Discovering unauthorized charges on your credit card can feel like a violation of your finances and trust in the system. Whether these appear as mysterious online purchases, charges from unfamiliar merchants, or transactions you never made while your card stayed safely in your wallet, Philippine law gives you clear rights and a structured process to dispute them. Under Republic Act No. 10870 (the Philippine Credit Card Industry Regulation Law) and Bangko Sentral ng Pilipinas (BSP) regulations, cardholders are protected from bearing the full burden of truly unauthorized use when they act promptly and provide reasonable evidence. This article explains your rights in plain terms, walks through the exact practical steps most people follow successfully, covers realistic timelines and what banks must do, shows how to escalate if needed, highlights common pitfalls especially for ordinary Filipinos and those abroad, and answers the questions people actually search for.

Your Legal Rights When Facing Unauthorized Credit Card Charges

Unauthorized credit card charges typically include fraudulent use after skimming, phishing, account takeover, data breaches, lost or stolen cards used before you report them, or transactions made without your knowledge or consent. These differ from ordinary merchant disputes (such as receiving defective goods), though the dispute process often overlaps.

Republic Act No. 10870 is the main law governing credit cards. It requires issuers to maintain customer assistance units for fast resolution of complaints and sets rules on disclosures, billing statements, and liability. Section 18 specifically gives cardholders up to 30 calendar days from the statement date to report any error or discrepancy in the billing statement. The issuer must then act within 10 business days.

BSP Circular No. 1003 (implementing RA 10870) and related consumer protection rules detail the process further. For unauthorized transactions, the burden often shifts to the bank to prove that you authorized the charge or that you were grossly negligent (for example, by deliberately sharing your OTP or PIN with others and delaying any report). Banks must conduct a thorough investigation, provide written explanations, and generally refrain from collecting or charging interest and finance charges on the genuinely contested amount while the dispute is active. Many issuers issue a provisional credit (temporary reversal) early in valid cases so you are not out of pocket during the review.

Broader protections come from the Consumer Act of the Philippines (RA 7394), RA 11765 (Financial Products and Services Consumer Protection Act), and BSP circulars on financial consumer protection. These require banks to maintain accessible complaint channels, resolve issues fairly and within set timelines, and assist customers in fraud cases. Supreme Court doctrines also emphasize banks’ duty of care in handling accounts and security systems.

In short, you have the right to a fair investigation, protection from collection actions on disputed amounts, and reversal when the transaction was not genuinely authorized by you.

Step-by-Step Guide to Disputing Unauthorized Charges with Your Bank

Acting quickly is the single most important factor in a successful dispute. Here is the process that works in practice for most cardholders.

Report immediately by phone or app (same day if possible)
Call your bank’s 24/7 credit card hotline or use the mobile app’s fraud reporting feature the moment you notice the charge. Tell them the transaction is unauthorized, request that the card be blocked or replaced right away, and ask for a reference or case number. This step limits further fraudulent use and creates an official record. Many banks now send confirmation via SMS or email.
Gather your evidence before submitting the formal dispute
Print or screenshot your billing statement and highlight the disputed transactions. Note the exact date, amount, merchant name, and any authorization method shown (for example, whether an OTP was sent to your registered number). Collect supporting proof such as: police report or blotter (highly recommended even for online fraud), proof you were elsewhere at the time (travel tickets, hotel bookings, work attendance, geolocation data), screenshots of suspicious login attempts or messages, and any correspondence. The more specific and organized your evidence, the stronger your position.
Submit a formal written dispute within the 30-day window
Do this even if you already called. Use the bank’s official dispute form (often available in the app or website), send a signed letter via email to their dedicated disputes or fraud email address, or submit it at a branch. Include your full card number (or last four digits), the specific transactions, a clear explanation of why each one is unauthorized, your reference number from the initial call, and all supporting documents. Explicitly request a full investigation, provisional credit, reversal of the charges plus any related fees or interest, and written results. Keep copies of everything and note the date you sent it.
Follow up and cooperate during the investigation
Banks must acknowledge receipt promptly (usually within 2–3 business days). They will investigate, often coordinating with the card network (Visa, Mastercard, etc.) for chargeback if applicable. You may be asked for more information—reply promptly. Under the rules, the bank generally has up to 90 days (sometimes cited as 45–120 days depending on whether the transaction is domestic or international) to complete a thorough review and send you a written decision.
Review the bank’s decision
If approved, the charges are permanently reversed and any provisional credit becomes final; you should also receive a corrected statement. If denied, the bank must explain why in writing and provide the evidence they relied on. You can request reconsideration with additional proof or proceed to escalation.

