JL14: QR Ph Is Not an App You Download — Here Is What It Actually Is

What QR Ph actually is

QR Ph is the Philippines' national QR code standard for payments, adopted by the Bangko Sentral ng Pilipinas under Circular No. 1055 in 2019 as part of the National Retail Payment System. It is built on the international EMVCo QR specification, which is why one code can be read by every participating bank and e-wallet instead of each issuer printing its own.

It rolled out in two stages. Person-to-person QR Ph came first, letting you scan a friend's code instead of typing an account number. Person-to-merchant QR Ph followed in 2021, which is the version you see taped to a counter at a sari-sari store or displayed at a checkout. In both cases the QR code is not moving the money. It is only carrying the account details. The transfer itself rides the InstaPay rail underneath.

• QR Ph is a data format, not an application and not a company.
• The scanner is already inside your bank or e-wallet app, so there is nothing extra to install.
• One QR Ph code works across issuers. That interoperability is the entire point of the standard.
• Any file, site or Play Store listing offering "QR Ph" as a standalone app is impersonating a BSP standard.

Where the scanner already is on your phone

If your app shows a QR Ph mark on that screen, you already have full access to the standard. The scanner reads the merchant or recipient details, you confirm the amount, and your issuer sends the funds over the interbank rail. The experience differs slightly between apps; the underlying standard does not.

The rails, the caps and the timings

QR Ph payments settle over InstaPay, so InstaPay's rules are the ones that bind you. These are the numbers worth memorising, and it is worth confirming them in your own app because issuers can set tighter limits than the rail allows.

• Your wallet's own monthly ceiling applies on top of the rail cap. A fully verified GCash wallet works to a 100,000-peso monthly limit at the time of writing.
• Ordinary wallet-to-bank InstaPay transfers commonly carry a fee in the region of 15 pesos. Most issuers do not charge the payer on a QR Ph merchant payment.
• Amounts above 50,000 pesos go by PESONet, or as multiple InstaPay transfers within your daily limit.
• Fees and limits change. The fee screen in your app at the moment you confirm is the only figure that binds.

The QR scams that are actually costing Filipinos money

The standard itself is sound. The attacks all target the moment between scanning and confirming, when most people stop reading.

• Sticker swap: a fake QR pasted over a legitimate merchant's code. Always read the recipient name on the confirmation screen and check it matches the shop.
• "Scan this to receive your money." You never scan a code to receive funds. Scanning initiates a payment out of your account.
• Fake QR Ph APKs and clone wallet apps, which exist purely to harvest your MPIN or intercept an OTP.
• A code sent to you in chat by someone claiming to be support. Real support never sends you a payment QR in a message thread.
• An amount pre-filled into the QR that is larger than the price you agreed. The confirmation screen shows it; look before you tap.

How this touches a casino cashier

Licensed operators typically present a deposit either as a QR Ph code or as InstaPay account details generated for your session. Both are ordinary transfers, subject to the same 50,000-peso per-transaction ceiling and the same instant timing. Withdrawals come back the same way, once your one-time identity check has cleared.

One warning is worth more than the rest. If anyone sends you a personal GCash number or a QR code through chat, Messenger or a Telegram group and calls it a deposit channel, it is not one. A real cashier generates its details inside your logged-in account. JL14 is a bonus and payments reference; we hold no gaming licence and take no deposits, and play happens at PAGCOR-licensed operators for players aged 21 and over.