Quick answer
Not automatically. The fact that a charge was made abroad does not, by itself, make you liable. If a Philippine-issued credit card was used without your authority, you may dispute the transaction with the issuing bank and seek reversal of the charge, including related interest and fees.
Liability depends on the evidence and circumstances, including:
- whether you or a supplementary cardholder actually authorized the transaction;
- whether the physical card was lost or stolen;
- when you notified the issuer;
- whether card details, a PIN, one-time password, or account access were compromised;
- the conduct of both the cardholder and the issuer; and
- whether the issuer and its service providers observed required security and consumer-protection standards.
Report the transaction immediately. Philippine credit-card rules generally give a cardholder up to 30 calendar days from the statement date to report a billing error or discrepancy, but waiting for the statement—or for the end of that period—can allow more fraudulent charges and weaken the available evidence.
Being abroad does not decide liability
For a credit card issued by a bank or credit-card company operating in the Philippines, Philippine consumer-protection rules continue to matter even when the disputed transaction was processed by a foreign merchant or in a foreign currency.
The merchant’s location may affect the investigation, retrieval of records, and card-network chargeback process. It does not convert an unauthorized purchase into an authorized one.
The result may be different if the card was issued outside the Philippines. In that situation, the issuer’s home-country law, the card agreement, and the applicable network rules may govern the dispute.
The general rule for unauthorized transactions
Under the BSP’s financial-consumer-protection framework, an issuer should evaluate each disputed transaction fairly and reasonably. Liability may be assessed by considering:
- the cardholder’s actions before, during, and after the transaction;
- acts or omissions of the financial institution;
- acts or omissions of its employees, agents, outsourced entities, or service providers; and
- any failure to comply with applicable consumer-protection and security requirements.
If the investigation finds that the transaction was unauthorized or fraudulent, the institution should promptly correct or reverse it, together with related interest, charges, and fees. The institution must formally inform the consumer of the investigation result within three banking days after the investigation is concluded.
A bank should not reject a claim merely because its system recorded a successful card entry, password, PIN, or one-time password. Those records may be relevant evidence, but the full circumstances still matter—for example, whether credentials were obtained through phishing, account takeover, SIM-related fraud, malware, or a failure in the issuer’s controls.
Conversely, describing a transaction as “unauthorized” does not guarantee reversal. The issuer may deny the claim if reliable evidence shows that the cardholder, a supplementary cardholder, or another person acting with authority made or approved it.
Special rule when the physical card was lost or stolen
Section 15 of the Philippine Credit Card Industry Regulation Law states that transactions made before the loss or theft is reported to the issuer are generally for the cardholder’s account.
That rule has an important qualification. BSP Circular No. 1003 preserves the cardholder’s right to dispute those transactions. If the issuer’s investigation finds them unauthorized or fraudulent, it must reverse them, including related finance charges and fees.
Transactions made after prompt notice present a stronger case against cardholder liability. In Acol v. Philippine Commercial Credit Card Corporation, the Supreme Court ruled that prompt notice of a lost or stolen card should be sufficient to relieve the cardholder from liability for later unauthorized use. The issuer could not extend liability until it had completed the separate step of notifying its merchants. See G.R. No. 135149, July 25, 2006.
Keep proof of the exact time and manner of your report. A hotline reference number, email acknowledgment, in-app confirmation, or recorded chat can become decisive.
Card-not-present and account-takeover transactions
Many foreign charges do not involve a missing physical card. They may be online purchases, recurring subscriptions, digital-wallet transactions, or charges made using copied card details.
In these cases, the lost-or-stolen-card rule does not neatly resolve liability. The issuer should investigate such matters as:
- how the transaction was authenticated;
- whether the card was enrolled in a digital wallet;
- what device, account, or contact details were used;
- whether an OTP or approval request was sent and successfully completed;
- whether the transaction pattern was unusual;
- whether timely alerts were delivered;
- when the consumer discovered and reported the incident; and
- whether the issuer’s fraud controls operated as required.
The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765, requires financial service providers to protect consumer data, maintain information-security standards, and provide a free consumer-assistance mechanism.
For scams involving unauthorized access or social engineering, the Anti-Financial Account Scamming Act also requires covered institutions to maintain adequate risk-management systems and controls. Depending on the facts, an institution may be required to make restitution if it failed to employ adequate controls or exercise the legally required degree of diligence. That does not mean every scam loss is automatically refundable; compliance and causation must still be established.
What the issuer must do after a report
For a billing error or discrepancy, the credit-card rules provide that:
- The issuer must allow reporting within up to 30 calendar days from the statement date.
- Notice may be written, verbal, or made through another documented means.
- The issuer must take action within 10 business days after receiving the notice and relevant records.
- Within 90 days after receiving the notice, it must conduct a thorough investigation, make appropriate corrections, and send a written explanation or clarification before collecting the contested amount, subject to the investigation’s result.
