Outdated Security Is Now a Liability.

New Philippine regulation now holds banks and e-wallets liable for fraud losses when authentication falls short. V-Key delivers strong, on-device security that helps reduce reliance on phishable authentication methods such as OTPs,, helping financial institutions detect and block threats before they impact transactions.

624M

Installations

314

Apps

15

Countries

BSP

Regulatory Alignment

FIDO2

Verified Solution

CC + FIPS

Certified Technology

Philippine Market

The Philippines' Digital Banking Boom Demands On-Device Defense

Digital banking and payments adoption in the Philippines continues to accelerate. Institutions face mounting pressure to protect customers against mobile-first fraud, phishing and account takeover, all while meeting BSP's tightening authentication and monitoring requirements.

Purpose-built for Philippine financial services

Designed to address the evolving security risks, regulatory requirements and customer expectations shaping mobile banking in the Philippines.

Aligned with BSP's regulatory direction

Supports key security objectives under BSP Circular 1213 and the Anti-Financial Account Scamming Act, including stronger, phishing-resistant authentication and on-device threat detection and response.

Protecting Filipino users where it matters most

On-device protection that travels with your customers, helping secure mobile application interactions at the point where threats emerge, not just at the backend.

13.4%

The Philippines recorded a digital fraud rate more than double the global average — the fastest-growing threat to mobile banking customers.

~59%

Share of cyber fraud losses tied to account takeover, identity theft and phishing

70K+

Consumer complaints received by BSP in 2024 alone

1213

BSP Circular mandating the phase-out of SMS/email OTPs for high-risk transactions

Sources: (1) TransUnion, H1 2025 Update to the State of Omnichannel Fraud Report, April 2025. (2) Bangko Sentral ng Pilipinas data, as reported by The Philippine Star, "BSP sharpens framework for probing suspicious accounts," January 2025. (3) Bangko Sentral ng Pilipinas, as reported by Rappler, "Bangko Sentral: Financial institutions must upgrade fraud management systems by 2026," June 2025. (4) BSP Circular No. 1213, s. 2025.

What Just Changed

The Regulatory Path That Got the Philippines Here

In under three years, the security or regulatory baseline for mobile banking and digital identity in the Philippines moved from good practice to legal requirement.

2023 — BSP Circular 1170

Digital eKYC onboarding is formally permitted

Document checks for basic accounts, biometric verification for higher-limit accounts — opening the door to fully digital account opening.

Feb 2025 — FATF Grey List Exit

The Philippines strengthens its AML backbone

Exiting the FATF grey list raised the bar for identity verification and due diligence across every covered institution.

2025 — BSP Memorandum 2025-012

The National ID becomes the identity backbone

All BSP-supervised institutions must accept every format of the PhilSys National ID and are encouraged to integrate with the National ID eVerify service.

2025 — BSP Circular 1213 Issued

SMS and email OTPs are ordered out for high-risk transactions

Institutions get one year to move to phishing-resistant MFA and to stand up real-time fraud monitoring.

June 2026 — Compliance Window Closes

BSP confirms: no extension

Under AFASA, institutions without adequate controls now bear direct liability for reimbursing scam victims.

Compliance Mapping

What Circular 1213 Requires. What V-Key Delivers.

Line-by-line, this is how V-Key's platform answers the technical requirements BSP actually wrote into the circular, not a general description of "strong security."

Comparison of BSP Circular 1213 requirements and how V-Key's platform delivers each one
BSP Circular 1213 Requires	V-Key Delivers
Retire SMS/email OTPs for every high-risk action — not just login.	✓On-device authentication applied to every high-risk action.
Replace OTPs with server-side biometrics or FIDO2/WebAuthn passkeys.	✓FIDO2-certified passwordless authentication with biometric liveness.
OTPs may only confirm mobile number ownership — never authorize a transaction.	✓Identity verification kept architecturally separate from authorization.
Real-time fraud monitoring for volumes above ₱75M/month.	✓Continuous on-device risk signals feeding real-time fraud detection.
Prove continuous operation to examiners, not just a policy on paper.	✓Forensic-grade audit trails for every authentication event.
Meet controls to earn liability protection under AFASA.	✓Certified architecture (Common Criteria, FIDO2) for a defensible position.

Core Capabilities

Enterprise-Grade Mobile Security for Regulated Industries

V-Key's patented V-OS Virtual Secure Element delivers protection at every layer of the mobile experience — proven across leading banks in Asia-Pacific.

Zero Trust on the Device

Help protect mobile applications from threats while providing strong user authentication and authorization.

Real-time malware and tampering detection
App cloning and repackaging prevention
Real-time threat detection and response
In-app enforcement — not just backend detection

Biometric Authentication

Help prevent identity fraud with secure biometric verification. V-Key’s biometric authentication and liveness detection help verify that the user is genuine, strengthening identity assurance and helping protect against account takeover.