Throughout this process, the bank should not report you as delinquent to the Credit Information Corporation (CIC) solely because of the disputed amount, and they should not harass you for payment of the contested portion.

What to Expect from the Bank’s Investigation and Typical Timelines

Banks treat clear unauthorized fraud cases seriously because they also face chargeback rules from international networks and BSP oversight. For straightforward domestic unauthorized transactions with good evidence, many resolutions happen within 30–60 days. International or complex cases (multiple transactions, data breach involvement, or conflicting authorization records) can take the full 90+ days.

You are usually entitled to a provisional credit while they investigate, meaning the disputed amount is temporarily removed from your balance so interest does not accrue on it. Always confirm this in writing when you submit your dispute.

If the bank finds the transaction was authorized (for example, because an OTP was successfully used), they may still deny the dispute. In such cases, you can challenge their conclusion by showing how your credentials were likely compromised without your gross negligence—such as through a documented SIM swap, phishing attack that bypassed normal security, or a known merchant data breach.

Escalating to the Bangko Sentral ng Pilipinas When the Bank Does Not Resolve Fairly

If the bank’s final response is unsatisfactory, denies your dispute without adequate explanation, or fails to follow the required timelines and procedures, you have a strong next step.

First, complete any internal appeal or reconsideration the bank offers and keep records. Then escalate to the BSP Consumer Assistance Mechanism (CAM). This is free and designed exactly for situations like unresolved billing disputes and unauthorized transaction complaints.

The preferred way is through the BSP Online Buddy (BOB) chatbot on the official BSP website or via the verified BSP Facebook Messenger account. You will be guided to file the complaint, and you will receive a BSP reference number (format usually BSPCMS- followed by numbers and letters). You must show that you already raised the issue with the bank and provide their reference number plus your supporting documents.

Alternatively, you can email consumeraffairs@bsp.gov.ph with the same information. BSP will review the case, facilitate dialogue with the bank, and mediate. For claims up to the current limit (generally PHP 2 million for adjudication), BSP can issue a binding decision if mediation does not resolve it.

Many cardholders find that simply escalating to BSP prompts the bank to reconsider and reverse the charges. The process adds time—often several weeks to a couple of months—but it is effective and low-cost.

Special Considerations for Filipinos Abroad and Foreigners

The process is essentially the same whether you are in the Philippines or overseas. Use your bank’s international toll-free numbers, mobile app, or email for reporting and submitting disputes. Many banks have dedicated teams for overseas cardholders and accept English-language submissions.

Strong evidence of your physical location at the time of the transaction becomes especially helpful—flight itineraries, boarding passes, hotel confirmations, or even work-from-home logs. Time zone differences or IP address mismatches can support your claim that you could not have made the transaction.

Foreigners holding Philippine-issued cards follow the identical rules. If court escalation ever becomes necessary later, documents may need apostille authentication depending on where you are, but this is rarely required at the bank or BSP stage.

Common Pitfalls and How to Avoid Them

Missing the 30 calendar days from statement date deadline is the most frequent reason disputes fail—the statement is then deemed correct and accepted. Mark your calendar as soon as you receive the statement and act immediately upon discovery.

Providing only vague statements like “I didn’t make this” without details or evidence weakens your case. Be specific about why it is unauthorized and attach proof.

Delaying the initial phone report can allow more fraudulent transactions and makes it harder to argue lack of negligence.

For online transactions authenticated by OTP or 3D Secure, banks sometimes deny disputes by pointing to successful authentication. Counter this with evidence that your account or mobile number was compromised (police report, telco records of SIM swap, unusual login locations) and that you acted promptly once you discovered the issue.

Authorized users (spouse, child, or employee added to the account) create a different situation—you may still be liable unless you promptly reported misuse. Pure third-party fraud without your consent is treated more favorably.

