Metrobank adds new app security features as digital scams grow more sophisticated

• Contributed Photo

As scammers increasingly target bank customers through phishing, account takeovers, and other forms of social engineering, Metrobank is adding new security controls to its mobile app aimed at giving users more time and control when suspicious activity occurs.

The bank has rolled out four security enhancements in the Metrobank App, including a 24-hour cooling-off period, a feature that allows customers to lock funds, geolocation-based checks, and payee verification.

The measures come as digital fraud remains a concern for Filipino consumers. Citing data from the Bangko Sentral ng Pilipinas (BSP), Metrobank said social engineering attacks, including phishing, account takeovers, and identity theft, accounted for 76 percent of reported cyber fraud losses in 2025.

One of the new controls is a 24-hour Cooling-Off Period, which automatically takes effect whenever critical security settings, such as a password or registered device, are changed.

During the cooling-off period, transactions through the app are temporarily disabled. Metrobank said the additional time could help customers detect unauthorized changes and report them before funds can be moved from the account.

The bank has also introduced Money Lock, allowing users to lock part or all of their available savings balance directly through the app.

Funds placed under Money Lock cannot be transferred or used for transactions, including scheduled transactions, until the account holder unlocks them. Metrobank advised customers to leave enough unlocked funds for upcoming payments or scheduled transactions before activating the feature.

Another security layer involves geolocation checks, which allow the app to assess whether transactions are being initiated through a customer’s registered mobile device and whether the device’s location appears consistent with normal activity.

Metrobank said potentially unusual activity may be flagged by the system as part of its effort to prevent unauthorized transactions.

For customers sending money to another Metrobank account, the bank has also added Payee Verification.

Before a transfer is completed, the app displays a masked version of the recipient’s registered account name, giving the sender another opportunity to check whether the intended recipient is correct.

The feature can be particularly useful in preventing transfers caused by incorrectly entered account details, while also giving users another point of verification before approving a transaction.

Metrobank said the additional safeguards form part of its broader effort to strengthen digital banking security amid evolving scam tactics and support measures under the Anti-Financial Account Scamming Act (AFASA) and related BSP regulations.

Customers can access the new security features by updating to the latest version of the Metrobank App.

While technology can make it harder for fraudsters to gain access to accounts, the new controls also put more security decisions directly in the hands of customers, from temporarily locking their money to checking who is receiving it before a transfer is completed.