A Philippine Legal Article

I. Introduction

Unauthorized credit card transactions are among the most common consumer banking disputes in the Philippines. They may involve stolen cards, lost cards, phishing, account takeover, card-not-present purchases, compromised one-time passwords, unauthorized online subscriptions, skimming, fake merchants, fraudulent e-commerce charges, or transactions made after the cardholder already reported the card lost or compromised.

When a cardholder disputes a transaction, the bank may temporarily reverse the charge, investigate, deny the dispute, reinstate the charge, or refuse outright to reverse it. This refusal can create serious consequences: interest charges, finance charges, late fees, collection calls, credit bureau reporting, account suspension, and legal demands.

The legal question is not simply whether the cardholder says the charge was unauthorized. The issue is whether, under Philippine banking, consumer protection, credit card, electronic commerce, data privacy, contract, and evidence rules, the bank may validly hold the cardholder liable despite the claim of unauthorized use.

This article discusses the Philippine legal framework, cardholder rights and duties, bank responsibilities, dispute procedures, evidence, regulatory complaints, possible civil and criminal remedies, and practical steps when a bank refuses to reverse an unauthorized credit card transaction.

This is legal information, not legal advice for a specific case.

II. What Is an Unauthorized Credit Card Transaction?

An unauthorized credit card transaction is a charge made without the cardholder’s valid authority, consent, participation, or approval.

It may occur through:

Use of a lost or stolen physical card.
Skimming or cloning of card data.
Unauthorized online purchase using card details.
Account takeover of online banking or mobile banking.
Phishing, smishing, vishing, or social engineering.
Unauthorized use of an OTP or authentication code.
Fraudulent card-not-present transaction.
Merchant fraud.
Duplicate charging.
Overcharging.
Subscription or recurring charge not authorized by the cardholder.
Use of saved card credentials by another person.
Unauthorized charge after cancellation or blocking request.
Family member or employee misuse without authority.
Transaction processed despite prior cardholder report of compromise.

In practice, banks often distinguish between:

Fraudulent unauthorized transactions;
Disputed merchant transactions;
Billing errors;
Non-receipt of goods or services;
Subscription cancellation disputes;
Cardholder-authorized but regretted transactions;
Transactions caused by negligence or disclosure of credentials.

The legal treatment may differ depending on the category.

III. Common Bank Reasons for Refusing Reversal

Banks may refuse to reverse an unauthorized credit card transaction for several reasons, including:

The dispute was filed beyond the required period.
The transaction was authenticated by OTP, 3D Secure, PIN, CVV, biometrics, or app approval.
The bank claims the cardholder voluntarily disclosed credentials.
The transaction was done using the physical card and correct PIN.
The transaction matched the cardholder’s historical spending behavior.
The merchant submitted proof of transaction.
The bank found no evidence of compromise.
The cardholder failed to submit requested documents.
The charge was a recurring subscription previously authorized.
The bank classifies the matter as a merchant dispute, not fraud.
The transaction occurred before the cardholder reported the card lost or stolen.
The bank says the cardholder is liable under the card terms and conditions.
The cardholder allegedly delayed reporting.
The cardholder’s device, email, or SIM was compromised.
The bank says the transaction was “validly posted.”

A refusal is not automatically lawful just because the bank says so. The bank must still act in accordance with law, regulation, contract, fairness, good faith, consumer protection standards, and its own dispute procedures.

IV. Legal Relationship Between Bank and Credit Cardholder

A credit card relationship is governed by contract, banking regulations, consumer protection rules, card network rules, and applicable laws.

The usual documents include:

Credit card application form.
Credit card terms and conditions.
Statement of account.
Electronic banking terms.
Rewards and installment terms.
Fraud monitoring and dispute procedures.
Privacy notices.
Notices sent by SMS, email, mobile app, or mail.

The cardholder agrees to pay valid charges, fees, interest, and penalties. The bank agrees to extend credit, process transactions, send billing statements, investigate disputes, protect account security, and comply with financial consumer protection rules.

A bank cannot rely only on broad contractual language if its conduct violates law, public policy, regulatory standards, negligence principles, or consumer protection obligations.

V. Philippine Legal Framework

A bank refusal to reverse an unauthorized credit card charge may involve several areas of Philippine law:

Credit card regulations and Bangko Sentral ng Pilipinas rules.
Financial Products and Services Consumer Protection Act.
Consumer Act principles, where applicable.
Civil Code rules on contracts, obligations, damages, negligence, abuse of rights, and good faith.
Electronic Commerce Act, especially for electronic records and transactions.
Cybercrime Prevention Act, where hacking, phishing, identity theft, or computer fraud is involved.
Access Devices Regulation Act, where credit card fraud or unauthorized access devices are involved.
Data Privacy Act, where personal or cardholder data was mishandled.
Revised Penal Code, for estafa, falsification, theft, or related fraud.
Rules on Electronic Evidence.
Small claims rules or ordinary civil actions, depending on the monetary amount and remedy.
BSP complaint and mediation mechanisms.

The best remedy depends on whether the dispute is primarily a bank liability issue, merchant issue, fraud issue, data breach issue, debt collection issue, or criminal fraud issue.

VI. The Role of the Bangko Sentral ng Pilipinas

Banks and credit card issuers in the Philippines are regulated by the Bangko Sentral ng Pilipinas. BSP regulations cover consumer protection, credit card operations, disclosures, fees, collection practices, complaint handling, and responsible financial services.

A cardholder may file a complaint with the bank first. If unresolved, the cardholder may escalate to the BSP’s consumer assistance mechanism.

BSP involvement does not automatically mean the transaction will be reversed. However, it can require the bank to explain its findings, produce its basis, follow proper complaint handling, and respond within regulatory expectations.

A strong BSP complaint should include:

The disputed transaction details.
Date and time of charge.
Merchant name.
Amount.
Date reported to the bank.
Bank reference number.
Copies of emails, letters, and chat logs.
Police or cybercrime report, if any.
Proof that the cardholder did not authorize the transaction.
Evidence of bank delay, refusal, inconsistent explanation, or unfair collection.
Request for reversal, waiver of interest and charges, and correction of credit records.

VII. Financial Consumer Protection Principles

Philippine financial consumer protection rules require financial institutions to treat consumers fairly, disclose material information, handle complaints properly, and maintain appropriate controls.

In unauthorized transaction disputes, relevant principles include:

Fair and reasonable treatment of consumers.
Protection of consumer assets and information.
Clear disclosure of rights and responsibilities.
Effective dispute resolution.
Responsible handling of complaints.
Accountability for fraud risk management.
Proper investigation before denying liability.
Fair collection practices while a dispute is pending.
Prompt correction of errors.
Protection against misleading or abusive conduct.