Face matching and liveness detection
Digital identity verification
Data integrity protection
Cryptographically signed eKYC data

Mobile App Identity

Establish trusted identities for your mobile apps. Ensure only genuine, unmodified versions of your app can communicate with your backend systems

App-to-backend mutual authentication
Runtime integrity verification
Certificate and key protection in V-OS
Secure app-to-app communication

Scam & Phishing Defense

Help defend against overlay attacks and social engineering-driven threats targeting mobile banking users across the Philippines.

Overlay and screen capture attack prevention
Phishing-resistant authentication
Adaptive threat response in real time

Threat Intelligence & Monitoring

Real-time visibility across your mobile estate. Actionable threat intelligence to help security teams identify, respond to, and outpace emerging attack patterns.

Real-time threat dashboards and alerting
Centralized threat data visibility
Dynamic threat response policies

Seamless Experience

Designed to protect customers without unnecessarily disrupting the mobile banking experience.

Passwordless authentication
Seamless security with minimal user disruption
Embedded mobile application protection
Threat-based security responses

Built for Every Regulated Mobile Experience in the Philippines

The mandate looks different depending on where you sit in the ecosystem. V-Key helps organizations address their mobile security and digital identity requirements with flexible deployment options.

Product Suites

Two Suites. Complete Mobile Security.

V-Key delivers end-to-end protection through two complementary product families, one securing your users' identities, the other protecting the apps they rely on.

Authorize & Authenticate Seamlessly

V-Key Identity

Identity solutions that secure access, simplify onboarding, and eliminate reliance on passwords.

V-Key ID

A portable, privacy-preserving digital identity enabling biometric onboarding, SMS OTP replacement, and secure authentication across devices and platforms.

V-OS Smart Token

Replace fragile, costly hardware tokens with secure software-based alternatives — delivering the same certified assurance at a fraction of the cost.

V-Key Smart Authenticator

Frictionless enterprise MFA via push notifications, biometrics, and easy recovery — passwordless login on any platform at scale.

Replace OTPs and hardware tokens for retail banking customers. Deliver secure, passwordless login that reduces fraud and improves onboarding conversion.

Build Trust with Secure Apps

V-Key Shield

Protect your apps, users, and identities by preventing threats and unauthorized access — starting on the device.

V-OS Mobile App Protection

Defend your app from reverse engineering, runtime manipulation, API abuse, and keylogging. Multi-layered defense that adapts to new threat patterns in real time.

V-OS App Shield

A lightweight, no-code security wrapper for mobile apps. Protects your APK and IPA from tampering, repackaging, and runtime abuse — no SDK integration required.

V-OS App Identity

Enables mutual trust between apps and backend systems — securing data exchange and API calls even across untrusted environments and compromised networks.

Stop overlay attacks, screen-capture fraud and app cloning targeting mobile banking apps, with certified, on-device app protection.

Architecture

Zero Trust Starts on the Device

Backend security alone leaves a gap: it trusts a request just because it came from your app. V-Key closes that gap with a cryptographic identity sealed into every app instance, so each request is verified on its own merit — not assumed trustworthy.

Security that travels with your customer

Security stays with the mobile application wherever your customers use it. V-Key's solution protects the app and establish trust between Application.

No Dedicated Security Hardware Required

V-Key's patented V-OS Virtual Secure Element delivers software-based protection without requiring a dedicated hardware secure element or security chip, enabling scalable security across your mobile application estate.

Identity Layer

User & App Identity Verification

Biometrics, MFA, eKYC

App Layer

Mobile App Protection

Tamper detection, repackaging prevention, code integrity

Device Layer

V-OS Virtual Secure Element

Patented on-device key protection, runtime threat detection

Network Layer

Secure Backend Communication

Mutual app-to-backend authentication, certificate pinning

Common Criteria · FIPS 140-2 · SOC 2

Independently certified security at every layer

Customer Experience

Reduce Fraud. Not Customer Experience.

The most effective fraud prevention is the kind your customers never notice. V-Key's invisible security layer works silently in the background — so your digital journeys stay smooth, and your losses don't.

Fraud prevention without friction

Invisible protection that operates beneath the surface, no additional steps, no intrusive prompts for genuine customers.

Stronger protection. Smoother digital journeys.

Move beyond the security-vs-experience trade-off. V-Key delivers both at once.

Secure experiences that retain customers

Customers are more likely to stay with platforms they trust. V-Key helps strengthen security confidence while supporting a smooth, low-friction digital experience.

INTEGRATION

Fast to Deploy. Easy to Integrate.

Enterprise security without the enterprise complexity. V-Key integrates into your existing mobile apps in weeks, with minimal disruption to your development roadmap.

SDK Integration

Add V-Key's lightweight SDK to your iOS and Android apps. Comprehensive documentation and dedicated support included.

Policy Configuration

Configure threat policies and protection rules to match your risk appetite, user base, and regulatory requirements.

Testing & Validation

Thorough pre-production testing with V-Key's engineering team to validate integration and fine-tune detection thresholds.

Go Live

Deploy with confidence — continuous monitoring, threat intelligence and dedicated support from day one.

Secure What Drives Your Philippine Business

Join financial institutions across Asia-Pacific who trust V-Key to protect their customers, meet regulatory expectations, and stay ahead of mobile threats.