- It may continue collecting amounts that were not identified as disputed.
Republic Act No. 11765 further requires the provider, while its final investigation is pending, to suspend interest, fees, and charges on the disputed amount or give a similar reasonable accommodation. BSP Circular No. 1160 identifies possible accommodations such as provisional credit or a temporary hold, but a provisional credit is not necessarily final. It may be removed if the investigation establishes that no unauthorized or erroneous transaction occurred.
Fraud-reporting channels should be free, active 24/7, and capable of providing an immediate written acknowledgment.
What to do immediately
1. Lock the card and contact the issuer
Use the issuer’s official app, fraud hotline, or website. Do not use a phone number or link contained in a suspicious message.
Ask the issuer to:
- block or suspend the compromised card;
- stop further card-not-present or international use;
- remove the card from unfamiliar digital wallets or devices;
- issue a replacement card with a new number;
- identify all pending and posted suspicious transactions; and
- give you a complaint or fraud-case reference number.
Blocking the card does not replace filing a formal dispute. Do both.
2. Identify each disputed transaction precisely
For every charge, record:
- posting and transaction dates;
- merchant descriptor;
- country or location shown;
- foreign-currency and peso amounts;
- transaction reference, if available; and
- whether the charge is pending, posted, reversed, or repeated.
Merchant descriptors can differ from a business’s public name. Before disputing, check legitimate hotel deposits, transportation charges, online orders, family-authorized purchases, trial subscriptions, and delayed postings. Do not contact a suspicious merchant using contact details embedded in an untrusted message.
3. Submit a documented dispute
State clearly that you did not make, approve, or benefit from the transaction. If true, also state that:
- the card remained in your possession;
- you were not in the country where the transaction supposedly occurred;
- you did not disclose an OTP, PIN, password, or card details;
- you did not enroll the card in the identified digital wallet; or
- you reported the card lost or stolen at a specific time.
Request:
- acknowledgment of the dispute;
- suspension of interest, fees, and collection on the disputed amount;
- the investigation timetable;
- the issuer’s final written findings;
- reversal of the transaction and all related charges if found unauthorized; and
- correction of any adverse account or credit information caused by the disputed amount.
Follow any reasonable request for a signed dispute form or supporting records promptly. Keep copies of everything submitted.
4. Secure connected accounts
Change the passwords for online banking, email, shopping, and mobile accounts connected to the card. Sign out unknown devices and enable strong multi-factor authentication.
If your phone number suddenly stopped working, contact your mobile provider immediately and ask whether a SIM replacement or account change occurred.
Never provide a PIN, CVV, full password, or OTP to someone who contacts you claiming to investigate the fraud. A legitimate investigation does not require you to “return” funds or transfer money to a supposed safe account.
5. Pay undisputed amounts on time
Do not assume that filing a dispute cancels the entire statement. Ask the issuer, in writing, how much remains payable and how the disputed portion will be treated while the investigation is pending.
Paying the undisputed balance can help avoid separate late charges and collection issues. Label communications carefully so payment is not misunderstood as an admission that the disputed charge was valid.
Evidence to preserve
Keep original or exported copies of:
- statements and transaction alerts;
- screenshots showing when the card was locked;
- hotline logs, emails, chats, and reference numbers;
- the card’s front and back, with sensitive numbers masked in shared copies;
- passport pages, boarding passes, immigration records, work attendance, receipts, or location records relevant to where you were;
- proof that the physical card remained with you;
- device and digital-wallet enrollment alerts;
- OTP messages and call logs;
- notices of password, email, phone-number, or SIM changes;
- merchant cancellation or refund correspondence;
- police, cybercrime, or incident reports; and
- the issuer’s dispute form, findings, and supporting explanation.
Preserve electronic files in their original form where possible. Avoid cropping out dates, sender details, transaction references, or other context.
Evidence that you were in the Philippines can be helpful when the charge required physical presentation of the card abroad. It may be less conclusive for an online transaction that could have been initiated from anywhere.
If the bank denies the dispute
Ask for a written decision that addresses the evidence, not merely a conclusion such as “the transaction was authenticated.” Request the basis for finding authorization, including records that may lawfully be disclosed, such as:
- transaction type and authentication method;
- whether the physical card, contactless function, chip, magnetic stripe, or card details were used;
- date and method of any digital-wallet enrollment;
- delivery and completion records for OTPs or approval prompts;
- merchant documents relied upon; and
- the reason the issuer concluded that you authorized the charge.
Do not publish full card numbers, passwords, OTPs, or unredacted identity documents when seeking help.
If the issuer does not resolve the matter satisfactorily, elevate it to the BSP after first using the issuer’s own consumer-assistance mechanism. The BSP explains its current escalation options on its Consumer Assistance Channels page. Supporting documents should include your complaint to the issuer, its reply if any, a concise timeline, and the specific relief requested.
