I know I am around three days late, but I needed time to gather my thoughts on this. 

Over the weekend, many CIMB Bank Philippines customers were caught off guard when unauthorised fund transfers hit their accounts. Some reported losing as much as PHP 500,000. Understandably, panic and outrage quickly followed. 

Well, it’s not every day that you wake up to find your hard-earned savings vanish without warning. Fortunately, CIMB Philippines has moved swiftly to return the lost funds.

As of their latest updates, the bank has started the reversal of all reported losses. They have also reassured the public that their core banking systems and customer data remain “secure and uncompromised”. 

Quick Action, But Questions Remain 

Now, while it’s good and frankly expected that the bank acted fast, some things still need to be said.

Incidents like this should never happen in the first place. Banks, especially those operating fully digitally, must recognise the level of trust people place in them. You entrust a bank not only with your money but also with your peace of mind. When that trust is shaken, it takes more than just reversals and statements to rebuild it. 

CIMB Bank Philippines attributed the unauthorised fund transfers to an “unexpected error”. That explanation, while perhaps true, feels somewhat lacking. Customers deserve more transparency when something as critical as their finances is at stake.  

What kind of error was it? How exactly did it happen? More importantly, what concrete steps are being taken to ensure it never happens again?  

These are questions that deserve clear, straightforward answers and not just reassurances that “security is a top priority.” 

A Wake-Up Call Not Just For Digital Banks, But For All 

But I want to be fair here. 

Compared to some other cases we’ve seen, CIMB’s response was notably quick. They acknowledged the issue publicly, worked with the Bangko Sentral ng Pilipinas (BSP), and returned the affected funds.  

That’s responsible behaviour, and they deserve credit where credit is due. But responding well after a crisis isn’t the same as preventing one. 

In today’s world, especially for digital-first banks, security isn’t just about protecting systems. You must also think about maintaining public trust, as trust is much harder to repair once it’s damaged.

And while customers might appreciate the reversals, many will remember the fear and helplessness they felt when they first realised their accounts were compromised. As digital banking continues to grow in the Philippines, I hope this incident becomes a turning point, not just for CIMB but for the industry as a whole.  

Banks must not only strengthen their systems but also be ready to own up fully and transparently when things go wrong. Customers deserve nothing less. 

Here’s hoping we won’t have to write about anything like this again anytime soon. 

Featured image: Edited from Freepik.