GCash, the Philippines' number one
finance superapp and largest cashless ecosystem, has launched its new in-app Security
Center, giving users direct control over how their accounts are protected. The
hub features new user-controlled safeguards: theLock My Account for immediate
account suspension, Money Lock for securing wallet funds, and Subscription
Center, which lets users see where their GCash account is connected and unlink
merchants or apps whenever they want—all of which are consolidated in one
place, so users can act quickly when it matters most.
This new hub is aligned with the Bangko Sentral ng Pilipinas’s (BSP)
Anti-Financial Account Scamming Act (AFASA) mandate to keep users protected
from prevalent cybersecurity threats. The launch of the Security Center is
designed to support these regulatory standards while helping customers respond
faster to risks, strengthen account protection, and easily access key security
tools in one place.
Centralized control for account
security
At the heart of the Security Center are
new key security tools within the GCash app, making it easier for users to
manage and adjust their account protection settings.
The Lock My Account feature, enabled
via the app’s AI-powered digital assistant, Gigi, allows users to immediately
freeze their account and block all outgoing transactions the moment they notice
unusual activity or a possible scam or unlock their account after. It functions
as an emergency stop, preventing unauthorized transfers or changes to account
information while the user investigates.
The feature works on two levels: users
can activate it from inside the GCash app through the Security Center, or from
outside the app entirely — ensuring account suspension remains possible even if
the user’s phone has been stolen or compromised and they can no longer access
the app. Once activated, the Kill Switch logs the user out of all active
sessions, blocks all outgoing transactions, and restricts any changes to
account information, all at the account level, not just at the device level.
To reactivate, users must file a
request through Gigi and complete an enhanced authentication process, which
includes Double Safe multi-factor authentication and additional verification
steps. This ensures that the account cannot be unlocked by anyone using stolen
credentials alone.
The Subscription Center page also lets
users easily see where their GCash account is linked and remove those
connections whenever they choose. This is especially helpful to manage subscriptions
and other recurring payments. In just two simple steps, users can stop future
payments to merchants or apps they no longer wish to keep connected, giving
them greater control over their account:
Step 1: Open Subscription Center in the
GCash app and select the merchant or app you want to remove.
Step 2: Tap “Unlink” to disconnect it
and stop future payments through GCash in real time.
If users notice a charge they did not
expect, they can unlink the merchant to help prevent future charges through
GCash. Requests to reverse or refund charges that have already been processed,
however, must still be made directly with the merchant. GCash can support users
by providing transaction records and other relevant documentation to help
substantiate their refund request.
Money Lock gives users the option to
secure a portion of their wallet funds through GSave - GCash’s savings feature
offered in partnership with BSP-supervised partner banks including CIMB Bank
Philippines, UNO Digital Bank, BPI, Maybank Philippines, among others. When a user activates Money Lock, the selected funds
are ring-fenced within the GSave environment and reserved exclusively for
safekeeping. The funds remain under the user's ownership and control but are no
longer available for everyday GCash transactions until they are unlocked. The
remaining balance becomes the movable amount available for everyday use. This
adds another layer of protection for savings stored within the app.
Beyond these features, the Security
Center also consolidates existing tools such as device management,
authentication settings, and in-app security education resources. This
integrated approach provides users with better visibility and control over
their account, without needing to navigate multiple sections of the app.
Stronger safeguards against evolving
threats
The rollout supports the ongoing
efforts of GCash to strengthen safeguards in line with regulatory expectations
and industry standards. The e-wallet giant continues to work with regulators
and partners to address emerging threats, including scams and unauthorized
access, while improving the overall user experience.
“The Security Center is part of our
broader commitment to protect our users by giving them clearer visibility and
control over their accounts. By making these tools simple and easy to use, we
empower customers to take action and better protect their accounts and funds, ”
said Miguel Geronilla, GCash chief information security officer.
The launch follows a series of security
actions taken by GCash in recent months, including its shift to in-app OTPs to
counter phishing, its zero-tolerance stance against quishing (QR phishing) and
fake websites, and the blocking of over 3,200 merchants with links to illegal
gambling.
GCash continues to strengthen its trust
and security system to help users better protect their funds and manage their
accounts with greater confidence. By putting more control in the hands of
customers, the Security Center makes it easier to respond to risks and keep
everyday transactions secure.
Users are encouraged to regularly
review where their GCash account is linked, update their security settings, and
make use of the available tools to better protect their funds and transactions.
The security features available through
the Security Center were deployed at the beginning of June 2026 as part of the
ongoing efforts of GCash to enhance user protection. Visit the Security Center
in the GCash app now to activate and manage these features.
For more information on how to secure
your account and funds, please visit www.gcash.com.
0 Comments