Digital Safety & Protecting Your Accounts

Your digital life is your financial life

Everything is online now: GCash, Maya, online banking, SSS, PhilHealth, Pag-IBIG portals, BIR eFiling. If someone gains access to your accounts, they can drain your money, steal your identity, or take out loans in your name. 86% of Filipino youth encounter online safety issues, yet only 3% report to authorities. Prevention is everything.

Secure your financial accounts

Do this today — it takes 30 minutes and could save you hundreds of thousands of pesos:

• •Enable 2FA (Two-Factor Authentication) on every financial account: GCash, Maya, BDO, BPI, UnionBank, Metrobank — all support this
• •Use unique passwords for each account. 'Juan123' for everything means losing one password loses everything
• •Use a password manager: Bitwarden (free) or 1Password (paid) generates and stores strong passwords so you don't have to remember them
• •Set up login notifications: Most banks can text or email you when your account is accessed. Enable this immediately
• •Check your GCash/Maya transaction history weekly — catch unauthorized transactions early
• •Never save passwords in your browser on shared or public computers
• •Use biometric login (fingerprint/face ID) on your banking apps — it's faster AND more secure than passwords

Protecting your personal data

Your personal information has value — scammers use it for identity theft, SIM swaps, and loan fraud:

• •Never post photos of your IDs, credit cards, or boarding passes on social media — they contain sensitive information that can be used for fraud
• •Review your Facebook/Instagram privacy settings: Set profile to 'Friends Only,' hide your phone number, email, and birthday from public view
• •Be careful with online forms: Only provide personal data to verified, legitimate websites. Check for HTTPS and look up the company before sharing info
• •Shred or burn physical documents with personal info before throwing them away — dumpster diving for identity theft is real
• •When apps request permissions (contacts, photos, location), ask: 'Does this app actually need this to function?' If not, deny it
• •Regularly check if your email has been in a data breach at haveibeenpwned.com — if it has, change that password immediately

Your rights under the Data Privacy Act

RA 10173 (Data Privacy Act of 2012) gives you powerful rights that most Filipinos don't know about:

• •Right to be informed: Companies must tell you what data they collect and why
• •Right to access: You can request a copy of all personal data a company holds about you
• •Right to correct: You can demand correction of inaccurate data
• •Right to erasure: You can request deletion of your personal data when it's no longer needed
• •Right to file a complaint: Report violations to the National Privacy Commission (privacy.gov.ph)
• •Companies that mishandle your data face fines of ₱500,000–₱5,000,000 and imprisonment of 1-6 years

What to do if your accounts are compromised

Act within the first hour — speed matters:

• •Immediately change the password of the compromised account from a different, secure device
• •Contact the bank/e-wallet's fraud department. GCash: 2882. Maya: (02) 8845-7788. BDO: (02) 8631-8000. BPI: (02) 889-10000
• •If your SIM was swapped (phone suddenly has no signal): Call your telco immediately to block the number and issue a new SIM
• •File a police report — this is required documentation for disputing fraudulent transactions
• •Check all linked accounts: If your email was compromised, every account using that email is at risk
• •Freeze your credit: Contact CIC (creditinfo.gov.ph) to flag your record if you suspect identity theft
• •Enable additional security on all accounts and change passwords for everything that used the same password