As QRPh continues to transform the way Filipinos pay for everyday purchases, scammers are also evolving their tactics to exploit the country's growing reliance on QR-based transactions. To help keep digital payments safe, GCash has intensified its efforts against fraudulent merchants and fake payment pages, blocking over 6,700 suspicious accounts linked to QRPh-related scams while continuing to educate users on how to identify and avoid emerging threats.
How scammers exploit QRPh payments
Fraud monitoring teams at GCash have flagged a sharp rise in schemes where fake websites mimic legitimate GCash payment pages and use QRPh codes to collect payments. An example of a growing scam is known as “quishing” or QR phishing.
In these schemes, fraudsters exploit QRPh codes to redirect users to malicious payment pages or steal sensitive information, while misusing official branding to appear credible and deceive users into completing unauthorized transactions.
Some cases also involve fraudulent QRPh codes being embedded in posters, emails, receipts, or messages. When scanned, these can redirect users to fake login pages for e-wallets or banks, or even to sites that install harmful software on their devices. This results in users unknowingly sending money to illegitimate accounts, even if the transaction appears familiar or routine.
Protecting QRPh ecosystem through stronger enforcement
As QRPh-related scams continue to evolve, GCash has strengthened its enforcement measures to protect users against quishing and other QRPh-based scams.
Suspicious wallets linked to fraudulent QRPh activity are immediately blocked, preventing scammers from receiving stolen payments through the platform. Fake websites impersonating official GCash payment pages are likewise identified and escalated for takedown, while incident reports are submitted to PH Payments Management Inc. (PPMI) and relevant government authorities to support further investigation and enforcement.
These efforts form part of GCash's broader collaboration with government agencies, including the Cybercrime Investigation and Coordinating Center (CICC) and the Bangko Sentral ng Pilipinas (BSP), to disrupt scam networks, strengthen consumer protection, and preserve trust in the country's digital payments ecosystem.
"Scammers are constantly evolving their tactics alongside digital payments, and we are equally committed to staying ahead of these threats,"
said Miguel Geronilla, Chief Information Security Officer at GCash.
"By proactively blocking suspicious accounts, flagging fraudulent payment pages, and reporting these activities to regulators and law enforcement, we help stop these schemes before they can affect more Filipinos."
Geronilla added,
"Protecting users is at the core of our platform. We have zero tolerance for those who exploit digital financial services, and we will continue to strengthen our safeguards while working hand in hand with government and industry partners to keep the country's digital payments ecosystem safe and secure."
Protect yourself from QRPh-related scams
As scams become more sophisticated, GCash urges users to remain vigilant and practice safe digital habits when using QR-based payments:
- Always check the website URL before making payments and ensure it matches official GCash domains
- Verify the merchant name displayed before confirming any transaction
- Avoid transacting with suspicious or unverified sites
- Be cautious of QR codes from unknown or untrusted sources
- Report suspicious links or payment requests through the GCash Help Center
Users are strongly encouraged to verify merchant names and payment URLs before completing transactions and to immediately stop any transaction that appears suspicious.
Keeping digital payments safe for every Filipino
GCash reaffirms its commitment to protecting users and maintaining the integrity of the country’s digital payments ecosystem. Through proactive detection, continuous monitoring, and strong collaboration with regulators and law enforcement, the platform continues to strengthen its defenses against emerging threats.
GCash users can report suspected scams through the GCash Help Center at help.gcash.com by chatting with Gigi and selecting “I want to report a scam”, or by calling the official GCash hotline at 2882.
Users may also report incidents to the PNP Anti-Cybercrime Group at (02) 8414-1560 / 0998-598-8116 or acg@pnp.gov.ph, and to the Cybercrime Investigation and Coordinating Center (CICC) via hotline 1326, mobile 0991-481-4225, or report@cicc.gov.ph.
By staying vigilant and using trusted platforms, Filipinos can better protect their funds and ensure that every peso counts.
More information is available at www.gcash.com.
About Mynt
Mynt is the first and only $5 billion unicorn in the Philippines. It's a leader in mobile financial services focused on accelerating financial inclusion through mobile money, financial services, and technology. Mynt operates two fintech companies: GXI, the mobile wallet operator of GCash — the #1 Finance App in the Philippines, and Fuse Lending, a tech-based lending company that gives Filipinos access to microloans and business loans.
About GCash
GCash is the Philippines’ #1 Finance App and Largest Cashless Ecosystem. Through the GCash App, users can easily purchase prepaid airtime; pay bills via partner billers nationwide; send and receive money anywhere in the Philippines, even to other bank accounts; purchase from over 6 million partner merchants and social sellers; and get access to savings, credit, loans, insurance and invest money, and so much more, all at the convenience of their smartphones. GCash’s mobile wallet operations are handled by G-Xchange, Inc. (GXI), a wholly-owned subsidiary of Mynt, the first and only duacorn in the Philippines.
Mynt and GCash are staunch supporters of the United Nations Sustainable Development Goals (SDGs), particularly UN SDGs 5,8,10, and 13, which focus on safety & security, financial inclusion, diversity, equity, and inclusion as well as taking urgent action to combat climate change and its impacts, respectively.
For more information, please contact:
Bruce Rodriguez, Head of Business Communications
Corporate Communications
Legal Disclaimer & Safe Harbor Statement
This press release is for informational purposes only and does not constitute, or form part of, any offer, solicitation, or invitation to sell, issue, purchase, or subscribe for any securities in the Philippines, the United States, or any other jurisdiction. No securities of Mynt, Inc. have been or will be registered under the U.S. Securities Act of 1933, as amended, and such securities may not be offered or sold in the United States absent registration or an applicable exemption from registration requirements. There will be no public offering of the securities of the Company in the United States. No money, securities or other consideration is being solicited by this document or the information contained herein and, if sent in response to this document or the information contained herein, will not be accepted. Any potential initial public offering and listing in the Philippines, if pursued, remain fully subject to prevailing market conditions and regulatory approvals, including the registration requirements of the Philippine Securities and Exchange Commission and the listing rules of the Philippine Stock Exchange, Inc., and there can be no assurance that any such filings will be made or that any offering or listing will be consummated. This document contains forward-looking statements that involve inherent risks and uncertainties; actual results, timelines, and outcomes may differ materially from those projected due to shifting market dynamics, economic environments, and regulatory updates.
