The Department of Information and Communications Technology
(DICT) has clarified that there will be no further extension for SIM card registration in the
Philippines
With the July 25, 2023 deadline set by the national government looming, only 60.75
percent of the total 168 million SIM (Subscriber Identity Module) cards have been registered so
far, leaving over 40% of Filipinos at risk of deactivation and social engineering tactics such as
phishing. Scammers are taking advantage of the situation, employing SMS messages to lure
users into sharing personal information via bogus registration links, posing a persistent and
dangerous threat.
The increasing number of unregistered SIM cards exposes users to potential deactivation of
their mobile services, disrupting their communication capabilities. Additionally, as the deadline
approaches, the risk of phishing attacks intensifies. Cybercriminals exploit SMS messages to
deceive unsuspecting victims into divulging sensitive information, such as One-Time Passwords
(OTPs), which grant them unauthorized access to accounts.
In a typical phishing attack, scammers will send fraudulent messages claiming to be from
legitimate sources, like telecommunications companies, urging recipients to register their SIM
cards by clicking on a link provided. Unsuspecting users, driven by fear of deactivation, may fall
into the trap and unwittingly share their personal details, enabling cybercriminals to gain control
over their accounts and exploit them for financial gain.
Palo Alto Networks shares some of the measures one can take to guard oneself against
phishing attacks as the SIM card registration deadline approaches:
- Exercise caution when presented with unknown links: Be wary of links received from
unfamiliar numbers or sources, especially those claiming to be from your telecom
provider. Avoid clicking on suspicious links, as they may lead to fraudulent websites
designed to steal your personal information. - Scrutinize links for anomalies: Check for misspellings or unusual URLs in the links
provided. Phishers often employ tactics such as using slight variations of genuine
domain names to deceive users. - Research official SIM registration procedures: Familiarize yourself with your network
provider’s legitimate process for SIM registration. This will help you distinguish between
genuine communications and phishing attempts. - Stay informed on security measures: Some telecom providers and other organizations,
such as banks, proactively block links via SMS to combat phishing attacks. Stay up-to-
date with the security measures implemented by your trusted apps or organizations to
enhance your protection. - Leverage Multi-Factor Authentication (MFA): Activating MFA provides an extra layer of
security, acting as a vital firewall for your devices during this heightened risk period.
“Phishing attacks will persist as the SIM card registration deadline draws nearer.
Cybercriminals’ primary goal is to seize control of your number and exploit your OTPs to steal
your money,” said Steven Scheurmann, Regional VP for ASEAN at Palo Alto Networks. “To
stay safe, it’s crucial to think before you click and remain vigilant whenever you need to share
sensitive information. Embracing the Zero Trust principle and granting the least privilege to your
personal data can significantly bolster your defenses against phishing threats.”