Quick answer

Report the transaction immediately through the bank’s or card issuer’s official 24/7 fraud channel. Ask it to block the card or compromised access, identify every disputed transaction, trace or hold any remaining funds, investigate, reverse the transaction if found unauthorized, and give you a case reference number. Follow the call with a written complaint and supporting evidence.

A refund is not automatic. Liability depends on the transaction, the institution’s security controls, your actions before and after the incident, and the technical and documentary evidence. However, the institution must fairly investigate the claim, explain its action, and provide consumer assistance. For a disputed amount or unauthorized transaction, it must suspend interest, fees, and charges while its final investigation is pending, or provide a similar reasonable accommodation under the Financial Products and Services Consumer Protection Act.

Do not wait for the next statement, a merchant reply, or a police report before notifying the institution. Speed matters because transferred funds may be moved or withdrawn within minutes.

What counts as an unauthorized transaction?

An unauthorized transaction is generally one you did not make or approve, such as:

A card purchase, cash advance, ATM withdrawal, or online transfer made without your consent
A transaction after your card, phone, SIM, password, or banking account was taken over
A transfer resulting from stolen credentials or deceptive access to your account
Repeated or altered charges that you did not authorize

A scam-induced transfer can be more complicated. If you personally initiated or confirmed a payment because a scammer deceived you, the institution may distinguish it from a transaction performed after an account takeover. Still report it immediately: under the Anti-Financial Account Scamming Act, a transaction may be disputed when the institution has reasonable grounds to believe it is unusual, lacks a clear economic purpose, comes from an illegal source or unlawful activity, or was facilitated through social engineering. See Republic Act No. 12010.

An erroneous transaction is different. This includes sending money to the wrong account or entering the wrong amount yourself. The special temporary-hold rules discussed below do not apply to erroneous transactions, although the originating and receiving institutions should make reasonable recovery efforts under BSP Circular No. 1160. Recovery is not guaranteed, especially if the recipient has already withdrawn or transferred the money.

What to do immediately

1. Secure the account and device

Use only the institution’s official app, website, branch, or number printed on the card or published on its official website.

Ask the institution to:

Block or temporarily lock the affected card or account access
Disable online banking, fund transfers, cash advances, or other compromised functions as needed
Replace the card and credentials
End active sessions and remove unfamiliar enrolled devices or beneficiaries
Preserve authentication, device, transaction, and fraud-monitoring records

From a clean device, change the banking password and the password of the connected email account. If your SIM stopped working or may have been taken over, contact the mobile network immediately to block and replace it. Secure other financial accounts that used the same phone number, email address, password, or device.

2. Report every disputed transaction to the originating institution

For a fund transfer, complain first to the institution from which the money was sent—the originating financial institution. It is primarily responsible for assisting you and coordinating with the receiving institutions.

Provide, as accurately as possible:

Your name and the affected account, using only the institution’s secure channel
Transaction date and time
Amount
Transaction reference number or identifier
Merchant or beneficiary details shown in your records
How and when you discovered the transaction
Whether you still possessed the card or phone
Whether you received or disclosed an OTP, PIN, password, card number, CVV, or other credential
Whether your SIM, email, device, or banking access behaved unusually
A clear statement that you dispute the transaction and did not authorize it, if true

Be completely truthful. A person who maliciously files completely unwarranted or false information that results in funds being held can face criminal liability under Republic Act No. 12010.

3. Make specific requests

Ask the institution in writing to:

Acknowledge the fraud report and provide a case number.
Trace the transaction and immediately request the holding of any funds still in the receiving or subsequent accounts.
Investigate whether the transaction was properly authenticated and authorized.
Suspend interest, fees, penalties, and collection on the disputed amount, or provide another reasonable accommodation while the final investigation is pending.
Correct or reverse the transaction, including related charges, if it is found unauthorized or fraudulent.
Confirm the investigation timeline and documents it requires.
Preserve relevant records, including login history, device enrollment, IP or device data, authentication and OTP records, transaction alerts, beneficiary enrollment, fraud-system alerts, and internal escalation records.
Provide a written explanation of the final result and the evidence or grounds relied upon, subject to lawful confidentiality restrictions.

