Can You Spot a Scam in the Philippines?
Test your scam-spotting skills against real GCash, courier, and job-scam texts hitting the Philippines.
What the phishing quiz asks you
Eleven scenarios pulled from scam texts, calls, and chats Filipinos actually receive. Here is a preview of the situations and the safe answer for each, so you know what you are walking into before you start.
- You get an SMS saying your GCash account will be suspended unless you verify through a link. What do you do?
- Ignore the link and open the official GCash app yourself. Real alerts appear inside the app; suspension threats with links are the most common credential-harvesting pattern in the Philippines.
- A courier texts that your parcel is held and a ₱35 fee must be paid through their link.
- Check the order status in Shopee, Lazada, or the courier's own app. Small, believable fees are used precisely because people pay without thinking, and the payment page harvests your card.
- Someone calls claiming to be from your bank's fraud team and asks you to read the OTP they just sent.
- Hang up and call the hotline printed on your card. No bank ever asks for an OTP; the caller is the one making the transaction you are about to approve.
- A friend messages asking you to send a code they say they need for a raffle.
- Do not send it. Their account is almost certainly hacked, and the code is your own account-recovery or OTP code being reused against you.
- A 'job offer' asks for a ₱500 activation fee before you can start earning from simple tasks.
- Walk away. Legitimate employers never charge candidates to activate a role — this is the standard task-scam funnel that later asks for bigger 'top-ups'.
- How do you check whether a bank or e-wallet link is genuine?
- Read the domain from right to left before the first slash. Lookalike subdomains such as bdo.secure-verify.ph are not BDO; only the registered domain matters.
Why scam texts work — and how to spot them
Phishing in the Philippines rarely looks technical. It looks like a courier saying your parcel is on hold, a bank saying your card was used in another city, a recruiter offering ₱1,500 a day for liking videos, or a GCash message saying your account will be frozen unless you confirm your details today. The message is designed to trigger urgency, because urgency is what stops people from checking.
The tell is almost always the destination, not the wording. Legitimate banks, e-wallets, and government agencies do not ask you to enter your PIN, OTP, MPIN, or full card number on a page you reached from a text message, and they never ask you to send an OTP to a person. If a message pushes you toward a link or a phone number to 'verify', treat the link itself as the scam even when the sender name looks right.
Sender IDs can be faked. Under the SIM Registration Act many commercial senders use branded names, and scammers copy those names so their message lands in the same thread as real ones. A message appearing inside an existing bank or wallet thread is not proof it came from the bank. Open the official app yourself and check for the same notice there.
The 11 questions in this quiz are modelled on message patterns actually circulating in the Philippines: courier redelivery fees, fake GCash verification pages, salary-too-good job offers on Telegram, cloned bank domains with an extra hyphen, and 'wrong send' refund requests. Score 9 or higher and you can reliably spot the common ones; anything lower is worth a second run after you read the answers.
- Never share an OTP. There is no legitimate reason for anyone — including a bank agent, a courier, or a buyer — to ask for it.
- Type the domain yourself instead of tapping links. Scam sites use lookalikes such as gcash-verify, bpi-secure, or a .com that should be .com.ph.
- Enable in-app notifications and biometrics on your e-wallet and banking apps so unauthorised logins surface immediately.
- If you already tapped and entered details, change the password, revoke sessions in the app, and report it to your bank or wallet provider straight away.
- Report scam numbers to your telco (free) and, for financial losses, to the bank's official hotline and the PNP Anti-Cybercrime Group.