Seeing a credit card charge you never made can be stressful, especially when the bank’s app shows the transaction as “posted,” the due date is near, or a collector later says you must pay first and complain later. In the Philippines, a credit card fraud transaction dispute is not just a customer-service issue. It involves your rights under Philippine credit card regulations, financial consumer protection rules, fraud laws, data privacy rules, and, in some cases, BSP complaint procedures. This guide explains what counts as an unauthorized credit card transaction, what the bank is required to do, what documents to prepare, how to escalate the dispute, and what common mistakes can weaken your case.

What Counts as a Fraudulent or Unauthorized Credit Card Transaction?

A fraudulent credit card transaction usually means a charge, cash advance, online purchase, fund transfer, or attempted payment made without the true cardholder’s authority.

Common examples include:

Online purchases made after your card details were stolen
Transactions after your physical card was lost or stolen
Charges after a phishing scam where your card number, CVV, password, or OTP was tricked out of you
Account takeover, where someone gains access to your banking or card app
Duplicate or altered charges by a merchant
Transactions from a merchant, country, or platform you never used
Cash advances or balance conversions you did not request
Unauthorized use of a supplementary card or virtual card

Philippine law defines a credit card as an access device that allows a person to obtain money, goods, services, or anything of value on credit, and credit card issuers are supervised by the Bangko Sentral ng Pilipinas (BSP) under the Philippine Credit Card Industry Regulation Law. (Supreme Court E-Library)

Not every dispute is automatically “fraud.” A bank may classify the problem differently depending on the facts.

Situation	Usual classification	Practical effect
You never made or approved the transaction	Unauthorized or fraudulent transaction	Bank should investigate, and reversal may be required if fraud is confirmed
You bought something but the merchant failed to deliver	Merchant dispute or chargeback issue	Bank may require proof of merchant communication
You were charged twice for one purchase	Billing error or duplicate charge	Easier to document through receipts and statements
A family member or supplementary cardholder used the card	May be authorized use unless clearly outside authority	Facts and card terms matter
You gave an OTP after being deceived	Fraud or scam dispute, but often contested	Bank may examine authentication records, warnings, and negligence issues

Main Philippine Laws and Rules That Protect Credit Cardholders

Republic Act No. 10870 and BSP credit card regulations

Republic Act No. 10870, the Philippine Credit Card Industry Regulation Law, covers credit card issuers, acquirers, and credit card transactions in the Philippines. It places credit card issuers under BSP supervision and requires card issuers to maintain customer assistance channels for complaints and disputes. (Supreme Court E-Library)

For billing errors or discrepancies, the cardholder has the right to report the issue to the card issuer within 30 calendar days from the statement date. The issuer must take action within 10 business days from receiving the notice and supporting documents. BSP implementing rules also state that the bank should investigate the disputed transaction and provide a written explanation or clarification within 90 days before collecting the contested amount, while the undisputed portion may still be collected. (Supreme Court E-Library)

For lost or stolen cards, BSP rules recognize that transactions before the report may initially be treated as the cardholder’s responsibility, but the cardholder still has the right to dispute them. If the disputed transaction is found to be unauthorized or fraudulent, it must be reversed, including related finance charges and fees. (Supreme Court E-Library)

Financial consumer protection under RA 11765 and BSP rules

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, strengthens consumer rights in dealings with banks and other BSP-supervised financial institutions. BSP’s financial consumer protection regulations require banks to handle fraud-related concerns with priority, evaluate disputed transaction claims fairly and reasonably, and communicate with the customer in a timely and transparent manner.

BSP rules also require banks to provide free and active reporting channels, such as manned phone lines, mobile apps, portals, email, chatbot, or messaging channels, and to provide immediate written acknowledgement through the same channel used by the consumer. For unauthorized transaction disputes, the bank may need to suspend interest or fees, hold disputed funds where applicable, give provisional credit, or block or freeze affected accounts depending on the transaction type and facts.