BSP rules require an immediate written acknowledgment through the fraud-reporting channel. The institution must formally communicate the result within three banking days after concluding its investigation. If the transaction is found unauthorized or fraudulent, it should immediately reverse or correct it, including related interest, fees, and charges. See BSP Circular No. 1160.

Special rules for electronic fund transfers

For disputed electronic transfers between financial accounts, BSP Circular No. 1215 establishes a coordinated tracing, verification, and temporary-holding process.

Once a complaint is received through the originating institution’s 24/7 fraud channel, the institution must identify the transaction, verify the complainant’s identity, preserve the source account when necessary, and request that funds still in beneficiary accounts be held.

The key periods are:

Initial holding: up to five calendar days
Extended holding: up to 25 additional calendar days when there are reasonable grounds and more verification time is needed
Maximum administrative hold: 30 calendar days in total, unless a court extends it
Verification when funds were held: within the 30-day holding period, unless extended by a court
Verification when no funds were held: generally within 30 calendar days; for meritorious reasons, the originating institution may extend the verification process, but not beyond 60 calendar days

The five-day period is the initial holding period—not a deadline allowing consumers to wait five days before reporting. Submit any requested sworn complaint, affidavit, police report, or other supporting document within that initial period unless the applicable industry protocol permits otherwise. Funds already withdrawn or transferred beyond traceable accounts may no longer be available for holding.

At the end of the process, funds may be returned to the source account when the verification reasonably establishes that they came from money muling, an unlawful activity, an illegal source, a transaction without an economic purpose, or a social-engineering scheme. Otherwise, the hold is lifted and the funds are released to the beneficiary. Either result remains subject to other available legal remedies.

These temporary-hold rules generally apply to electronic transfers from one financial account to another. They do not apply to an ordinary credit-card purchase, except when a credit card is used to make an electronic fund transfer through an Automated Clearing House. They also do not apply to a transfer that was merely erroneous.

Special deadlines for unauthorized card charges

For a credit-card billing error or discrepancy, report it no later than 30 calendar days from the statement date. Earlier reporting is always better.

Under Republic Act No. 10870 and BSP Circular No. 1003:

Notice may be written, verbal, or through another documented means.
The issuer must take action within 10 business days after receiving the notice and relevant records.
It must investigate, correct its records when appropriate, and send a written explanation or clarification within 90 days after receiving the notice.
It must do so before taking action to collect the specifically contested amount, subject to the investigation result.
It may continue collecting amounts that were not identified as disputed.

If a credit card was lost or stolen, transactions before you reported the loss are initially for the cardholder’s account under the statute. That does not eliminate the right to dispute them. If the investigation finds that a transaction was unauthorized or fraudulent, the issuer must reverse it and the related finance charges and fees.

Pay any clearly undisputed portion by its due date. Ask the issuer in writing how it will treat the disputed amount and what payment is required to keep the undisputed account current. Do not simply stop all payments without obtaining clarification.

You may also ask a legitimate merchant to cancel or refund an unfamiliar charge, especially if it may involve a duplicate billing or account used by a family member. Do not delay the formal dispute with the issuer while waiting for the merchant.

Evidence to preserve

Create a chronological file containing:

Statements and transaction-history exports
Screenshots showing the transaction, merchant, beneficiary, time, and reference number
SMS, email, and app transaction alerts
OTP and login alerts, without publicly disclosing the actual codes
Call logs and recordings lawfully available to you
Messages, emails, social-media accounts, phone numbers, websites, and links used by the suspected scammer
Screenshots showing changes to passwords, devices, beneficiaries, contact details, or transfer limits
Proof that the card and device remained in your possession, if relevant
Your reports to the bank, merchant, mobile network, police, NBI, or other agency
Every complaint number, agent name, date, time, and promised response date
The institution’s written findings and any denial or reversal notice
Receipts or documents explaining legitimate activity around the same period

Preserve original electronic files when possible. Do not edit screenshots, delete conversations, reset the affected device, or dispose of the SIM before preserving relevant evidence. If the device remains compromised, disconnect it from financial access and obtain technical help without continuing to use it for banking.

