

How to secure
Last May 3 I received SMS notification from Gcash saying na I paid (thru card payment as per sa Gcash app) the amounts indicated on the first picture. I don't have any subscription sa Facebook na content creator. Even myself is not a content creator or business owner that uses Facebook for ads. I checked my accounts settings, possible subscriptions and running ads link sa profile ko pero wala ako nakita. So ni-lock ko muna ung card ko for the meantime and changed my MPIN
Then this afternoon I received another SMS from Gcash giving me temporary MPIN. So nag-open ako agad ng Gcash. Pero di ko nilagay yung temporary MPIN na binigay, instead I used the MPIN I registered 2 weeks ago. Tapos reply ng Gcash thru SMS giving me authentication code to change ung existing ko na MPIN because expired na nga daw.
Question is possible ba na phishing ito? Everytime kasi na magpaparesend ako ng new authentication code loading lang ng loading ung app tapos magrereply lang ulit ung Gcash na i-enter ko yung authentication code na binigay nila earlier. I thought magiiba dapat ng authentication code kapag nagrequest ulit pero for this case wala loading lang tiga. Also I notice yung "yyAfcYn/qSW". Ano ba yan? Parang recycled link sa mga SMS ng Gcash
Thanks po sa mga makakatulong