‘Mule Hunting’ Whitepaper Exposes Vulnerabilities Across PHP 24.74 Trillion Digital Payment Grid

/, , , , , , , , , , / 0 Comments

With 55.4% of at-risk transactions tied to push payment scams and account takeovers, industry experts urge banks to adopt multi-layered AI defenses.

PRESS RELEASE

PH economy risks losing PHP 603B yearly to digital fraud without stronger safeguards – report

The report calls for layered, AFASA-anchored defenses as deepfakes and mule account networks scale across the financial system

Manila, Philippines — The Philippine economy risks losing roughly PHP 603 billion annually, or nearly 3% of national Gross Domestic Product (GDP), to illicit mule account networks without stronger identity safeguards, according to a joint whitepaper released by IDfy Philippines and CIBI Information, Inc.

The report, “Mule Hunting: Are We Chasing Ghosts?,” analyzed transaction data from the Bangko Sentral ng Pilipinas (BSP), which saw PHP 24.74 trillion of combined transaction flows through PESONet and InstaPay in 2025. The report noted that about PHP 1.088 trillion in transactions was at risk of digital fraud, with 55.4% directly dependent on authorized push payment (APP) scams and account takeovers (ATO) that require mule accounts to exfiltrate stolen cash.

The vulnerability stems from hyper-accelerated digital adoption. The Philippines surpassed its target to digitize 50% of retail payments three years early, reaching 52.8% in 2023. However, this rapid growth created a gap that transnational syndicates actively exploit.

Despite the scale of the shadow economy, official cybercrime reporting remains low at under 2%. While Cybercrime Investigation and Coordinating Center (CICC) data indicates 34% of Filipinos suffered financial scam losses, victims rarely file formal complaints due to small transaction values and legal complexity. This allows weaponised mule accounts to remain active and clean for months.

The whitepaper estimates that 60% to 70% of mule accounts involve voluntary participation, driven by a rampant “mule-for-hire” market where verified bank and e-wallet accounts are bulk-purchased for PHP 500 to PHP 5,000, according to NBI data. The remaining 30% to 40% are coerced through sophisticated schemes like romance-investment frauds and fake remote job scams.

Regulatory pressure is rapidly escalating under the Anti-Financial Account Scamming Act (AFASA) and BSP Circular 1213, which fundamentally shift liability for fraud losses from consumers to financial institutions. Institutions that fail to deploy real-time fraud management systems face full, unlimited reimbursement liability for customer losses.

Crucially, the circular restricts SMS and Email OTPs to initial account setups, prohibiting their use for high-risk actions such as fund transfers, payee additions, and credential changes. To secure the digital grid, institutions are urged to adopt multi-layered, resilient authentication that requires server-side biometrics, cryptographic device binding, and real-time AI behavioral risk scoring.

“Clinging to interceptable OTPs is no longer just legacy technology; under AFASA, it is a direct financial liability for institutions,” said Raghuraman Chandrashekhar, Country Head of IDfy Philippines. “No single institution can close this gap alone. What works is layering device intelligence, real-time AI transaction monitoring, and biometric verification into a unified defense stack.”

Industry experts emphasized that closing the gap requires a multi-layered architecture rather than isolated safeguards. Collaborative systems like Fraud Intelligence Data Sharing (FIDS), AI-driven transaction monitoring, and server-side facial authentication must operate in unison, with the AFASA regulatory framework binding them into an end-to-end defense mechanism that mule networks cannot bypass.

Benefits of Implementing Multi-Layered Anti-Fraud Defenses

  1. Reimbursement Liability Protection: Shields banks and fintechs from mandatory customer loss payouts under AFASA regulations.
  2. Elimination of Interceptable Vulnerabilities: Phasing out SMS OTPs closes doors to SIM-swapping, smishing, and phishing attacks.
  3. Real-Time Money Movement Interception: AI behavioral monitoring halts illicit fund transfers before cash can be withdrawn.
  4. Disruption of Mule Syndicates: Automated device binding prevents bought or rented mule accounts from operating at scale.
  5. Protection for Coerced Consumers: Early detection mechanisms identify accounts manipulated through romance or fake job scams.
  6. Restoration of Consumer Confidence: Stronger security infrastructure encourages safer participation in digital banking.
  7. Industry-Wide Threat Sharing: Collaborative frameworks like FIDS allow institutions to block known fraud networks collectively.
  8. Automated Regulatory Compliance: Directly satisfies Bangko Sentral ng Pilipinas requirements under Circular 1213.
  9. Prevention of Account Takeovers: Server-side biometrics ensure that stolen credentials alone cannot grant access to funds.
  10. Preservation of National Economic Growth: Protects up to PHP 603 billion in domestic economic output from shadow crime networks.

