To make sure na hindi phishing ang website na need maglogin ng GCash using a website. Pag nanghingi ng OTP, try to deliberately input a wrong OTP. Pag hindi pumasok, means safe yan. Apply the same thing sa MPIN, pag pumasok kasi kahit mali-mali ang nilagay mo, means phishing yan.