Scams continue to increase in the Philippines, prompting fintech company Salmon to strengthen its mobile app with security features designed to prevent fraud before money is lost.
Rather than relying only on one-time passwords (OTPs), Salmon has added multiple layers of protection that help detect suspicious activity, verify users, and give customers more control over their accounts.
“Most financial platforms still treat fraud as something you respond to after the damage is done,” said Raffy Montemayor, co-founder of Salmon. “At Salmon, we designed our security systems to work in the background and proactively stop fraud before it succeeds.”
As digital payments continue to grow in the Philippines, fintech companies are expanding security measures beyond OTPs to address increasingly sophisticated scams targeting consumers.
One of the app’s key features allows customers to see every device currently logged into their account, including the phone model, approximate location, and last active time. If they spot an unfamiliar device, they can immediately end that session within the app.
Customers can also see where their Salmon card is saved, such as online stores and apps, making it easier to monitor card usage and stop unwanted charges.
If a physical card is lost or suspected to be compromised, users can instantly freeze or permanently block it through the app. For online purchases, Salmon also offers one-time virtual cards that expire after a single transaction, helping reduce the risk of card fraud.
The fintech company has also introduced tools to detect malicious apps, which have become an increasing threat in the Philippines. These apps can secretly read a phone’s screen, intercept OTPs, or gain control of parts of the device.
When Salmon detects a risky app, it alerts the customer or contacts them directly, depending on the level of risk. It may also temporarily limit sensitive account activities until the issue is resolved and guide users on removing the malicious app.
Salmon said its security system is designed so that an OTP alone cannot authorize high-risk transactions. Sensitive actions, including money transfers, require live facial verification to confirm that the account owner is physically present.
“This means that even if attackers successfully intercept OTPs, they still cannot move funds or fully take over an account,” the company said.
The app also reviews transactions for possible fraud. If a transaction appears suspicious, customers receive an in-app notification with the details and can either approve it or report it as fraudulent before any money leaves the account. The process is completed within the app without requiring customers to call a hotline or visit a branch.
To support customers further, Salmon operates a 24/7 anti-fraud team. For more serious cases, investigators help customers document incidents, prepare complaints, and coordinate with regulators or law enforcement when needed.