Unauthorized credit card charges are stressful, but Philippine law and banking rules give cardholders meaningful protection when they act quickly, document everything, and follow the dispute process correctly. In the Philippines, disputes over unauthorized credit card transactions usually involve a mix of contract terms in the card issuer’s terms and conditions, consumer protection principles, Bangko Sentral ng Pilipinas (BSP) regulations on financial consumer protection and electronic payments, card network chargeback rules, and, in some cases, criminal law if fraud, theft, identity misuse, or cybercrime is involved.

This article explains the Philippine framework in practical terms: what counts as an unauthorized transaction, what to do immediately, how to file a dispute, who bears the loss, what evidence matters, how billing and interest should be treated during the dispute, what remedies are available if the bank refuses to reverse the charge, and when the problem becomes a criminal matter.

1. What is an “unauthorized credit card transaction”?

An unauthorized credit card transaction is a charge or cash advance that the cardholder did not make, approve, or benefit from. In Philippine practice, this can include:

stolen card use
lost card use before or after reporting
card-not-present fraud, such as online purchases you did not make
skimming or cloned card transactions
phishing-driven fraud where fraudsters used your card details
account takeover, including someone changing your mobile number, email, or password to approve transactions
transactions processed through forged sales slips or manipulated merchant records
recurring charges you never agreed to
transactions made after you already reported the card as blocked or compromised

Not every disputed charge is legally “unauthorized.” Some are actually billing errors, merchant disputes, or cases where the cardholder technically consented but later regretted the transaction. That distinction matters because the remedies differ.

Unauthorized transaction vs. merchant dispute vs. billing error

A lot of disputes are mislabeled. The bank’s treatment depends on the type.

Unauthorized transaction You did not authorize the transaction at all.

Examples:

You see an online purchase from a merchant you have never used.
Someone used your card after it was stolen.
A foreign charge appears while your card never left your possession.

Merchant dispute You dealt with the merchant, but there is a problem with the goods or services.

Examples:

item not delivered
defective item
duplicate billing
subscription cancellation ignored
amount charged is different from what you agreed

Billing error The transaction may be real, but the statement is wrong.

Examples:

payment not posted
credit/refund not reflected
wrong amount on statement
installment converted incorrectly

A bank may reject an “unauthorized transaction” claim if records suggest you participated in the transaction, shared your one-time password, used the merchant before, or confirmed the transaction through your own device. Even then, the issue may shift into whether there was fraud, unauthorized access, social engineering, inadequate bank controls, or merchant error.

2. Main legal and regulatory backdrop in the Philippines

In the Philippines, credit card disputes are usually governed by several overlapping sources:

A. Cardholder agreement

The first layer is your contract with the issuing bank. It typically covers:

how to report loss, theft, and unauthorized use
time limits for disputing statement entries
liability before and after notice
provisional credits
investigation procedure
how interest, penalties, and minimum payment are computed
evidentiary rules, such as sales drafts, electronic logs, OTP records, IP/device records, and merchant documents

Banks rely heavily on these terms, but contract terms cannot override mandatory law, public policy, or BSP consumer-protection standards.

B. BSP rules on financial consumer protection

Banks and credit card issuers in the Philippines are subject to BSP regulation on fair treatment of financial consumers, complaints handling, disclosure, fraud risk management, and electronic channels. These rules matter because even if the card contract is strict, a bank is still expected to:

maintain a complaint-handling mechanism
investigate disputes fairly
disclose the process clearly
use adequate security controls
handle electronic payments safely
treat customers consistently with standards of fairness and transparency

C. Electronic payments and fraud management rules

Where the unauthorized charge happened through online, mobile, or electronic channels, BSP rules on electronic payment operations, risk management, and cybersecurity become relevant. These can matter in disputes involving:

suspicious OTP approvals
delayed fraud alerts
account takeover
inadequate authentication
bank system compromise
real-time fraud monitoring failures

D. Consumer protection principles

General Philippine consumer-protection policy supports fair dealing and redress in financial transactions, though credit card disputes are usually handled primarily through BSP-supervised financial regulation and contract law rather than through ordinary retail consumer law alone.

