Philippines targets millions of fake bank profiles with server-side biometrics mandate

The Philippines’ banking sector is moving toward a regulatory tightening similar to Vietnam’s recent compliance crackdowns, which resulted in the termination of tens of millions of unverified accounts in 2025. In March 2026, the Bangko Sentral ng Pilipinas (BSP) introduced a draft circular requiring financial institutions to transition to server-side biometric authentication. This model validates customer identities against centralized institutional databases rather than local mobile device records.

According to a May 2026 commentary by fintech firm Trusting Social, this shift mirrors a 2024 biometric mandate by the State Bank of Vietnam (SBV). That policy exposed major systemic vulnerabilities, revealing that nearly half of Vietnam’s registered bank accounts—roughly 86 million out of 200 million—were untraceable to actual individuals. Trusting Social noted that the audit laid bare how international criminal networks aggressively exploit platforms lacking robust identity verification. Following the mass closure of these fraudulent accounts in September 2025, the SBV recorded a 59% reduction in individual fraud cases and a 52% decline in accounts utilized for illicit fund transfers.

Nguyen Nguyen, founder and CEO of Trusting Social, emphasized that institutions with robust, proactive security frameworks protected their client bases, whereas laggards quickly became primary targets for threat actors—a lesson he urges the Philippine market to heed. The BSP has already set a hard deadline of June 30, 2026, for financial firms to eliminate SMS and email-based one-time passwords (OTPs) for high-risk transactions. Under the new regulatory framework, institutions that fail to meet these deadlines will face direct financial liability for any resulting customer losses. The urgency of these measures is highlighted by 2024 data, which saw the BSP receive 70,000 fraud reports alongside over 10,000 cybercrime complaints logged by the Philippines’ Cybercrime Investigation and Coordinating Center. Conversely, data-driven prevention systems across eight major Vietnamese banking blocks successfully intercepted over $4.3 billion in attempted money-mule transactions within a single year.

Click here for more on Banking

Source

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore