Financially motivated cybercrime is expected to remain the Philippines’ biggest cybersecurity risk through the rest of 2026, driven by organized criminal groups exploiting the country’s growing digital economy and the wider use of artificial intelligence (AI) to scale attacks.

According to PSA Intelligence’s Half-Year Outlook 2026, cyber syndicates continue to target the Philippines because of its large digital footprint, expanding online financial services, and increasing reliance on electronic payments. Financial gain remains the primary motive behind most attacks, with phishing, social engineering and online fraud continuing to dominate the threat landscape.

“As one of the most socially connected and mobile-first populations, Filipinos exhibit high social media engagement that leads to oversharing of personal information. This environment leaves users highly susceptible to social engineering attacks and emotional manipulation,” the firm said.

The report said cybercriminals have become more organized, adopting “guerrilla-style” tactics and increasingly collaborating to exploit opportunities created by the country’s digital transformation. Organized fraud networks have also taken advantage of the expansion of Philippine Offshore Gaming Operators (POGOs), online business processing operations and other digital platforms to broaden their attacks.

PSA Intelligence noted that AI has evolved from a tool used to refine phishing campaigns into one capable of automating the entire cyberattack chain. While no AI-driven attacks have yet been publicly reported in the Philippines, the report said AI is already being used worldwide to create convincing phishing emails, spread disinformation, manipulate public opinion, conduct social engineering scams and facilitate fraud.

“The use of Al and deepfake technology is widely observed as a primary mechanism to propagate misinformation, facilitate disinformation campaigns, and execute social engineering scams,” the firm said.

“The weaponization of Al has continued to escalate, with threat actors consistently producing deep fake government officials, prominent business tycoons and other public figures to manipulate public perceptions and conduct fraud.”

PSA Intelligence also warned that the Philippines remains particularly vulnerable because of its highly connected population and widespread use of digital wallets and online banking. Combined with relatively low levels of digital literacy, these factors make consumers more susceptible to phishing, impersonation and emotionally driven scams.