Never send the BSP, a supposed investigator, or a person contacting you by message your PIN, password, OTP, full card number, or security code. The BSP expressly states that those details are not required to process a consumer complaint.

How the institution should assess liability

There is no rule that every disputed transaction must automatically be refunded—or that use of the correct PIN or OTP automatically proves that the customer authorized it.

BSP rules permit consideration of:

The account holder’s actions before, during, and after the transaction
The acts or omissions of the institution, its employees, agents, and service providers
Compliance with consumer-protection and security requirements
Authentication, transaction, device, and fraud-monitoring evidence
Whether the institution acted promptly after receiving the report

Under Republic Act No. 12010, institutions must maintain adequate risk-management systems and controls. An institution may be liable to restore funds if it failed to employ adequate controls or failed to exercise the highest degree of diligence in preventing losses from financial-account scamming. A criminal conviction of the scammer is not required before restitution can be considered.

The Supreme Court has also rejected the assumption that card and PIN records are always conclusive. In a case involving ATM withdrawals facilitated by a system bug, the bank failed to prove the depositor’s liability merely from the account, card, and transaction records. The outcome turned on the evidence and the bank’s control of its system. See Far East Bank and Trust Company v. Chante, G.R. No. 170598, October 9, 2013.

Disclosing an OTP or password can materially affect the assessment, but it should still be reported honestly. The institution must examine the complete circumstances rather than reject the complaint solely through a generic statement that “the transaction was authenticated.”

If the bank or issuer denies or ignores the dispute

Use the institution’s consumer-assistance mechanism first

Every BSP-supervised institution must maintain a free Financial Consumer Protection Assistance Mechanism. Submit or follow up on the complaint through that unit and retain proof of filing. Fraud complaints must receive priority and be resolved within a reasonable period appropriate to their complexity, although there is no single general turnaround time for every internal fraud investigation.

Ask for:

The final investigation report or a sufficiently detailed written explanation
The specific contractual and regulatory grounds for denial
Authentication and security facts relied upon
Confirmation that interest, penalties, collection activity, and credit reporting properly reflect the dispute
Instructions for internal reconsideration or appeal

Escalate an unresolved complaint to the BSP

The BSP Consumer Assistance Mechanism is the second-level recourse for complaints against BSP-supervised institutions. You must normally complain to the institution first.

File through the BSP Online Buddy on the BSP website or the BSP’s official Facebook page. If BOB is unavailable, complete the BSP Complaint/Inquiry/Reply form and email it, with proof that you first used the institution’s assistance mechanism, to consumeraffairs@bsp.gov.ph. Follow the BSP’s current complaint-filing guide.

Under BSP Circular No. 1169, once the BSP directs the institution to answer, the institution generally has 15 calendar days to answer both you and the BSP. You may reply within 30 calendar days after receiving that answer. Do not let the matter go dormant: the BSP-CAM may terminate if it receives no further communication from you within 30 days of the institution’s last response.

The BSP-CAM facilitates communication; it is not a criminal investigation and does not itself guarantee reimbursement.

Mediation, BSP adjudication, or court action

After completing BSP-CAM, eligible disputes may proceed to voluntary BSP mediation or formal adjudication. BSP adjudication covers purely civil claims seeking only payment or reimbursement of money not exceeding ₱10 million, excluding legal interest, attorney’s fees, and costs. Claims above the limit generally require waiver of the excess or filing the entire claim in the proper court.

Formal adjudication has verified-complaint, non-forum-shopping, evidence, service, and hearing requirements. It is different from submitting an online BSP-CAM complaint, so consider obtaining legal advice before filing.

