Never share your GCash MPIN or OTP (authentication code) with anyone. GCash or its representatives will never ask for your personal information unless you request help through the GCash Help Center.
Phishing is when personal information or data is stolen from you to access your account to steal money or make transactions without your knowledge.
Spot and avoid common types of phishing
Tips to spot and avoid phishing links, emails, or SMS/smishing
- Check the sender before clicking on links sent to you
- Never give your personal information, such as your birthday, address, mobile number, username, or password
- Ensure that the sender's name and details come from the official accounts of GCash
If you have received a phishing email or SMS, block the email address or number, then click here to report the account or link to us and we will try to take it down as soon as we can.
- Pretending to assist you with your concern,
- Creating a fake GCash promo, or
- Pretending to assist you in verifying your account for a certain fee.
Tips to spot and avoid Fake GCash representatives
- Do not respond to any "GCash support representatives" messaging you via private message. GCash does not entertain questions via private message.
- If there are promos that are being mentioned, check the Official Promos Page to know about our ongoing promos.
- Never post your concerns on social media.
- Don’t buy or sell Fully Verified GCash accounts. Verify your own account only via the GCash app.
- Please refer to and follow our Official GCash channels
Report unrecognized transactions
You should file a report within fifteen (15) days of the occurrence of the unauthorized transaction in the app. If your phone/device or GCash card got lost or stolen, request for blocking and suspension of your account/card within 24 hours. Learn more about reporting your lost phone/SIM here or reporting your lost card here.
Tap on the scenario that you're encountering below to get help:
When you notice an unrecognized item in your transaction history that, please check your subscriptions to social media accounts or e-commerce platforms (i.e. App Store, Google Play, Netflix, Spotify).
If you received a notification about an unknown device that was linked to your GCash account, check if you are still able to log in to GCash:
- If you are not able to log in anymore, click here to file a report and attach the following documents:
- Screenshot of the SMS or email received. Make sure that the sender’s e-mail address or number is shown
- Screenshot of your phone/SIM Settings showing your GCash number
- One (1) valid ID. See the list of acceptable IDs here
- Selfie with your valid ID
- If you can still log in, change your MPIN immediately
Learn more about the Customer Protect Program, which covers you if unauthorized transactions are made from your account.