Fake Globe and PLDT '5G SIM Upgrade' Texts: How to Spot and Avoid Telco Upgrade Phishing

Illustration about Fake PLDT and Globe 'upgrade your SIM to 5G' texts that phish your credentials — online scam safety

Scammers are sending fake Globe and PLDT '5G SIM upgrade' texts to steal your account credentials and personal information. Here's how to recognize the trap and protect yourself.

What Is the Fake 5G SIM Upgrade Scam?

A common phishing tactic targeting Filipino mobile subscribers involves text messages that appear to come from major telcos — most often disguised as Globe or PLDT communications — claiming your SIM card must be urgently upgraded to 5G. The message typically warns that your number will be deactivated, your signal will degrade, or you will lose your mobile data plan if you fail to act within a short window. This false sense of urgency is the core engine of the fake Globe PLDT 5G upgrade scam: it pressures you into clicking a link before you have time to think critically. Once you tap the link, you land on a convincing but fake website designed to harvest your mobile account login, MyGlobe or My PLDT app credentials, one-time PIN (OTP), and sometimes even your GCash or Maya login if the page asks you to 'verify' payment details. The stolen information is then used to take over accounts, make unauthorized transactions, or sell your data to other fraudsters. Understanding common scam types like this one is the first step to protecting yourself.

Why This Scam Is So Convincing

Telco upgrade phishing works because it exploits two things most Filipinos genuinely experience: real network messages from Globe and PLDT, and the real rollout of 5G technology across the country. Scammers craft their messages to mimic the exact tone, branding colors, and sender names that legitimate telcos use. Some messages even arrive in the same SMS thread as authentic Globe or PLDT notifications — a trick called 'SMS spoofing' — making them nearly indistinguishable at first glance. The fake websites they link to are equally polished. They may display telco logos, official-looking headers, and even a progress bar suggesting you are partway through a legitimate process. Under this pressure, many people enter their details without realizing the page is a forgery. If you ever feel uncertain about a link you received, you can run a free scam check on TsekMuna before clicking anything.

Warning signs

  • The text urges you to act 'immediately' or within 24–48 hours or risk losing your number.
  • The sender name looks like 'Globe' or 'PLDT' but the link leads to an unfamiliar domain (e.g., globe-upgrade2025.com instead of globe.com.ph).
  • The URL contains extra words, hyphens, or unusual country codes that don't match the official telco website.
  • The message asks for your MyGlobe or My PLDT password, OTP, or any payment credentials.
  • The page loads slowly, has spelling errors, or asks for information the real telco would never request via SMS.
  • There is no option to call customer service to verify — only the link is provided.

How the Phishing Flow Works Step by Step

Knowing the mechanics of the attack helps you interrupt it at every stage. Here is how the scam typically unfolds from the moment you receive the message.

  1. You receive an SMS or Viber message claiming to be from Globe or PLDT, stating your SIM must be upgraded to 5G within a set deadline.
  2. The message contains a shortened or lookalike URL (e.g., bit.ly/globeupgrade or globe-ph-5g.net) that you are instructed to click.
  3. The link opens a fake but realistic-looking website that prompts you to log in with your mobile account credentials.
  4. After you enter your username and password, the site may ask for your OTP — sent to your own phone — which the scammer uses in real time to break into your genuine account.
  5. The site may redirect you to a second page requesting payment card details or your GCash/Maya login, framing it as an 'identity verification' step.
  6. Once the scammer has your credentials and OTP, they log into your real account, change the password, make transactions, or sell the data — all within minutes.

The moment any website asks for an OTP right after you enter your password, stop. Legitimate telco upgrade processes do not require you to input an OTP on an external webpage.

Red Flags in the Message Itself

Before you even click a link, the text message itself often contains several tells. Training yourself to notice these signs — even briefly — can prevent a costly mistake. For a broader guide on identifying suspicious messages, visit our guide on how to spot a scam.

Warning signs

  • Generic greetings like 'Dear Valued Customer' instead of your registered name.
  • Grammar errors, awkward phrasing, or inconsistent capitalization in the message body.
  • A link that does not end in .com.ph for a Philippine telco (e.g., globe.com.ph or pldt.com).
  • Promises of free data, a free SIM, or an 'exclusive 5G plan' as a reward for upgrading.
  • The message claims your SIM will stop working 'within hours' — creating panic.

What to Do If You Receive a Suspicious Upgrade Text

Receiving the message alone cannot harm you — the danger begins only if you interact with the link or provide information. Here is what to do instead.

What to do instead

  • Do not click the link. Copy the URL and paste it into TsekMuna's free checker to verify it first.
  • Call the official Globe hotline (211 for Globe/TM) or PLDT hotline (171) directly — numbers you dial yourself, not from the message — and ask if there is a legitimate 5G upgrade requirement on your account.
  • Visit the official website by typing globe.com.ph or pldt.com directly into your browser, or use the official MyGlobe or My PLDT app from the Google Play Store or Apple App Store.
  • Block and report the sender number via your phone's messaging app.
  • Forward the suspicious SMS to the telco's spam reporting channel: Globe subscribers can forward to 7647, PLDT/Smart subscribers can forward to 333.
  • Report the message to the National Telecommunications Commission (NTC) via their official channels or the Cybercrime Division of the PNP-ACG.

