Finding an unauthorized charge on your credit card is stressful because the amount may already appear on your bill, the bank may expect payment, and you may not know whether the transaction came from card skimming, phishing, an online merchant, a lost card, or an account takeover. In the Philippines, you have specific rights as a credit cardholder: you can report billing errors, dispute suspected fraud, ask the issuer to investigate, request reversal of unauthorized charges, and escalate unresolved complaints to the Bangko Sentral ng Pilipinas (BSP). This guide explains what counts as an unauthorized credit card transaction, the legal rules that apply, what to do step by step, what documents to prepare, and how to escalate if the bank does not resolve the problem properly.

What Counts as an Unauthorized Credit Card Transaction?

An unauthorized credit card transaction is a charge you did not approve, request, participate in, or benefit from. It usually involves someone using your card, card details, online banking credentials, one-time password (OTP), device, or account access without your consent.

Common examples include:

Online purchases you did not make
Foreign currency charges while you were in the Philippines or somewhere else
Multiple small “test” charges followed by a large transaction
Cash advances you did not request
App, wallet, or subscription charges you never authorized
Transactions after your physical card was lost or stolen
Charges made after phishing, smishing, vishing, malware, or account takeover
Charges made using a cloned or skimmed card

Not every unwanted charge is technically “unauthorized.” Some are merchant disputes or billing disputes, such as:

A merchant charged you twice
You cancelled a hotel or airline booking but were still charged
A subscription renewed after a free trial
Goods were defective or never delivered
The amount charged was higher than the amount you agreed to pay

The distinction matters because the evidence and outcome may differ. But in practice, you should still report the problem to your card issuer promptly and clearly describe whether you are disputing it as fraud, unauthorized use, billing error, or merchant non-performance.

Your Legal Rights Under Philippine Law

Credit card rules under RA 10870 and BSP Circular No. 1003

The main Philippine law on credit cards is Republic Act No. 10870, also known as the Philippine Credit Card Industry Regulation Law. It regulates credit card issuers, acquirers, merchants, billing, disclosures, collection practices, and cardholder complaints. RA 10870 requires credit card issuers to maintain a customer assistance unit and gives cardholders a period to report billing errors or discrepancies. It also requires issuers to act on those reports within a specific time. (Supreme Court E-Library)

Under RA 10870 and BSP Circular No. 1003, a credit card issuer must give the cardholder up to 30 calendar days from the statement date to report a billing error or discrepancy. The report may be written, verbal, or made through another documented means allowed by the issuer. The issuer must act on the report within 10 business days from receipt of the notice and required documents. (Supreme Court E-Library)

The issuer must also investigate and resolve the dispute within the period provided in the BSP rules. Under the implementing guidelines, the issuer must investigate the matter and make appropriate corrections, if warranted, within 90 days after receiving the cardholder’s notice. Before collecting the contested amount, the issuer must send the cardholder a written explanation or clarification if it concludes that the billing is correct. (Supreme Court E-Library)

For lost or stolen cards, Philippine credit card rules contain an important limitation: transactions made before you report the loss or theft are generally for the cardholder’s account. However, the BSP rules also recognize that the cardholder still has the right to dispute those transactions. If the transaction is found to be unauthorized or fraudulent, the issuer must correct or reverse it, including related finance charges and fees. (Supreme Court E-Library)

Financial consumer protection under RA 11765 and BSP Circular No. 1160

Credit card disputes are also covered by Republic Act No. 11765, the Financial Products and Services Consumer Protection Act. This law applies to financial products and services offered by financial service providers and gives regulators, including the BSP, authority over consumer protection, complaints handling, enforcement, and consumer redress. (Supreme Court E-Library)

The BSP’s financial consumer protection rules recognize key consumer rights, including equitable and fair treatment, disclosure and transparency, protection of consumer assets against fraud and misuse, data privacy, and timely handling of complaints.

Under BSP Circular No. 1160, BSP-supervised financial institutions must have accessible complaint channels, including phone, email, web, mobile app, or in-person channels where appropriate. For fraud concerns, institutions are expected to provide channels that allow prompt reporting, including dedicated customer care facilities.

The same BSP rules require institutions to assist consumers in fraudulent or unauthorized transaction concerns, provide clear information on the actions taken, inform consumers of their responsibilities, and handle fraud-related complaints fairly and promptly. In appropriate cases, the institution may suspend interest or fees, place temporary holds, block or freeze accounts, or provide provisional treatment while the investigation is pending.

If the investigation shows that the transaction was unauthorized or fraudulent, the institution should reverse or correct the transaction and related interest, charges, and fees. In determining liability, the BSP rules consider the actions or omissions of both the account holder and the financial institution, including its employees, agents, service providers, and compliance with applicable regulations.