Claims under Republic Act No. 11765 generally prescribe five years after the financial transaction, or five years after discovery of deceit or nondisclosure of material facts, subject to an ultimate ten-year limit from the violation. Other contractual, civil, criminal, and procedural periods may differ. These longer periods do not excuse missing the 30-day credit-card billing deadline or delaying a fraud report.

Reporting suspected crime

A bank dispute and a criminal complaint serve different purposes. The bank investigates authorization, tracing, holding, and reimbursement; law enforcement investigates and prosecutes suspected offenders.

For account takeover, phishing, identity theft, money muling, or online fraud, consider filing with the PNP, NBI, or CICC as advised in the BSP complaint guide. The NBI accepts an online complaint and provides investigative assistance through its Cybercrime Division.

Give law enforcement copies of the evidence, not your only originals. A police or NBI report can support the bank’s extended-hold and verification process, but do not wait for it before calling the bank.

Common mistakes to avoid

Waiting for the monthly statement before reporting a real-time alert
Calling only the receiving bank instead of the originating institution
Relying on an unrecorded phone call without a written follow-up
Waiting for the merchant or police before notifying the issuer
Describing a transfer you intentionally sent to the wrong account as “unauthorized”
Omitting the fact that an OTP or credential was disclosed
Deleting messages, resetting the device, or losing transaction records
Missing the 30-day credit-card statement deadline
Paying nothing on a card account without clarifying the undisputed amount
Filing with the BSP before using the institution’s complaint mechanism
Sharing credentials with someone claiming to process a refund
Paying a “release,” “verification,” or “recovery” fee to a supposed bank employee or investigator
Filing a knowingly false report to freeze another person’s funds

When legal help is urgent

Consult a Philippine lawyer promptly when:

The disputed amount is substantial or essential funds are at risk
The institution alleges that you participated in fraud or money muling
A beneficiary account linked to you has been frozen or placed on hold
The institution refuses to preserve records or gives inconsistent findings
Collection, set-off against deposits, adverse credit reporting, or a lawsuit is threatened
You need a court order to extend a temporary hold beyond 30 days
Your claim may exceed the BSP’s ₱10 million adjudication limit
Multiple institutions, corporate accounts, foreign transfers, or deceased or incapacitated account holders are involved
A filing or prescriptive deadline may be approaching

Frequently asked questions

Does reporting immediately guarantee a refund?

No. Immediate reporting improves the chance of blocking further transactions and holding funds, but reimbursement depends on the investigation, available funds, security controls, authorization evidence, and the parties’ conduct.

Can the bank reject my claim because an OTP was used?

OTP use is relevant but is not necessarily conclusive. Ask the institution to examine how the OTP was generated, delivered, used, and linked to the device, login, beneficiary, and transaction. Disclose honestly if you gave the OTP to anyone.

Should I dispute directly with the receiving bank?

You may alert it, but file the formal fund-transfer dispute with the originating institution. BSP rules make the originating institution primarily responsible for assisting you and coordinating with receiving institutions.

Can the bank charge interest while the transaction is disputed?

For an alleged disputed amount or unauthorized transaction, the institution must suspend interest, fees, and charges pending its final investigation or provide a similar reasonable accommodation. Ask for written confirmation identifying the amount covered.

What if the money has already been withdrawn?

The bank should still trace and investigate the transaction. A temporary hold can capture only funds or equivalent amounts that remain identifiable in involved accounts. If none remain, recovery may require restitution by the institution, voluntary return, law-enforcement action, or civil proceedings, depending on the facts.

Is a bank complaint enough to prosecute the scammer?

No. A bank complaint concerns account security and financial redress. Report suspected criminal activity separately to the PNP, NBI, or CICC.

Can I go directly to court?

Court action may be available, especially when urgent provisional relief is required, but forum choice, jurisdiction, evidence, and existing BSP proceedings can affect the case. Obtain legal advice before filing overlapping complaints or actions.

