room for changes

One clear action per step

Visuals to emphasize

Simple language

Give user options to deny

Give user links to further information

Create PIN / Repeat PIN

Challenge: User needs to learn new verification method.
PIN, SMS and biometrics comes from a third party, Align UI/UX.

Highlight benefits of new authentication method

Visual images reinforcing safety

Secondary button for
more trustful info for the user

Always show confirmation of the task

Activate biometrics

Create PIN / Repeat PIN

Challenge: User needs to learn new verification method
PIN, SMS and biometrics comes from a third party . Align UI/UX

One clear action per step

Give user information, if number is not available

Insert from sms option from OS

Give user confirmation about the action in the next screen

Modern fintech users expect onboarding to feel effortless. Banking regulations … are often the opposite.

App Method to confirm online payments

Challenge: Gain trust in a few words

Description text and logo to gain trust for the Master card identity check

Loading spinner, so that user can see something is happening. Activation can take some time (backend issue)

Push Notifications

Challenge: In user tests some people thought it was kind of a spam 

Push: explain the importance of this specific push notification

Describe importance of a push for payments

As in other screens. One action, strong title, simple text and illustration in branded colors.

Location access and apple pay

One clear action per step

Give user information, if number is not available

Give user option to add the card already during the onboarding to the wallet

The first time user can confirm the action easily with previously activated biometrics

The same logic can be used for logic, payments and all type of settings as aneasy confirmation

Onboarding completed

One clear action per step

Give user information, if number is not available

Give user option to add the card already during the onboarding to the wallet

Ownership + collaboration turned cross-functional 
work into a strength.

What Users Actually Said

Real feedback — both positive and critical — helped validate UX decisions and 
highlight technical challenges beyond design.

Thoughts

TakeawayS

TakeawayS

IMPROVED ONBOARDING

I learned how to simplify complex regulatory requirements. An onboarding can always be a bit of a hassle. That’s why we reduced cognitive load, give some options to skip

ALIGNMENT

Regular syncs with devs and stakeholders helped avoid rework and kept UX quality consistent during implementation.

DESIGN THERAPY SESSION

Sparring sessions with the design guild were used as an additional quality layer, offering external perspectives and shared learnings beyond the core project team.

MAKING IT WORK WITH SOMEONE ELSE'S RULES

Gained hands-on experience navigating the challenges of third-party security frameworks, ensuring seamless integration into the product.