What began as an initiative to modernize tax transparency and protect sensitive taxpayer information has evolved into a wider debate about privacy, fraud risks, platform compatibility, and the regulatory burdens placed on micro‑entrepreneurs.
Formalized through Revenue Memorandum Circular (RMC) No. 113‑2026, the Bureau of Internal Revenue (BIR) has decided to suspend the mandatory online seller badge requirement for covered taxpayers.
The suspension shows the agency’s acknowledgment that digital compliance rules must be carefully designed to avoid unintended harm in an increasingly complex online ecosystem.
The controversy surrounding the badge highlights a deeper tension: how can regulators enforce tax compliance in digital markets without exposing taxpayers to new risks or overwhelming small sellers with administrative demands?
Suspension in View of “Orderly” Implementation
BIR suspended the mandatory display of its Registration Seal Badge, originally required under RMC 38‑2026 and later reinforced by RMCs 64‑2026 and 99‑2026, following widespread criticism from online sellers, content creators, and digital service providers.
Commissioner Charlito Martin Mendoza stated that the agency had “heard the concerns” regarding data privacy, technical issues, and unclear compliance scope, emphasizing that protecting personal information online presents challenges distinct from physical business establishments.
The badge, which contains a QR code linked to the BIR’s verification system, was intended to replace the posting of full Certificates of Registration (COR) online.
However, critics noted that scanning the QR code revealed taxpayers’ full legal names and middle names, raising concerns about doxxing, stalking, harassment, and identity theft.
The badge’s public display exposed personal identities on social media and e‑commerce platforms, creating new vulnerabilities for small sellers and freelancers who often operate from their homes.
Privacy concerns were compounded by fraud risks. Watchdog groups warned that scammers could exploit the badge to impersonate legitimate sellers, using the official‑looking seal to deceive buyers.
Fraudsters could replicate the badge or misuse its visual legitimacy to create fake storefronts, making it harder for consumers to distinguish real sellers from fraudulent ones.
The National Privacy Commission (NPC) clarified that the QR code alone cannot enable identity theft, but acknowledged that privacy risks arise when personal data is publicly exposed across multiple platforms.
The BIR ultimately suspended the requirement, stating that no penalties would be imposed during the review period and that taxpayers who already obtained badges may display them voluntarily
Intended Purpose of the Online Seller Badge
The badge was originally designed to modernize tax transparency in digital commerce.
Historically, businesses were required to display their COR at physical establishments. This meant posting images of online sellers’ COR on websites or social media pages: an approach that exposed sensitive information such as home addresses and Taxpayer Identification Numbers (TIN).
To address this, the BIR introduced the Registration Seal Badge, a digital marker containing a QR code that links to the agency’s verification system. Big-four audit firm KPMG described the badge as a “blue check” for legitimate digital businesses, intended to protect sensitive data while allowing consumers to verify compliance easily.
The badge was meant to support the Ease of Paying Taxes Act by simplifying compliance and reducing the need to upload full CORs.
It also aimed to level the playing field by ensuring that online sellers, freelancers, and content creators were subject to the same registration requirements as traditional businesses.
However, the badge’s implementation revealed gaps in privacy protection, platform compatibility, and fraud prevention; issues that ultimately led to its suspension.
Data Privacy Concerns: When Transparency Exposes Vulnerability
The most significant criticism of the badge centered on data privacy. While the badge was intended to protect sensitive information, scanning the QR code publicly revealed taxpayers’ full legal names and middle names.
The sudden exposure created risks of doxxing, stalking, harassment, and targeted scams, particularly for small sellers who operate from their homes and rely on personal social media accounts for business.
The NPC clarified that identity theft cannot be carried out using the QR code alone, but acknowledged that privacy risks arise when personal data is publicly displayed across multiple platforms.
BIR recognized that protecting personal information online requires safeguards beyond those used in physical establishments, where CORs are displayed in controlled environments.
The badge’s design inadvertently created a new privacy vulnerability: it centralized personal identity information into a single, scannable marker that could be accessed by anyone, including malicious actors. This risk was amplified by the badge’s mandatory nature, which forced sellers to expose their identities even if they preferred anonymity for safety reasons.
How Scammers Could Also Exploit the Badge
Beyond privacy concerns, fraud risks emerged as a major issue as scammers and fraudsters could use the badge to impersonate legitimate sellers, creating fake storefronts that appear compliant with BIR regulations.
The badge’s official appearance could be replicated or misused to deceive buyers, making it harder for consumers to distinguish real sellers from fraudulent ones.
Watchdog groups warned that the badge could become a new weapon for scammers, who could exploit its legitimacy to gain consumer trust. The risk was particularly high on platforms with limited verification features, such as community marketplaces, social media groups, and informal selling channels.
The badge’s QR code system also raised concerns about phishing. Fraudsters could create fake QR codes that redirect users to malicious websites, harvesting personal information or payment details.
While the BIR’s official QR codes link to a secure verification domain, consumers may not always distinguish between legitimate and fraudulent codes.
Regulatory Burden on Small Businesses and Entrepreneurs
Micro‑entrepreneurs, students, casual vendors, and small‑scale online earners were among the most affected by the badge requirement.
Micro sellers faced the same compliance demands as larger enterprises, including registration updates, badge generation, and platform‑level display requirements. For many, the administrative overhead was disproportionate to their revenue levels.
Senator Bam Aquino welcomed the suspension, emphasizing the need to ease regulatory burdens on small businesses and digital entrepreneurs. He urged the BIR to listen to public concerns and make doing business easier, especially for micro‑sellers and content creators who rely on online platforms for livelihood.
The badge controversy implicates that digital compliance rules must account for the diverse realities of online sellers, many of whom operate informally or part‑time. A one‑size‑fits‑all approach risks excluding small entrepreneurs from the digital economy.
DOPAY, as a BSP‑licensed EMI and VASP, offers OFWs a low‑cost remittance pathway through in‑app user‑to‑user transfers, allowing OFWs to send money from abroad using crypto‑to‑PHP conversion and direct wallet‑to‑wallet transfers.
For overseas Filipino workers (OFWs) and local employees, DOPAY provides a reliable way to manage money, send remittances, and access digital financial tools protected by strong KYC and AML/CFT controls.
With DOPAY’s crypto wallet, you can gain crypto rewards for every trade under our Trade & Earn program. Not just that, with DOPAY’s Refer & Earn program, Filipinos can unlock new doors for earning possibilities with every successful referral.
Download the DOPAY app today!
