777JILI Spoofing Under RA 11934: Fake Sender, Real Law
RA 11934 Section 3(g) defines spoofing as transmitting misleading or inaccurate information about the source of a call or text, with intent to defraud, cause harm or wrongfully obtain anything of value.
Key facts and contents
- 777JILI Demand Letter
- A demand letter is a written, extrajudicial demand for the other side to do what it owes.
- 777JILI DTI Complaint Steps
- A DTI complaint starts with mediation, which DTI Administrative Order 20-02 makes mandatory.
- 777JILI and the PAGCOR Office
- pagcor.ph prints the PAGCOR Corporate Office at the Met Live Building, Macapagal Boulevard cor.
- 777JILI and PDIC
- PDIC's own page sets maximum deposit insurance at ₱1,000,000 per depositor, per bank, for banks closed on or after 15 March 2025 (₱500,000 for earlier closures).
- 777JILI PNP ACG
- The PNP ACG is the Philippine National Police Anti-Cybercrime Group.
- 777JILI Ponzi Scheme Check
- In the SEC's wording, a Ponzi scheme pays "fake profits" to earlier investors out of money from new investors.
- 777JILI on RA 7394
- RA 7394 is the Consumer Act of the Philippines.
- 777JILI Refund Rights
- RA 7394 Article 100 lets a consumer demand reimbursement of the amount paid when a product or service imperfection is not corrected within thirty days.
- 777JILI Small Claims
- Under the Supreme Court's Rules on Expedited Procedures, small claims cover payment or reimbursement of a sum of money not above ₱1,000,000.
RA 11934, the SIM Registration Act, defines spoofing in Section 3(g) as “the act of transmitting misleading or inaccurate information about the source of the phone call or text message, with the intent to defraud, cause harm, or wrongfully obtain anything of value.” On your screen the “source” is the sender name or number, so a spoofed message looks like it came from someone you trust. If one has already cost you money, the complaint letter pillar explains how a written complaint is built.
Spoofing in RA 11934: the definition and the penalty
The Act treats the definition and the penalty in two places:
| Section | What the text says |
|---|---|
| 3(g) | Spoofing is transmitting misleading or inaccurate information about the source of a call or text, with intent to defraud, cause harm, or wrongfully obtain anything of value |
| 11(e) | “For spoofing a registered SIM”, imprisonment of no less than six years, or a fine of ₱200,000, or both |
Section 11(e) exempts a transmission made in connection with authorised activities of law enforcement agencies, or under a court order specifically authorising the use of caller ID manipulation.
The NTC’s Region 6 page puts the mechanism plainly: “SMS spoofing only involves the alteration of sender details to make it look like the message is coming from someone they know and trust.”
Fake SMS: what smishing looks like
The BSP lists “Text scam or smishing (SMS phishing)” and describes it as sending fraudulent text messages to obtain personal data, account details, or payments. The NPC’s Bulletin No. 21 gives two scenarios:
- A text carries a code and a shortened link that, when clicked, binds the recipient’s mobile number to a dummy Facebook account.
- A text about an online delivery sends a shortened link to a site that asks for personal and banking information “to complete the delivery.”
For both, the NPC advises not clicking links of services you did not sign up for, and says Android and iOS users should “immediately block and report” unsolicited texts with the built-in spam feature in their SMS apps.
Vishing: the call that asks for personal information
The BSP defines vishing (voice phishing) as using calls or voice messages to pose as trusted entities and trick victims into revealing sensitive information. Its fraud-prevention lesson names three indicators:
- The caller claims to represent a financial institution.
- The caller creates a sense of urgency.
- The caller asks for personal information.
Red flags to watch for in a spoofed message
Six signs, each from a saved text:
- A link by text for a service you did not sign up for (NPC Bulletin No. 21).
- A shortened link, which the NPC says can conceal a malicious one.
- A request for an MPIN or OTP, which GCash says it never makes by link, text, e-mail or phone.
- A caller who claims to be from your bank and presses you to act at once (BSP).
- A message that carries a wallet’s name yet asks for your password, OTP or card details, which Maya says it never asks for.
- A social media page offering “customer support”, which GCash says is a fake page and tells you to report only through Gigi or the GCash Help Center.
What GCash and Maya say about links and codes
| Wallet | What its own page says |
|---|---|
| GCash | “GCash will NEVER send you links via SMS/email or ask for your MPIN/OTP.” |
| GCash | “GCash will never ask for your MPIN, or OTP over the phone.” |
| Maya | “Never share your password, OTP, or card details with anyone, including people claiming to be Maya representatives. Maya will never ask for them.” |
| Maya | “Scammers can spoof sender names to look legitimate.” |
How a wallet moves money to a casino is covered under GCash casino payments. If a spoofed text sold you a product, the DTI complaint steps show what that office takes, and the lines PAGCOR prints for gaming concerns are on the PAGCOR office page.
FAQ
What is spoofing under RA 11934?
Section 3(g) defines it as transmitting misleading or inaccurate information about the source of a phone call or text message, with the intent to defraud, cause harm, or wrongfully obtain anything of value.
What is the penalty for spoofing?
Section 11(e) sets imprisonment of no less than six years, or a fine of ₱200,000, or both, unless the transmission is exempted for authorised law enforcement activities or by a court order.
What is the difference between vishing and fake SMS?
The BSP describes vishing as using calls or voice messages to pose as trusted entities, and a text scam or smishing as sending fraudulent text messages to obtain personal data, account details or payments.