GCash users will soon receive one-time passwords directly through the app instead of text messages as the e-wallet platform moves to strengthen protection against phishing scams and financial fraud.
The company said it will replace traditional SMS-based OTPs with In-App OTP authentication by June 22, 2026. Under the new system, users will get secure push notifications through the GCash app when verifying transactions or account access.
GCash said the move is in line with the Bangko Sentral ng Pilipinas directive to phase out SMS-based OTPs by June 30, 2026. It also supports the goals of the Anti-Financial Account Scamming Act, which seeks to curb digital fraud and protect financial account users.
SMS OTPs have long been targeted by scammers through phishing links, fake messages, and other schemes designed to trick users into giving away their verification codes. By moving OTPs inside the authenticated GCash app, the company said the system will make it harder for fraudsters to intercept or steal codes.
The new feature will also allow users to confirm transactions through instant, one-tap authentication, removing the need to wait for text messages, switch between apps, or manually type codes.
“Our upgrade to In-App OTPs is a strategic move to put an end to phishable SMS OTPs. We will shift users to instant, GCash app-verified authentication, to increase the security of their daily transactions,” GCash Chief Information Security Officer Miguel Geronilla said.
GCash said In-App OTPs are part of its broader use of multi-factor authentication, which adds more layers of protection when users access their accounts or perform transactions. The company said this helps reduce the risk of account takeovers, even if passwords or MPINs are compromised.
The platform has also introduced other security measures, including Know-Your-Customer verification and facial recognition through Double Safe.
GCash said it will continue improving its security systems as digital scams become more sophisticated, stressing that stronger authentication is needed to protect users and promote safer digital finance in the country.