How to Fix Quicken Error CC-902 (Bank Requires Additional Verification)
CC-902 means your bank inserted an extra verification step — a one-time code, security question, or device approval — that Quicken's automated session cannot complete on its own.
Why CC-902 Happens
- Two-factor authentication newly enforced by the bank
- One-time passcode required on every sign-in
- Unrecognised-device challenge from the aggregator's servers
- Security questions changed or added
- Trusted-device registration expired
Run One Step Update and watch for the prompt
Quicken often surfaces the bank's verification prompt inline. Keep your phone nearby and enter the passcode within the time window — do not cancel the dialog.
Register the connection as a trusted device
On the bank website, look for 'remember this device' or an app-password / Quicken access setting, and enable it so repeat challenges stop.
Update your saved security answers
If your bank uses challenge questions, re-enter the answers in Quicken exactly as stored at the bank, including capitalisation.
Switch to Direct Connect where available
Direct Connect uses a dedicated PIN and bypasses website-level MFA entirely, which permanently resolves CC-902 for most banks that offer it.
Reset the account and complete the challenge
Online Services → Reset Account, then finish the verification prompt in one pass rather than retrying it later.
Why the Code Sometimes Never Arrives
Aggregator sessions time out in under two minutes. If the passcode arrives after the window closes, the connection fails again even though the code was valid. Request the update when you can act immediately, and check that the bank has your current mobile number on file.
Stuck on Verification?
A technician can walk through the verification prompt live, set up trusted-device access, and move you to Direct Connect where your bank supports it.
Related Quicken Guides
QuickN Help Desk is a technical support service. We are not affiliated with or endorsed by Quicken Inc. All product names are trademarks of their respective owners.