Fraud, cybercrime, and data privacy laws

Credit card fraud may also be a criminal matter. Republic Act No. 8484, the Access Devices Regulation Act of 1998, penalizes several forms of access device fraud, including use of counterfeit or unauthorized access devices, possession or trafficking of unauthorized access devices, unauthorized disclosure of card information, and use of an access device with intent to defraud. The law also states that in case of loss, the cardholder should notify the issuer upon knowledge of the loss, and proper notice can affect liability for fraudulent use from the time the loss or theft is reported. (Lawphil)

If the fraud involved hacking, phishing, identity theft, fake websites, malicious links, or electronic manipulation, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may also apply. The law covers computer-related fraud, forgery, identity theft, and crimes committed through information and communications technology. The National Bureau of Investigation (NBI) and Philippine National Police (PNP) are law enforcement authorities for cybercrime matters. (Supreme Court E-Library)

If your personal data, card information, ID, phone number, or banking credentials were mishandled, the Data Privacy Act of 2012 may also be relevant. Personal information controllers are required to implement reasonable and appropriate security measures against unlawful access, fraudulent misuse, unauthorized disclosure, and other data security risks. (National Privacy Commission)

What To Do in the First 24 Hours After Discovering Credit Card Fraud

Speed matters. The earlier you report, the easier it is to show that you acted in good faith and tried to prevent further loss.

Block or lock the card immediately. Use the bank app, hotline, or official customer service channel. Ask whether the bank can block the physical card, virtual card, online transactions, cash advances, and recurring merchant charges.
Report the exact disputed transactions. Give the date, amount, merchant name, currency, and reference number if available. Ask for a case number, ticket number, or email acknowledgement.
Ask for replacement and security reset. Request a replacement card if the card details may have been compromised. Change your online banking password, app PIN, email password, and any linked e-wallet or shopping account password.
Put the dispute in writing the same day. A hotline report is useful, but a written dispute gives you proof. Send it through the bank’s official email, in-app message center, branch, or complaint portal.
Preserve all evidence. Do not delete SMS alerts, OTP messages, emails, app notifications, screenshots, merchant messages, or call logs. If a scammer contacted you through Viber, Messenger, WhatsApp, Telegram, Facebook, email, or SMS, preserve the entire thread.
Pay attention to the statement date. Under RA 10870 and BSP rules, billing errors or discrepancies should be reported within 30 calendar days from the statement date. Report earlier than that whenever possible. (Supreme Court E-Library)
Consider filing a cybercrime or police report for scams, identity theft, or large losses. BSP’s consumer guidance encourages scam or fraud victims to report to law enforcement agencies such as the PNP, NBI, or Cybercrime Investigation and Coordinating Center (CICC).

Step-by-Step Process for Disputing a Fraudulent Credit Card Transaction With the Bank

1. Review the posted and pending transactions

Check whether the disputed charge is still “pending” or already “posted.” Pending transactions may still be reversed or may later disappear, but you should still report suspicious activity immediately.

Prepare a simple transaction list:

Date	Merchant	Amount	Currency	Posted or pending	Why disputed
Example: June 5, 2026	ABC Online Store	25,000	PHP	Posted	I did not authorize or recognize this transaction

Do not rely only on memory. Download or screenshot the statement, app transaction history, SMS alerts, and email notifications.

2. File the dispute through the bank’s official channel

Banks usually require a dispute form, cardholder statement, affidavit, or signed letter. Even if the bank accepts verbal notice, BSP rules allow a dispute notice to be written, verbal, or made through documented means, and a written record is much safer for proof. (Supreme Court E-Library)

Your written dispute should clearly say:

You are disputing the transaction as unauthorized or fraudulent
You did not make, approve, benefit from, or authorize the transaction
When and how you discovered it
When and how you reported it to the bank
Whether the card was lost, stolen, skimmed, phished, or still in your possession
Whether any OTP, password, or link was involved
That you are requesting reversal, cancellation of related fees and finance charges, and suspension of collection on the disputed amount while under investigation

3. Submit supporting documents

Banks differ in their internal requirements, but common documents include:

