GCash boosts security and rolls out GInsure Scam Protection, covering up to PHP 15,000 for PHP 30, as phishing and smishing scams rise in the Philippines.
 |
| GCash app |
Better safe than sorry
GCash is calling on Filipino users to remain alert to digital scams as it strengthens its multi-layered security systems and expands access to scam protection insurance.
Phishing and smishing—fraudulent tactics involving fake emails, websites, or text messages designed to extract sensitive account information—now account for more than 80% of reported digital fraud cases in the Philippines. A recent report from Gogolook found that malicious link attacks nearly quadrupled in 2025, with scammers frequently posing as trusted institutions to deceive users.
In response, GCash has continued to build out its security infrastructure, incorporating biometric login, multi-factor authentication, and secure in-app one-time passwords (OTPs), alongside efforts to educate users on recognizing social engineering tactics.
Scammers are constantly evolving their tactics, which means our security measures must stay several moves ahead," said Joel Geronimo, Chief Information Security Officer at G-Xchange Inc., GCash's mobile wallet operator. "By building proactive safeguards directly into the app, we ensure that our platform remains a trusted partner of Filipinos in their financial journey.
A collaborative approach to scam prevention
GCash has voiced support for the Anti-Financial Account Scamming Act (AFASA, or Republic Act No. 12010), which aims to improve coordination among financial institutions, the Bangko Sentral ng Pilipinas (BSP), and law enforcement agencies. The company says it works alongside authorities to combat scams while helping users identify and avoid potential threats.
GCash outlined several common scam tactics that target users:
- Hacking typically begins with a message claiming an account issue, directing users to log in through an external link—a key warning sign, since legitimate account alerts do not require users to leave the app to enter a password, MPIN, or OTP. GCash advises users to avoid clicking links in messages and instead check account activity directly within the app.
- Reward scams involve messages promising refunds, prizes, or expiring benefits, often using spoofed numbers to appear as though they come from a legitimate source. Phrases like "last chance," "verify now," or "account will be suspended" are common red flags.
- Phishing messages impersonate trusted brands to solicit sensitive information. GCash reiterated that it does not request OTPs, MPINs, or passwords via SMS or phone calls.
- Imposter scams involve fraudsters posing as a friend, family member, or trusted contact, often fabricating an emergency—such as a medical bill or legal issue—to pressure victims into sending money quickly, before they have a chance to verify the requester's identity.
Geronimo cautioned users to treat any link sent via text message with suspicion. "Basta may link, problema 'yan," he said. "Remember, GCash will never ask you to click a link or give your personal information over an SMS message."
Added financial protection through GInsure
Beyond platform security, GCash offers GInsure Scam Protection, a policy underwritten by Chubb Philippines, available through its in-app digital insurance platform. The coverage costs PHP 30 for 30 days and covers losses of up to PHP 15,000.
The policy covers unauthorized transactions resulting from hacking, phishing, spoofing, and similar scam activities, subject to its terms and conditions.
This includes fraudulent fund transfers made via Send Money or bank transfer, as well as unauthorized purchases made through supported online merchants and app-based payment channels such as Lazada, Shopee, and the Play Store.
With innovations like GInsure Scam Protection, users can get peace of mind with the added financial protection, but it's still important to stay vigilant and exercise caution. Scam insurance is not a substitute for careful handling of your account," Geronimo said.
GCash is encouraging customers to review their coverage details and report suspicious messages or unauthorized transactions through the GCash Help Center in the app or on its website, via the Gigi chat support feature, or by calling the GCash hotline at 2882. Scam incidents can also be reported to the Philippine National Police Anti-Cybercrime Group at
acg@pnp.gov.ph.
What do you guys think?
Post a Comment