*This article provides general Philippine legal information, not legal advice or a prediction of any dispute’s outcome. Rights and liability depend on the account agreement, transaction records, security evidence, and other facts. Official

Quick answer

Report the transaction immediately through the official 24/7 fraud channel of the bank, e-wallet provider, or card issuer from which the money or credit originated. Ask it to:

block the card or compromised account access;
record every disputed transaction;
trace and hold any remaining funds;
investigate and reverse unauthorized charges;
suspend interest, fees, and charges on the disputed amount while the investigation is pending; and
give you a case or reference number.

Send a written confirmation even if you first reported by phone. Speed matters because transferred funds may be withdrawn or moved through several accounts within minutes.

A report does not guarantee reimbursement. Liability depends on the transaction, the institution’s security controls and conduct, your actions, the account agreement, and the available technical and documentary evidence. Philippine rules require a fair investigation; the presence of an OTP, PIN, or successful login does not by itself answer every case.

Act immediately

1. Secure the account and your communications

Using only the institution’s official app, website, card, or published contact details:

Lock or block the affected card.
Ask the institution to disable online banking or fund-transfer access if the account may have been taken over.
Change the account password from a trusted device. Change the password of the connected email account as well.
Log out other devices or sessions where that option is available.
Remove unfamiliar devices, beneficiaries, or contact details.
If your phone or SIM may have been compromised, contact your mobile provider immediately and request a SIM block or replacement.
Ask whether scheduled transfers, cash advances, or pending card transactions can still be stopped.
Check other accounts that used the same password, email address, phone number, or device.

Do not communicate further with the suspected scammer. Never give a supposed investigator your PIN, password, CVV, or OTP.

2. Report to the originating institution

For a bank transfer or e-wallet payment, complain first to the originating financial institution—the institution that maintained the account from which the funds left. BSP rules make it primarily responsible for assisting its customer and coordinating with receiving institutions.

Give the institution, as far as available:

your name and affected account;
the transaction reference number;
amount, date, and exact or approximate time;
channel used, such as InstaPay, PESONet, ATM, card, or in-app transfer;
receiving institution and beneficiary details;
whether you still possessed the card and phone;
whether you received, entered, or disclosed an OTP, PIN, password, or other credential;
when and how you discovered the transaction;
any suspicious call, message, link, app, device change, or SIM interruption; and
the specific transactions you dispute.

Be accurate. If you were deceived into sending the money yourself, say so. Do not describe a transfer as account takeover if you personally initiated it. Scam-induced transfers, unauthorized access, duplicate charges, merchant disputes, and mistaken transfers may be handled under different rules.

3. Make specific written requests

Ask the institution to confirm in writing that it has:

recorded the transaction as disputed or allegedly unauthorized;
blocked further unauthorized access;
notified the receiving institution;
initiated tracing and, where applicable, temporary holding of the disputed funds;
preserved authentication, device, session, IP-address, OTP, fraud-alert, call, and transaction logs;
suspended interest, fees, and charges on the disputed amount—or provided another reasonable accommodation—pending its final investigation;
identified any additional documents and the deadline for submitting them; and
provided the investigation timetable and complaint reference number.

Under the Financial Products and Services Consumer Protection Act, Republic Act No. 11765, a financial service provider must maintain a free consumer-assistance mechanism. For an alleged disputed amount or unauthorized transaction, it must suspend interest, fees, and charges while its final investigation is pending, or provide a similar reasonable accommodation.

Special rules for electronic fund transfers

The Anti-Financial Account Scamming Act and BSP regulations allow institutions to trace and temporarily hold funds involved in certain disputed electronic transfers.

