by Bhea Baarde, Correspondent
I just saw another GCash official Twitter account posting an advisory regarding the KKB scam, and I am sharing it here so more people will be aware.
The advisory, which was posted last June 20, read: “Use GCash KKB ONLY when splitting bills with your friends! If naka-receive ka ng KKB request from an unknown sender, don’t accept it! Posibleng scam ito at mababawasan ang funds mo when you approve the request.”
The KKB scam is a phishing scam that uses the GCash feature KKB or “Kanya-Kanyang Bayad,” and which only started last year. The term is the Filipino equivalent of “Let’s split the bill” or “Dutch payment.”
This feature can be used to ask for payments if you are paying something as a group. It’s like creating a group chat, but here, you are paying for bills instead.
The modus in KKB scam is that the scammer will add you in a KKB group, then you will receive an SMS or text alert from GCash reminding you that you need to pay your part of the split bill. At first glance, it may seem that GCash is the one asking you for payment. But lo and behold! It’s the KKB group creator or the scammer who is actually asking you for payment. The function of GCash is to just send a reminder. KKB is the most unused feature in the app. Many users are not yet familiar with it so they fall for this modus.
The sad reality is that KKB is just one of many scams that we encounter online, and it can compromise our GCash e-wallet. Here are some security tips to keep you and your GCash wallet protected against frauds:
Never share your MPIN or OTP
Mobile Personal Identification Number (MPIN) and one-time password (OTP) are passcodes that you can use to authenticate all of your GCash transactions. GCash and other legitimate financial institutions will never ask for these details. If anyone asks you to share your PIN, it’s a sign that the transaction is a scam.
Make sure it’s legit
Before you pay using your GCash wallet, make sure that you’re making a transaction with a legitimate individual/seller. Take time to research first. Check the seller’s account and reviews. Fake accounts have little to no history, so be mindful of that.
Always double-check and re-check
Don’t send money right away! Make sure to double-check who is asking for money from your GCash wallet. If they are someone you know but they are suddenly speaking in a different tone or talking to you on social media channels that you don’t usually use, there is a high possibility that you might be dealing with a hacked account.
Regardless if you know them or not, make sure to also contact them on different channels to verify. It might be bothersome, but hey, it’s always better to be safe than sorry.
Stay on the app
While we protect ourselves from hackers, we also need to keep our own accounts from being hacked. Don’t click on links unless you are sure it is safe. Also, do a regular security check-up and update your password. Log in only on devices that only you own.
To strengthen your account security, GCash has a two-factor authentication feature that gives an extra layer of protection for accounts. This is on top of your username and password because you’ll need to provide another piece of information such as a code, or your biometrics, before being able to login. Make sure to enable it and get double security for your account.
What is GCash doing about this?
To protect its 55 million users, GCash has blocked over 900,000 fraudulent accounts from January to March this year through a joint effort with the National Bureau of Investigation (NBI) and the Philippine National Police (PNP).
Along with the crackdown, Gcash has also launched #GCheckMuna campaign to educate users about these scams.
“GCash has been providing invaluable service to Filipinos, especially during the pandemic. It is crucial that we work together to protect the platform against fraud. As we continue to bolster our security system, we are also counting on the support of our customers and ask that they be vigilant against online scam,” said Martha Sazon, President and CEO of GCash.
While the company itself takes actions to solve issues about scams and cybersecurity, users also need to take part in protecting their account and their hard-earned money. Aside from taking notes from these tips, don’t hesitate to take action, too! Report right away once you encounter a suspicious transaction.
By doing so, you are not only protecting yourself. You are also protecting a number of other users from being scammed, or from becoming potential victims of these fraudsters.
GCash encourages users to report suspicious transactions that use the app. You can file your report using a GCash ticket or their beta chatbot, “Chat with Gigi.”
Whether you’re in the physical world or virtual world, always keep it safe out there!