Summary
BSP Circular 1213 requires all banks and e‑wallets to phase out SMS OTP by June 30,2026–with no extension.Institutions must adopt stronger authentication:biometrics,device binding,or alternative multi‑factor methods.Instadesk VoiceBot offers real‑time voice verification for high‑risk transactions,login ation,and suspicious activity s.It supports Tagalog and English,integrates with core banking systems,and provides audit‑ready call logs–helping banks meet the deadline without disrupting customer experience.
Industry Background
The Bangko Sentral ng Pilipinas(BSP)issued Circular 1213 in 2025 mandating the complete elimination of SMS OTP for authentication by June 30,2026.The move directly responds to rising SMS intercept fraud(SIM swapping,social engineering).BSP Deputy Governor has repeatedly stated that the deadline will not be extended.The circular is closely tied to AFASA implementation rules–SMS OTP has become the weakest link in financial account security.All banks,e‑wallets,and non‑bank financial institutions are required to transition to more secure methods:biometrics(fingerprint,face),device binding(mobile number+device ID),or in‑app push notification.However,many customers are still unfamiliar with these alternatives,and fraudsters continue to exploit the transition window.
Cost of the Old Way
Banks that fail to comply by June 30,2026 face penalties:up to PHP 2 million per violation and possible regulatory sanctions.Beyond fines,the cost of SMS OTP fraud is staggering.In 2025 alone,Philippine banks reported over 45,000 SMS‑related scam cases,with losses exceeding PHP 3 billion.The average fraud incident per affected account is PHP 50,000‑100,000.Traditional voice call verification,when done manually,costs$0.80‑1.20 per call and requires large call center teams.Without automation,banks cannot scale voice verification for their entire user base.
How Instadesk VoiceBot Solves the SMS OTP Phase‑out
Instadesk VoiceBot is an AI‑powered outbound and inbound voice verification platform.Key capabilities include:
· Real‑time voice verification–During a high‑risk transaction(e.g.,large transfer,password change),the system automatically calls the customer and asks:“A transfer of PHP 50,000 is being initiated from your account.Is this authorized?”The customer answers“Yes”or“No”–no OTP required.
· Tagalog+English natural conversation–Supports“Oo,ako po iyon”(Yes,that’s me)and“Hindi,i‑freeze po”(No,freeze it).
· Integration with core banking systems–Real‑time access to transaction details,customer profiles,and device binding status.
· 2‑second interruption handling–Customers can interrupt and correct the bot,creating a natural human‑like experience.
· Automated evidence trail–Every verification call is recorded,encrypted,and stored for audit and dispute resolution–fully BSP‑compliant.
· Fallback to in‑app push–If voice call fails,the bot sends a push notification with a one‑tap ation link.
· 24/7 operation–Customers can be verified at any hour,no need to wait for business hours.
Use Case Examples
· Large fund transfer verification–A customer initiates a PHP 200,000 online transfer to a new payee.The bank’s risk engine triggers a VoiceBot call.The bot identifies the customer by name,states the transaction amount and payee,and asks for ation.The customer says“Yes.”The system authorizes the transfer and sends an SMS receipt.Total time:30 seconds.No OTP,no manual agent.
· Suspicious login attempt–A login occurs from a new device at 2 AM.VoiceBot calls:“We detected a login to your account from a new phone.Was this you?”The customer says“No.”The bot immediately locks the account, s the fraud team,and guides the customer to reset credentials.
· SIM swap prevention–A fraudster attempts to replace the customer’s SIM card.The system triggers a VoiceBot call to the original registered number:“We received a SIM replacement request.Did you request this?”The customer says“No.”The bot blocks the request and notifies the telco.
Expected Results
| Metric | Before (SMS OTP) | After (Voice Verification) |
|---|---|---|
| Successful fraudulent transactions | Baseline | -75% reduction |
| Customer verification success rate | 88% (SMS delivery issues) | 96% (call + fallback) |
| Average verification time | 45 seconds (OTP wait) | 25 seconds (voice) |
| Compliance with BSP 1213 | Not compliant | Fully compliant by deadline |
Conclusion
The June 30,2026 deadline for SMS OTP phase‑out is non‑negotiable.Instadesk VoiceBot provides a practical,scalable,and BSP‑ready voice verification solution that improves security while preserving customer convenience.