Insights: What This News Means for the Financial Sector

  1. Digital Adoption Speed Outpaced Security: Rapid consumer migration to digital payments created operational blind spots now targeted by organized syndicates.
  2. A Fundamental Shift in Legal Liability: Financial institutions are now legally presumed responsible for scam losses unless robust real-time controls are proven.
  3. SMS OTPs Are Officially Obsolete: SMS-based verification has transitioned from a standard security feature to an unacceptably high financial liability.
  4. Economic Vulnerability Feeds Mule Networks: Low-income individuals selling accounts for PHP 500 highlights how economic hardship fuels criminal supply chains.
  5. Low Complaint Rates Mask Fraud Extent: Under 2% official reporting hides the true scale of scam impact across the country.
  6. Integration of AI in Cyber Defense: Static rule-based risk systems are being replaced by adaptive AI behavioral monitoring.
  7. Rise of Server-Side Biometric Validation: Security is shifting from device-level fingerprint checks to encrypted server-side template matching.
  8. Cybersecurity Requires Collective Action: Siloed bank security is ineffective; cross-institutional data sharing is becoming essential.
  9. Financial Solvency Threat for Non-Compliant Banks: Smaller institutions face potential insolvency if forced to reimburse unmonitored scam losses.
  10. Regional Benchmark for Digital Trust: The Philippines’ strict implementation of AFASA sets a clear regulatory precedent across Southeast Asian fintech markets.

Conclusion

The joint whitepaper by IDfy Philippines and CIBI provides a clear picture of the risks facing the country’s digital payment ecosystem. As illicit mule networks and sophisticated scams threaten billions in economic value, traditional security methods like SMS OTPs are no longer sufficient. By enforcing strict liability under AFASA and requiring advanced biometrics and real-time AI risk monitoring under BSP Circular 1213, regulators are establishing a new baseline for digital trust. Implementing these multi-layered defenses will be essential for protecting consumers, safeguarding financial institutions, and preserving the stability of the Philippine economy.

For the full version of the report, visit idfy.ph/mule-hunting-whitepaper-landing.

###

About IDfy

IDfy is a TrustTech company that helps enterprises establish trust through identity verification, fraud prevention, compliance, and risk intelligence solutions. IDfy empowers the Philippines’ banks, fintechs, lenders and telcos to onboard faster, reduce risk, and build stronger customer relationships. A market leader across Asia, IDfy delivers the widest breadth of onboarding and risk capabilities.

Link Resources

Key Phrases

  1. IDfy Philippines CIBI digital fraud whitepaper
  2. PHP 603 billion annual fraud loss Philippines
  3. AFASA bank liability rules BSP Circular 1213
  4. Mule account networks PESONet InstaPay fraud
  5. SMS OTP replacement server side biometrics
  6. Mule hunting are we chasing ghosts report
  7. Raghuraman Chandrashekhar IDfy Philippines
  8. Authorized push payment scams account takeover
  9. Fraud Intelligence Data Sharing FIDS Philippines
  10. Real time AI transaction monitoring banking

Best Hashtags

#DigitalFraudPH #AFASA #BSP1213 #FintechSecurity #IDfy #CIBI #CybersecurityPH #MuleAccounts #BankingSecurity #LEADMEDIANEWS

Save/Share this story with QR CODE

QR Code

Disclaimer

This article is for informational purposes only and does not constitute endorsement of any specific technologies or methodologies and financial advice or endorsement of any specific products or services.

Contact Lead Media News

📩 Feel free to Contact Lead Media News for suggestions, collaborations, reviews, or anything else.