GCash will fully replace SMS-based authentication with the In-App One-Time Passwords feature starting June 22, 2026, to combat phishing text scams and financial fraud.
This recent security update sends OTPs via secure push notifications within the app, making verification safer and easier.
According to GCash, the phase-out of SMS-based OTPs aligns with the Anti-Financial Account Scamming Act (AFASA) directive of the Bangko Sentral ng Pilipinas (BSP), which aims to improve cybersecurity and reduce digital fraud.
SMS-based OTPs have been used by scammers to access user accounts for years. Using In-App OTPs is crucial to fixing these problems. OTP requests are sent directly to the user's verified GCash app, ensuring that only authorized users can receive and utilize the unique OTPs.
In addition, instant, single-tap authentication eliminates the need to switch apps, input codes, or wait for text messages. This speeds up transactions and eliminates SMS OTPs, a method scammers and fraudsters can often exploit.
The transition to In-App OTP is part of GCash's effort to improve account security through Multi-Factor Authentication, an industry standard. MFA dramatically minimizes account takeover risk, even with compromised passwords or MPINs.
Per GCash, they invested in facial recognition verification (Double Safe feature) and Know-Your-Customer (KYC) to improve their security. These safeguards are strengthened by in-app OTPs, which improve security without increasing friction.
Miguel Geronilla, GCash chief information security officer, stated:
Our upgrade to In-App OTPs is a strategic move to put an end to phishable SMS OTPs. We will shift users to instant, GCash app-verified authentication, to increase the security of their daily transactions.
I also want to know your experience with this in-app OTP feature. If you still don't see your OTPs, simply enable "Allow notification" of the GCash App on your respective Android or iOS Settings. – PinoyTechSaga
0 Comments