How to Dispute Fraudulent International Credit Card Transactions

Fraudulent international credit card transactions occur when unauthorized charges appear on a Philippine-issued credit card for purchases made with foreign merchants, often through e-commerce platforms, phishing schemes, data breaches, or skimming. These transactions typically involve card-not-present (CNP) scenarios where the physical card is not required, making them prevalent in cross-border online shopping, subscription services, or airline bookings. In the Philippines, consumers enjoy strong statutory protections that shift the burden of proof largely to the issuing bank once a timely dispute is lodged. The process combines contractual obligations under card network rules (Visa, Mastercard, American Express, JCB, UnionPay), Bangko Sentral ng Pilipinas (BSP) regulations, and general consumer legislation. Failure to follow the prescribed steps can result in permanent liability for the cardholder.

Legal Framework Governing Disputes

The dispute mechanism rests on multiple interlocking laws and regulations:

  • Republic Act No. 7394 (Consumer Act of the Philippines) – Declares deceptive and unconscionable sales acts as unlawful and grants consumers the right to demand refund or cancellation of fraudulent charges. Section 4 declares that consumers have a right to “fair and honest” credit transactions.
  • Republic Act No. 8792 (Electronic Commerce Act) – Recognizes electronic records and signatures as equivalent to written documents, enabling banks and card networks to process digital disputes. It also imposes liability on service providers for unauthorized electronic transactions if reasonable security measures were not maintained.
  • Republic Act No. 11765 (Financial Products and Services Consumer Protection Act, 2022) – Requires financial institutions to maintain fair, transparent, and prompt dispute resolution mechanisms. Section 10 mandates “zero liability” for cardholders who report unauthorized transactions within the allowable window, provided no gross negligence is proven. Banks must investigate within 30 banking days and cannot impose charges during the investigation.
  • BSP Circular No. 857 (Series of 2015, as amended) and subsequent issuances – Regulate credit card operations and explicitly require issuers to adopt chargeback policies aligned with international card schemes. BSP Memorandum No. M-2019-017 further directs banks to limit cardholder liability to zero for fraud if reported promptly and to grant provisional credits pending investigation.
  • Republic Act No. 10175 (Cybercrime Prevention Act) – Supplements civil remedies by allowing criminal complaints for identity theft or hacking that led to the fraud.
  • Data Privacy Act of 2012 (RA 10173) – Obliges banks to protect card data; any breach by the issuer can strengthen a consumer’s claim for damages.

International card networks impose their own uniform rules (Visa International Operating Regulations, Mastercard Chargeback Guide, etc.) that Philippine issuers are contractually bound to follow. These rules generally allow chargebacks under reason codes such as “fraudulent transaction – cardholder does not recognize” (Visa 10.2, Mastercard 4837) or “card-not-present fraud.”

Cardholder Liability and Zero-Liability Rule

Philippine law and BSP policy establish a “zero-liability” standard for unauthorized use. A cardholder is not liable for any amount if:

  • The card was reported lost or stolen before the fraudulent transaction, or
  • The transaction was reported within 60 days from the date of the statement showing the charge (or earlier if the issuer’s contract provides a shorter window). Gross negligence (e.g., sharing the PIN or CVV in writing, or ignoring obvious red flags) may shift liability, but the burden of proving negligence rests on the issuer. For international transactions, the same rule applies regardless of the merchant’s location.

Step-by-Step Dispute Procedure

  1. Immediate Detection and Card Security
    Review statements daily or enable real-time SMS/email alerts. Upon noticing an unrecognized international charge (especially from jurisdictions never visited), immediately call the 24/7 hotline printed on the card or use the mobile banking app to request temporary blocking. This freezes further use and starts the clock for zero-liability protection. Obtain a reference number for every call.

  2. Formal Dispute Filing
    Within 60 days of the transaction date or statement posting (whichever is earlier), submit a written dispute. Most issuers accept disputes via:

    • Mobile app “Dispute Transaction” feature
    • Email to the designated fraud hotline
    • In-person branch visit
    • Online banking secure message
      Provide: card number, exact transaction date and amount, merchant name and country, reason (“I did not authorize this transaction”), and a sworn affidavit stating non-involvement. Attach screenshots of the statement, proof of location during the transaction (passport stamps, work records, or geolocation data), and any communication with the merchant.
  3. Police Blotter and Supporting Evidence
    For transactions above ₱50,000 or involving identity theft, file a police blotter at the nearest station or with the Philippine National Police Anti-Cybercrime Group (PNP-ACG) via their online portal or hotline (117). The blotter number strengthens the dispute. Additional evidence may include:

    • Affidavit of non-receipt of goods/services
    • Merchant correspondence showing denial of refund
    • Credit bureau report showing no other fraudulent activity
  4. Bank Investigation and Provisional Credit
    The issuer must acknowledge the dispute within two banking days. Under BSP rules and network timelines, the bank forwards the claim to the acquiring bank abroad via the card network. A provisional credit (temporary refund) must be issued within 10–30 days for Visa/Mastercard fraud claims while investigation proceeds. Full investigation typically concludes within 45–90 days. If the merchant fails to provide proof of authorization (e.g., IP address matching the cardholder’s), the chargeback is upheld.