E. Civil Code principles

The Civil Code can come into play on obligations and contracts, damages, good faith, negligence, and burden of proof issues, especially if the dispute escalates beyond internal bank processes.

F. Criminal laws

If the unauthorized charge involves theft, fraud, falsification, identity misuse, hacking, phishing, or access-device misuse, criminal laws may apply, including laws on cybercrime, estafa, falsification, and related offenses.

3. Who is responsible for the loss?

This is the question most cardholders care about. In the Philippines, liability usually depends on timing, negligence, evidence, and how the fraud occurred.

General principle

A cardholder is usually not supposed to bear charges that were truly unauthorized, especially after the card issuer has been notified that the card is lost, stolen, or compromised. But banks often examine whether the cardholder:

kept the card and PIN/OTP secure
delayed reporting
shared sensitive data
clicked fraudulent links
responded to phishing calls or texts
allowed another person to use the card
used the same device or account that later approved the disputed charge

Before notice to the bank

Before the cardholder reports loss, theft, or compromise, banks often try to assign some liability to the cardholder depending on the terms and facts. In practice, banks examine whether there was negligence.

Examples:

leaving the card unattended
writing the PIN on the card
disclosing CVV, OTP, password, or card details to another person
responding to phishing scams
allowing someone else to use the card

But “negligence” is not automatic. A cardholder’s liability should not be presumed merely because the transaction was authenticated electronically. Authentication records can be challenged if there is evidence of SIM swap, malware, app compromise, merchant data breach, or other security failure.

After notice to the bank

Once the bank has been properly notified and the card is supposed to be blocked, unauthorized transactions afterward are much harder for the issuer to charge to the cardholder. If charges continue after blocking, that is a serious red flag.

If the card never left your possession

This is common in online fraud. The bank may claim the transaction was authenticated, but the cardholder may counter that the transaction was unauthorized because:

the card details were stolen remotely
the OTP or authentication was compromised
the merchant did not use strong verification
the bank’s fraud controls failed
the device/account was taken over without true consent

If you gave an OTP or responded to phishing

This is where disputes become harder. Banks often argue that the cardholder authorized or at least enabled the transaction. Still, not every phishing case ends against the consumer. Some cases still raise questions about:

whether the bank’s warnings were adequate
whether the bank should have detected anomalous transactions
whether the transaction pattern was obviously suspicious
whether the authentication flow was secure enough
whether the transaction description was misleading

The more direct the disclosure by the cardholder, the stronger the bank’s defense tends to be.

4. Immediate steps after discovering an unauthorized transaction

What you do in the first minutes and hours can decide the case.

Step 1: Block the card immediately

Use the bank’s hotline, mobile app, website, or emergency support. Ask for:

immediate card blocking
replacement card issuance
written or electronic confirmation of the report
reference number for the call or complaint
exact date and time of report

Take screenshots. Write down the hotline number, agent name if available, and reference number.

Step 2: Secure related accounts

If the fraud may involve account takeover:

change online banking password
change email password
change phone/app PINs
enable stronger authentication
check whether your mobile number or email was changed without consent
review linked e-wallets and merchant accounts

Step 3: Review all recent transactions

Do not stop at the first suspicious charge. Fraud often comes in clusters:

test charge
high-value charge
recurring subscription
foreign merchant charge
digital wallet top-up
quasi-cash or gambling-style transaction
installment conversion
cash advance

Step 4: Preserve evidence

Keep:

screenshots of the statement and alerts
SMS and email notifications
app notifications
call logs with the bank
reference numbers
proof you still had the physical card
travel records or location records if useful
police blotter or affidavit if card was stolen
copies of phishing messages, if any
merchant correspondence
replacement card request confirmation

Step 5: File the dispute in writing

Calling the bank is essential, but a written dispute is even more important. Many banks require a dispute form, email, secure message, or branch submission.

Step 6: Pay attention to statement due dates

Do not ignore the billing cycle while waiting for the investigation. Disputes and payment obligations can interact in complicated ways.

5. How to file a proper dispute with a Philippine credit card issuer

A strong written dispute should be specific, dated, and well documented.

