Phishing threat accelerates in PH as malicious URLs nearly quadruple by 2025 – Whoscall PH Scam Report
Phishing has overtaken traditional scam channels as the fastest-growing digital threat in the Philippines, with malicious URLs increasing exponentially by 2025 and driving renewed urgency in consumer protection efforts.
Data from Whoscall 2025 Philippines Scam Report by Gogolook shows that malicious URLs rose from 13,602 in the first quarter to 49,431 in the fourth quarter – a fourfold increase over the year.
Continued quarter-on-quarter growth points to phishing becoming the number one crime entering 2026, affecting SMS, messaging apps, email, and other online channels.
Leading the local response, Mel Migriño, who serves as General Manager and Country Head of Gogolook Philippines, said the trend shows how fast fraud tactics are evolving.
“Fraudsters are moving from calls and texts to malicious links and fake social networks because URLs are easy to spread, difficult to verify, and very dangerous,” said Ms. Migriño.
“This can be a source of tangible intelligence. When fraud data is shared responsibly, it allows us to see patterns, follow digital steps, and respond quickly to emerging threats,” said the Executive Director of the Cybercrime Investigation and Coordinating Center (CICC) Renato “Aboy” Paraiso.
“We thank Gogolook for supporting Scam Watch Pilipinas for turning public reports into valuable information and strengthening partnerships that help protect more Filipinos,” said Mr. Paraiso.
Rapid change in fraud behavior
Although scam calls and SMSes show mixed methods, the rise of link-based attacks is not without fault. Scam calls decreased by 21.84% year-on-year in some segments, while SMS scam volumes also decreased in some segments by 2025 due to improved filtering and usage, according to the report.
However, link-based phishing — especially through URLs embedded in messages and social media — is on the rise, underscoring the increasing sophistication of fraudsters.
Interdisciplinary push for awareness
Ms. Migriño emphasized that dealing with this phishing attack requires a concerted effort by the entire government, industry, and civil society.
“Technology alone cannot solve this – we need to empower Filipinos with the knowledge and tools to recognize and avoid scams before they take the bait,” he said.
Joint campaigns, community training, and digital campaigns translate fraud data into actionable guidance while strengthening formal reporting channels and support mechanisms.
What consumers can do now
Ms. Migriño urged consumers to take quick and effective measures to protect themselves. He recommended downloading the Whoscall app, which helps users inspect incoming communications and provides tools to check URLs for security before clicking.
The app’s features also include identifying dangerous or unwanted calls by flagging numbers associated with known scams and fraud — bringing more visibility to suspicious communications.
“Before you click on a link or answer a call from an unknown number, be quiet and check,” said Ms. Migriño. “These tools give consumers more protection, especially now that phishing is rampant.”
Business and consumer risk
The rapid growth of phishing poses a high risk not only to individual consumers but also to banks, e-wallet providers, e-commerce firms, and businesses whose brands have been damaged. If a malicious link is clicked, financial loss and reputational damage can quickly escalate.
Public reporting platforms are already reflecting this trend. Since the end of 2025, Scam Vault PH – the public reporting initiative of Gogolook, Scam Watch Pilipinas and CICC- has filed hundreds of real-world scam reports, including a growing share linked to malicious URLs and phishing attempts.
Outlook for 2026
With phishing on a high trajectory, Ms. Migriño said that 2026 will require faster reductions, stronger URL intelligence sharing, and broader consumer participation in reporting.
“Phishing is now the front line,” he said. “If users, platforms, and institutions come together, we can reduce it. If not, it will become more aggressive.”
The data suggests that while progress has been made against traditional fraud channels, phishing has become the country’s most pressing digital fraud challenge – one that businesses and consumers alike can no longer ignore.
Spotlight is a BusinessWorld-sponsored feature that allows advertisers to grow their brand and connect with BusinessWorld’s audience by publishing their stories on the BusinessWorld website. For more information, send an email to online@bworldonline.com.
Join us on Viber at https://bit.ly/3hv6bLA for more updates and subscribe to BusinessWorld articles and receive exclusive content www.bworld-x.com.
