Digital banking and e-wallets have become part of everyday life for many Filipinos. People use them to pay bills, transfer money, shop online, and send funds to family and friends.
As more financial transactions happen online, banks and payment providers are also finding better ways to protect customers from fraud.
One of the biggest changes happening today is the move away from text-based One-Time Passwords (OTPs). Instead of relying only on SMS or email codes, banks are starting to use stronger and smarter ways to verify a person’s identity.
This shift follows the June 25, 2026, compliance deadline under Bangko Sentral ng Pilipinas (BSP) Circular No. 1213. The new rule limits the use of authentication methods that can easily be intercepted, such as OTPs sent through text messages or email.
Under the circular, financial institutions that offer complex electronic financial services and process an average monthly network transaction value of at least P75 million over six months are required to use stronger authentication methods for high-risk transactions.
These methods may include biometric verification, passwordless authentication, and adaptive authentication that checks a customer’s location, device, and behavior before approving a transaction.
The goal of these new security measures is simple: to make digital banking safer while giving customers a smoother experience. Instead of asking users to enter codes every time they make a transaction, banks are moving toward security systems that work quietly in the background.
This marks an important step in strengthening the country’s digital financial services as online banking continues to grow.
Why OTPs Are No Longer Enough
For many years, OTPs have been one of the most common ways to secure online transactions. After entering a password, customers receive a temporary code through SMS or email, which they must enter to complete the transaction.
While this method has helped improve security, it was created during a time when cyber threats were much less advanced.
According to Sylvain Chaperon, General Manager of 8×8 CPaaS, OTPs were developed based on the idea that the mobile number receiving the code would always remain under the account holder’s control.
However, this is no longer always true.
Fraudsters have found different ways to bypass OTP security through SIM swapping, message interception, and social engineering attacks. In many cases, scammers trick customers into sharing their OTPs through fake calls, text messages, or websites that appear legitimate.
As Chaperon explained, “In a mobile-first economy like the Philippines, where the smartphone is most people’s primary gateway to banking and payments, that makes the authentication step a high-value target.”
Because of these growing threats, financial institutions are now looking for better ways to verify users without depending only on codes that can be stolen or shared.
One example is Silent Mobile Authentication. Instead of sending an OTP, the system verifies the customer’s SIM card, mobile device, and transaction session directly with the mobile network operator. Since there is no code sent to the user, there is nothing for scammers to intercept or convince customers to reveal.
Earlier this year, 8×8 partnered with PLDT Enterprise to introduce Silent Mobile Authentication in the Philippines. The solution allows businesses to verify users through trusted mobile network signals without requiring OTPs.
Banks are also exploring other technologies such as passkeys, biometric authentication, and magic links that connect a customer’s identity to a trusted device instead of relying only on a mobile number.
Smarter Security Without Making Banking Harder
Moving beyond OTPs does not mean banks will rely on just one new technology. Instead, experts expect financial institutions to use multiple layers of security that work together to protect customers.
These systems can evaluate several factors before approving a transaction. They may check whether the customer is using a familiar device, whether the location matches previous activities, or whether the transaction follows the customer’s usual behavior.
If everything looks normal, the transaction can continue smoothly. If something unusual is detected, the system may ask for additional verification.
This approach is known as risk-based or adaptive authentication because the level of security depends on how risky a transaction appears.
One of the biggest advantages of this system is that customers do not have to do extra work unless necessary.
As Chaperon said, “The principle is to move the effort away from the customer and into the technology.”
He added, “Silent authentication is the clearest example: it verifies identity in the background, so the customer does nothing at all—no code to read, type or understand.”
This is especially helpful for users who may not be familiar with digital technology. Instead of remembering passwords or waiting for OTP messages, they can enjoy a faster and easier banking experience while still being protected.
Although adopting these technologies requires investment, financial institutions must also consider the costs of fraud, customer support, reputational damage, and financial losses. In the long run, stronger security can help banks protect both their customers and their businesses.
Supporting Safer Digital Payments with DOPAY
As digital payments continue to grow in the Philippines, businesses also need payment solutions that are secure, reliable, and easy for customers to use. While banks are improving authentication methods to reduce fraud, companies must also ensure that their payment processes are efficient and protected from potential risks.
This is where DOPAY helps businesses adapt to the changing digital payment landscape.
DOPAY provides a complete digital payment solution that allows businesses to collect payments through multiple channels, making transactions more convenient for both merchants and customers.
Instead of relying on traditional payment methods, businesses can accept digital payments through an integrated platform that supports today’s cashless economy.
Its services include online payment collection, QR code payments, payment gateway solutions, automated payment processing, and integration with different payment channels. These solutions help businesses receive payments faster while providing customers with a simple and convenient payment experience.
As financial institutions adopt stronger authentication methods such as biometrics, passkeys, and silent authentication, businesses also benefit from working with payment providers that support secure digital transactions.
A reliable payment platform helps reduce payment delays, improve transaction efficiency, and build customer confidence in digital payments.
Security is no longer only about verifying a person’s identity. It also involves creating a payment process that is smooth, dependable, and designed to protect both businesses and customers throughout every transaction.
By offering secure and modern payment solutions, DOPAY supports businesses as they continue their digital transformation. Combined with the banking industry’s move toward stronger authentication, these services contribute to a safer and more trusted digital payment environment for everyone.
