Urgent message? Slow down before you tap.

Seven signs the contact may be fake

• The sender promises a guaranteed prize or refund you did not request.
• You must act within minutes or the account will supposedly disappear.
• The link uses a shortened URL, misspelled domain or unfamiliar subdomain.
• The agent moves you to a personal chat account.
• You are asked for an OTP, password, wallet PIN or screen-sharing access.
• A payment to a personal wallet is called a verification or release fee.
• The person refuses to continue through official in-app support.

Verify without clicking the message

1. Close the message and open the wallet or platform from your normal bookmark or app icon.
2. Check the domain character by character before signing in.
3. Look for the same notice inside your signed-in account.
4. Use the official help route to ask whether the message is genuine.

If you already shared information

Change the affected password through the official account, sign out other sessions when that option exists, contact the wallet or platform immediately, and monitor transaction history. If an OTP or wallet access was exposed, time matters.

Where to report

Report suspicious wallet transactions to the wallet or financial institution first and keep its case reference. For a financial institution regulated by the Bangko Sentral ng Pilipinas, the BSP explains its complaint and scam-reporting routes. Suspicious SMS can also be reported to your mobile provider.

Make the next attack harder

• Use a unique password for the platform and a different password for email.
• Keep Play Protect and device security updates on.
• Do not save wallet credentials inside a public browser.
• Review linked devices and transaction alerts regularly.
• Teach family members that OTP means "do not share," even with support.