BDO denies online breach, gives new details on investigation

Published 18 Sep 2025

by Daniel Joseph Navalta

3 min read

• BDO denied claims by client Maria Jamila Cristiana Gonzales Berenguer of unauthorized transactions, calling them baseless

Narito na ang paghahanap sa KAMI! Basahin ang mga balita tungkol sa iyong paboritong mga bituin sa pamamagitan lamang ng pag-type ng kanilang pangalan sa search bar!

• The bank said its investigation showed a password reset and device registration on September 14 validated through OTP sent to the client’s registered device

• BDO emphasized that transactions through BDO Pay need a PIN or biometrics not an OTP and that transfer limits were not bypassed

• The bank assured its system remains secure urged clients to heed official alerts and reminded the public that deposits are insured by PDIC and regulated by BSP

Banco de Oro (BDO) has released a new official statement addressing recent comments made by client Maria Jamila Cristiana Gonzales Berenguer, also known as content creator Jana Berenguer, who claimed to have experienced unauthorized transactions on her account. The bank clarified that its investigation found no breach in its systems.

PAY ATTENTION: Follow us on Instagram - get the most important news directly in your favourite app!

Here is the full statement from BDO:

“Recent social media posts by Maria Jamila Cristiana Gonzales Berenguer alleging a system compromise and insider involvement in alleged unauthorized transactions are baseless.

Read also

CA denies DNA test requested by Wenn Deramas' siblings and relatives be done on director's children

• In an interview with ABS-CBN, the client herself admitted that her mobile device was in the hands of other people at some point in time.

• An investigation by the Bank indicated a password reset on September 14, followed by a device registration. Such reset and device registration was validated through OTP on the client’s registered device, a day before the reported unauthorized transactions.

• There was no change in the mobile number used to receive the OTP. The client’s official device remains to be the device that receives official client communication.

• Log-in and registration alerts were sent to the client for these updates. Transaction Alerts were also sent promptly on September 15, 2025—six hours before the client reported the issue via the BDO Hotline.

• Transactions through BDO Pay require PIN or biometrics, not OTP. OTP is required only for device registration, not for transactions via BDO Pay.

Read also

DPWH: Hernandez and Mendoza, "perpetually disqualified from public office"

• Despite the Bank’s repeated efforts to engage the client, she declined and continue to post several videos that are inaccurate.

The Bank reiterates that transfer limits were not bypassed, and our security controls remain in place.

BDO has put in place different features intended to protect clients’ accounts. These controls will not work if clients ignore warning signs and messages sent by the bank through official channels.

BDO’s system remains secure, with no evidence of any breach or insider involvement.”

News, photos, or videos that arouse the interest of netizens would often go viral on social media, due to the attention netizens give them. These viral posts appeal to the emotions of netizens, and in rare cases, this could also happen to ordinary people, making them very relatable stories.

In other news, a chilling CCTV video captured the abduction of two men by suspects who pretended to be police officers in Manila. One of the victims managed to escape when the suspects stopped at a restaurant, while his friend remains in captivity. The abductors reportedly stole ₱9,000 from the victim’s e-wallet and took his gold ring during the ordeal. The incident highlights a dangerous trend of criminals impersonating law enforcement to commit abductions and robberies.