A bank’s refusal may be legally vulnerable if it is arbitrary, unsupported, delayed, inconsistent, based on boilerplate conclusions, or contrary to its own investigation records.

VIII. Cardholder Duties

Cardholders also have obligations. A dispute is stronger when the cardholder can show compliance with these duties.

Common duties include:

Keep the card secure.
Keep PIN, OTP, CVV, passwords, and authentication credentials confidential.
Review statements promptly.
Report lost, stolen, compromised, or unauthorized transactions immediately.
Cooperate with the bank’s investigation.
Submit dispute forms and supporting documents.
Avoid giving card details to suspicious websites or callers.
Use updated contact information so fraud alerts are received.
Notify the bank of changes in mobile number, email, or address.
Preserve evidence.
File reports with law enforcement where fraud or cybercrime occurred.

Failure to report promptly may affect liability, especially for transactions before the bank was notified. However, delay does not automatically make every bank refusal valid. The facts still matter.

IX. Bank Duties

Banks are expected to maintain reasonable security, fraud detection, authentication, monitoring, complaint handling, and consumer protection systems.

Relevant bank duties may include:

Provide secure card issuance and activation.
Monitor unusual transactions.
Implement authentication controls.
Send transaction alerts where applicable.
Provide accessible channels for reporting fraud.
Block compromised cards promptly.
Investigate disputes fairly.
Provide a clear explanation for denial.
Preserve relevant logs and transaction records.
Coordinate with merchants, acquirers, and card networks.
Correct erroneous charges.
Avoid unfair collection while the dispute is unresolved.
Protect consumer data.
Avoid shifting all fraud risk to consumers through unfair terms.
Comply with regulatory timelines and complaint procedures.

The standard is not perfection. Fraud can happen despite security systems. But a bank may be liable if it failed to exercise the required diligence, ignored red flags, mishandled the complaint, or imposed liability without sufficient basis.

X. Unauthorized Transaction vs. Merchant Dispute

A major practical issue is classification.

A. Unauthorized Transaction

This means the cardholder did not authorize the charge at all. Examples:

Card was stolen and used.
Card details were compromised.
Account was hacked.
Cardholder never dealt with the merchant.
Cardholder was asleep, abroad, or unable to transact at the time.
Transaction was made after card had been reported lost.

B. Merchant Dispute

This means the cardholder may have authorized payment, but disputes the merchant’s performance. Examples:

Goods were not delivered.
Goods were defective.
Refund was promised but not processed.
Merchant overcharged.
Duplicate billing.
Hotel or car rental charged additional fees.
Subscription cancellation was ignored.

Banks may treat merchant disputes differently from fraud claims. A merchant dispute often depends on chargeback rules, merchant evidence, cancellation proof, delivery records, and service terms.

The cardholder should clearly state whether the dispute is:

“I never authorized this transaction”; or
“I authorized a transaction, but the merchant failed to perform or charged incorrectly.”

Confusing the two can weaken the complaint.

XI. Credit Card Chargeback

A chargeback is a process by which a card issuer disputes a transaction through the card network and merchant acquiring system.

Chargebacks may be available for:

Fraudulent transaction.
Unauthorized card-not-present transaction.
Non-receipt of goods or services.
Duplicate processing.
Incorrect amount.
Credit not processed.
Cancelled recurring transaction.
Defective or not-as-described goods.
Transaction after card cancellation.
ATM or cash advance error, depending on product.

Chargeback rules are often governed by card network rules and bank procedures. These are not always fully visible to consumers, but the bank should still explain the basis of its denial in a fair and understandable way.

A cardholder should act quickly because chargeback windows are time-sensitive.

XII. Provisional Credit

Some banks temporarily reverse a disputed charge while investigating. This may be called provisional credit, temporary credit, or temporary reversal.

If the bank later denies the dispute, it may reinstate the charge.

Important points:

Provisional credit is not always final.
The bank should inform the cardholder of the result.
If the bank reverses the provisional credit, it should explain why.
Interest and penalties should be disputed if the charge was genuinely unauthorized or if the bank caused delay.
A cardholder may still escalate after provisional credit is reversed.

The bank should not mislead the cardholder into believing a temporary reversal is final if it is still subject to investigation.

XIII. Reporting Deadlines

Credit card agreements often require the cardholder to report billing errors or unauthorized transactions within a specified period from statement date or transaction date.

Common issues include:

The cardholder did not receive the statement.
The transaction alert was not received.
The bank sent notice to an outdated number or email.
The transaction was hidden among many charges.
The cardholder discovered the fraud late.
The bank’s reporting channel was unavailable.
The bank delayed giving dispute forms.
The merchant posted the charge late.
The transaction was recurring and only later identified.

A bank may rely on late reporting, but late reporting should be assessed with the actual facts. If the bank had independent fraud indicators, failed to send alerts, failed to block after notice, or mishandled the investigation, the cardholder may still have arguments.

XIV. OTP, 3D Secure, and Authentication Issues

Banks often deny disputes because the transaction was authenticated with OTP, 3D Secure, app approval, biometrics, or other security measures.

Authentication evidence is important, but it is not always conclusive.

Questions to ask include:

Was an OTP actually generated?
To what mobile number or device was it sent?
Was the registered number changed before the transaction?
Was there a SIM swap?
Was the OTP intercepted by malware?
Was the cardholder deceived into giving OTP through phishing?
Did the bank’s message clearly identify the amount and merchant?
Did the OTP message warn not to share it?
Was the transaction consistent with normal spending?
Did multiple high-risk transactions occur in quick succession?
Did the bank ignore fraud alerts?
Did the bank allow transaction after cardholder report?
Was the device fingerprint new?
Was the IP address or country unusual?
Was the authentication method compromised because of bank-side weakness?

A bank may argue that OTP use proves authorization. A cardholder may respond that authentication does not always equal informed authorization, especially where social engineering, SIM swap, account takeover, malware, or inadequate warning is involved.

However, if the cardholder voluntarily gave OTP to a scammer despite clear warnings, the bank may argue cardholder negligence. The outcome depends heavily on facts and evidence.

XV. Lost or Stolen Card

When a physical card is lost or stolen, the cardholder should immediately call the bank and request blocking.

Key issues include:

Time the card was lost.
Time unauthorized transaction occurred.
Time the cardholder reported the loss.
Whether the bank blocked the card promptly.
Whether transactions occurred before or after report.
Whether PIN or signature was used.
Whether merchant followed proper verification.
Whether transaction was contactless and below verification threshold.
Whether multiple unusual transactions occurred.
Whether the bank sent real-time alerts.

Transactions after the bank received notice are generally harder for the bank to impose on the cardholder. Transactions before notice may be disputed depending on negligence, card security, transaction type, and fraud indicators.

