GCash has issued an urgent alert to all its users regarding an SMS spoofing scam using fraudulent SMS messages that falsely claim that they received “Calamity Assistance” in light of recent typhoons and monsoon rains.
The message prompts recipients to “claim” the aid via embedded links or spoofed QR codes that redirect to malicious sites designed to compromise user accounts.
GCash has repeatedly warned the public against a spoofing scam in which scammers impersonate legitimate institutions such as e-wallets, banks, and service providers. The scammers use illegal devices to send messages containing phishing links, pretending to be from “GCash” to deceive users. When the phishing link is clicked, the scammers can obtain sensitive information to gain unauthorized access to users’ accounts. GCash will never send any SMS or text message containing links that ask for users’ sensitive information, such as personal details, passwords, MPINs, or OTPs.
“This scam isn’t just opportunistic—it’s engineered for emotional impact,” GCash chief information security officer, Miguel Geronilla, warned. “By invoking the term ‘Calamity Assistance,’ criminals seek to undermine user caution and exploit their vulnerability during disaster recovery.”
To help Filipinos stay vigilant and protected, GCash also strongly advises users not to click on suspicious links, to never share their MPINs and OTPs with anyone, and to report any scam attempts immediately via the GCash Help Center at https://help.gcash.com or message Gigi on the website and type ‘I want to report a scam’. Users may also contact the GCash hotline by dialing 2882.
Law enforcement and cybersecurity partners—including the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), and the Cybercrime Investigation and Coordinating Center (CICC)—are actively investigating these incidents, alongside GCash’s internal security team. The company urges users to remain vigilant and to verify any claims through official GCash channels only.
For more on the calamity response efforts of GCash, visit www.gcash.com/security or follow @gcashofficial across platforms.
