How to Protect Yourself from Online Scams — Facebook, GCash, Viber, and More

 

How to Protect Yourself from Online Scams — Facebook, GCash, Viber, and More

I need to tell you something embarrassing.

I am an IT professional. I work in government. I help MSMEs set up proper digital presence. I troubleshoot network loops, fix BIOS settings, and do remote IT support via TeamViewer for colleagues across Surigao del Norte.

And I got scammed on Facebook for ₱7,500.

Not because I am stupid. Not because I was not careful enough in theory. Because the scammer was good at what they do — and I was excited about a bike during the pandemic when everyone was buying bikes and my guard was lower than it should have been.

I transferred the money. The seller confirmed receipt. Then disappeared.

My wife found out. She had opinions about this. Strong ones. Delivered thoroughly. 😄

She then bought me an actual folding bike from a legitimate store. The original bike I tried to buy — the scam bike — would have cost ₱7,500. The real bike cost more. The lesson cost everything. The folding bike now lives in our garage as a permanent reminder that due diligence is not optional.

This post is everything I learned from that experience — and everything I now do to make sure it never happens again.

How Scammers Actually Work — The Real Behaviors

Before the tips, understand the playbook. Because scammers are not random — they follow patterns that work. Once you recognize the pattern, the individual scam does not matter. You see it coming regardless of the disguise.

They create urgency.

"Last unit available." "Price goes up tomorrow." "Someone else is interested, decide now." Urgency is the enemy of careful thinking. The moment a seller or caller is rushing you to decide, something is wrong. Legitimate sellers do not need you to panic. Scammers need you to act before you think.

They use social proof that cannot be verified.

Screenshots of previous transactions. Five-star feedback comments. Photos of happy customers holding the product. All of these can be fabricated in Canva in fifteen minutes by someone who does it professionally. I work in Photoshop and Canva daily — I know exactly how easy it is to make something look convincing that is completely fake.

They ask you to move the conversation.

Starting on Facebook Marketplace or a group, then: "Message me on Viber." Or: "Let's continue on WhatsApp." Or: "I'll send the details on Messenger." Moving you away from the platform where the post exists removes whatever thin accountability the original post had. Once you are in a private chat, there is no record, no page to report, no community to warn.

They send fake proof of identity.

Government IDs. DTI business certificates. BIR registration. All photographed, all scannable-looking, all potentially fabricated. My bike scammer sent documentation. I looked at it. I thought it looked legitimate. I was wrong.

They ask for GCash, bank transfer, or remittance — never meet-up first.

The payment method is the tell. A legitimate seller in your city will meet you. A scammer will have a reason why meeting is impossible — "I'm in Cebu," "I'm at work," "I can have it delivered." And the payment is always digital, always upfront, always before you see the actual item.

They disappear the moment money moves.

Transfer confirmed. One more message: "Noted, releasing tomorrow." Then — nothing. Read receipts stop. Profile goes inactive. Sometimes the account disappears entirely. The entire interaction from first message to disappearance can take less than an hour.

Where It Happens — The Platforms to Watch

Facebook Groups and Marketplace. The original hunting ground. Buy-and-sell groups, secondhand item groups, community groups. The bike scam happened here. High volume, minimal verification, easy to create fake accounts with borrowed profile photos and manufactured history.

Messenger, Viber, WhatsApp. Where the scam moves after the initial contact. Private chats with no community oversight. This is where fake IDs get sent, where payment details get shared, where the final transaction happens before the disappearance.

Unknown phone calls. "Congratulations, you have won a prize." "This is your bank calling about suspicious activity." "Your GCash account will be deactivated." The voice is confident. The urgency is immediate. The information they ask for — OTP, account number, password — is what they are actually after. No legitimate bank, no legitimate government agency, and no legitimate company will ask for your OTP over the phone. Ever.

Text messages from unknown numbers. Links to fake GCash pages. Links to fake BDO login screens. Links that look real until you look at the URL and notice one letter is wrong. "Your account has been compromised — click here to secure it." The click is the trap. The link harvests your credentials.