XVI. Card-Not-Present Transactions

Card-not-present transactions are online, app-based, phone, mail, or manually keyed transactions where the physical card is not presented.

These are common in unauthorized credit card cases.

Evidence may include:

Merchant name.
IP address.
Delivery address.
Email used for order.
Device fingerprint.
3D Secure result.
CVV entry.
Billing address verification.
Shipping records.
Account creation details.
Merchant response.
Proof that goods went to another person.

Card-not-present fraud may occur even when the cardholder never lost the card. Card details may be leaked through compromised merchants, phishing pages, malware, old subscriptions, or data breaches.

XVII. Recurring Charges and Subscriptions

Some disputes involve recurring charges. Banks may deny reversal by saying the cardholder previously authorized the subscription.

The cardholder should gather:

Proof of cancellation.
Terms of subscription.
Cancellation confirmation email.
Screenshot of account closure.
Prior correspondence with merchant.
Evidence that trial period was misleading.
Proof that the charge was after cancellation.
Bank dispute reference.

Recurring charges are often classified as merchant disputes rather than fraud, unless the cardholder never authorized the subscription at all.

If the merchant refuses to cancel, the cardholder should request the bank to block future recurring charges and replace the card if needed.

XVIII. Installment Transactions

Unauthorized installment transactions create added complications because the disputed amount may appear monthly.

Issues include:

Whether the cardholder signed or agreed to installment terms.
Whether the merchant converted a transaction to installment without authority.
Whether the bank approved installment conversion.
Whether the transaction was online or in-store.
Whether the cardholder benefited from the purchase.
Whether monthly billing continued after dispute.
Whether acceleration, pre-termination, or interest charges apply.

The cardholder should dispute both the original transaction and the future installment postings.

XIX. Supplementary Cards

Unauthorized transactions on supplementary cards may raise questions about who is liable.

Usually, the principal cardholder is contractually liable for supplementary card charges. But if the transaction was unauthorized, fraudulent, or outside the supplementary cardholder’s authority, the principal cardholder may still dispute.

Questions include:

Was the supplementary card in possession of the supplementary holder?
Was the transaction made by the supplementary holder?
Was the card lost or stolen?
Did the principal cardholder authorize that use?
Were card limits or merchant categories restricted?
Was the bank notified to cancel the supplementary card?
Did the bank continue allowing charges after cancellation request?

XX. Corporate or Business Credit Cards

For corporate cards, the cardholder, company, and bank agreement determine liability.

Issues include:

Whether the employee was authorized.
Whether the transaction was personal or business-related.
Whether the card was compromised.
Whether the company reported promptly.
Whether internal controls failed.
Whether the employee committed fraud.
Whether the bank followed corporate card procedures.
Whether the merchant had suspicious activity.

A company may need internal investigation, employee affidavit, IT logs, and police report.

XXI. Evidence Needed to Dispute the Bank’s Refusal

A cardholder challenging a refusal should organize evidence carefully.

Important evidence includes:

Credit card statement showing the disputed charge.
Screenshot of transaction alert.
Dispute form submitted to bank.
Bank acknowledgment or reference number.
All emails and messages with the bank.
Bank’s final denial letter.
Explanation given by the bank.
Police report, if filed.
Affidavit of unauthorized transaction.
Proof of card possession at the time.
Proof of location at the time.
Passport, travel records, work attendance, CCTV, or receipts showing cardholder could not have transacted.
Proof that card was reported lost or blocked.
Merchant correspondence.
Proof of non-delivery.
Proof of cancellation for subscriptions.
Evidence of phishing, SIM swap, or account takeover.
Screenshots of fraudulent websites or messages.
Telco report, if SIM compromise occurred.
Data breach notice, if any.
Device security report, where relevant.
Timeline of events.

The best complaints are chronological and evidence-based.

XXII. Requesting Information from the Bank

A cardholder should ask the bank to provide the basis for denial.

Possible requests:

Copy of charge slip or transaction record.
Merchant name and merchant ID.
Transaction date and posting date.
Authorization date and time.
Authentication method used.
Whether OTP was used.
Mobile number or channel where OTP was sent.
Whether 3D Secure was used.
IP address, device, or country information if available.
Merchant response to chargeback.
Reason code for denial.
Copies of documents submitted by merchant.
Whether transaction was chip, magstripe, contactless, keyed, or online.
Whether card was present.
Whether CVV was entered.
Whether transaction occurred before or after card blocking.
Internal complaint reference and final resolution letter.

The bank may refuse to disclose some internal or third-party data for security or privacy reasons, but it should provide enough explanation to allow meaningful review.

XXIII. Written Demand to the Bank

Before escalating, the cardholder may send a formal letter or email to the bank.

The letter should include:

Cardholder name.
Last four digits of card only.
Disputed transaction details.
Date of discovery.
Date reported.
Statement that the transaction was unauthorized.
Evidence attached.
Explanation why the bank’s denial is wrong.
Request for permanent reversal.
Request to waive interest, late fees, finance charges, and penalties.
Request to stop collection while dispute is pending.
Request not to report negative information to credit bureaus.
Request for written explanation and supporting basis.
Deadline for response.
Notice that the matter may be escalated to BSP and other authorities.

The tone should be firm, factual, and professional.

XXIV. Sample Demand Letter

Subject: Request for Reconsideration and Permanent Reversal of Unauthorized Credit Card Transaction

To the Bank:

I am writing to request reconsideration of your refusal to reverse the disputed credit card transaction on my account ending in [last four digits].

The disputed transaction is as follows:

Date of transaction: [date]
Posting date: [date]
Merchant: [merchant]
Amount: [amount]
Dispute reference number: [reference number]

I did not authorize, participate in, benefit from, or consent to this transaction. I reported the matter to your bank on [date] through [channel]. I submitted the required dispute documents on [date].

Your denial states that [state bank’s reason]. I respectfully dispute this finding because [state reasons, such as the card was in my possession, I was not in the location, the transaction occurred after I reported the card compromised, no OTP was received, the merchant did not deliver goods to me, or the transaction pattern was clearly suspicious].

Attached are copies of the relevant documents, including [list annexes].

I request that the bank:

Permanently reverse the unauthorized charge;
Waive all related interest, penalties, finance charges, and late fees;
Suspend collection activity on the disputed amount while this matter is under review;
Refrain from reporting the disputed amount as delinquent to any credit bureau;
Provide a written explanation of the factual and technical basis for any continued denial; and
Provide copies or details of the transaction authentication and merchant evidence relied upon, to the extent allowed by law.

I reserve all rights to escalate this matter to the Bangko Sentral ng Pilipinas, law enforcement, and other appropriate authorities.

