Your identity is one of your most valuable assets, but in the digital age, it is also a prime target for cybercriminals.
Identity theft occurs when someone steals and uses your personal information—such as your name, address, bank details, government ID numbers, or login credentials—without your permission. This is typically done to gain a financial advantage, apply for credit, or obtain benefits in your name, leaving you with the resulting financial loss and distress.
Surprisingly, identity theft can take place whether the victim is alive or deceased. Understanding how fraudsters operate and taking proactive steps to guard your data is the best defense against this growing threat.
Fraudsters are highly resourceful and can capture your personal information through a variety of digital and physical channels:
Phishing, smishing, and vishing: Using deceptive emails, SMS messages, or phone calls to trick you into revealing sensitive information.
Fake websites and links: Setting up malicious websites that mimic trusted brands to capture the details you input.
Data breaches: Exploiting cybersecurity vulnerabilities in companies or platforms where you hold accounts.
Unsafe internet connections: Intercepting your data when you use unsecured public Wi-Fi networks.
Physical theft and dumpster diving: Stealing physical mail, rummaging through trash for documents containing personal information, or pocketing lost IDs and wallets.
Shoulder surfing: Physically watching you enter your PINs or passwords at ATMs and checkout counters.
Once a scammer successfully acquires your data, they may use it to:
Open new bank accounts or credit lines.
Make unauthorized purchases on your existing accounts.
Apply for loans, leaving you with the debt.
Take over your email, online banking, or social media profiles.
Claim government benefits illegally.
Commit other crimes while pretending to be you to evade law enforcement.
Securing your identity requires a combination of strong digital habits and physical alertness. Follow these essential tips to protect yourself:
Keep documents private: Do not share sensitive data via SMS, email, or social media chat channels.
Hide your IDs online: Never post photos of your government IDs, passports, or official documents on social media platforms.
Shred your trash: Cross-shred or tear up physical documents, billing statements, and receipts containing personal data before throwing them away.
Limit social media sharing: Set your privacy settings to "friends only" and avoid publicly sharing identifying details like your specific location, work information, or family details.
Create robust passwords: Use complex, unique passwords for every single account. Avoid obvious combinations like your birthday, name, or sequential numbers like 123456.
Turn on Multi-Factor Authentication (MFA): Enable MFA or two-step verification whenever it is available to add an extra layer of protection.
Keep devices updated: Regularly install software and application updates on your phone and laptop to patch security vulnerabilities. Use reputable antivirus software and strictly lock your devices using a secure PIN, fingerprint, or facial recognition.
Avoid public Wi-Fi for banking: Never log into your financial accounts or input passwords while connected to public Wi-Fi. Use a Virtual Private Network (VPN) if you must handle sensitive data or work remotely.
Shop safely: Only conduct online transactions on trusted, secured websites that use encryption (look for the "https://" and the padlock icon in the URL bar). Never send money to unknown or unverified businesses or individuals.
Beware of suspicious links: Do not click on links embedded in unsolicited emails, text messages, or chat applications. Always carefully verify the sender’s exact email address or phone number.
Stay alert to unusual calls: Scammers frequently pose as bank officers, government authorities, or delivery services. Remember: Banks will never ask for your passwords or One-Time Passwords (OTPs). If a call feels off, hang up immediately and dial the bank's official hotline yourself.
Secure physical IDs: Keep your passport, driver’s license, and other government IDs in a safe place at home. If an ID goes missing, report it immediately to the issuing agency and your bank to prevent misuse.
Track your statements: Regularly audit your bank statements and credit card transaction histories. Turn on instant transaction alerts and login notifications via your banking app so you are notified the moment activity occurs.
If you discover that your personal information has been compromised, quick action can drastically reduce the potential damage:
Change passwords immediately: Update the credentials for your compromised accounts and any other profiles that share similar passwords.
Notify your financial institutions: Alert your bank immediately so they can block your cards, monitor your accounts, or issue new credentials.
Check for unauthorized changes: Review your accounts for any altered contact details, unauthorized transactions, or new payee additions.
Activate account alerts: Turn on strict notifications for all account movements.
Secure your devices: Run an antivirus scan to ensure no malware or spyware is logging your keystrokes.
Report the incident: File an official report with your bank and relevant cybercrime authorities to document the identity theft.
Staying informed is your best defense against evolving digital threats. Keep your credentials secure, remain vigilant against unsolicited requests for data, and always verify before you trust.
To report suspicious account activity or potential identity theft involving your Metrobank accounts, contact the report it immediately by calling the Metrobank Contact Center at (02) 88-700-700 or domestic toll-free at 1-800-18-88-5775, or email us at customercare@metrobank.com.ph.