BSP cautions public vs unsolicited emails, SMS

MANILA, Philippines — The Bangko Sentral ng Pilipinas (BSP) has cautioned the public against fraud, perpetrated through unsolicited emails or text messages, with links that redirect the mobile user to highly suspicious websites.

The central bank urged the public to carefully scrutinize messages and to refrain from clicking links even if these appear to be coming from banks, e-money issuers or known companies or brands, as well as to protect personal information.

For one, SMiShing is a form of phishing scam where a fraudster sends a text message – also known as SMS – to trick a user into clicking on a malicious link.

This malicious link, when clicked, automatically downloads malwares or redirects to websites that collect information that may be used for fraud.

According to the BSP, legitimate financial institutions would never ask for personal details or account credentials, such as the username or password, from their customers via text messages or by sending links to websites.

The regulator pointed out that scammers may have created such websites to trick a user into disclosing login credentials, personal data, bank or credit card details or passwords; or to introduce mobile malware.

While these websites may seem legitimate, fraudulent sites often have errors in spelling, punctuation, capitalization and grammar.

“Banks, e-money issuers and legitimate companies exert extra effort to maintain professional websites without such errors,” the BSP said in a statement.

Consumers who experienced SMiShing attempts are advised to report these to their banks or e-money providers immediately.

The BSP reminded the public to always protect their personal information and account details.