Criminal laws may also apply

If someone used your credit card, card number, online account, OTP, device, or access credentials through fraud, the conduct may fall under Republic Act No. 8484, the Access Devices Regulation Act of 1998, as amended by RA 11449. The law covers credit cards, payment cards, account numbers, PINs, codes, and other access devices used to obtain money, goods, services, or initiate transfers. (Supreme Court E-Library)

RA 11449 penalizes acts such as using counterfeit access devices, skimming or copying cards, producing or possessing skimming devices or malware tools, and fraudulently accessing online banking accounts, credit card accounts, ATM or debit card accounts, and similar access accounts. (Supreme Court E-Library)

Issuers and partner merchants are also required to conduct an initial investigation of reported access device fraud and furnish real-time reports to the National Bureau of Investigation (NBI) and the Philippine National Police Anti-Cybercrime Group (PNP-ACG), where appropriate. (Supreme Court E-Library)

A criminal complaint may help identify and prosecute the fraudster, but it is separate from your credit card dispute with the bank. You usually still need to file the bank dispute so the issuer can investigate and reverse the charge if warranted.

What to Do Immediately After You See an Unauthorized Charge

1. Lock or block the card right away

Use the bank’s mobile app, hotline, or customer service channel to lock, freeze, or block the card. If the transaction appears to be fraud, ask for a permanent card replacement, not just a temporary lock.

When reporting, say clearly:

“I am reporting suspected unauthorized or fraudulent credit card transactions. Please block the card immediately, prevent further transactions, and provide a reference number for this report.”

Ask for:

The report reference number
The exact date and time of your report
The name or ID of the agent, if available
Confirmation that the card was blocked
Confirmation that no further transactions will be allowed on the old card

Do not share your full card number, CVV, PIN, password, OTP, or online banking password with anyone who calls or messages you. BSP consumer advisories consistently remind consumers not to disclose sensitive credentials when filing complaints or responding to fraud concerns. (Bureau of Small and Medium Enterprises)

2. List every disputed transaction

Prepare a simple table or note with:

Transaction date
Posting date
Merchant name
Amount
Currency
Whether it was online, in-store, cash advance, or unknown
Whether you received an SMS, email, or app notification
Why you believe it is unauthorized

If there are several transactions, do not report only the biggest one. Fraudsters often test a card with a small amount before making larger purchases.

3. File a written dispute within 30 days from statement date

Do not rely only on a hotline call. The hotline report is useful for blocking the card, but a written dispute creates a clearer record.

Under the credit card rules, issuers must give you up to 30 calendar days from the statement date to report a billing error or discrepancy, and the issuer must act within 10 business days after receiving your notice and required documents. (Supreme Court E-Library)

Send the dispute through the bank’s official channels, such as:

In-app dispute form
Official customer service email
Credit card fraud hotline
Branch submission
Secure message through online banking
Bank’s financial consumer protection or complaints unit

Keep proof of submission. Screenshot the confirmation page, save the email, and write down the ticket number.

4. Ask for temporary reversal or suspension of charges

While the investigation is pending, ask the issuer in writing to:

Temporarily reverse or provisionally credit the disputed amount
Suspend finance charges, interest, penalties, and late fees on the disputed amount
Prevent the disputed amount from being treated as delinquent
Mark the account as “under dispute”
Stop collection action on the contested amount until the investigation is completed

BSP rules on financial consumer protection support fair treatment of disputed unauthorized transactions and recognize measures such as suspension of interest or fees, provisional handling, temporary holds, account blocking, and correction or reversal where fraud is established.

5. Pay the undisputed portion of your bill

If your statement includes both valid charges and disputed charges, pay the undisputed portion on time. This helps avoid late payment issues unrelated to the fraud dispute.

If the bank insists that you pay the full amount while the investigation is pending, you may pay the contested amount under protest to avoid penalties or credit consequences, but make it clear in writing that payment does not mean you admit the transaction is valid.

A simple line can help:

“Any payment made on the disputed amount is made under protest and without waiver of my dispute, reversal request, and rights under applicable BSP regulations.”

6. Follow up before the 10-business-day and 90-day marks

Make a follow-up calendar. Ask for a status update before the 10-business-day action period and again if the investigation approaches 90 days.

Your follow-up should ask:

Has the transaction been tagged as disputed?
Has the merchant or acquiring bank responded?
Has a chargeback or fraud investigation been initiated?
Are interest, finance charges, and penalties suspended on the disputed amount?
When will the written explanation or reversal be issued?

