GCash blocks 4,900 fraudulent merchants in quishing scam crackdown

GCash, the Philippines’ top finance superapp, has blocked more than 4,900 fraudulent merchants tied to quishing scams. These schemes trick users through fake QR codes and phishing links. The company is now urging customers to stay alert and follow security best practices. The blocked merchants were part of a growing wave of QR phishing, or 'quishing,' where scammers use fake payment links to steal personal details. GCash has stressed that it will never request one-time passwords (OTPs), MPINs, or account passwords from users.

To help customers avoid fraud, the app advises verifying website URLs before making payments and only using official GCash channels. For account issues, users can contact Gigi, the in-app chat agent, or seek live support for complex problems like unauthorised transactions. The app also offers transaction history reviews and error alerts for payment-related concerns.

GCash is working closely with regulators and law enforcement to identify and shut down fraudulent activity. Users are encouraged to report suspicious behaviour immediately through the app’s official support channels. Additional guidance is available in the Help Center and through in-app security tutorials. The crackdown on fraudulent merchants comes as GCash strengthens its defences against scams. Customers can access multiple support options, from automated tools to live agents, to resolve issues quickly. The company continues to push for safer transactions by educating users and enforcing stricter security measures.