Am I liable if I shared my OTP or was phished on GCash/Maya?
Last updated: 2026-07-11 · Educational content; not legal advice.
Short answer
Sharing your OTP, MPIN, or password can shift responsibility onto you, because a provider will treat disclosing your one-time PIN as negligence that enabled the transaction — no legitimate provider or agent ever needs your OTP. That does not automatically end your claim: whether you bear the loss depends on the facts, and RA 11765 (2022) still requires the provider to investigate and to protect consumers against fraud. If you were deceived by a phishing site or impostor, report it in writing immediately so funds can be frozen, and file with the PNP Anti-Cybercrime Group — the person who tricked you can be liable for estafa (Revised Penal Code Article 315) and under the Cybercrime Prevention Act. Being phished weakens but does not always erase your case, so still demand the investigation and escalate to the BSP.
Primary sources
Frequently asked
Does sharing my OTP automatically make it my fault?
It strongly counts against you, because the provider treats disclosing a one-time PIN as negligence. But liability turns on the facts — RA 11765 still obliges the provider to investigate and to protect consumers against fraud, so do not assume the case is closed; demand the investigation result in writing.
Will a legitimate GCash or Maya agent ask for my OTP?
Never. No genuine provider, bank, or agent needs your OTP, MPIN, or password. Any message or caller asking for it is a scam — treat the request itself as the red flag.
Who can I still hold liable if I was phished?
The person who deceived you. Obtaining money by deceit is estafa under Revised Penal Code Article 315, and online phishing can fall under RA 10175 (Cybercrime Prevention Act). Report to the PNP Anti-Cybercrime Group and preserve all evidence.
Take action
Related issues
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Disputes, holds, and unauthorized transactions on GCash, Maya, and other e-wallets.