The issuer should investigate and make appropriate correction, or provide written explanation, before taking action to collect the contested amount. (Supreme Court E-Library)

Sample Dispute Email You Can Send to the Bank

Subject: Dispute of Unauthorized Credit Card Transactions – [Your Name] / [Last 4 Digits of Card]

Dear [Bank Name] Credit Card Disputes Team,

I am formally disputing the following credit card transactions as unauthorized and fraudulent:

Transaction Date	Posting Date	Merchant	Amount	Currency
[Date]	[Date]	[Merchant Name]	[Amount]	[PHP/USD/etc.]
[Date]	[Date]	[Merchant Name]	[Amount]	[PHP/USD/etc.]

I did not authorize, participate in, or benefit from these transactions. I request that the bank immediately block the compromised card, issue a replacement card, investigate these transactions, and reverse the unauthorized charges, including any related interest, finance charges, foreign transaction fees, penalties, and other charges.

I also request that the disputed amounts be marked as under dispute and excluded from collection activity while the investigation is pending. If payment is required to avoid delinquency, any payment on the disputed amount will be made under protest and without waiver of my dispute.

Attached are copies of my billing statement, transaction alerts, screenshots, identification document, and prior report reference number: [reference number].

Please acknowledge receipt and provide the status of the investigation in accordance with applicable BSP rules.

Sincerely, [Your Name] [Mobile Number] [Email Address]

Timelines: What the Bank and BSP Usually Do

Stage	Typical timeline	What it means
Immediate fraud report	Same day	Card should be blocked or restricted to prevent further use.
Written dispute to issuer	Ideally immediately; credit card rules allow up to 30 calendar days from statement date	File as early as possible. Do not wait for the deadline.
Issuer action on billing error/discrepancy	Within 10 business days from receipt of notice and documents	The bank should act on your report and tell you what is being done.
Issuer investigation and correction/explanation	Within 90 days after notice	The bank should investigate, reverse if warranted, or give a written explanation before collecting the contested amount.
BSP Consumer Assistance Mechanism	Often around 55–65 days	Available if the bank’s own complaints process does not resolve the issue.
BSP adjudication, if applicable	Often around 180–240 days	For eligible civil money claims after BSP-CAM or mediation steps, subject to BSP rules.

BSP guidance explains that consumers should first report complaints to the financial institution’s own consumer assistance or complaints mechanism. If the issue remains unresolved, the consumer may escalate to the BSP Consumer Assistance Mechanism. BSP materials describe the BSP-CAM process as a second-level recourse that may take around 55 to 65 days.

For eligible unresolved disputes, BSP adjudication may be available for purely civil financial transactions involving a claim or reimbursement of money not exceeding ₱10 million, exclusive of legal interest, attorney’s fees, and costs. BSP guidance states that adjudication may take around 180 to 240 days, or roughly six to eight months.

Documents and Evidence to Prepare

The stronger your documentation, the harder it is for the dispute to be dismissed as vague or unsupported.

Document or evidence	Why it helps
Credit card statement showing the disputed charge	Proves the amount, posting date, merchant, and account involved.
SMS, email, or app alerts	Shows when you first became aware of the transaction.
Screenshot of the transaction in the bank app	Helps preserve details if the app display later changes.
Written dispute email or dispute form	Proves you reported within the allowed period.
Hotline reference number	Shows immediate reporting and card blocking.
Proof of your location	Helpful if the charge was made in another country or at a physical store while you were elsewhere.
Passport stamps, boarding passes, work logs, delivery logs, or CCTV request	Can support an alibi for in-person or foreign transactions.
Merchant cancellation or refund correspondence	Useful for subscription, hotel, airline, or e-commerce disputes.
Affidavit of unauthorized transaction	Some banks request a sworn statement, especially for larger fraud amounts.
Police, NBI, PNP-ACG, or CICC report	Useful for phishing, skimming, identity theft, or account takeover cases.
Special Power of Attorney	Needed if someone else will represent you in formal proceedings or bank submissions.

For Filipinos abroad and foreigners outside the Philippines, documents such as affidavits or Special Powers of Attorney may need proper notarization, consular notarization, or an apostille, depending on where the document is executed and where it will be used. Philippine consular guidance recognizes both consular notarization and apostille routes for documents intended for use in the Philippines. (Philippine Embassy)

Common Real-Life Scenarios and How to Handle Them

Your card was lost or stolen

Report it immediately. The timing of your report matters because Philippine credit card rules state that transactions before the issuer is notified of a lost or stolen card are generally for the cardholder’s account. But you can still dispute the transaction, and if the issuer finds that it was unauthorized or fraudulent, the charge and related fees should be corrected or reversed. (Supreme Court E-Library)

Practical tip: after reporting, ask the bank to confirm in writing the exact date and time the card was blocked. This can become important if more transactions appear after your report.

