PLDT and Smart’s Cyber Security Operations have recently issued a warning to the public that cybercriminals have been getting more sophisticated in imitating official communication materials of financial institutions.

“Without scrutinizing these fake advisories, one can easily be fooled into thinking they were officially released by the bank. We need to take some time to go over these messages,” said Angel Redoble, FVP and Chief Information Security Officer at PLDT and Smart.

“Also, beware of calls supposedly coming from bank representatives. Cyber threat actors have become familiar with the dialogues used by official bank agents that they can sound very convincing,” the PLDT executive further advised.

IMAGE CREDIT: https://prstation.ph/

In a press release, PLDT and Smart have likewise shared the following tips to help the public protect their online banking accounts and avoid falling prey to such scams:

  1. Be vigilant about unsolicited communication. Do not trust unexpected emails, SMS, or calls requesting personal information or login details like OTPs (one-time passwords). Banks or legitimate organizations never ask for these details over these channels.
  2. Double-check the source. Scammers often use email addresses or URLs similar to the bank’s official communication channels. Watch out for misspelled words or slight variations.
  3. Never share personal information. When in doubt, do not reveal personal information or other financial details.
  4. Use strong, unique passwords for each account. Make sure that passwords are at least 14 characters long and combinations of small and capital letters, numbers, and special characters.
  5. Enable multi-factor authentication (MFA)to create another layer of protection. It also notifies users of unauthorized attempts to open their accounts.
  6. Regularly update software. This ensures that operating systems, web browsers, and other applications are running the latest security patches against vulnerabilities.
  7. Report suspicious activities. Reporting helps your organization develop an appropriate response to the threat and alerts the community as well.


PLDT and Smart have been proactively preventing malicious messages from reaching their customers.

In September alone, the country’s leading telecommunications firm has already blocked more than 5.5 million SMShing messages.

In the same month, Smart has likewise “blacklisted” over 21,000 mobile numbers involved in scams and fraudulent activities. The PLDT Group has also prevented more than 1.6 billion attempts to open malicious domains in the same period.

The efforts of PLDT and Smart to share CyberSmart tips on keeping customers safe online are fundamental to the PLDT Group’s much broader program to elevate the quality of customer experience by protecting them from threats and cyber-attacks.

If you receive messages or calls that you think are suspicious, report them right away to this email: cybersecurityincidents@smart.com.ph.

By Ralph Fajardo

Ralph is a dynamic writer and marketing communications expert with over 15 years of experience shaping the narratives of numerous brands. His journey through the realms of PR, advertising, news writing, as well as media and marketing communications has equipped him with a versatile skill set and a keen understanding of the industry. Discover more about Ralph's professional journey on his LinkedIn profile.