Beyond one-time codes: Salmon builds security features to stop fraud before it happens

Manila, 25 June 2026 — Salmon, the modern money app, today announced a set of security features built to detect and stop fraud before it reaches a customer's account, rather than after money has moved.

The rollout responds to increasingly sophisticated fraud attacks in the Philippines and adds several layers of protection on top of the one-time code, which fraudsters intercept through phishing links, fake calls, and malware.

"Most financial platforms still treat fraud as something you respond to after the damage is done," said Raffy Montemayor, co-founder of Salmon Group Ltd. "At Salmon, we designed our security systems to work in the background and proactively stop fraud before it succeeds."

Real-time account visibility

Salmon lets customers view every device logged into their account, including phone model, approximate location, and last active time. If a device looks unfamiliar, customers can end that session with one tap; Salmon labels the device in use as "This device" to prevent accidental lockouts.

Customers can also see which apps, online stores, and other services carry their Salmon card and restrict charges from any of them, giving them visibility and control over where their account is used.

Instant card controls and one-time virtual cards

Customers can freeze or permanently block their Salmon card in the app if it's lost or compromised, stopping unauthorized transactions in real time. For online purchases, they can generate a one-time virtual card that expires after a single transaction, keeping their primary card details private.

Detecting malicious apps

Malicious apps that read screen contents, intercept one-time codes, and take unauthorized actions are a growing fraud threat in the Philippines. Salmon detects when a suspicious app has gained a dangerous level of control on a customer's device. Depending on the risk level, Salmon notifies the customer in the app or by phone, or temporarily restricts sensitive account activity, then guides them through removing the app and securing any exposed credentials.

Security beyond the one-time code

Many account takeover scams in the Philippines rely on intercepting one-time codes through phishing links, fake calls, or malware. Salmon requires live facial verification, not just a one-time code, before customers can complete money transfers or other sensitive account actions. Unlike a phone's built-in face unlock, Salmon's facial recognition verifies that a real, live person is completing the action.

That means an attacker who intercepts a customer's one-time code still cannot move funds or take over the account.

In-app fraud confirmation in under a minute

When Salmon flags a potentially high-risk transaction, it holds the transaction before the money leaves the customer's account and sends an in-app notification with the transaction details. Customers can review the activity and either confirm and retry the transaction instantly, or report it as fraudulent, entirely within the app — without hotline calls, wait times, or branch visits.

24/7 human anti-fraud support

Salmon's anti-fraud team operates around the clock, giving customers access to real human support when suspicious activity comes up. For more complex cases, Salmon assigns investigators to help customers document incidents, prepare complaints, and coordinate regulatory or legal filings.

Salmon says fraud prevention needs to move beyond reactive alerts toward proactive, customer-centered protection as digital scams in the Philippines continue to evolve.

 

About Salmon Group Ltd

 

Salmon Group Ltd is a technology-driven financial services holding company building a banking and lending platform across Southeast Asia, starting with the Philippines. The Group operates a BSP-licensed bank, Salmon Bank (Rural Bank) Inc.; an SEC-licensed financing company, Salmon Finance Inc.; and a growing suite of financial products — all delivered through the Salmon app, a modern money app built for everyday Filipinos. Founded in July 2022 by banking and technology veterans Pavel Fedorov, George Chesakov, and Raffy Montemayor, Salmon Group Ltd is backed by IFC (World Bank Group) and ADQ/Lunate. The Salmon app is rated 4.8 in both the App Store and Google Play, one of the highest ratings for a financial services app in the Philippines.