#GCash, the Philippines' number one finance superapp and largest cashless ecosystem, has launched its new in-app Security Center, giving users direct control over how their accounts are protected. The hub features new user-controlled safeguards: the Lock My Account for immediate account suspension, Money Lock for securing wallet funds, and Subscription Center, which lets users see where their GCash account is connected and unlink merchants or apps whenever they want—all of which are consolidated in one place, so users can act quickly when it matters most.
This new hub is aligned with the Bangko Sentral ng Pilipinas’s (BSP) Anti-Financial Account Scamming Act (AFASA) mandate to keep users protected from prevalent cybersecurity threats. The launch of the Security Center is designed to support these regulatory standards while helping customers respond faster to risks, strengthen account protection, and easily access key security tools in one place.
Centralized control for account security
At the heart of the Security Center are new key security tools within the GCash app, making it easier for users to manage and adjust their account protection settings.
The Lock My Account feature, enabled via the app’s AI-powered digital assistant, Gigi, allows users to immediately freeze their account and block all outgoing transactions the moment they notice unusual activity or a possible scam or unlock their account after. It functions as an emergency stop, preventing unauthorized transfers or changes to account information while the user investigates.
The feature works on two levels: users can activate it from inside the GCash app through the Security Center, or from outside the app entirely — ensuring account suspension remains possible even if the user’s phone has been stolen or compromised and they can no longer access the app. Once activated, the Kill Switch logs the user out of all active sessions, blocks all outgoing transactions, and restricts any changes to account information, all at the account level, not just at the device level.
To reactivate, users must file a request through Gigi and complete an enhanced authentication process, which includes Double Safe multi-factor authentication and additional verification steps. This ensures that the account cannot be unlocked by anyone using stolen credentials alone.
The Subscription Center page also lets users easily see where their GCash account is linked and remove those connections whenever they choose. This is especially helpful to manage subscriptions and other recurring payments. In just two simple steps, users can stop future payments to merchants or apps they no longer wish to keep connected, giving them greater control over their account:
Step 1: Open Subscription Center in the GCash app and select the merchant or app you want to remove.
Step 2: Tap “Unlink” to disconnect it and stop future payments through GCash in real time.
If users notice a charge they did not expect, they can unlink the merchant to help prevent future charges through GCash. Requests to reverse or refund charges that have already been processed, however, must still be made directly with the merchant. GCash can support users by providing transaction records and other relevant documentation to help substantiate their refund request.
Money Lock gives users the option to secure a portion of their wallet funds through GSave - GCash’s savings feature offered in partnership with BSP-supervised partner banks including CIMB Bank Philippines, UNO Digital Bank, BPI, Maybank Philippines, among others. When a
user activates Money Lock, the selected funds are ring-fenced within the GSave environment and reserved exclusively for safekeeping. The funds remain under the user's ownership and control but are no longer available for everyday GCash transactions until they are unlocked. The remaining balance becomes the movable amount available for everyday use. This adds another layer of protection for savings stored within the app.
Beyond these features, the Security Center also consolidates existing tools such as device management, authentication settings, and in-app security education resources. This integrated approach provides users with better visibility and control over their account, without needing to navigate multiple sections of the app.
Stronger safeguards against evolving threats
The rollout supports the ongoing efforts of GCash to strengthen safeguards in line with regulatory expectations and industry standards. The e-wallet giant continues to work with regulators and partners to address emerging threats, including scams and unauthorized access, while improving the overall user experience.
“The Security Center is part of our broader commitment to protect our users by giving them clearer visibility and control over their accounts. By making these tools simple and easy to use, we empower customers to take action and better protect their accounts and funds, ” said Miguel Geronilla, GCash Chief Information Security Officer.
The launch follows a series of security actions taken by GCash in recent months, including its shift to in-app OTPs to counter phishing, its zero-tolerance stance against quishing (QR phishing) and fake websites, and the blocking of over 3,200 merchants with links to illegal gambling.
GCash continues to strengthen its trust and security system to help users better protect their funds and manage their accounts with greater confidence. By putting more control in the hands of customers, the Security Center makes it easier to respond to risks and keep everyday transactions secure.
Users are encouraged to regularly review where their GCash account is linked, update their security settings, and make use of the available tools to better protect their funds and transactions.
The security features available through the Security Center were deployed at the beginning of June 2026 as part of the ongoing efforts of GCash to enhance user protection. Visit the Security Center in the GCash app now to activate and manage these features.
For more information on how to secure your account and funds, please visit www.gcash.com.