Michael's Blog

OTP Scams

I've heard a lot of warnings from emails and texts saying that I shouldn't just entertain calls, click links, or even share OTPs.

On Oct 28, 2025, I have been put to the test in my obedience to these warnings. I'd like to share my experience in (almost) getting scammed.

I get a call from an unknown number. For context, I collect credit cards with no annual fees for life (NAFFL). The reason is I don't use them unless there's a bank promo that makes the transaction cheaper. (i.e. 50% on steaks with XXX Credit Card).

Words in quotes are non-verbatim words of the caller.

Hello, is this {my full name}? We'd like to inform you that you're pre-approved for a credit card upgrade with BDO. When you upgrade, you get a higher credit limit and NAFFL status. You also get a cashback for using your credit card——the points earned can be converted to cash, and we can process it to have it deposited to your debit card.

Oh, that's nice. I'm hooked.

I'd like to confirm your date of birth, the birth year is 19..

I would continue to give my date of birth, my username, the last 4 digits of my debit card.

While this was happening, they would use the same spiel in the emails and text messages about the warnings against scammers.

"BDO will never ask you for your details."
"You're not to share your OTP with anyone."
Blah blah blah.

Hmm. Seems legit, no? I asked the names and where they're calling from. Their answers sufficed. We continue.

Okay, I'm going to send you an SMS prompt. This is from the official BDO system. Please confirm if you've received an OTP.

Sure thing. That's a closed-ended instruction—yes or no. I get the SMS prompt indicating the OTP. I confirm that I have received it.

Now, please confirm the 6-digit OTP that was sent to you.

Wait, what? You want me to send you the OTP? The same OTP I was advised earlier on to not share with anyone?

I put the caller on hold. Transfer all my money to another bank.

However, my curiosity got the best of me.

What if it's legit? I get a new credit card. I don't have to pay for it annually. I get a cashback.

Now my bank is empty. I have nothing to lose.

I unmute this guy. I admitted that I'm not comfortable with this transaction, hence, the hesitation, and that I'd prefer to do this in one of their branches instead.

You may, sir. But this promo is for a limited time only. I can assure you we will take care of your account. Otherwise, I lose my job.

I have no (enough) reason to doubt this guy. I give my OTP.

I'm on the line while the next SMS prompt sent says:

"Your password has been successfully changed."

Yep. That's enough reason to doubt everything from the time I picked up the phone to this point. I put the phone on hold. Called the hotline number, shared my concerns.

And you know what? Both the hotline agent and my scammer sounded the same. The tone and delivery of the conversation were so identical. It's uncanny. You'd really be convinced that promoters are calling from the head office.

A few minutes later, I received instructions on how to reset my password.

I ended the call and got 5-6 missed calls from the same mobile number after—which all the more gave me proof that this was a scam.

As I reflect the encounter, I am certain that someone else has completely fallen victim to this scam.

Here's what I realized:

  1. I was giving my login details myself in the guise of "confirming"
  2. They're really good in establishing rapport, I have to give them credit for that.
  3. They speak in the same way the hotline customer service agents would. Which made me think if these banks have a scam department.
  4. No caller should be able to call you again for "documentation" purposes
  5. No caller should ask your OTP, especially if the conversation is being "recorded."
  6. They know my (full) name and my mobile number, so my personal data is already compromised.
  7. If it's a mobile number calling you regarding bank promos, it's 99% chance a scam.
  8. Had I not had an inkling of doubt for this call, I would have lost our month's pay for rent in a matter of seconds.

F*ck the evil that twists the minds of these deceivers.

Stay safe everyone.

|