BDO denies system compromise amid P200,000 hack claims

BDO Unibank denies claims of system compromise and insider involvement following allegations by content creator Jana Berenguer of unauthorized transactions.

Berenguer claimed that three of her bank accounts were hacked, with nearly P200,000 withdrawn, exceeding daily limits.

BDO's investigation revealed a password reset and new device registration on September 14, with alerts sent to the client's registered device and mobile number.

The bank stated that transaction alerts were sent six hours before Berenguer reported the issue and that their fraud management unit found no bypass of security policies.

BDO clarified that BDO Pay transactions require a PIN or biometrics, not an OTP, which is only used for device registration.

The bank noted that Berenguer admitted her mobile device had been accessible to others and that she declined to speak with BDO representatives.

BDO emphasized that their security features are in place but require client attention to bank warnings and messages to be effective.