CICC Urges Stronger Cybersecurity Safeguards as Mynt IPO Expands Digital Economy Access

The approval of Mynt's initial public offering represents a watershed moment for the Philippine capital market—millions of Filipinos who use GCash as a digital wallet will now have the chance to become stock investors through the same platforms they already trust. But that same accessibility, officials warn, opens a door for criminals who have learned to exploit the gap between familiarity and expertise.

Renato Paraiso, executive director of the Cybercrime Investigation and Coordinating Center, has begun sounding the alarm about what happens when a financial product designed for ease of use meets a population of first-time investors. The CICC, a government body tasked with investigating and coordinating responses to cybercrime, is now pushing for a formal partnership between law enforcement and the private sector to protect these new market participants from a specific and growing threat: scammers who impersonate legitimate institutions.

The numbers tell part of the story. In 2025, consumer fraud complaints made up 35 percent of all cybercrime reports received by the CICC's complaint center—the largest single category. That baseline matters because the Mynt IPO is expected to bring a wave of retail investors into the market, many of them logging in through digital channels for the first time. Paraiso has outlined the specific tactics criminals are already using or preparing to use: counterfeit GCash and Mynt websites designed to look identical to the real thing, fraudulent social-media pages impersonating official accounts, fake "IPO agents" offering to help with purchases, phishing messages that appear to come from brokers or regulators, malicious QR codes embedded in promotional materials, and promises of guaranteed share allocations or exclusive access—all designed to separate new investors from their money or their personal information.

The vulnerability is sharpest for people who know GCash well but have never bought a stock. They understand how to move money through the app, how to verify a legitimate GCash transaction. But the mechanics of an IPO, the proper channels for purchasing shares, the warning signs of a scam—these are unfamiliar territory. A scammer impersonating a broker or a regulator can sound authoritative to someone navigating the capital market for the first time.

Paraiso has been clear about what the CICC's role is not. The center does not conduct the "know your client" security checks that financial institutions and securities regulators handle. It does not determine who is eligible to buy shares. Instead, the CICC focuses on the detection, prevention, and pursuit of cybercriminal activity targeting investors—the work of identifying fake websites, taking down fraudulent accounts, and helping the public understand how to verify that they are dealing with a legitimate institution.

The proposed CICC-GCash partnership would formalize this cooperation. It would include monitoring for fraudulent websites and social-media accounts, facilitating the reporting and removal of impersonation schemes, and providing clear, simple guidance to the public on how to confirm they are using official IPO channels. It is a recognition that as the digital economy expands and reaches deeper into the population, the infrastructure protecting it must expand too—not just the technology, but the human coordination between the agencies and companies that can actually stop the criminals.

What remains to be seen is whether the partnership can move quickly enough. The IPO approval has already been granted. Millions of Filipinos are already familiar with GCash. The scammers, almost certainly, are already preparing their schemes. The window for getting the protections in place before the first wave of new investors arrives is narrow.