Respectfully, [Name]

XXV. Filing a Complaint with the Bank’s Consumer Assistance Unit

Banks usually have internal complaint channels. A cardholder should exhaust these before or while escalating externally.

The complaint should be filed through official channels such as:

Branch.
Hotline.
Email.
Mobile app complaint function.
Website form.
Registered mail.
Bank consumer assistance unit.

The cardholder should keep proof of filing:

Reference number.
Date and time.
Name of agent.
Screenshot of submission.
Email acknowledgment.
Copy of documents sent.
Follow-up history.

A verbal complaint is useful for immediate blocking, but written documentation is crucial for later escalation.

XXVI. Escalation to the BSP

If the bank refuses reversal or fails to act properly, the cardholder may escalate to the BSP’s consumer assistance channel.

The BSP complaint should be concise but complete.

Suggested structure:

Identify the bank.
Identify the product as credit card.
State the disputed transaction.
State that the transaction was unauthorized.
Explain when and how it was reported.
Summarize bank action or refusal.
Explain why the refusal is unreasonable.
Attach evidence.
State requested relief.

Possible requested relief:

Permanent reversal of the unauthorized charge.
Waiver of all related fees and interest.
Correction of billing statement.
Suspension of collection.
Correction of negative credit reporting.
Written explanation from the bank.
Review of bank’s fraud handling and consumer protection compliance.

BSP complaint mechanisms generally do not replace court actions, but they can be effective in forcing bank accountability and resolution.

XXVII. Police, NBI, and Cybercrime Reporting

If the transaction involved fraud, phishing, hacking, identity theft, stolen card use, or online scam activity, the cardholder may report to law enforcement.

Possible agencies include:

Philippine National Police Anti-Cybercrime Group.
National Bureau of Investigation Cybercrime Division.
Local police station.
Prosecutor’s office, where filing a criminal complaint is appropriate.

A law enforcement report helps show the bank that the cardholder is treating the transaction as criminal fraud, not merely a billing inconvenience.

The report may support:

Fraud investigation.
Merchant or recipient tracing.
SIM or account investigation.
Cybercrime preservation requests.
Criminal complaint against unknown persons.
Bank reconsideration.
Insurance or card network claim.

XXVIII. Criminal Laws Potentially Involved

Unauthorized credit card transactions may involve several crimes.

A. Access Devices Regulation Act

Credit cards are access devices. Unauthorized use, possession, production, trafficking, or fraudulent use of access devices may violate access device laws.

This may apply to:

Stolen card use.
Counterfeit or cloned cards.
Use of card numbers without authority.
Possession of card data with intent to defraud.
Unauthorized use of another person’s card information.
Fraudulent application for cards.
Use of access device to obtain money, goods, services, or anything of value.

B. Cybercrime Prevention Act

If the fraud involved computer systems, online banking, phishing, hacking, identity theft, or computer-related fraud, cybercrime charges may apply.

Relevant conduct may include:

Illegal access.
Computer-related fraud.
Computer-related identity theft.
Data interference.
Misuse of devices.
Cyber-related estafa or fraud.

C. Revised Penal Code

Depending on facts, the fraudster may be liable for:

Estafa.
Theft.
Falsification.
Use of falsified documents.
Other fraud-related offenses.

D. Data Privacy Violations

If personal data or cardholder information was unlawfully processed, disclosed, sold, leaked, or misused, Data Privacy Act issues may arise.

This may be relevant where the unauthorized transaction resulted from bank-side or merchant-side data compromise.

XXIX. Complaint Against the Merchant

Sometimes the bank refuses reversal because the merchant insists the transaction is valid.

The cardholder may also complain directly against the merchant if:

The merchant processed a transaction without authority.
The merchant failed to deliver goods or services.
The merchant ignored cancellation.
The merchant used misleading subscription terms.
The merchant refused refund despite proof.
The merchant accepted suspicious transactions.
The merchant participated in fraud.
The merchant misused card information.

Possible remedies include:

Demand for refund.
Complaint to DTI, where consumer goods or services are involved.
Complaint to platform marketplace.
Complaint to payment processor.
Civil action.
Criminal complaint, if fraudulent intent exists.

For foreign merchants, remedies may be harder, but card network chargeback and platform complaints may still help.

XXX. Data Privacy Complaint

A cardholder may consider a privacy complaint if the unauthorized transaction appears connected to mishandling of personal data.

Examples:

Bank or merchant leaked cardholder data.
Employee misused customer information.
Card details were exposed due to weak security.
Personal information was used to impersonate the cardholder.
Unauthorized account changes occurred.
Bank sent sensitive notices to wrong address or email.
Fraudster obtained information that should only be known to bank or merchant.
Bank failed to protect personal data.

A privacy complaint may seek investigation, compliance action, and appropriate remedies. It does not automatically reverse the credit card charge, but it can support the cardholder’s broader case.

XXXI. Debt Collection While Dispute Is Pending

One of the most distressing issues is collection activity while the cardholder disputes the charge.

Banks or collection agencies may send demand letters, call repeatedly, threaten legal action, or report delinquency.

A cardholder should write the bank and collection agency stating:

The amount is disputed.
The transaction is unauthorized.
A complaint is pending.
Collection of the disputed amount should be suspended.
Interest and penalties should not accrue on a fraud-disputed charge.
Negative credit reporting should not be made while the dispute is unresolved.
All communication should be in writing.

Abusive, deceptive, threatening, or harassing collection practices may be separately reportable.

XXXII. Negative Credit Reporting

If the bank reports the disputed amount as delinquent, the cardholder may suffer credit consequences.

The cardholder should request:

No negative reporting while dispute is pending.
Correction of any adverse report if the transaction is later found unauthorized.
Written confirmation that the account is under dispute.
Removal of penalties and delinquency history related to the disputed charge.
Updated statement reflecting reversal.

If negative reporting has already occurred, the cardholder may complain to the bank, credit bureau, and regulators, depending on the facts.

XXXIII. Interest, Finance Charges, and Late Fees

Even if the principal amount remains disputed, banks may impose:

Finance charges.
Late payment fees.
Overlimit fees.
Interest.
Installment acceleration charges.
Collection fees.
Annual fee complications.
Loss of rewards or privileges.

If the charge is unauthorized, the cardholder should demand reversal not only of the principal transaction but also all charges resulting from it.

A bank may not fairly profit from interest and penalties on a charge later shown to be unauthorized.

XXXIV. Should the Cardholder Pay the Disputed Amount?

This is a practical dilemma.

Paying may avoid interest, late fees, collection, or credit damage, but it may be perceived by the bank as acceptance unless clearly stated otherwise.