Under Republic Act No. 12010 and BSP Circular No. 1215:

A complaint through the originating institution’s 24/7 fraud-reporting channel can trigger tracing, temporary holding, and coordinated verification.
An initial hold may last up to five calendar days.
It may be extended by up to 25 more calendar days when there are reasonable grounds and additional time is needed.
The total administrative holding period may not exceed 30 calendar days, unless a competent court extends it.
During the initial period, the source-account owner may be required to submit a sworn complaint, affidavit, police report, or other supporting document describing what happened. Exceptions may be allowed under the applicable industry protocol.
When funds were successfully held, coordinated verification should ordinarily be completed within the 30-day holding period unless a court extends it.
When no funds were held, verification should generally be completed within 30 calendar days, although the originating institution may extend the process for meritorious reasons up to a total of 60 calendar days.
If the investigation reasonably concludes that held funds came from social engineering, money muling, an illegal source, or a transaction without an underlying economic purpose, the rules allow their return to the source-account owner. Otherwise, the funds are generally released to the beneficiary when the hold expires or legitimacy is confirmed.

These periods are not a reason to wait. They govern how long funds may be held, not how long a victim should take to report. If the money has already been withdrawn, cashed out, or transferred beyond traceable accounts, there may be nothing left to hold.

Important exclusions

The temporary-holding rules generally apply to electronic transfers between financial accounts. They do not apply to:

a transfer to the wrong account or in the wrong amount because the sender encoded the details incorrectly; or
an ordinary credit-card purchase, unless the credit card was used to perform an electronic fund transfer through an Automated Clearing House.

For a mistaken transfer, report it immediately anyway. Under BSP Circular No. 1160, the originating and receiving institutions should make reasonable recovery efforts, but recovery is not automatic.

Special deadlines for credit-card transactions

Dispute an unauthorized or incorrect credit-card charge as soon as it appears. Do not wait for a later statement.

Under Republic Act No. 10870 and BSP Circular No. 1003:

A cardholder must be given up to 30 calendar days from the statement date to report an error or discrepancy.
The report may be written, verbal, or made through another documented means.
After receiving the notice and relevant records, the issuer must take action within 10 business days.
Within 90 days after receiving the notice, the issuer must investigate thoroughly, make appropriate corrections, and send a written explanation or clarification before taking action to collect the contested amount, subject to the investigation’s result.
The issuer may continue collecting amounts that were not identified as disputed.
If a disputed transaction is found unauthorized or fraudulent, it must be reversed together with related finance charges and fees.

If a physical card was lost or stolen, transactions before the loss was reported are initially for the cardholder’s account under the statute. This does not eliminate the right to dispute them: a transaction found to be unauthorized or fraudulent must still be corrected or reversed.

Pay undisputed charges on time. Ask the issuer in writing how the disputed amount will be treated for minimum-payment, delinquency, and credit-reporting purposes. Do not simply stop all payments without written clarification.

What the institution should investigate

The investigation should address more than whether a correct PIN or OTP was used. Relevant questions may include:

Was the transaction consistent with the customer’s normal activity?
Was there a new device, SIM, beneficiary, IP address, or location?
Were contact details or transaction limits changed shortly beforehand?
Were security alerts generated, and how did the institution respond?
Was multi-factor authentication properly implemented?
Did the institution’s system, employee, agent, or service provider contribute to the loss?
What did the customer do before, during, and after the incident?
Were transaction notifications timely?
Did the institution respond promptly after receiving the report?
Were funds still available to be held?

The Supreme Court’s decision in Far East Bank and Trust Company v. Chante illustrates why authentication records must be assessed with the complete evidence: in that case, use of the account details, card, and PIN did not conclusively establish the depositor’s responsibility where a system defect and evidentiary gaps existed. Modern cases remain fact-specific.

Under the Anti-Financial Account Scamming Act, an institution that the BSP determines has adequate risk-management systems and controls is generally protected from liability for losses arising from the Act’s offenses. Conversely, failure to employ adequate controls or exercise the required high degree of diligence may create liability for restitution. A criminal conviction of the scammer is not required before restitution may be ordered.