Information to include

Your complaint should state:

full name
card type and last four digits
account or customer number if needed
disputed transaction date
posted date
merchant name
amount
currency
reason for dispute
date and time you discovered the transaction
date and time you reported the compromise
statement that you did not authorize, participate in, or benefit from the transaction
statement whether the card remained in your possession
request for reversal, investigation, and written findings
request to suspend finance charges, late fees, and collection activity on the disputed amount while under investigation, if applicable

Sample structure

A typical dispute says:

I am disputing the following transaction as unauthorized.
I did not make, authorize, receive, or benefit from it.
My card was/was not in my possession at all relevant times.
I reported the matter on [date and time] through [channel], reference number [number].
I request immediate blocking/replacement, investigation, reversal, and written confirmation.
I also request that related interest, penalties, and collection activity on the disputed amount be held in abeyance pending resolution.

Common supporting documents

Banks may ask for:

accomplished dispute form
valid ID
police report or affidavit of loss, if applicable
proof of travel or local presence
screenshots of alerts
screenshots showing account changes or suspicious messages
proof of prior cancellation for recurring charges
proof of non-delivery in merchant disputes

Even if not required, organized evidence improves credibility.

6. Time limits: how fast should you act?

Always act immediately.

In Philippine credit card practice, cardholders are usually expected to dispute a questionable statement entry promptly, often within the period set in the cardholder agreement. Many issuers impose a statement review period. Missing it can weaken the claim, though it should not automatically validate fraud if the facts show the charge was never authorized.

There are really three different clocks:

A. Reporting the lost/stolen/compromised card

This should be done as soon as you discover the problem. Delay increases exposure.

B. Disputing the statement entry

Usually governed by the card agreement. Check the issuer’s stated deadline from statement date or posting date.

C. Chargeback/network timelines

Banks also operate under internal deadlines tied to card network rules. That is another reason to dispute early. A late-filed case may still be investigated, but practical recovery may become harder.

The safest approach is to dispute immediately upon discovery, even before the statement cycle closes.

7. What evidence do banks use, and how can cardholders challenge it?

Banks do not decide disputes based only on your denial. They look at transaction records. Common evidence includes:

EMV chip read logs
card present or card-not-present indicators
merchant sales slips
signed charge slips
OTP logs
3D Secure authentication logs
device fingerprinting
IP address records
geolocation clues
prior transaction pattern
delivery address
merchant confirmation
digital wallet tokenization records
app login history
password reset trail
SIM change or mobile number update trail

How cardholders can challenge bank evidence

“OTP sent” does not always mean valid consent An OTP record only proves a code was sent or entered. It does not always prove the true account holder knowingly approved the transaction.

A signed slip may be forged For card-present fraud, ask for a copy of the signed slip and inspect the signature.

A merchant descriptor may be misleading Fraudulent transactions sometimes use vague or misleading merchant descriptors.

Prior merchant history is not conclusive Just because you used a platform before does not mean every future charge is authorized.

Delivery proof matters If the merchant says goods were delivered, ask where, to whom, and with what receipt.

Authentication can be compromised SIM swap, phishing, malware, screen overlay attacks, app takeover, and social engineering can undermine supposedly “authenticated” transactions.

8. Should you still pay the credit card bill while disputing?

This is one of the hardest practical questions.

Conservative approach

Pay the undisputed portion of the bill on time. This reduces the risk of late fees, adverse credit reporting, suspension, and collection escalation.

Disputed amount

The disputed amount is more complicated. In fair practice, the bank should investigate first and should not treat a genuinely disputed unauthorized charge as final and collectible without review. But in real life, some issuers may continue billing it temporarily while the investigation is pending.

So the practical approach is:

pay the undisputed balance
state in writing that the disputed amount is under formal contest
object to finance charges, penalties, and collection activity related solely to the disputed amount
keep proof of your payment and your dispute submission

If you can pay the disputed amount without prejudice for risk management reasons, some consumers do so and expressly reserve the right to refund if the case is resolved in their favor. Others refuse to pay the disputed amount and challenge all related charges. The better approach depends on the amount, urgency, collection risk, and the bank’s policy.

9. Interest, late fees, and finance charges during the dispute

A major issue in Philippine disputes is whether the bank may continue charging:

finance charges
late payment charges
overlimit fees
penalties
collection fees

The fair position for a cardholder is that charges flowing solely from the disputed unauthorized transaction should not continue to accumulate while the investigation is ongoing, especially where the customer promptly disputed the transaction and the facts suggest fraud.

