His dream was simple: build a lifestyle brand called “Zenith Hustle” — part vlog, part digital merchandise store, part motivational channel. But dreams cost money, and Jay’s bank account was a desert.

That night, he created a fake GCash receipt for ₱50,000 from a supposed client named “Marcus Cole.” He posted it on his Instagram story with the caption: “First big branding deal incoming. Stay patient. Stay hungry.”

The APK had cloned his session tokens. Someone — or something — was using his identity to request money from his contacts. Worse, a victim who actually paid one of those fake requests reported Jay’s number to the Cybercrime Investigation and Coordinating Center (CICC). By the time Jay realized, his GCash account was frozen, his Instagram was suspended for “fraudulent activity,” and two of his close friends had lost money.