  5. Card Network Chargeback Rules Specific to International Transactions

    • Visa – Reason Code 10.2 (Fraud – Cardholder Does Not Recognize) or 10.5 (Card-not-present fraud). First chargeback window: 60 days; second presentment allowed.
    • Mastercard – Reason Code 4837 (No Cardholder Authorization). 120-day window in some cases.
    • American Express – Uses its own “Dispute Resolution” process with similar timelines. Philippine issuers cannot refuse to file the chargeback merely because the merchant is foreign; they are required to pursue it under network rules.
  6. Outcome and Reversal
    If the chargeback succeeds, the credit becomes permanent. If the merchant wins the representment (second presentment), the bank may debit the account again, but the cardholder may file a second chargeback or appeal directly to the network’s arbitration panel (Visa Arbitration, Mastercard Arbitration Committee). Arbitration fees are usually borne by the losing party.

Escalation When the Issuer Denies the Dispute

If the bank rejects the claim or drags its feet:

  • Internal Escalation – Request a written explanation and appeal to the bank’s Consumer Protection or Fraud Resolution Unit within 15 days.
  • BSP Consumer Assistance – File a complaint via BSP’s online portal (https://www.bsp.gov.ph), Consumer Assistance Mechanism (CAM), or hotline (02) 8708-7087. BSP must resolve within 30 banking days. Fines against erring banks can reach ₱1 million per violation under RA 11765.
  • Department of Trade and Industry (DTI) – For merchants based in the Philippines that facilitated the fraud.
  • Small Claims Court or Regular Civil Court – Under Rule 5 of the Revised Rules of Procedure for Small Claims (A.M. No. 08-8-7-SC), claims up to ₱1 million may be filed without a lawyer. For larger amounts, file an action for damages plus interest and attorney’s fees under Article 2208 of the Civil Code. The Consumer Act allows treble damages in cases of bad-faith refusal.
  • Criminal Route – If identity theft is involved, pursue a case under RA 10175 before the Prosecutor’s Office or the Regional Trial Court.

Special Considerations for International Elements

  • Foreign Currency Conversion and Fees – The disputed amount includes foreign exchange markup and any international transaction fees; all must be reversed.
  • Time Zone and Date Issues – Use the posting date on the Philippine statement, not the merchant’s local date.
  • Recurring Billing Fraud – Cancel any linked subscription immediately and cite “recurring billing fraud” under network rules.
  • Prepaid or Virtual Cards – Same zero-liability rules apply if issued by a BSP-regulated entity.
  • Joint Accounts – Only the primary cardholder may initiate the dispute unless the supplementary holder is also a victim.

Documentary Requirements Checklist

  • Copy of latest credit card statement highlighting the fraudulent charge
  • Sworn affidavit of dispute
  • Police blotter or cybercrime report (if applicable)
  • Proof of legitimate whereabouts
  • Correspondence with issuer and merchant
  • Provisional credit confirmation
  • Any subsequent debit notices

Preventive Measures Mandated by Law and Best Practice

While the focus is dispute resolution, Philippine banks are required under BSP Circular No. 982 to provide secure authentication (3D Secure, biometrics). Consumers should activate two-factor authentication, set transaction alerts, use virtual cards for online purchases, and never share CVV or OTP. Merchants must comply with PCI-DSS; failure can support a stronger chargeback.

Statute of Limitations and Preservation of Rights

Civil actions for refund must be filed within 4 years under the Civil Code (quasi-delict) or 10 years for written contracts. BSP complaints have no strict prescriptive period but should be filed while evidence is fresh. Always retain all correspondence for at least 5 years.

By strictly following the foregoing procedure—prompt reporting, complete documentation, and timely escalation—Philippine cardholders can recover 100 % of fraudulent international charges in the overwhelming majority of cases. The legal architecture deliberately places the risk on the sophisticated financial institutions and card networks rather than the individual consumer.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.