Keep your OTP and wallet credentials private

Know the difference between using an official app yourself and sending a code to someone else.

Educational guidance · Source links included

Quick answer

Do not send an OTP, MPIN or password to a person claiming to help. If you did not start the action, do not approve it just because the message looks familiar.

Entering a code is not the same as sharing one

Follow a process you initiated in an independently verified official app. Do not read a code aloud, forward it or enter it on a page reached through an unexpected message.

Use the official help route

GCash directs users to its Help Center for assistance and warns against sharing OTP or MPIN. For another bank or wallet, independently find that provider’s own support channel.

If access may already be compromised

Contact the affected bank or wallet promptly through its verified app or help channel. Explain what happened and follow its account-protection instructions. Keep original evidence privately rather than posting account details publicly.

Keep your OTP and wallet credentials private

Quick answer

Entering a code is not the same as sharing one

Use the official help route

If access may already be compromised

Sources and scope