Document	Why it matters	Practical tip
Credit card statement or transaction screenshot	Identifies the exact disputed charge	Highlight the disputed line only
Bank reference number or case number	Proves timely reporting	Save hotline, chat, and email acknowledgements
Dispute form	Bank’s formal investigation trigger	Fill out every field consistently
Affidavit of unauthorized transaction	Sworn statement of facts	Some banks require notarization
Police, PNP cybercrime, or NBI report	Supports fraud or identity theft claim	Useful for large-value or organized scam cases
SMS, OTP, email, or app alerts	Shows timing and authentication issues	Screenshot with date and sender visible
Proof of location	Helps show impossibility of physical card use	Travel records, work attendance, CCTV, receipts
Merchant communications	Useful for duplicate charge or non-delivery	Show refund refusal or no response
Valid ID	Confirms identity	Avoid sending unnecessary full card details through unsecured email
Special Power of Attorney	Needed if someone abroad or a representative will act for you	Use consular notarization or apostille when required

For Filipinos abroad or foreigners dealing with a Philippine bank from overseas, banks may require a notarized affidavit or Special Power of Attorney. Philippine embassies and consulates can notarize certain documents for use in the Philippines, while foreign notarized documents may need an apostille if issued in an Apostille Convention country, or consular legalization if issued in a non-Apostille country. (Philippine Embassy)

4. Ask the bank to suspend collection of the disputed amount

The safest approach is to pay the undisputed portion of the bill on time while clearly disputing the fraudulent amount.

Under BSP credit card rules, the issuer should investigate the billing dispute and provide clarification or explanation before collecting the contested amount, while the uncontested portion may still be collected. (Supreme Court E-Library)

This matters because some cardholders make the mistake of refusing to pay the entire bill. That can create late fees, interest, delinquency reports, and collection issues unrelated to the fraud itself.

5. Track the bank’s deadlines

Once the bank receives your notice and required supporting documents, BSP credit card rules require action within 10 business days. For billing disputes, the bank should investigate and provide written clarification within 90 days before collecting the contested amount. (Supreme Court E-Library)

For fraud-related concerns, BSP financial consumer protection rules also require banks to treat the matter with priority and resolve it within a reasonable period based on the complexity of the case.

6. If the bank denies the dispute, ask for the basis

A denial should not be a one-line answer saying “valid transaction” or “OTP verified.” Ask for the specific basis of the denial, such as:

Transaction authorization records
Merchant category and merchant country
3D Secure or OTP records
Device, IP, or login indicators, where available
Charge slip, signed sales draft, or proof of card-present transaction
Delivery address or recipient information for online purchase
Explanation of why the bank considered the transaction authorized
Whether chargeback was attempted and, if not, why not

In BPI Express Card Corporation v. Sps. Ermitaño, the Supreme Court held that a cardholder who promptly notifies the issuer of a lost card should be relieved from liability for unauthorized use after proper notice, and that the issuer must act to inform merchants after notice. (Supreme Court E-Library)

In BPI v. Sarda, the Supreme Court also emphasized that when a customer denies receipt and use of a credit card, the bank must substantiate its claim; statements of account alone may be insufficient in litigation if the bank cannot present credible supporting evidence. (Supreme Court E-Library)

Will You Have To Pay for the Fraudulent Charge?

The answer depends on the facts, timing, evidence, bank records, and applicable card terms. But the bank cannot fairly treat every disputed charge as automatically payable simply because it appears on the statement.

Important principles:

If the transaction is found to be unauthorized or fraudulent, BSP rules require reversal, including related finance charges and fees. (Supreme Court E-Library)
If the card was lost or stolen, prompt notice to the issuer is very important. (Lawphil)
If the fraud involved OTP, phishing, or account takeover, the bank will usually examine whether the transaction was authenticated and whether there were signs of customer negligence.
If the merchant dispute is really about non-delivery, refund refusal, or service quality, the bank may process it as a chargeback or merchant dispute rather than pure unauthorized use.
If the cardholder, supplementary cardholder, or authorized user actually made the transaction, the dispute may fail unless there is another legal basis such as merchant fraud, duplicate charge, or invalid billing.