Your mobile number will never be 'deactivated' simply because you did not click a link. Any genuine network upgrade is handled automatically by your telco — they will never ask for your password or OTP via SMS.

If You Already Clicked the Link or Entered Your Details

If you realize mid-way — or after the fact — that you may have given your information to a phishing site, act quickly. Speed is critical because scammers often exploit stolen credentials within minutes. This guidance is advisory only and not legal advice.

  1. Immediately change the password on your MyGlobe or My PLDT app account, and any other account where you used the same password.
  2. If you entered GCash or Maya credentials, open the official app right away and change your MPIN and password. Contact GCash support (2882) or Maya support (02-7795-7272) to flag the breach.
  3. Enable two-factor authentication on all your accounts if you have not already done so.
  4. Contact your bank if any payment card details were shared, and request a card freeze or replacement.
  5. File a report with the PNP Anti-Cybercrime Group (PNP-ACG) online at acg.pnp.gov.ph, or visit the NBI Cybercrime Division in person.
  6. Inform family and friends, especially if the scammer may have accessed your contact list.

Take a screenshot of the fake website and the suspicious SMS before you block or delete anything — these are important evidence when filing a report.

How to Verify a Legitimate Telco Upgrade

Genuine 5G SIM upgrades from Globe and PLDT do exist — but the process looks very different from what scammers describe. Real telco upgrades are typically done by visiting an official service center with a valid ID, or through a verified in-app process after you log in to the official app yourself (not via a link from an SMS). Your telco will never send an unsolicited text asking for your password, OTP, or payment details to complete an upgrade. When in doubt, the safest habit is to go directly to the source — open the app, visit the official site, or call the hotline — and ignore any link in a text message entirely.

What to do instead

  • Go to an accredited Globe or PLDT store with a valid government-issued ID to request a physical SIM upgrade.
  • Use only the official MyGlobe or My PLDT app — downloaded from official app stores — to check for any upgrade offers linked to your account.
  • If an upgrade is needed, your telco will guide you through secure, verified in-app steps — no external links required.
  • Enable SMS filters on your phone or use your telco's built-in spam-blocking feature to reduce unwanted messages.

Reporting the Scam in the Philippines

Reporting phishing attempts helps authorities track patterns and protect other subscribers. The Philippines has several channels where you can report telco phishing. For a full walkthrough of the reporting process, see our step-by-step reporting guide. Key agencies to contact include the National Telecommunications Commission (NTC) for regulatory complaints, the PNP Anti-Cybercrime Group (PNP-ACG) for cybercrime reports, the NBI Cybercrime Division for formal case filing, and the Bangko Sentral ng Pilipinas (BSP) if any financial accounts or e-wallets were compromised. Your report — even if you lost nothing — contributes to a larger picture that helps agencies issue warnings and pursue perpetrators.

Frequently asked questions

Will my Globe or PLDT SIM really be deactivated if I don't upgrade to 5G?

No. Legitimate network upgrades are handled automatically by your telco on their end. Globe and PLDT will never send an unsolicited SMS threatening to deactivate your SIM unless you click a link and provide credentials. If you are genuinely unsure about your account status, call the official hotline directly.

How can scammers make their message appear in my real Globe or PLDT SMS thread?

Scammers use a technique called SMS spoofing, which allows them to set a custom sender name — such as 'Globe' — so the message appears alongside authentic texts. This is not the same as your telco sending the message. The spoofed message still contains a fraudulent link, so always verify the URL before clicking, regardless of which thread it appears in.

I entered my OTP on the fake site. What should I do?

Act immediately. Change your mobile account password, your GCash or Maya MPIN and password if those were entered, and any other accounts using the same credentials. Contact your telco and e-wallet providers right away to flag the compromise, and file a report with the PNP-ACG or NBI Cybercrime Division.

Is there a way to check if a link in a text message is safe before I open it?

Yes. Copy the link without opening it and paste it into a scam-checking tool to verify the domain. TsekMuna offers a free scam check that can help you assess suspicious links and phone numbers before you engage with them.

What makes the fake Globe PLDT 5G upgrade scam different from other phishing attacks?

This scam is particularly effective because it exploits a real and well-publicized technology — 5G network rollouts — giving the false claim an air of legitimacy. It also targets a universal need (mobile connectivity) and creates urgency by threatening service loss, which can override careful thinking. The tactics, however, follow the same phishing playbook: a fake link, a login page, and credential theft.

Can I report a scam text even if I did not lose any money?

Absolutely, and you are encouraged to do so. Reporting attempted scams — even ones you successfully avoided — gives authorities valuable pattern data. You can report to the NTC, PNP-ACG, or forward the message to your telco's spam-reporting number (7647 for Globe, 333 for Smart/PLDT).

Run a free scam check · More scam-safety guides