How to fight fraud by spotting a fake SMS

Metrobank advises the public to be aware of scams and other forms of fraudulent activities using its name. Metrobank will NEVER ask you to verify your personal and sensitive account information via a text message, a phone call, or via an e-mail message.

The latest and most widespread fraud activity nowadays is legitimate-looking SMS or text messages from your bank. It asks you to give your personal information to gain access to your bank account. This method is called "smishing," which combines the terms "SMS" and “phishing.”

The intent is to lure you to disclosing sensitive, personal data, such as banking records, user account information, passwords, and credit card information. Smishing as fraudulent text messages

Here are examples of smishing:

Red flags

• These are text messages that look like it is from Metrobank. Often, the message is urgent and instructs you to click on a link that leads to a website where you are asked to verify and provide personal details. In this example, you’re being warned of an “account closure” if you fail to verify your mobile number. It will name drop the bank’s product and will push you to act immediately so the matter is resolved.

• Be careful because smishing tactics have become more sophisticated in recent years. Some fraudsters employ what is called “spoofing” in the smishing schemes. Spoofing is when fraudsters are able to mask their contact information and mimic a legitimate business’ SMS number. You can get smishing texts from what seems to be the official Metrobank number (which will show up in your thread along with past messages from Metrobank). For instances like this, you can spot a smishing scam through a spoofed number if the text is asking you to update personal information and pass it on to someone else or is asking for you to relay your OTP to a “representative.” Remember, NEVER give away your OTP.

What should you do:

Do not reply to the SMS, nor should you click on the link provided in the text message. Metrobank will NEVER ask you to verify your personal and sensitive account information via a text message, a phone call, or via an email message.

Take a screenshot of the SMS. Then, report it by attaching the screenshot to an email message and sending it to customercare@metrobank.com.ph using “Report on Possible Fraud” as subject.

You may also report the incident to the Metrobank Contact Center at (02) 88-700-700 or 1-800-1888-5775.