In practice:

some banks place the amount in dispute status
some grant provisional reversal or temporary credit
some continue billing unless and until the dispute is resolved
some reverse principal first and related charges later

In your written complaint, specifically demand:

reversal of the principal disputed amount
reversal of all related finance charges and penalties
correction of records if the charge caused delinquency or credit impairment

Do not assume reversal of the principal automatically cancels all follow-on charges. Ask for each one expressly.

10. Temporary credit or provisional reversal

Some issuers give a temporary credit while the investigation is pending. Others do not.

A provisional credit is helpful but not final. The bank may later reverse the temporary credit if it concludes the transaction was valid or if the chargeback is rejected. Read all emails and notices carefully.

If the bank grants temporary credit:

confirm whether it is provisional or final
ask whether interest and fees are also frozen
check the next statement to confirm posting
keep records in case the credit disappears later

11. What if the bank says the transaction was authenticated?

This is one of the most common rejection reasons. The bank may say:

the OTP was correctly entered
the 3D Secure step was completed
the merchant received authorization
the chip was read
the transaction matched prior customer behavior

That does not automatically end the matter.

A transaction can still be disputed if the authentication itself was compromised, hijacked, manipulated, or performed by an unauthorized person through fraud. The right questions include:

Was the OTP sent to your actual device at the time?
Was there a SIM swap or service interruption?
Was your app account taken over?
Were there suspicious password resets or profile changes?
Did the bank detect unusual transaction patterns?
Was the merchant in a high-risk category?
Did the bank send a meaningful fraud alert before approving?
Did the transaction occur in a place impossible or improbable for you?
Was the physical card present or not?
Can the bank produce the actual logs?

Ask for the basis of the bank’s conclusion, not just the conclusion itself.

12. Special situations

A. Recurring subscription charges

These are common and tricky. A recurring charge may be unauthorized if:

you never enrolled
you cancelled but billing continued
the merchant used a new amount without proper consent
a free trial converted deceptively
the stored card was used after cancellation

Keep cancellation emails, screenshots, and chats.

B. Family member or employee used the card

This may not be “unauthorized” in the bank’s view if you gave access voluntarily. Banks often deny disputes where the cardholder entrusted the card or credentials to another person.

C. Supplementary cards

The principal cardholder may still bear responsibility for transactions by authorized supplementary cardholders, depending on the contract.

D. Digital wallet or tokenized card fraud

If the card was enrolled into an e-wallet without your knowledge, ask:

when and how the token was provisioned
what device was used
what verification occurred
whether the bank can identify the wallet account

E. Foreign transactions

Fraud often appears as foreign online charges. Ask for:

merchant country
acquiring bank information if available
card-not-present indicator
AVS/CVV/3DS details if available through the issuer

F. Cash advance fraud

Unauthorized cash advances are especially serious because they often carry immediate fees and higher finance charges. Demand urgent reversal of both principal and related cash advance fees.

13. What if the physical card was stolen or lost?

If the card was physically lost or stolen:

report immediately
request blocking
get a reference number
execute an affidavit of loss if required
file a police blotter if theft is suspected
dispute all suspicious charges
ask for copies of signed slips for in-person transactions

The key legal issue becomes which transactions occurred before notice and which occurred after notice. After notice, the bank has a much weaker basis to hold you liable for later unauthorized use.

14. What if you were phished, scammed, or tricked into giving information?

These cases are more difficult but not hopeless.

Banks often argue the customer was negligent because the customer shared:

OTP
CVV
full card number
online banking password
app credentials

Still, the full analysis should look at:

whether the fraud was foreseeable
whether the bank’s fraud warnings and controls were adequate
whether there were obvious red flags
whether the amount or pattern should have triggered intervention
whether the scam exploited a weakness in the bank’s own systems or communications
whether the authentication process clearly identified the nature of the transaction being approved

Where the customer was deceived into approving a disguised transaction, the issue may shift from pure “unauthorized use” into fraud, misrepresentation, system weakness, or unfair handling.

15. The bank denied my dispute. What next?

A denial is not the end of the matter.