Evidence to preserve

Keep original electronic records where possible. Create a chronological folder containing:

statements and transaction histories;
transaction receipts and reference numbers;
screenshots or screen recordings showing the disputed entries;
SMS, email, and app notifications;
phishing messages, URLs, email headers, and social-media profiles;
call logs and the caller’s number;
recordings lawfully made or received;
records of SIM loss, replacement, or service interruption;
notices of new logins, devices, beneficiaries, passwords, or contact-detail changes;
proof that the card and device remained in your possession;
communications with the merchant, bank, e-wallet, or card issuer;
every complaint reference number and the name or identifier of each representative;
the exact time of each report and response;
police or NBI reports and affidavits; and
proof of resulting fees, interest, collection demands, or other direct losses.

Do not edit screenshots in a way that removes timestamps or account context. Preserve the suspicious message before blocking the sender. If a device may contain important evidence, capture what you safely can before resetting it; seek technical or legal advice if the loss is substantial.

When sending documents to the BSP, redact unnecessary sensitive information. The BSP’s current complaint guide specifically warns consumers not to send PINs, passwords, full card or ATM-card numbers, passbooks, passports, or identification cards merely to initiate a BSP consumer complaint.

Follow up and demand a reasoned decision

Your written complaint should request:

acknowledgment of receipt;
the applicable turnaround time;
status updates;
a list of any missing documents;
confirmation of any successful hold or recovery;
the factual and contractual basis for the decision;
relevant transaction identifiers and receiving institutions; and
correction of interest, fees, account status, and credit information if the dispute succeeds.

BSP Circular No. 1160 requires immediate written acknowledgment through the fraud-reporting channel, prioritization of fraud concerns, fair claim assessment, and formal notice of the investigation result within three banking days after the investigation concludes.

If the institution denies the claim, ask for a final written investigation report rather than accepting a verbal statement such as “the transaction used an OTP.” Respond point by point and attach any overlooked evidence.

Escalating an unresolved complaint to the BSP

You must ordinarily complain first through the institution’s Financial Consumer Protection Assistance Mechanism. If its response is unsatisfactory—or it does not act within a reasonable period—you may use the BSP Consumer Assistance Mechanism.

The BSP’s current complaint instructions provide these channels:

BSP Online Buddy (BOB): through the robot icon on the BSP website or the message function on the BSP’s official Facebook page; or
Email alternative: submit the BSP Complaint/Inquiry/Reply form to consumeraffairs@bsp.gov.ph, with proof that you first used the institution’s complaint mechanism and any relevant supporting documents.

Continue through BOB until it gives you a BSP complaint reference number. Keep that number.

The BSP-CAM process is primarily facilitative. Under BSP Circular No. 1169, once the BSP directs the institution to answer, it generally has 15 calendar days to provide its answer. The consumer may reply within 30 calendar days after receiving that answer.

If the dispute remains unresolved, the BSP may offer voluntary mediation. For qualifying money claims, adjudication is also available after BSP-CAM. BSP adjudication covers purely civil claims seeking payment or reimbursement of no more than ₱10 million, excluding legal interest, attorney’s fees, and litigation costs. A formal adjudication complaint has verification, non-forum-shopping, evidence, service, and venue requirements, so legal assistance is advisable.

The BSP route generally does not cover a matter already pending before or decided by a court or another quasi-judicial body. It also does not replace a criminal investigation.

Report suspected crime separately

A complaint to the bank or BSP seeks financial assistance and redress; it is not the same as filing a criminal complaint.

For phishing, account takeover, identity theft, money muling, or another apparent scam, consider reporting promptly to the PNP, NBI, or Cybercrime Investigation and Coordinating Center. The NBI accepts online complaints and its Cybercrime Division may require a sworn complaint, interview, supporting documents, and access to relevant evidence.

A police or NBI report can also help support a request to extend an initial five-day hold. Do not delay the report to the financial institution while waiting for law enforcement documents.