Banks in the Philippines are repeatedly described by the Supreme Court as businesses affected with public interest, with a duty to treat customer accounts with high care. In consumer disputes, that duty matters because the bank is expected to investigate seriously, not merely assume that a posted transaction is valid. (Supreme Court of the Philippines)

Sample Wording for a Credit Card Fraud Dispute Email

Subject: Urgent Dispute of Unauthorized Credit Card Transaction – Card ending in [last 4 digits]

I am formally disputing the following transaction on my credit card ending in [last 4 digits]:

Date	Merchant	Amount	Reference number
[date]	[merchant]	[amount]	[reference number]

I did not make, authorize, approve, or benefit from this transaction. I discovered it on [date and time] through [SMS alert / app notification / statement / email] and reported it through [hotline / app / email / branch] on [date and time]. My reference number is [case number].

I request the immediate blocking of any compromised card access, investigation of the disputed transaction, reversal of the unauthorized charge if confirmed fraudulent, cancellation of related interest, penalties, and fees, and suspension of collection activity on the disputed amount while the investigation is pending.

Attached are copies of my statement screenshot, transaction alert, prior report acknowledgement, and supporting evidence.

Common Problems in Philippine Credit Card Fraud Disputes

The bank says the transaction was “OTP verified”

OTP verification is often the hardest issue in Philippine card fraud disputes. Banks may argue that the OTP proves authorization. The cardholder may argue that the OTP was obtained through phishing, social engineering, SIM-related fraud, malware, fake bank pages, or impersonation.

Be precise. Do not simply say “I gave the OTP” if the real point is that you were deceived into entering it on a fake site or giving it to someone pretending to be the bank. Explain:

Who contacted you
What name, number, email, link, or page was used
What the scammer claimed
What warnings or bank alerts you received
Whether the OTP message clearly identified the merchant, amount, or transaction
How quickly you reported the fraud

The transaction happened before you reported the card lost

For lost or stolen cards, timing is crucial. RA 8484 says the cardholder should notify the issuer upon knowledge of the loss, and BSP rules recognize that transactions before the report may initially be attributed to the cardholder, subject to dispute and reversal if later found unauthorized or fraudulent. (Lawphil)

If you reported late, explain why. Examples include hospitalization, travel, lack of signal, delayed statement discovery, or the fact that you never lost the card and only discovered online misuse later.

The bank continues to charge interest or penalties

For disputed unauthorized transactions, BSP financial consumer protection rules allow measures such as suspension of interest or fees and provisional credit depending on the facts and transaction type. For credit card billing disputes, BSP rules also require investigation and written explanation before collecting the contested amount.

If interest, penalties, or finance charges appear, dispute them in writing as related charges arising from the contested transaction.

The bank endorses the account to a collection agency

BSP credit card rules require collection practices to be reasonable and made in good faith. They prohibit harassment, abuse, oppression, false or misleading representations, and unfair collection practices. The rules also treat it as an unfair practice to communicate or threaten false credit information, including failure to communicate that a debt is being disputed. (Supreme Court E-Library)

If a collector contacts you while the fraud dispute is unresolved, ask for the collector’s identity, the bank’s endorsement notice, and written confirmation that the disputed amount is under investigation. Keep all messages and call logs.

The bank offsets the disputed amount from your deposit account

Some credit card agreements allow set-off or compensation, meaning the bank may apply deposits against amounts due if the contract and Civil Code requirements are met. BSP credit card rules refer to set-off provisions under the Civil Code when disclosed in the credit card agreement. (Supreme Court E-Library)

If the bank debits your deposit account for a disputed fraudulent charge, immediately object in writing, point out the pending fraud dispute, ask for the legal and contractual basis of the debit, and include the issue in any BSP escalation.

The fraud involves an electronic fund transfer using a credit card

Republic Act No. 12010, the Anti-Financial Account Scamming Act, and BSP Circular No. 1215 on temporary holding of disputed funds mainly apply to electronic fund transfers between financial accounts. BSP’s rules clarify that they do not generally apply to ordinary credit card transactions, except when credit cards are used to perform electronic fund transfers through an automated clearing house.

This distinction matters. A normal unauthorized online card purchase is usually handled under credit card dispute, chargeback, fraud, and financial consumer protection rules. A credit-card-funded electronic fund transfer may involve additional temporary holding and coordinated verification rules.

Escalating the Dispute to the BSP

If the bank does not act, gives an unclear denial, ignores your evidence, continues collection improperly, or fails to resolve the matter within a reasonable period, you may escalate to the BSP.

