GCash warns vs fake National ID, eGov apps used in phishing and screen-sharing scams

GCash has issued an urgent cybersecurity advisory after detecting a rise in scams involving fake National ID (PhilSys) verification and fraudulent eGovPH-related mobile applications.

The Ayala-led fintech platform said scammers are now using more sophisticated social engineering tactics including impersonation, fake video calls, malicious app downloads, and screen-sharing manipulation to gain unauthorized access to users’ e-wallet and banking accounts.

According to GCash, fraudsters pose as representatives from the Philippine Identification System (PhilSys) or eGovPH and claim that a victim’s National ID requires verification. Targets are then asked to join a Google Meet session and download a supposed verification app.

Once installed, victims are instructed to share their screen. This allows attackers to view sensitive information in real time, including One-Time Passwords (OTPs), mobile banking PINs, and login credentials.

“By watching your screen, they can steal your OTPs, PINs, and passwords, then access your banking and e-wallet accounts,” GCash warned.

The company also flagged fake reward notifications and promotional offers designed to create urgency, such as claims of expiring benefits or account suspension to pressure users into disclosing authentication codes.

GCash emphasized that it will never ask users to:

• Share OTPs, MPINs, or passwords
• Download apps from unofficial links
• Join video calls for account verification
• Share screens during financial transactions

Users are advised to download apps only from official platforms such as the Apple App Store, Google Play Store, or Huawei AppGallery.

The digital wallet operator added that it is coordinating with the Philippine National Police Anti-Cybercrime Group and the Cybercrime Investigation and Coordinating Center (CICC) to track malicious accounts and mitigate fraud activity.

As digital ID systems and e-government platforms expand nationwide, GCash said public awareness remains the strongest defense against evolving cyber threats.