Common mistakes to avoid

Waiting for the monthly statement before reporting a transaction already shown in the app.
Reporting only to the recipient’s bank instead of the originating institution.
Relying on a phone call without retaining a reference number or written confirmation.
Waiting for the merchant, police, or scammer to respond before notifying the issuer.
Describing a mistaken or voluntarily initiated transfer inaccurately.
Concealing that an OTP or credential was disclosed.
Deleting messages, resetting the device, or discarding the SIM before preserving evidence.
Sending full passwords, PINs, CVVs, or OTPs as “proof.”
Ignoring requests for an affidavit or supporting documents during the initial five-day holding period.
Refusing to pay undisputed credit-card charges.
Filing directly with the BSP without first using the institution’s complaint mechanism.
Filing the same claim simultaneously before several regulators or tribunals without legal advice.
Making a knowingly false report. The Anti-Financial Account Scamming Act penalizes malicious reporting that results in funds being temporarily held.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the transfer is substantial or involves business, trust, joint, or corporate funds;
the institution refuses to initiate tracing or temporary holding;
funds were moved through several accounts or converted to cash or virtual assets;
the institution alleges that you authorized the transaction;
an employee, agent, or security-system failure may be involved;
the issuer begins collection, offset, account closure, or adverse credit reporting despite a documented dispute;
you need a court order to extend a hold beyond 30 days;
you are asked to sign a waiver, quitclaim, settlement, or admission;
you intend to seek BSP adjudication or file in court; or
there is a risk that evidence or account records will be lost.

Claims under Republic Act No. 11765 generally prescribe five years after the transaction, or five years after discovery of deceit or material nondisclosure, subject to an ultimate ten-year limit from the violation. Other contractual, civil, criminal, procedural, or card-network deadlines may differ. These periods are not a reason to delay immediate reporting.

Frequently asked questions

Will the bank automatically refund an unauthorized transaction?

No. The institution must investigate, and reimbursement depends on the evidence, applicable rules, security controls, and conduct of the parties. A successful temporary hold also does not by itself establish final liability.

Does receiving an OTP mean I authorized the transaction?

Not necessarily. The investigation should determine who obtained and used the OTP, how account access was gained, whether the institution’s controls were adequate, and whether other warning signs were present. Deliberately sharing or entering an OTP is relevant evidence and may weaken a claim, but it should be evaluated with the entire incident.

What if a scammer convinced me to transfer the money myself?

Report it immediately and explain the deception precisely. The institution may still have grounds to trace and hold the transaction if it appears unusual, lacks a clear economic purpose, involves an illegal source or activity, or falls within a qualifying social-engineering scheme. However, a scam-induced transfer is not automatically treated the same way as a transfer made after account takeover.

What if I sent money to the wrong account?

That is generally an erroneous transaction, not an unauthorized transaction. Circular No. 1215’s temporary-holding process does not apply, but the originating and receiving institutions should make reasonable recovery efforts. Report the error immediately; repayment is not guaranteed.

Should I contact the merchant about an unauthorized card charge?

Yes, if the merchant is identifiable, ask it to cancel or refund the charge. Do not wait for the merchant before notifying the card issuer, and do not allow the 30-day billing-dispute period to expire.

Can the bank charge interest while investigating?

For an alleged disputed amount or unauthorized transaction, Republic Act No. 11765 requires the provider to suspend interest, fees, and charges pending its final investigation report or provide a similar reasonable accommodation. Ask for the arrangement in writing.

Can the BSP order reimbursement?

For qualifying purely civil financial-consumer claims, BSP adjudication may order payment or reimbursement up to ₱10 million. The consumer must first use the institution’s complaint mechanism and BSP-CAM and must comply with the formal adjudication rules.

Is a police report always required?

It is not necessarily required for the first emergency report to the institution. For an extended hold, however, the institution may require a sworn complaint, affidavit, police report, or other supporting document during the initial holding period. A law-enforcement report is also useful when criminal activity is suspected.

Disclaimer

This article provides general Philippine legal information, not legal advice or a prediction of any dispute’s outcome. Rights and liability depend on the account agreement, transaction records, security evidence, and complete facts. Procedures and official sources were checked as of 2 August 2026.