BSP’s process has levels:

Level	Where it happens	Purpose
First-level complaint	Bank’s Financial Consumer Protection Assistance Mechanism or customer service	The bank must first be given the chance to resolve the complaint
BSP Consumer Assistance Mechanism	BSP, usually through BSP Online Buddy or complaint form	BSP facilitates handling of unresolved complaints against BSP-supervised institutions
Mediation	BSP mediation process	Parties attempt settlement after BSP-CAM
Adjudication	BSP adjudication process	For covered civil money claims, subject to jurisdictional limits

BSP rules describe the bank’s own complaint mechanism as the first level, while BSP’s Consumer Assistance Mechanism is a second-level recourse for concerns not satisfactorily handled or not acted on within a reasonable period. BSP-CAM is also a condition precedent before BSP mediation or adjudication.

BSP’s consumer guidance says a complainant should first report the issue to the bank. If unsatisfied, the complaint may be escalated through BSP Online Buddy (BOB) until a BSP reference number is generated. If BOB is not accessible, BSP provides a Consumer Information Report form route by email, but notes that response may take longer due to volume.

BSP’s FAQ states that the BSP-CAM process may take around 55 to 65 days, depending on the complaint and the parties’ submissions.

For mediation, BSP rules provide timelines for notices and conferences, and the mediation period is generally 30 days from the initial mediation conference. For adjudication, BSP may handle covered purely civil money claims for reimbursement or payment of money not exceeding ₱10 million, exclusive of legal interest, attorney’s fees, and costs.

BSP may dismiss or decline matters that are already pending before, or decided by, courts or other quasi-judicial bodies, or matters involving entities outside BSP supervision.

Filing a Police, NBI, Cybercrime, or Data Privacy Complaint

A bank dispute is different from a criminal complaint. The bank process focuses on whether the charge should be reversed, whether fees should be cancelled, and whether the account should be corrected. A criminal complaint focuses on identifying and prosecuting the fraudster.

Consider a law enforcement report when:

The amount is substantial
Your identity was stolen
Your phone, SIM, email, or device was compromised
The scammer used fake bank pages, fake bank employees, or phishing links
Multiple accounts were affected
The bank requires a police report for its dispute package
You need an official record for insurance, employment, immigration, or corporate purposes

If the issue involves personal data misuse, unauthorized processing, or a suspected data breach by an organization, a complaint to the National Privacy Commission may be relevant. NPC complaint rules generally require a verified or notarized complaint form, supporting evidence, and witness affidavits when applicable. (National Privacy Commission)

Practical Timeline for a Credit Card Fraud Dispute in the Philippines

Step	Typical timing	Notes
Block card and report fraud	Immediately, ideally within minutes or hours	Use official bank channels only
Written acknowledgement	Immediately through the reporting channel under BSP consumer protection rules	Save screenshots or email confirmation
Formal billing dispute	Within 30 calendar days from statement date	Earlier is better
Bank initial action	Within 10 business days from receipt of notice and documents	Ask what documents are still missing
Bank investigation and written clarification	Within 90 days for billing dispute before collecting contested amount	Follow up in writing
BSP-CAM escalation	After bank inaction or unsatisfactory handling	BSP-CAM is second-level recourse
BSP-CAM process	Around 55 to 65 days based on BSP FAQ	Depends on completeness and responses
BSP mediation	Generally 30 days from initial mediation conference	Settlement becomes binding if concluded
BSP adjudication	For covered civil money claims up to ₱10 million	Summary, non-litigious process

Frequently Asked Questions

Can I refuse to pay a fraudulent credit card charge while it is under investigation?

You should clearly dispute the fraudulent amount and ask the bank to suspend collection, interest, and fees on that disputed portion. But you should still pay the undisputed portion of your bill on time. BSP rules allow the bank to collect the uncontested amount while the contested amount is under investigation. (Supreme Court E-Library)

What if I reported the fraud after 30 days from the statement date?

