Finding the right gift for Valentine’s Day is stressful enough without having to worry about your bank account being drained. But as more Filipinos move their celebrations online—from sending “Gcash love” to ordering flowers on social media—scammers are presented with a target-rich environment.

The Bank of the Philippine Islands (BPI) is seeing a familiar pattern this season. Scammers are leaning into the “emergency” or “exclusive deal” tactics. You might get a text about a failed gift delivery or a massive discount on jewelry that looks legitimate. These links usually lead to fraudulent sites designed to capture your login credentials or one-time password (OTP).

Luigi Manianglung, who heads up fraud risk operations at BPI, puts it simply: the same care you show your loved ones should extend to your data.

“As more people shop and share personal moments digitally, scammers look for opportunities,” he says. Staying alert is just a practical way to look after yourself and your family.

To keep your money safe while you’re playing Cupid, here is the advice BPI is pushing this year:

Stop clicking links in texts. If you get an unsolicited message about a promo or a delivery, don’t click it. Go directly to the official app or website instead. If a deal looks too good to be true, it almost certainly is.

Your OTP is for your eyes only. This is the big one. No bank official will ever ask you for your OTP, your PIN, or the three-digit CVC code on the back of your card. If someone asks for these, they are trying to rob you.

Check the connection. Public Wi-Fi is fine for browsing news, but it’s a bad idea for banking. Use your own data or a secure home connection when you’re moving money. Also, take a second to look at the URL of the shop you’re on. If it looks slightly “off,” walk away.

Use your bank’s tools. Most people ignore their app notifications, but they are your best defense. Set up transaction alerts and spending limits. If a charge happens that you didn't authorize, you'll know immediately rather than finding out when your statement arrives a month later.

Keep your info current. If the bank detects something weird, they need to be able to reach you. Make sure your mobile number and email address are updated in the system so you don't miss a critical warning.

In the end, digital security isn't about complex algorithms for the average user. It’s about slowing down. Before you hit “buy” or “send,” take a breath and make sure you’re dealing with a real person or a real store. It’s the best way to make sure your Valentine’s Day stays about the romance and not a police report.