Some cardholders panic and pay the disputed amount “just to be safe.” This can weaken your position. Continue disputing while protecting your credit standing through proper channels.

Documents and Evidence That Strengthen Your Case

Organize everything clearly. Core items include:

Copy of the billing statement with disputed items highlighted
Police report or blotter (file one even for online-only fraud—it shows you took prompt official action)
Proof of your location or activities at the time of the transaction (travel documents, work records, photos with timestamps)
Screenshots of the transaction alerts, app notifications, or suspicious activity
Any communication with the bank (reference numbers, names of representatives, dates)
If relevant: proof of a data breach at a merchant or your telco, or records showing your mobile number or email was changed without authorization

Request from the bank during investigation the authorization details they have on record (IP address, device type, merchant response to chargeback). They are expected to share relevant records.

Frequently Asked Questions

How long do I really have to dispute an unauthorized charge?
You should report any discrepancy within 30 calendar days from the date of your billing statement. Acting the same day you notice the charge is always best. Missing this window makes it much harder or impossible to dispute successfully.

Do I need to file a police report?
It is not strictly mandatory for every case, but it is one of the strongest pieces of evidence you can provide, especially for fraud or theft-related unauthorized transactions. It demonstrates you treated the matter seriously and creates an official record. Many successful disputes include one.

Will the bank still charge me interest or late fees on the disputed amount?
Under BSP rules, banks should not charge interest or finance charges on the genuinely contested unauthorized amount during a proper investigation, and they should issue a provisional credit in valid cases. Confirm this in your written dispute and follow up if it does not happen.

What if the transaction used my OTP or was authenticated through 3D Secure?
You can still dispute it. Successful authentication does not automatically mean you authorized the transaction if your credentials were obtained through fraud, phishing, malware, or a security lapse you did not cause. Provide evidence of how the compromise likely occurred and that you reported promptly. Outcomes depend on the specific facts and the bank’s review.

I live or work abroad—can I still go through the full process?
Yes. Use the bank’s international customer service lines, app, or email. The same 30-day rule and investigation timelines apply. Strong location evidence (travel records, etc.) helps significantly. BSP escalation also works remotely through their online channels.

Can I dispute charges made by a family member or someone I added as an authorized user?
This is more difficult. If the person was an authorized user on the account, the bank may hold you responsible unless you can show clear misuse that you reported immediately upon discovery. Pure unauthorized use by a third party with no connection to you is treated more favorably.

How long does everything usually take from start to finish?
The bank investigation phase often resolves within 30–90 days. Adding BSP escalation can extend the total timeline to 2–4 months or longer for complex cases. Many straightforward unauthorized fraud disputes are resolved favorably within the first 60 days when evidence is solid and reporting is prompt.

What if the amount is small—should I still bother disputing?
Yes. Even small amounts add up, affect your available credit, and can lead to interest or negative credit reporting if left unresolved. The process is the same regardless of amount, and small claims court remains an option later if needed.

After BSP gets involved, is their decision final and binding?
BSP mediation often leads to resolution. If the case proceeds to adjudication (for qualifying claims), BSP can issue a binding decision on the financial institution. This provides a strong, low-cost alternative to going straight to court.

Should I also contact the merchant where the charge was made?
For pure unauthorized fraud, focus first on your bank—they handle the chargeback with the merchant’s acquiring bank. If it turns out to be a merchant error or dispute rather than outright fraud, you may also reach out to the merchant, but do not delay your bank dispute while doing so.

Key Takeaways

Report any unauthorized charge to your bank immediately by phone or app, then submit a formal written dispute within 30 calendar days from the statement date.
Provide specific details and supporting evidence—police reports, location proof, and transaction records make a real difference.
Request a provisional credit and written investigation results; banks should not charge interest on properly disputed unauthorized amounts during the process.
If the bank’s response is unfair or incomplete, escalate for free through the BSP Online Buddy (BOB) after exhausting the bank’s process.
Filipinos abroad and foreigners follow the same rules and can handle everything remotely with good documentation of location and timing.
Acting fast, staying organized, and keeping clear records of every communication gives you the strongest position under Philippine law.
The system is designed to protect ordinary cardholders from bearing the cost of fraud they did not commit—use the process confidently and methodically.