⚠️ If money was just taken from your GCash account
Call GCash immediately at 2882 (available 24/7) to freeze your account before reading further. Every minute matters. Tell them: "Unauthorized transactions on my account — please freeze it now."
💸 Common GCash Scams in the Philippines
These are the four most common ways Filipinos lose money through GCash. Knowing them helps you identify what happened to you.
📱 OTP Scam
Someone tricks you into sharing your 6-digit OTP (One-Time Password). This is the most common GCash scam. They may pretend to be GCash support, a buyer, or even a friend.
🎣 Phishing Link
A fake link sent via SMS, Facebook, or Viber mimics the GCash login page. You enter your MPIN and they steal it. Look for URLs that aren't gcash.com.
🛒 Fake Seller / Buyer
You send GCash payment for an item you never receive, or a "buyer" sends a fake screenshot of payment. Common on Facebook Marketplace and OLX.
🔄 SIM Swap
Scammers fraudulently transfer your SIM to a new card they control, then intercept your GCash OTPs. If your SIM suddenly stops working, act immediately.
🚨 What To Do Right Now — Pick Your Situation
- 1Call GCash at 2882 immediately (24/7 hotline). Say "unauthorized transactions on my account." They can freeze your account and stop further loss.
- 2Screenshot all unauthorized transactions in your GCash app — you'll need these for your complaint. Note the transaction IDs, amounts, dates, and recipient numbers.
- 3Change your GCash MPIN from a safe device (not the one that may have been compromised). Go to GCash app → Profile → Change MPIN.
- 4Report in-app: GCash app → Help → Report a Problem → Unauthorized Transaction. This creates an official ticket with a reference number — save it.
- 5File a BSP complaint at bsp.gov.ph or email consumeraffairs@bsp.gov.ph. Under BSP rules, GCash must respond within 10 business days.
- 6File a police report with PNP Anti-Cybercrime Group at acg.pnp.gov.ph. This is needed if you pursue legal action or insurance claims.
- 1Go directly to facebook.com/hacked — Facebook's official recovery page for Filipinos and everyone else.
- 2If still logged in: Settings → Security and Login → Change Password immediately, then Where You're Logged In — log out all unrecognized sessions.
- 3Enable Two-Factor Authentication: Settings → Security and Login → Use two-factor authentication. Use an authenticator app, not SMS.
- 4If locked out: use Trusted Friends recovery, or Facebook's ID verification — uploading a government ID is a legitimate, official process.
- 5Report to PNP Anti-Cybercrime Group at acg.pnp.gov.ph, especially if the hacker used your account to scam your contacts.
- 1If still logged in: Settings → Account → Password — change it immediately.
- 2Check Settings → Security → Login Activity — log out every session you don't recognize.
- 3Enable Two-Factor Authentication: Settings → Security → Two-Factor Authentication. Use Google Authenticator or Authy, not SMS.
- 4If locked out: login screen → "Get more help?" → Follow identity verification steps. Visit help.instagram.com.
- 5Warn your followers via another platform — tell them to ignore suspicious messages from your account.
📞 Emergency Contacts — Philippines Cybercrime
🇵🇭 Official Philippine Cybercrime Hotlines
PNP Anti-Cybercrime Group
(02) 8723-0401
File cybercrime complaints online or in person
acg.pnp.gov.ph ↗
🏥 Is Your Organization Affected?
If this scam targeted your NGO, hospital, school, or organization — or if multiple staff members were hit — this may be a coordinated attack. Teradef provides free incident response guidance for Philippine organizations with no IT team.
Free Cyber First Aid for Your Organization
AI-powered emergency guidance for hospitals, NGOs, and schools under cyber attack. Free, 24/7, no account needed. Trusted by organizations across Southeast Asia.
Get Free Emergency HelpProtect Yourself Going Forward
- Never share your GCash MPIN or OTP with anyone — GCash support will never ask for it
- Enable GCash Padlock (fingerprint/face lock) to prevent unauthorized app access
- Enable Two-Factor Authentication on all your social media accounts
- Use a unique password for your email — it's the master key to all your accounts
- Be suspicious of "too good to be true" offers sent via Facebook, Viber, or SMS
- Verify the URL before entering any login credentials — gcash.com only, never any variation
❓ Frequently Asked Questions
What do I do if my GCash account was hacked?+
Act immediately: (1) Call GCash at 2882 to freeze your account, (2) Change your MPIN from a safe device, (3) Report via the GCash app under Help → Report a Problem, (4) File a complaint with BSP. Document all unauthorized transactions with screenshots — you'll need them.
How do I report a GCash scam in the Philippines?+
Report to: (1) GCash directly via the app or call 2882, (2) BSP at consumeraffairs@bsp.gov.ph or (02) 8708-7087, (3) PNP Anti-Cybercrime Group at acg.pnp.gov.ph, (4) NTC at 1682 if a SIM swap was involved. Keep all evidence — screenshots, transaction IDs, messages.
Can I get my money back from a GCash scam?+
Possibly — if you report fast. GCash may be able to freeze or reverse unauthorized transactions if reported within 24 hours. Under BSP Circular 1048, GCash is required to investigate and respond to fraud complaints within 10 business days. File with both GCash and BSP to maximize your chances.
What is the NTC report number?+
The NTC (National Telecommunications Commission) hotline is 1682. Report SMS scams (smishing), SIM-swap fraud, and any telecom-related cybercrime to NTC. You can also report online at ntc.gov.ph.
How do I recover a hacked Facebook account in the Philippines?+
Go to facebook.com/hacked — Facebook's official recovery page. If you can still log in, change your password and enable two-factor authentication immediately. If locked out, use identity verification (a government ID may be requested — this is legitimate). Report to PNP Anti-Cybercrime Group if your account was used to scam others.