If the cardholder pays to avoid penalties, the payment should be accompanied by a written reservation:

“This payment is made under protest and without admission of liability, solely to avoid further charges and adverse credit consequences. I continue to dispute the transaction as unauthorized and reserve all rights to seek reversal and refund.”

Non-payment may preserve the dispute position but may trigger interest and collection. The best approach depends on the amount, urgency, bank conduct, and cardholder’s financial situation.

XXXV. Small Claims or Civil Action

If regulatory escalation fails, a cardholder may consider court action.

Possible civil claims include:

Recovery of amount paid under protest.
Damages for wrongful refusal to reverse.
Damages for negligence.
Damages for breach of contract.
Damages for bad faith.
Damages for unfair collection.
Correction of account.
Injunctive or other relief where appropriate.

For purely monetary claims within the applicable threshold, small claims procedure may be considered. Small claims is designed for simpler money claims and does not allow lawyers to appear for parties during hearing, subject to procedural rules.

More complex cases involving injunction, declaratory relief, damages, banking issues, data privacy, or technical evidence may require ordinary civil action.

XXXVI. Civil Code Bases for Bank Liability

Philippine Civil Code principles may be relevant in disputes with banks.

Possible legal theories include:

Breach of contract – failure to honor cardholder protections or dispute procedures.
Negligence – failure to exercise proper diligence in preventing or handling fraud.
Abuse of rights – exercising contractual rights in a manner contrary to honesty, good faith, or fairness.
Acts contrary to morals, good customs, or public policy.
Damages for bad faith.
Unjust enrichment, if the bank collects amounts not legally due.
Violation of consumer protection duties.

Banks are expected to exercise high diligence in their dealings with customers, especially because banking is imbued with public interest.

XXXVII. When the Bank May Have a Strong Defense

A bank may have a stronger position if evidence shows:

The cardholder knowingly authorized the transaction.
The cardholder benefited from the transaction.
The cardholder gave the card to another person.
The cardholder shared OTP, PIN, CVV, or password despite clear warnings.
The dispute was filed very late without reasonable explanation.
The merchant produced strong proof of delivery to the cardholder.
The transaction was recurring and never cancelled.
The cardholder previously paid similar charges.
The cardholder made inconsistent statements.
The fraud resulted mainly from cardholder negligence.
The bank blocked the card promptly after notice.
The bank complied with dispute procedures and provided a reasoned denial.

Even then, the bank’s defense should be evidence-based, not merely conclusory.

XXXVIII. When the Cardholder May Have a Strong Case

The cardholder may have a stronger case if:

The card was reported lost before the transaction.
The transaction occurred after the bank confirmed blocking.
The cardholder never received OTP or transaction alert.
The transaction was made from a foreign location while the cardholder was in the Philippines.
The amount and merchant were highly unusual.
Many suspicious transactions occurred in rapid sequence.
The bank failed to act on fraud alerts.
The merchant shipped goods to an unrelated person or address.
The bank cannot explain authentication.
The bank denied the dispute without meaningful investigation.
The transaction was card-not-present and unsupported by delivery proof.
The cardholder immediately reported the fraud.
There was evidence of data breach, SIM swap, phishing, or account takeover.
The bank continued collection despite pending dispute.
The bank imposed interest and charges caused solely by the disputed transaction.

XXXIX. Timeline of an Ideal Dispute Response

A cardholder should act in this order:

Immediately call the bank to block the card.
Ask for a reference number.
Note the date, time, and agent name.
File a written dispute.
Submit dispute form and affidavit if required.
Preserve screenshots and statements.
File a police or cybercrime report if fraud occurred.
Follow up in writing.
Request provisional reversal or suspension of charges.
Ask for written result of investigation.
If denied, request reconsideration.
Escalate to the bank’s consumer assistance unit.
Escalate to BSP if unresolved.
Complain to law enforcement, DTI, NPC, or other agencies as applicable.
Consider legal action if the amount and harm justify it.

XL. Affidavit of Unauthorized Transaction

Banks, police, prosecutors, or regulators may require an affidavit.

A useful affidavit should state:

The cardholder’s identity.
The credit card account involved.
The disputed transaction details.
That the cardholder did not authorize the transaction.
Whether the card was lost, stolen, or in possession.
Whether OTP, PIN, or password was received or shared.
When the cardholder discovered the transaction.
When the bank was notified.
What the bank did or refused to do.
What evidence supports the claim.
That the statement is made truthfully and voluntarily.

XLI. Sample Affidavit Outline

AFFIDAVIT OF UNAUTHORIZED CREDIT CARD TRANSACTION

I, [Name], of legal age, Filipino, residing at [address], after being sworn, state:

I am the holder of a credit card issued by [Bank], ending in [last four digits].
On or about [date], I discovered a transaction charged to my card in the amount of [amount] under merchant name [merchant].
I did not authorize, make, approve, participate in, or benefit from this transaction.
At the time of the transaction, [state relevant facts: the card was in my possession / the card had been lost / I was in another location / I did not receive any OTP / I had already reported the card compromised].
I immediately reported the unauthorized transaction to [Bank] on [date] through [channel] and was given reference number [reference number].
I submitted the required dispute documents on [date].
Despite my report, the bank refused to reverse the transaction on [date], stating [reason].
I respectfully dispute the bank’s finding because [reasons].
Attached are copies of [statement, screenshots, bank emails, police report, transaction alert, and other evidence].
I execute this affidavit to attest to the truth of the foregoing and to support my complaint and request for reversal.

[Signature] Affiant

Subscribed and sworn to before me on [date] at [place].

XLII. Bank Refusal Based on “Cardholder Negligence”

A frequent issue is whether the cardholder was negligent.

The bank may allege negligence when the cardholder:

Shared OTP.
Entered details on a phishing website.
Gave card information to a fake caller.
Failed to update contact details.
Lost the card but delayed reporting.
Allowed another person to use the card.
Saved card details on insecure websites.
Ignored transaction alerts.
Used weak passwords.
Failed to secure mobile phone or email.

The cardholder may respond:

The bank’s warnings were insufficient.
The fraudulent message impersonated the bank convincingly.
The bank failed to detect unusual activity.
The transaction was obviously suspicious.
The bank allowed multiple transactions after red flags.
The bank’s system allowed unauthorized change of contact details.
The fraud involved a data breach not caused by the cardholder.
The bank failed to block promptly after report.
The cardholder acted immediately upon discovery.
The bank has not proven causation between alleged negligence and the charge.

Negligence disputes are fact-intensive. The question is often whether the loss should fall on the consumer, bank, merchant, or fraudster.

XLIII. Phishing and Social Engineering

In phishing cases, the fraudster tricks the cardholder into revealing card details, OTP, login credentials, or personal information.

