GCash launches In-App OTPs to strengthen security against phishing scams and fraud

GCash users urged to turn on push notification settings to make their app transactions safe and secure

GCash, the Philippines’ leading finance superapp and largest cashless ecosystem, is rolling out its newest security feature, In-App OTPs (One-Time Passwords). By the first quarter of 2026, users will receive their OTPs directly via secure push notifications within the GCash app instead of SMS.

For years, SMS-based OTPs have been targeted by scammers as a means of accessing user accounts. The switch to In-App OTPs is an important step toward addressing these vulnerabilities. By sending OTP requests directly to the user’s authenticated GCash app, GCash ensures that only the intended users can receive and use the unique OTPs, protecting them from unauthorized access.

Simple steps to follow for Android and iOS phone users to switch to the safe, secure & newly-upgraded in-App One-Time-Passwords (OTPs)

Instant, one-tap authentication also removes the need to switch apps, type codes, or wait for text messages to arrive, resulting in faster transactions and removing exposure to SMS OTPs that scammers and fraudsters can exploit.

“Our upgrade to In-App OTPs is a strategic move to put an end to phishable SMS OTPs. We will shift users to instant, GCash app-verified authentication, to increase the security of their daily transactions,” said Miguel Geronilla, Chief Information Security Officer of GCash.

The introduction of In-App OTPs is part of the broader strategy of GCash to enhance security through Multi-Factor Authentication (MFA), a well-established industry standard that adds multiple layers of protection when accessing an account. MFA greatly reduces the risk of account takeovers, even if passwords or MPINs are compromised.

GCash has consistently invested in stronger protection systems, including Know-Your-Customer (KYC) verification and Facial Recognition verification (Double Safe). In-App OTPs build on these existing measures, enhancing security without adding unnecessary friction to the user experience.

In-App OTPs reflect commitment of GCash to providing secure, seamless financial services for its millions of users and set a new benchmark for digital finance security in the Philippines.

For more information, visit www.gcash.com.

###

About GCash

GCash is the Philippines’ #1 Finance Super App and Largest Cashless Ecosystem. Through the GCash App, users can easily purchase prepaid airtime; pay bills via partner billers nationwide; send and receive money anywhere in the Philippines, even to other bank accounts; purchase from over 6 million partner merchants and social sellers; and get access to savings, credit, loans, insurance and invest money, and so much more, all at the convenience of their smartphones. Its mobile wallet operations are handled by G-Xchange, Inc. (GXI), a wholly-owned subsidiary of Mynt, the first and only $5 billion unicorn in the Philippines.

GCash is a staunch supporter of the United Nations Sustainable Development Goals (SDGs), particularly UN SDGs 5,8,10, and 13, which focus on safety & security, financial inclusion, diversity, equity, and inclusion as well as taking urgent action to combat climate change and its impacts, respectively.