Gcash: Unauthorized fund transfers to be reversed by 3 p.m. today | ANC

[karenlc2]

e: i'd like to know who owns the AUB & East West bank accounts.

 

[ironicallyhuman]

@karenlc2 They will most likely get away with this without any explanation on how it happened.

 

[tonyhipps]

@ironicallyhuman As long as the users get their money back, no problems. It depends on the users if they would press charges or not. Gcash will lose a significant amount of revenue for sure.

 

[zelena_sljiva]

@tonyhipps I don't agree. The security of the customers have been compromised, Gcash has to be held accountable for that. Simple restitution is not enough.

 

[tonyhipps]

@zelena_sljiva You can say that to every bank in the world. No system is safe. Besides, what happened to BPI issue before? Were they held liable?

 

[nathanoj]

@tonyhipps Wasn't the BPI issue clearly a system glitch? That was when legit transfers were double posted right? Or was this a different incident you're referring to?

 

[tonyhipps]

@nathanoj That's still a security issue.

 

[nathanoj]

@tonyhipps Ah you're referring to the same incident then.. I dunno, a security issue to me is when an external party was able to get control of their system or if an insider was able to perform unsanctioned changes. If it was an officially approved work that had unintended consequences due to say human error, that to me isn't a security issue and is less alarming to me than a legit security issue.

 

[resjudicata]

@tonyhipps Kahit mabalik, imagine the distress it caused sa nakuhanan.

 

[crk3297]

@tonyhipps This issue will still be left unresolved - or maybe solved internally without closure for the users how GCash can make sure this doesn't happen again. It's not as if this is the first time there were waves of "hacks" in GCash.

If their knee jerk reaction is to blame the users even if it's probably not their fault (kasi nga GCash has not explained thoroughly what happened), then this is just them saving face, rather than being interested to make sure the funds on their accounts are secure.

 

[lilyanna]

@ironicallyhuman We’ll just hope for an explanation. Hoping forever. Haha!

 

[petersondevoutchristian]

@ironicallyhuman May article na pinost ang Yugatech about how this mightve happened. I read na may nag warn na daw sa Gcash about security vulnerability ng biometrics. Kaya siguro sa latest update ng Gcash wala nang biometrics login.

 

[dzwakenberg]

@karenlc2 No fund lost? Was it a “performance” hack/scam since sadyang nag-iwan ng PhP 85 sa e-wallet. Interesting to know what caused the unauthorized transfers.

 

[willd35]

@dzwakenberg Coded ata yung script nila na mag iwan ng 100Php which is the safest value for the service fee (15Phpnfor example) 100 - 15 = 85Php.

 

[dzwakenberg]

@willd35 Ooohh right makes sense

 

[lilyanna]

@dzwakenberg No hacking occured daw. Basta nanakaw lang pera na walang OTP.

 

[dzwakenberg]

@lilyanna I hope they provide a reason why the unauthorized transfers were made. So that we would also know how to prevent this from happening to us.

 

[lilyanna]

@dzwakenberg Best way to prevent this from happening again for now is just cash-in the exact amount to Gcash from BPI / UB everytime you pay using Gcash. Yay!

 

[dzwakenberg]

@lilyanna Prevents fat-finger mistakes too. Like paying for 20,000 when you intend to pay 2,000.

 

[lilyanna]

@dzwakenberg Indeed! Just an additional step to be safe than sorry.