Banks increasingly deny these disputes by saying the cardholder voluntarily gave away credentials. But the legal analysis may be more nuanced.

Relevant questions include:

Was the phishing page or message impersonating the bank?
Did the bank previously warn about that exact scam?
Was the OTP message clear as to amount and merchant?
Did the transaction occur immediately after credentials were harvested?
Were there unusual login attempts?
Did the bank detect a new device or location?
Were high-risk transactions allowed without additional verification?
Did the cardholder promptly report?
Did the bank fail to stop subsequent transactions?
Was there a broader data compromise?

The cardholder should preserve the phishing message, URL, caller number, screenshots, and timeline.

XLIV. SIM Swap and Mobile Number Compromise

A SIM swap occurs when a fraudster gains control of the victim’s mobile number and receives OTPs or banking messages.

In such cases, evidence may include:

Telco complaint.
SIM replacement records.
Loss of signal timeline.
Bank OTP logs.
Unauthorized change of bank contact details.
Device login records.
Fraudulent transaction timeline.
Police or cybercrime report.

A bank refusal based only on “OTP was used” may be challenged if the OTP was sent to a compromised SIM and the bank failed to detect other risk indicators.

The telco’s role may also need investigation.

XLV. Unauthorized Transaction After Card Blocking

If the bank allowed a transaction after the cardholder reported the card lost, stolen, or compromised, the cardholder has a stronger argument.

The key evidence is the report:

Call recording reference.
Email report.
Chat transcript.
App blocking confirmation.
SMS confirmation.
Date and time of blocking request.
Date and time of transaction authorization.

If the transaction was merely posted after blocking but authorized before blocking, the bank may argue it was already approved. The distinction between transaction date, authorization date, and posting date matters.

XLVI. Authorization Date vs. Posting Date

Credit card statements often show posting date, which may be later than the actual authorization date.

Important dates:

Transaction date – when purchase occurred.
Authorization date/time – when the bank approved the transaction.
Posting date – when charge appeared on statement.
Dispute date – when cardholder reported.
Blocking date/time – when bank blocked card.
Chargeback date – when bank initiated dispute.
Final resolution date – when bank denied or approved claim.

A transaction posted after blocking may still have been authorized before blocking. The cardholder should ask for the authorization timestamp.

XLVII. Merchant Evidence

When a bank denies a dispute, it may rely on merchant evidence.

Merchant evidence may include:

Charge slip.
Delivery receipt.
IP address.
3D Secure authentication result.
Order confirmation.
Account login records.
Shipping address.
Proof of service use.
CCTV, for in-person transactions.
Signature.
PIN verification.
Device information.

The cardholder should request enough information to challenge the merchant’s evidence.

Examples of challenges:

Signature is not cardholder’s.
Delivery address is unrelated.
Recipient is unknown.
IP address is foreign or suspicious.
Merchant account uses a different email.
CCTV does not show cardholder.
Goods or services were never received.
Transaction amount differs from agreed price.
Merchant ignored cancellation.
Charge slip lacks proper verification.

XLVIII. The Importance of a Clear Timeline

A timeline is often more persuasive than a long emotional narrative.

Sample timeline:

Date/Time	Event	Evidence
May 1, 8:10 PM	Received SMS alert for ₱45,000 transaction at Merchant X	Annex A
May 1, 8:12 PM	Called bank hotline to report unauthorized transaction	Annex B
May 1, 8:20 PM	Bank blocked card and gave reference number	Annex C
May 2	Submitted dispute form	Annex D
May 3	Filed police report	Annex E
May 20	Bank denied dispute, claiming OTP was used	Annex F
May 21	Requested OTP logs and reconsideration	Annex G

This format helps banks, regulators, and courts identify the crucial facts.

XLIX. Practical Annex List

A complete dispute file may include:

Annex A – Credit card statement.
Annex B – Transaction alert.
Annex C – Screenshot of unauthorized charge.
Annex D – Dispute form.
Annex E – Bank acknowledgment.
Annex F – Bank denial letter.
Annex G – Police or cybercrime report.
Annex H – Affidavit of unauthorized transaction.
Annex I – Proof of location.
Annex J – Proof of card possession.
Annex K – Telco report, if SIM issue.
Annex L – Phishing screenshots, if any.
Annex M – Merchant correspondence.
Annex N – Delivery or non-delivery proof.
Annex O – Follow-up emails.
Annex P – Collection notices.
Annex Q – Credit bureau dispute, if any.

L. When to Involve a Lawyer

A lawyer may be especially useful when:

The amount is large.
The bank has issued a final denial.
Collection agencies are involved.
The bank threatens legal action.
The cardholder’s credit record is affected.
There is possible identity theft.
A criminal complaint is needed.
The cardholder is accused of negligence or fraud.
There are multiple institutions involved.
The cardholder wants to file a civil case.
The case involves data privacy or cybercrime.
The cardholder paid under protest and seeks recovery.

A lawyer can prepare a demand letter, affidavit, BSP complaint, criminal complaint, or court filing.

LI. Possible Outcomes

A dispute may end in several ways:

Full reversal of the charge.
Partial reversal.
Reversal of principal but not fees.
Waiver of interest and penalties only.
Permanent denial by bank.
Settlement with merchant.
Refund by merchant.
Chargeback success.
Chargeback loss.
Bank goodwill credit.
Regulatory-mediated resolution.
Court judgment.
Criminal investigation against fraudster.
Data privacy investigation.
Account closure.

The cardholder should insist that any resolution be in writing and reflected in the statement of account.

LII. Settlement Considerations

Sometimes banks offer compromise, such as:

Installment payment of disputed amount.
Partial waiver.
Reversal of fees only.
Reduced settlement.
Account closure.
Non-reporting to credit bureau.
Goodwill credit.

Before accepting, the cardholder should clarify:

Is acceptance an admission of liability?
Will the dispute be closed?
Will negative credit reporting be removed?
Will collection stop?
Will the card account remain active?
Will the bank issue a certificate of full settlement?
Will future claims be waived?
Will the merchant or fraudster still be pursued?

Settlement may be practical, but it should be documented carefully.

LIII. Defenses Against Bank Collection Suit

If the bank sues to collect the disputed amount, the cardholder may raise defenses, depending on facts:

Transaction was unauthorized.
Bank failed to investigate properly.
Bank breached contract.
Bank was negligent.
Bank failed to block after notice.
Bank imposed unfair charges.
Bank relied on insufficient merchant evidence.
Cardholder did not benefit from transaction.
Fraud was caused by third-party criminal acts not attributable to cardholder.
Bank violated consumer protection duties.
Amount claimed includes improper interest, penalties, or fees.
Cardholder paid under protest or already settled.
Bank failed to prove valid authorization.

