Why Phishing SMS for Gaming Bonuses Are Dangerous

Scammers send text messages that mimic legitimate gaming platforms, offering free credits, deposit bonuses, or exclusive promotions. They aim to trick you into clicking a suspicious link or providing sensitive information like your login credentials, one-time passwords, or banking details. According to PAGCOR, illegal online gaming sites not only endanger players but also erode public trust and deprive the government of revenues. These phishing attempts can lead to account takeover, financial loss, or malware installation on your phone. Always treat unsolicited bonus offers with caution, especially if you did not sign up for them or have never used the platform.

Sources for this section: PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

Red Flags in Bonus Offer SMS

Spotting phishing SMS is the first line of defense. Look for these common warning signs:

- Unknown or international sender numbers, or numbers that do not match official customer service. - Urgent language like 'Limited time only' or 'Claim now before it expires' to pressure you. - Generic greetings such as 'Dear player' instead of your actual name. - Suspicious links that may look similar to a known gaming domain but have typos or extra characters. - Requests for personal information, passwords, or OTPs via text. - Misspellings, poor grammar, or unusual punctuation. - Offers that seem too good to be true, like 'Free PHP 10,000 bonus' with no conditions.

If any of these appear, delete the message immediately. Do not click the link or reply, as replying can confirm your number is active.

Sources for this section: PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

Verify the Offer Through Official Channels

Instead of clicking links in an SMS, go directly to the gaming platform's official website or app. Use a web browser you trust and type the domain manually or use a bookmark you have saved. Before entering any credentials, check the domain carefully for accuracy. You can also verify if the gaming site is listed on the PAGCOR Guarantee website, which provides a regularly updated list of licensed internet gaming platforms. Note that PAGCOR does not endorse specific operators, and you should independently verify the site's legitimacy. Contact the platform's official customer support through their website or verified social media accounts to confirm if the bonus offer is real. Do not use numbers or contacts provided in the suspicious SMS.

Sources for this section: PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

Check the Link and Domain Before Clicking

Phishing links often use lookalike domains, such as replacing 'o' with '0' or adding extra words. To inspect a link without tapping it, long-press the URL in the text message to see the full address. Look for HTTPS and a familiar domain structure, but remember that legitimate sites can also be copied. If you are unsure, search for the platform's official domain through a search engine and compare. Avoid using shortened links that hide the final destination. You can also use a link scanner or the search engine to check the full URL before clicking. Remember, even if the domain looks correct, the SMS could still be fake, so always verify independently.

Sources for this section: PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

Protect Your Device and Accounts

Phishing SMS may lead to malicious websites that try to download malware or steal credentials. Keep your phone's operating system and apps updated to patch security vulnerabilities. Install a reputable mobile security app from an official store if you want extra protection. Never grant unknown app permissions, such as accessibility or SMS reading privileges, to apps you do not trust. Use two-factor authentication on your email and gaming accounts to add an extra layer of security. If you receive a suspicious SMS, report it to your network provider or forward it to 7726 (for some networks) to help block spammers. Always log in to your accounts only through official apps or verified websites.

Sources for this section: PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

What To Do If You Clicked a Phishing Link

If you accidentally clicked a link or entered your information, act quickly:

1. Disconnect your device from the internet if you suspect malware. 2. Change your passwords immediately, especially for the affected gaming account and your email. 3. Enable two-factor authentication if you have not already. 4. Contact your bank or e-wallet provider if you shared financial details. 5. Scan your device with a security app to check for malware. 6. Report the incident to the platform's official customer support. 7. Monitor your accounts for suspicious transactions.

Remember that legitimate platforms will not penalize you for being cautious. Do not worry about missing a supposed bonus—your security is more important.

Sources for this section: PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

Responsible Play Reminder

Gaming bonuses are promotions, but they come with terms and conditions. Even if an offer is genuine, always read the full promotion terms before accepting, including wagering requirements and eligible games. Set personal time and spending limits and never chase losses. If you feel that your gaming habits are becoming problematic, seek help from responsible gaming organizations. Remember, the only safe way to participate in online gaming is through verified and legal channels, and you should always play within your means.

Sources for this section: PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

Sources checked

  1. PAGCOR platform verification guidanceChecked 2026-08-10
  2. PAGCOR and ASC advertising standardsChecked 2026-08-10