A. Ask for the specific basis in writing

Request:

complete reason for denial
transaction evidence relied upon
whether it was card present or card not present
whether OTP/3DS was used
copy of signed slip, if any
merchant records
chronology of your report and the bank’s actions

B. File a reconsideration or appeal with the bank

Point-by-point rebut the denial. Attach supporting evidence and identify contradictions.

C. Escalate through the bank’s formal complaints channel

Use the issuer’s customer advocacy, escalations, or consumer assistance office, not just the front-line call center.

D. Bring the complaint to BSP’s consumer assistance mechanism

If the issuer is BSP-supervised and internal resolution fails or stalls, consumers commonly escalate complaints to BSP’s consumer assistance channels. Prepare a clean documentary set:

complaint letter
bank’s responses
statement copies
proof of report
IDs
supporting screenshots
timeline of events

BSP is not a trial court, but its intervention can pressure banks to explain their position, improve handling, and address consumer-protection failures.

E. Consider civil action if warranted

If the amount is large or the bank’s refusal appears wrongful, a civil claim may be considered for:

refund/reversal
damages
attorney’s fees, where justified

This becomes fact-intensive and usually needs legal review.

F. Consider criminal complaint if there was actual fraud or identity misuse

If identifiable persons stole or used the card, phishing syndicates took over your account, or merchant employees copied your card data, criminal enforcement may be relevant.

16. Can you file a police report?

Yes. In some cases it is advisable, especially where there was:

theft or robbery
card skimming
suspected inside job
phishing or account takeover
hacked device or SIM swap
forged documents
unauthorized withdrawals or cash advances
repeat fraud activity

A police report does not automatically force the bank to reverse the charge, but it strengthens the record and may help show prompt action and good faith.

For cyber-enabled fraud, the complaint may also implicate cybercrime enforcement bodies or specialized anti-cybercrime units.

17. Can the bank send the disputed amount to collections?

Banks sometimes do, especially if the disputed amount remains unpaid for several cycles. Whether they should do so while a serious unauthorized-use complaint is under active review is another matter.

A cardholder should promptly object in writing if:

the amount is formally disputed
the dispute is unresolved
collection pressure includes disputed charges, related penalties, or threats based on amounts you deny owing

In your letters, state clearly that:

the amount is under formal dispute
collection on the disputed portion is contested
you are not waiving any rights by paying the undisputed portion
you demand correction of records if the dispute is resolved in your favor

18. What happens to your credit record?

An unresolved disputed charge may affect:

delinquency status
internal bank records
future card approvals
loan applications

That is why it is important to:

keep the dispute in writing
pay the undisputed amount
demand correction of records if the charge is reversed
ask the bank to remove adverse tags caused solely by the fraudulent charge

When the charge is reversed, check later statements and records to confirm the correction is complete.

19. How long should investigation take?

This varies by issuer and transaction type. Domestic cases may move faster than international chargeback cases. Merchant disputes and chargebacks through card networks can take time because banks exchange evidence with acquirers and merchants.

Still, consumers are entitled to a process that is not unreasonably delayed. If weeks pass without meaningful action:

follow up in writing
ask for current status and expected next step
ask whether the matter was sent for chargeback
ask whether temporary credit is available
escalate internally, then to BSP if needed

20. Practical arguments that help cardholders win disputes

Cardholders are more persuasive when they show a coherent story supported by records. Strong points often include:

the card was still with you
the transaction location was impossible or highly improbable
the purchase pattern was inconsistent with your history
the amount was unusually large or in a suspicious series
you reported immediately
the bank failed to block promptly after notice
transactions continued after the block request
the merchant proof is weak or absent
the signature is not yours
delivery was not to you
the phone number/email on file was changed without your consent
there is evidence of phishing, SIM swap, malware, or account takeover
the bank’s denial is generic and unsupported

21. Practical mistakes that weaken a dispute

These often hurt cases:

waiting too long to report
failing to submit a written complaint
paying attention only to the principal and not the related charges
sharing OTP, PIN, CVV, or password
letting someone else regularly use your card
ignoring bank requests for documents
failing to keep screenshots and reference numbers
confusing a merchant/service complaint with pure fraud
not checking whether the charge recurs
not escalating when the bank gives only boilerplate responses

22. A model dispute timeline

A good response sequence looks like this:

Day 0 You discover the charge, block the card, get a reference number, change credentials, screenshot everything.