Email. Fake job offers. Fake DTI notifications. Fake scholarship grants. Fake foreign lottery winnings. The email looks official — logo, formatting, professional language. The sender address, examined carefully, is wrong. A real government email ends in .gov.ph. A fake one ends in gmail.com with "DTI" somewhere in the address.

Online job scams. "Work from home, ₱800 per hour, no experience needed, just like and share." Or the more sophisticated version: "We are hiring for a remote position, please send your resume and pay a ₱500 processing fee." No legitimate employer charges a processing fee. None.

What I Do Now — The One Rule That Changed Everything

After the bike scam, I made one rule for myself.

Unknown contact trying to get my attention or my money — I ignore.

Unknown call: I do not answer. Unknown text with a link: I do not click. Unknown Facebook message about a prize, an offer, an opportunity: I do not reply. Unknown email asking me to verify anything: I do not open the link.

Not because I am being rude. Because the math is simple: if it is a real person with a real reason to reach me, they will find another way. A real employer contacts you through a verified channel. A real bank has a hotline you can call back on a number you find yourself. A real friend identifies themselves immediately.

An unknown contact that opens with urgency, opportunity, or alarm is almost always a scammer. The ignore rule costs me nothing on the rare occasion I am wrong. It saves me everything on the many occasions I am right.

Specific Things I Now Do Before Any Online Transaction

If I am buying something online — which I do very rarely now, and never through a Facebook group — I follow this checklist before any money moves:

Check the seller's account age and activity. A Facebook account created last month with three posts and seventy-five product listings is a red flag. A real seller has a history, a face, consistent activity over time.

Search the name and phone number. Copy the seller's name and number and search Google. Add the word "scam" to the search. If others have been victimized, there is often a trail somewhere — a warning post, a comment, a complaint thread.

Insist on meet-up or cash on delivery. For items within the same city or province — meet in person, in a public place, during daylight. See the item before money moves. No legitimate local seller has a genuine reason to refuse this.

Never send OTP to anyone. Your One-Time Password is yours and only yours. The moment anyone — bank representative, seller, "GCash support" — asks for your OTP, end the conversation immediately. That is the only credential they need to take everything.

Verify before you trust. For businesses: check the DTI business registration. For government notifications: call the actual agency hotline using the number from the official website — not the number in the suspicious message.

If It Happens to You

First: do not be embarrassed. I am an IT professional and it happened to me. Scammers are professionals at what they do. Being victimized is not a measure of intelligence — it is a measure of how good the scammer was on that particular day.

Second: report immediately. File a complaint with the PNP Anti-Cybercrime Group at their official website (acg.pnp.gov.ph) or their hotline #8-CYBERCRIME (#8-29274-2463). Report the account on Facebook directly using the report function. If money moved through GCash — contact GCash support immediately and file a dispute.

Third: warn your community. Post about it in the same group where the scam happened. Your warning might be the thing that stops the next person from making the same transfer. The scammer counts on victims staying quiet out of embarrassment. Do not give them that.

System Disclaimer: The information in this post is based on personal experience and publicly available guidance from Philippine cybercrime authorities. For official legal advice on cybercrime complaints, consult a licensed lawyer or contact the PNP Anti-Cybercrime Group directly. Think of this post as a diagnostic report — the authorities run the actual repair.

Before I Close This Tab

The folding bike is in the garage.

It is a good bike — the real one my wife bought from a legitimate store after the scam. I ride it occasionally. Every time I do I think about that ₱7,500 and the lesson it bought me, which was expensive but apparently necessary.

I was an IT professional who got scammed on Facebook during a pandemic biking craze. You might be a nurse, a teacher, a government employee, a student — and the scammer who finds you will be dressed as whatever you are most likely to trust at that moment.

The defense is simple and it does not require technical knowledge:

Slow down. Verify. And when something feels wrong — ignore.

That is it. No complex system. No special app. Just the discipline to pause before you act and the willingness to walk away from any deal that does not feel completely right.

Share this with someone you know who might need it. The best thing that can come out of my ₱7,500 mistake is that it saves someone else from making theirs.

-Mavs

Post a Comment

0 Comments