The bank must prove its claim. The cardholder should preserve all dispute records.

LIV. Burden of Proof

In practice, burden of proof can be complex.

The bank may rely on:

Statement of account.
Cardholder agreement.
Transaction authorization records.
Merchant documents.
OTP logs.
Card network records.
Account history.

The cardholder may rely on:

Denial under oath.
Immediate report.
Proof of impossibility or non-participation.
Evidence of fraud.
Lack of benefit.
Bank’s failure to explain.
Weakness in merchant evidence.
Evidence of data or system compromise.

A mere statement “I did not authorize it” may not be enough in a contested case. Strong supporting evidence improves the cardholder’s position.

LV. Electronic Evidence

Because credit card disputes involve electronic records, the Rules on Electronic Evidence may become relevant.

Electronic evidence may include:

SMS alerts.
Emails.
App notifications.
Screenshots.
Transaction logs.
IP logs.
Device logs.
Online order records.
Chat transcripts.
Call recordings.
Digital receipts.
Bank system records.

Electronic evidence should be authenticated. The person presenting it should be able to explain where it came from, how it was preserved, and why it is reliable.

LVI. Calls and Recordings

Cardholders often rely on hotline calls. The bank may have call recordings.

The cardholder should note:

Date and time of call.
Hotline number called.
Name or ID of agent.
Reference number.
What was reported.
What the agent promised.
Whether blocking was confirmed.
Whether dispute instructions were given.

If the bank refuses to acknowledge a report, these details are important. The cardholder may request retrieval of the call recording or call log.

LVII. Dealing with Collection Agencies

If a collection agency contacts the cardholder, respond in writing.

Suggested response:

“This amount is formally disputed as an unauthorized credit card transaction. The matter is pending with the bank and/or regulators. Please refer this account back to the bank and cease collection efforts on the disputed amount unless and until the dispute is finally resolved. Any further collection communication should be made in writing.”

Do not ignore collection letters, but do not admit liability casually.

Avoid saying:

“I will pay when I can,” unless settlement is intended.
“This is my debt,” if the amount is disputed.
“I forgot to pay,” if the issue is unauthorized use.
“I accept the charges,” unless true.

LVIII. Demand for Waiver of Charges

Even if the bank refuses to reverse the transaction, the cardholder may separately demand waiver of charges arising from the dispute.

This includes:

Interest.
Finance charges.
Late payment fees.
Overlimit charges.
Collection fees.
Annual fee penalties.
Installment penalties.
Credit bureau consequences.

The argument is stronger where the cardholder timely disputed the charge and the bank caused delay or failed to properly investigate.

LIX. Special Issue: Unauthorized Transaction by Family Member

Banks may treat family-member use differently.

If a spouse, child, sibling, helper, employee, or relative used the card without permission, the bank may argue that the cardholder failed to secure the card. The cardholder may still dispute if there was no authority, but proving lack of authorization can be harder.

Questions include:

Did the cardholder previously allow that person to use the card?
Was the card voluntarily given?
Was the PIN shared?
Was the transaction within past permission?
Did the cardholder benefit?
Was a police complaint filed against the person?
Did the cardholder report immediately?
Were there prior similar transactions?

If the cardholder is unwilling to identify or complain against the family member, the bank may be less likely to reverse.

LX. Special Issue: Employee or Agent Misuse

If an employee used a company or personal card without authority, the cardholder should gather:

Employment records.
Card custody policies.
Written authority limits.
Unauthorized transaction proof.
Internal investigation report.
Demand letter to employee.
Police report, if appropriate.
Proof that goods or services did not benefit the cardholder.

The bank may argue apparent authority if the cardholder entrusted the card or credentials to the employee.

LXI. Special Issue: Hotel, Travel, and Rental Charges

Hotels, airlines, travel agencies, and car rental companies often process delayed, pre-authorized, or incidental charges.

Disputes may involve:

No-show fees.
Cancellation fees.
Security deposits.
Damage charges.
Mini-bar charges.
Upgrade charges.
Foreign currency conversion.
Duplicate booking.
Failed refund.
Unauthorized add-ons.

These are often merchant disputes, not pure fraud. The cardholder should provide booking terms, cancellation proof, receipts, and correspondence.

LXII. Special Issue: Foreign Currency Transactions

Unauthorized foreign currency transactions may include conversion charges and forex differences.

The cardholder should dispute:

Original foreign currency amount.
Peso equivalent.
Foreign transaction service fee.
Currency conversion fee.
Interest and penalties.
Related charges.

If reversed, the amount may differ because of exchange rate timing. The cardholder should check whether fees were also reversed.

LXIII. Special Issue: Multiple Fraudulent Transactions

If multiple unauthorized transactions occurred, the cardholder should dispute each one separately and as part of a pattern.

The bank should examine:

First suspicious transaction.
Whether alerts were triggered.
Whether later transactions should have been blocked.
Velocity of transactions.
Merchant categories.
Geographic impossibility.
Spending pattern deviation.
Aggregate exposure.
Whether the bank delayed blocking.

Even if the bank disputes liability for the first transaction, it may be harder to justify allowing later suspicious transactions after clear red flags.

LXIV. Special Issue: Contactless Transactions

Contactless cards allow small transactions without PIN or signature up to certain limits.

Unauthorized contactless transactions may occur after theft or loss.

Issues include:

Whether transaction was below contactless limit.
Whether multiple contactless transactions were allowed successively.
Whether bank sent alerts.
Whether cardholder promptly reported loss.
Whether merchant required verification.
Whether transaction occurred after blocking.

Cardholders should report lost contactless cards immediately.

LXV. Special Issue: Cash Advance

Unauthorized cash advances can be more difficult because they often require PIN or strong authentication.

The cardholder should determine:

Whether ATM or over-the-counter cash advance occurred.
Whether PIN was used.
Where the cash advance occurred.
Whether CCTV exists.
Whether card was present.
Whether PIN was compromised.
Whether card was cloned.
Whether bank detected suspicious withdrawal.

If the cardholder never disclosed PIN and card was cloned or skimmed, the dispute may still be viable.

LXVI. Special Issue: Balance Conversion or Loan on Card

Some credit cards allow cash loans, balance transfer, or installment conversion.

Unauthorized conversion or loan may occur through phone banking, app, or forged documents.

Evidence should include:

Application record.
Call recording.
Signature or e-signature.
Disbursement account.
Destination bank account.
OTP or authentication logs.
Device used.
Whether proceeds benefited cardholder.

The cardholder should dispute both the loan and related interest.