Day 0 or 1 You submit a written dispute and complete the bank’s form.

Day 1 to 7 You monitor for acknowledgment, follow up for case number, submit additional documents, and pay the undisputed portion before due date.

Day 7 onward You request updates, ask whether provisional credit will be given, and demand reversal of all related finance charges.

If denied You ask for full written basis, then file reconsideration and escalate internally.

If still unresolved You elevate the matter to BSP and consider legal options depending on the amount and evidence.

23. Sample legal positions a cardholder may assert

A Philippine cardholder disputing unauthorized charges commonly argues:

No consent There was no meeting of minds and no valid authorization for the transaction.
Prompt notice The cardholder reported the compromise immediately, limiting or cutting off liability for later transactions.
Lack of merchant proof The issuer cannot produce reliable evidence linking the cardholder to the transaction.
Authentication is disputed Any OTP or digital authentication was compromised, intercepted, or obtained through fraud.
Bank security failure The issuer failed to detect and prevent suspicious activity despite unusual transaction patterns or known fraud indicators.
Improper billing Continuing to assess interest and penalties on a genuinely disputed charge is unfair and should be reversed.
Consumer protection The bank’s complaints handling, disclosures, or fraud controls fell short of expected standards.

24. Common defenses banks raise

Banks typically respond with one or more of the following:

the transaction was chip-and-PIN or chip read
the OTP was successfully entered
the 3D Secure challenge was completed
the merchant provided valid proof
the cardholder was negligent
the customer failed to report on time
the transaction matched historical behavior
the goods or services were delivered
it is a merchant dispute, not an unauthorized charge
the charge was made by a supplementary or entrusted user

Each of these defenses can be tested against actual evidence.

25. When does the issue become a court case?

Most card disputes do not end in court. They are usually resolved through:

bank’s internal dispute unit
chargeback process
bank customer advocacy/escalation office
BSP consumer complaint mechanisms

A court case becomes more likely when:

the amount is substantial
the bank’s refusal appears arbitrary
there is significant documentary support for the consumer
the dispute caused major damages
there are related claims for moral, actual, or exemplary damages
the fraud involves identifiable wrongdoers

At that stage, the exact cause of action and evidence strategy become very case-specific.

26. Best practices to prevent unauthorized transactions

Preventive measures matter because banks examine customer conduct closely.

activate transaction alerts
review statements and app activity regularly
never share OTP, CVV, PIN, password, or full card details
avoid saving card details on unfamiliar sites
use virtual cards or tokenized payments where available
lock the card when not in use, if the app allows it
disable foreign or online usage when unnecessary
use strong device security
update apps and operating systems
protect your mobile number from SIM swap risks
cancel subscriptions in writing and keep records

27. A practical dispute letter outline

A concise, effective letter would contain:

Subject: Dispute of Unauthorized Credit Card Transaction

Identify yourself and the card.
Identify each disputed transaction.
State plainly that you did not authorize, make, receive, or benefit from it.
State whether the physical card remained in your possession.
State when and how you reported it and provide the reference number.
Request investigation, reversal, replacement card, and written explanation.
Demand that related interest, late fees, and collection activity be suspended or reversed.
Attach evidence.
Keep proof of submission.

28. Final legal and practical takeaways

In the Philippines, unauthorized credit card transaction disputes are won or lost on speed, documentation, precise classification of the problem, and persistence. The strongest consumer position is usually this:

the transaction was genuinely unauthorized
the cardholder acted promptly
the bank was notified immediately
the evidence does not reliably prove consent
the bank should reverse both the principal amount and related charges
adverse collection or credit consequences tied solely to the disputed fraud should be corrected

The biggest mistake is passivity. A cardholder should not merely call once and wait. The record must be built carefully: written dispute, proof of notice, proof of non-authorization, proof of follow-up, and escalation when needed.

Because each case turns on its facts, the most important legal question is rarely just “Was there a charge?” It is: Can the bank actually prove that you validly authorized it, despite your prompt and documented denial?

This is general legal information for Philippine context and not a substitute for advice on a specific case.