BSP assistance or administrative redress is separate from a criminal complaint against the fraudster. If identity theft, phishing, account takeover, or coordinated fraud is involved, consider reporting the incident promptly to the appropriate PNP or NBI cybercrime authorities. A police report does not by itself prove that the charge must be reversed, but it can preserve the incident record and support an investigation.
Common mistakes to avoid
- Waiting until the 30-day reporting period is almost over.
- Locking the card but failing to dispute posted transactions.
- Reporting only one charge when several related charges exist.
- Calling a number supplied by the suspected scammer.
- Deleting texts, emails, app alerts, or call histories.
- Giving investigators conclusions without a clear timeline and supporting documents.
- Assuming an OTP automatically defeats the claim—or that being physically in the Philippines automatically proves an online charge was unauthorized.
- Refusing to pay the entire statement without confirming how undisputed charges should be paid.
- Filing a knowingly false dispute over a purchase that was authorized, received, or made by an authorized supplementary cardholder.
- Confusing merchant dissatisfaction with fraud. A defective product, canceled booking, or unprocessed refund may require a different dispute basis from an unauthorized transaction.
When legal help is urgent
Consult a Philippine lawyer promptly if:
- the amount is substantial;
- the issuer or a collection agency threatens suit or reports the disputed amount as delinquent;
- the bank offsets the amount against your deposit account;
- the bank alleges that you participated in fraud or made a false report;
- several financial accounts or identities were compromised;
- you received a demand letter, summons, subpoena, or court document;
- the dispute involves a business or corporate card with different contractual controls;
- the transaction was made by a family member, employee, agent, or supplementary cardholder and the scope of authority is disputed; or
- cross-border evidence, foreign proceedings, or prescription periods may be involved.
Do not ignore formal legal papers while waiting for the bank or BSP to act. Court and administrative deadlines may run separately from the issuer’s internal investigation.
Frequently asked questions
Am I liable simply because my card allows international transactions?
No. Enabling international use permits legitimate foreign transactions; it does not authorize a particular fraudulent charge.
What if my card never left my possession?
Report the transaction anyway. The card number or account may have been compromised without the physical card being taken. The issuer should investigate how the transaction was initiated and authenticated.
What if the charge happened before I noticed that the card was missing?
The law generally places pre-report lost-or-stolen-card transactions on the cardholder’s account, but you retain the right to dispute them. A transaction found to be unauthorized or fraudulent should be reversed with related finance charges and fees.
What if the charge happened after I reported the card lost?
Preserve proof of the report’s exact time. Supreme Court authority supports relieving the cardholder from liability for unauthorized transactions after prompt notice; the issuer cannot extend liability merely because its internal notice to merchants was delayed.
Does use of an OTP mean I must pay?
Not necessarily. It is important evidence, but the investigation should consider how the OTP was generated, delivered, obtained, and used, together with possible phishing, account takeover, SIM compromise, device enrollment, and the issuer’s controls.
Can the bank continue charging interest during the investigation?
For an alleged disputed amount or unauthorized transaction, the provider must suspend the imposition of interest, fees, and charges while the final investigation is pending, or provide a similar reasonable accommodation. Confirm the account treatment in writing and continue paying undisputed amounts.
Is provisional credit the same as a final refund?
No. Provisional credit is temporary and may be reversed if sufficient proof establishes that no unauthorized or erroneous transaction occurred. If the transaction is found unauthorized, the correction or credit should become permanent.
Should I dispute a foreign charge that I recognize but consider too expensive?
Not as unauthorized fraud. Exchange-rate conversion, foreign-transaction fees, dynamic currency conversion, service quality, cancellations, and refunds are separate issues. Dispute the correct issue and provide the relevant receipt, cancellation, or refund terms.
Can I go directly to the BSP?
First report the matter to the card issuer through its consumer-assistance mechanism. If the response is unsatisfactory or the concern remains unresolved, use the BSP Consumer Assistance Mechanism.
Does a criminal case have to succeed before the bank can reverse the charge?
No. The issuer’s consumer claim and investigation can proceed independently. Under the Anti-Financial Account Scamming Act, a criminal conviction is not a prerequisite to restitution based on an institution’s failure to employ adequate controls or exercise the required diligence.
Official sources
- Republic Act No. 10870 — Philippine Credit Card Industry Regulation Law
- BSP Circular No. 1003 — Guidelines on Credit Card Operations
- Republic Act No. 11765 — Financial Products and Services Consumer Protection Act
- BSP Circular No. 1160 — Regulations on Financial Consumer Protection
- Republic Act No. 12010 — Anti-Financial Account Scamming Act
- BSP Consumer Assistance Channels
- Acol v. Philippine Commercial Credit Card Corporation, G.R. No. 135149
This article provides general Philippine legal information, not legal advice for a particular case. Liability can turn on the card agreement, transaction records, authentication evidence, timing of notice, and other facts. Official sources and procedures were checked as of September 3, 2026.