LXVII. Duties After Discovery

Once the cardholder discovers the unauthorized transaction, they should:

Stop using compromised card.
Block card.
Change online banking password.
Change email password.
Check registered mobile number and email.
Review all recent transactions.
Check other bank accounts.
Report to bank.
File written dispute.
Preserve evidence.
Report to authorities if fraud or identity theft occurred.
Monitor future statements.
Request replacement card.
Ask bank to block recurring merchant tokens.
Review credit reports if available.

Prompt action strengthens credibility.

LXVIII. What Not to Do

Cardholders should avoid:

Ignoring the statement.
Waiting months to dispute.
Deleting phishing messages.
Throwing away card or SIM evidence.
Admitting liability casually.
Paying without reservation if disputing.
Filing a false police report.
Altering screenshots.
Submitting incomplete dispute forms.
Refusing to cooperate with investigation.
Posting accusations online without evidence.
Sharing full card number in unsecured emails.
Sending CVV, OTP, or passwords to anyone.
Threatening bank staff.
Relying only on phone calls without written follow-up.

LXIX. Practical Complaint Package

A strong complaint package should contain:

Cover letter.
Timeline.
Disputed transaction table.
Affidavit.
Credit card statement.
Bank dispute form.
Bank correspondence.
Denial letter.
Evidence disproving authorization.
Police or cybercrime report.
Merchant correspondence.
Telco or data compromise evidence.
Demand for reversal and waiver.
Demand to stop collection and credit reporting.
Contact details for follow-up.

LXX. Sample Disputed Transaction Table

No.	Transaction Date	Posting Date	Merchant	Amount	Reason for Dispute
1	[date]	[date]	[merchant]	₱[amount]	Unauthorized; cardholder did not transact
2	[date]	[date]	[merchant]	₱[amount]	Unauthorized; no OTP received
3	[date]	[date]	[merchant]	₱[amount]	Unauthorized; transaction after blocking report

LXXI. Remedies Summary

A cardholder may pursue one or more of the following:

Internal bank dispute.
Request for reconsideration.
Chargeback request.
Complaint to bank consumer assistance unit.
Complaint to BSP.
Complaint to merchant or platform.
Complaint to DTI for consumer transaction issues.
Police or cybercrime report.
NBI cybercrime complaint.
Data privacy complaint.
Demand letter through counsel.
Small claims case.
Ordinary civil action.
Criminal complaint against fraudster.
Credit bureau correction request.
Settlement with reservation of rights.

LXXII. Frequently Asked Questions

1. Can the bank refuse to reverse an unauthorized credit card transaction?

Yes, the bank may deny a dispute if it finds the transaction valid or the cardholder liable. But the refusal must be based on a fair investigation, evidence, contract, regulation, and law. A denial can be challenged.

2. Is OTP proof that I authorized the transaction?

It is strong evidence for the bank, but not always conclusive. OTP may be compromised through phishing, SIM swap, malware, or account takeover. The facts matter.

3. What if I accidentally gave my OTP to a scammer?

The bank may allege negligence. You may still argue based on fraud circumstances, bank warnings, transaction monitoring, unusual activity, and prompt reporting. The outcome is fact-specific.

4. What if I did not report within the bank’s deadline?

Late reporting weakens the dispute, but it does not automatically defeat every claim. Consider whether you received statements or alerts, when you discovered the fraud, and whether the bank or merchant had independent responsibility.

5. Should I file a police report?

For fraud, hacking, stolen card use, identity theft, or phishing, a police or cybercrime report is usually helpful.

6. Can the bank charge interest while the transaction is disputed?

Banks may attempt to do so, but the cardholder should request suspension or waiver of charges related to a disputed unauthorized transaction.

7. Can the bank send my account to collection?

It may happen, but the cardholder should formally notify the bank and collector that the amount is disputed and request suspension of collection on the disputed amount.

8. Can I complain to BSP?

Yes. If the bank fails to resolve the matter, refuses reversal without sufficient explanation, or mishandles the complaint, escalation to BSP is a common remedy.

9. Can I sue the bank?

Yes, depending on the facts, amount, evidence, and harm suffered. Possible claims may include breach of contract, negligence, damages, or recovery of amounts wrongfully collected.

10. Can I sue the merchant instead?

Yes, if the merchant caused or participated in the wrongful charge, failed to deliver, refused a refund, or processed an unauthorized transaction.

11. What if the transaction was made by a relative?

You may still dispute unauthorized use, but the bank may question card security and prior authority. Evidence and willingness to treat the act as unauthorized are important.

12. What if the bank says the transaction was “validly posted”?

Posting only means the charge entered the billing system. It does not necessarily prove that the cardholder authorized it.

13. What if the bank refuses to give me details?

Ask for a written explanation and the basis of denial. If the bank still refuses meaningful information, raise that issue in your BSP complaint or legal demand.

14. What if I already paid?

You may still seek refund or reversal, especially if you paid under protest. Put your reservation of rights in writing.

15. What if the bank closed my card?

Card closure does not necessarily end the dispute. Ask for written statement of remaining balance, disputed amount, fees, and credit reporting status.

LXXIII. Key Legal Principles

Several principles guide unauthorized credit card disputes:

A cardholder is liable for valid and authorized charges, not automatically for every posted charge.
A bank must investigate disputes fairly and reasonably.
Authentication evidence matters, but it is not always conclusive.
Cardholder negligence can affect liability.
Bank negligence can also affect liability.
Prompt reporting is critical.
Written documentation is stronger than phone conversations alone.
Merchant evidence should be tested, not blindly accepted.
Interest, penalties, and credit reporting should be challenged when based on a disputed unauthorized charge.
Regulatory complaints can pressure banks to justify their refusal.
Criminal fraud by a third party does not automatically settle who bears the loss between bank and cardholder.
The outcome depends on facts, contract, evidence, timing, and applicable regulations.

LXXIV. Conclusion

A bank’s refusal to reverse an unauthorized credit card transaction is not the end of the matter. In the Philippines, cardholders have remedies through internal bank dispute channels, chargeback procedures, BSP consumer assistance, law enforcement, data privacy complaints, merchant complaints, and court actions.

The strongest response is immediate, written, organized, and evidence-driven. The cardholder should block the card, preserve proof, file a formal dispute, demand the basis for denial, request waiver of charges, stop improper collection, escalate to regulators when necessary, and consider legal action for serious losses.

Banks may deny disputes where the transaction appears authenticated, reported late, or caused by cardholder negligence. But banks also have duties to maintain secure systems, monitor fraud, handle complaints fairly, explain denials, protect consumer data, and avoid unfair collection.

In unauthorized credit card transaction cases, the central question is not merely whether the charge appeared on the statement. The real question is whether the bank can lawfully and fairly hold the cardholder liable despite the evidence of unauthorized use.