Report it anyway, as soon as you discover it. The 30-day period is important under RA 10870 and BSP credit card rules for billing errors or discrepancies, and the bank may rely on late reporting in evaluating the claim. But late discovery can happen, especially in fraud, identity theft, overseas work, hospitalization, or dormant-card situations. Explain the reason for delay and submit evidence showing when you actually discovered the transaction. (Supreme Court E-Library)

Does the bank have to reverse the transaction immediately?

Not always. The bank may investigate first. However, BSP rules require fair handling of disputed transaction claims, priority treatment of fraud-related concerns, and reversal or correction if the transaction is found unauthorized or fraudulent.

What if the fraudster used my OTP?

An OTP can make the dispute harder, but it does not automatically mean you knowingly authorized the transaction. Explain whether the OTP was obtained through phishing, impersonation, malware, fake websites, or social engineering. Preserve the OTP message, scam messages, fake links, screenshots, and the timeline of your report.

Should I file a police report for credit card fraud?

For small duplicate charges or simple merchant errors, a police report may not always be necessary unless the bank requires it. For phishing, identity theft, large losses, stolen cards, account takeover, or organized scams, a report to the PNP, NBI, or another appropriate cybercrime authority can help document the fraud and support the bank dispute. BSP also encourages scam or fraud victims to report to law enforcement.

Can the bank send my disputed credit card account to collections?

The bank may collect undisputed amounts, but collection of the contested amount should not proceed without proper investigation and written clarification under BSP credit card rules. Collection practices must be reasonable, in good faith, and free from harassment, abuse, oppression, false representations, and unfair practices. (Supreme Court E-Library)

Can a Filipino abroad dispute a Philippine credit card fraud transaction?

Yes. A cardholder abroad can usually dispute by hotline, app, email, or online complaint channel. If the bank requires a sworn affidavit, Special Power of Attorney, or representative, documents signed abroad may need consular notarization, apostille, or other authentication depending on where they are executed and how the bank requires them. (Philippine Embassy)

What can BSP do if the bank denies my dispute?

BSP can handle the matter through its Consumer Assistance Mechanism if the bank is BSP-supervised and the issue was first raised with the bank. If unresolved, covered disputes may proceed to BSP mediation or adjudication, including certain civil money claims within BSP’s jurisdictional limits. BSP-CAM does not replace criminal investigation against the scammer.

Can I sue the bank for mishandling a fraud dispute?

Depending on the facts, civil remedies may be available for breach of obligation, bad faith, negligence, or improper collection. Civil Code principles require parties to act with justice, give everyone their due, observe honesty and good faith, and answer for damages caused by fraud, negligence, delay, or violation of obligations. Philippine Supreme Court decisions also recognize that banks must handle customer accounts with high care, and that bad faith or gross negligence may create liability in proper cases. (Supreme Court E-Library)

How long does a credit card fraud dispute usually take in the Philippines?

For credit card billing disputes, the bank must act within 10 business days after receiving the notice and required documents, and should investigate and provide written clarification within 90 days before collecting the contested amount. If escalated to BSP-CAM, BSP’s FAQ states that the process may take around 55 to 65 days, depending on the case. (Supreme Court E-Library)

Key Takeaways

Report suspected credit card fraud immediately through the bank’s official hotline, app, email, or complaint channel.
Put the dispute in writing and preserve proof of the transaction, alerts, OTPs, scam messages, reports, and bank acknowledgements.
Under Philippine credit card rules, billing disputes should be raised within 30 calendar days from the statement date, with bank action within 10 business days and written clarification within 90 days before collecting the contested amount.
Pay the undisputed portion of the bill on time, but clearly dispute the fraudulent portion and related interest, penalties, and fees.
If the transaction is found unauthorized or fraudulent, BSP rules require reversal, including related finance charges and fees.
OTP or app authentication may complicate the dispute, but phishing, social engineering, and account takeover should still be clearly documented and investigated.
Improper collection conduct, harassment, false representations, or failure to communicate that a debt is disputed may violate BSP credit card collection rules.
If the bank mishandles the dispute, escalate first through the bank’s consumer assistance mechanism, then through BSP-CAM if unresolved.
For scams, identity theft, hacking, or large losses, a police, PNP cybercrime, NBI, or data privacy complaint may be useful in addition to the bank dispute.