Someone did a SIM swap or took over my GCash/Maya account — what do I do?
Last updated: 2026-07-11 · Educational content; not legal advice.
Short answer
Act on two fronts at once: lock down the account and the SIM. Report the account takeover to GCash/Maya in writing immediately to freeze it, and report the SIM swap to your mobile network so they can restore your number and investigate — SIMs are registered under RA 11934 (SIM Registration Act, 2022). Transactions you did not make and did not enable through your own negligence are unauthorized, and RA 11765 (2022) protects your assets against fraud and requires the provider to investigate and inform you of the actions taken. File a report with the PNP Anti-Cybercrime Group, and escalate to the BSP if the provider does not properly handle the unauthorized transactions.
Primary sources
Frequently asked
What is a SIM swap and why does it matter?
It is when someone fraudulently takes control of your mobile number, then uses the OTPs sent to that number to reset your e-wallet and drain it. Because it hijacks the number your provider trusts, restoring the SIM with your network is as urgent as freezing the wallet.
Am I liable for what the attacker spent?
Transactions you did not make and did not enable by sharing credentials are unauthorized; RA 11765 protects your assets against fraud and requires the provider to investigate. If the takeover happened without your negligence, you should not absorb the loss — demand the investigation result in writing.
Where do I report the crime?
The PNP Anti-Cybercrime Group for the account takeover (RA 10175), and your mobile network for the SIM swap under RA 11934. Keep every screenshot, reference number, and message as evidence for both the provider dispute and any criminal complaint.
Take action
Related issues
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Disputes, holds, and unauthorized transactions on GCash, Maya, and other e-wallets.