
GCash officially announced that it will roll out its in-app One-Time Password (OTP) system this month.
The in-app One-Time Password (OTP) system will replace SMS-based OTPs.
Now, OTPs are sent directly inside the GCash app through push notifications, instead of text messages. Users will need to confirm login or transactions within the app itself, without switching to SMS.
The change follows a directive from the Bangko Sentral ng Pilipinas (BSP) Bangko Sentral ng Pilipinas under the Anti-Financial Account Scamming Act (AFASA) to strengthen protection against digital financial scams and reduce risks linked to SMS-based authentication.

Under the new setup, users receive verification requests only on their registered and authenticated GCash app.
This is designed to reduce exposure to phishing attacks that commonly target SMS OTPs.
The in-app One-Time Password (OTP) system will roll out starting June 22, 2026.