The bank says the transaction used an OTP

An OTP is strong evidence, but it should not automatically end the investigation. Ask the bank for the transaction details it can disclose, such as:

The merchant category
Whether the transaction was 3D Secure or card-not-present
Date and time of OTP generation
The mobile number or channel to which the OTP was sent
Whether there was a device change, SIM change, email change, password reset, or login from a new device
Whether the transaction matched your usual spending pattern

BSP rules on unauthorized transactions require fair evaluation of disputed claims and consider the actions or omissions of both the consumer and the financial institution, including compliance with consumer protection rules and the involvement of employees, agents, or service providers.

You were charged for a subscription you forgot to cancel

This may be a merchant dispute rather than fraud. If you previously entered your card details and agreed to recurring billing, the bank may treat it differently from a hacked-card case.

Still, you can:

Cancel directly with the merchant
Save proof of cancellation
Ask the merchant for refund
Dispute the charge if the merchant billed after cancellation or failed to disclose recurring charges clearly

A family member or supplementary cardholder used the card

This is often harder to dispute as fraud. If the person was an authorized supplementary cardholder or had permission to use the card, the issuer may treat the charge as valid. If the person exceeded permission or used the card after authority was withdrawn, evidence becomes important.

Prepare proof such as:

Date authority was withdrawn
Messages telling the person not to use the card
Police or barangay blotter, if there was theft or abuse
Request to cancel supplementary card, if already made

You are an OFW or foreigner outside the Philippines

You can usually file the dispute by email, app, hotline, or secure online banking. The main difficulty is documentation, especially if the bank asks for a notarized affidavit or a representative in the Philippines.

For formal representation, especially in BSP adjudication or court-related steps, a Special Power of Attorney may be required. BSP guidance states that a representative must have authority, such as a Special Power of Attorney, when acting for a consumer in adjudication proceedings.

The account was sent to collections while under dispute

Credit card collection must be done in good faith and with reasonable conduct. BSP credit card rules prohibit unfair collection practices, including false representations, failure to communicate that a debt is disputed, and unreasonable contact times such as before 6:00 a.m. or after 10:00 p.m., except in specified circumstances. Banks must also notify a cardholder in writing before endorsing the account to a collection agency. (Supreme Court E-Library)

If a collector contacts you about a disputed unauthorized charge, respond in writing:

“This amount is formally disputed as an unauthorized transaction. Please coordinate with the issuing bank and ensure your records reflect that the debt is disputed.”

Keep screenshots, call logs, recordings where legally obtained, and copies of letters or text messages.

How to Escalate if the Bank Denies or Ignores Your Dispute

Step 1: Use the bank’s complaint process first

Before going to the BSP, file through the bank’s Financial Consumer Protection Assistance Mechanism or official complaints channel. BSP rules treat this as the first level of recourse. Consumers dissatisfied with the institution’s handling may then escalate to the BSP.

Your complaint should include:

Your full name and contact details
Bank name and credit card type
Last four digits of the card only
Disputed transaction details
Date you first reported the fraud
Ticket or reference numbers
Copies of the bank’s responses
The specific resolution you want, such as reversal of the charge and removal of related fees

Step 2: Escalate to the BSP Consumer Assistance Mechanism

If the bank does not act, delays unreasonably, denies the dispute without adequate explanation, or continues collection on a properly disputed amount, you may escalate to the BSP Consumer Assistance Mechanism.

BSP guidance explains that complaints may be filed through the BSP Online Buddy or other BSP consumer assistance channels, and that the consumer should provide details of the complaint, the requested resolution, proof of prior complaint to the financial institution, and the financial institution’s reply if available. (Bureau of Small and Medium Enterprises)

In BSP-CAM, the financial institution is generally required to answer, and the consumer may be asked to reply. BSP materials describe stages such as the institution’s answer, consumer’s reply, possible rejoinder, and possible mediation if both sides agree.

Step 3: Consider BSP adjudication for eligible money claims

If BSP-CAM or mediation does not resolve the dispute, BSP adjudication may be available for eligible cases. It applies to certain purely civil financial transactions involving claims or reimbursement of money not exceeding ₱10 million, exclusive of legal interest, attorney’s fees, and costs.

A formal BSP adjudication complaint generally requires verification, certification of non-forum shopping, supporting documents, affidavits, and a statement that BSP-CAM or mediation was already availed of or terminated. BSP guidance states that a formal complaint may be filed personally or by postal mail and that no filing fee is charged for the formal complaint.

Do not skip BSP-CAM if BSP rules require it. BSP guidance states that a direct formal complaint may be dismissed if the consumer did not first go through the required BSP-CAM process.

Step 4: Report criminal fraud when appropriate

If the facts suggest phishing, identity theft, account takeover, card skimming, SIM-related fraud, or organized fraud, consider reporting to:

PNP Anti-Cybercrime Group
NBI Cybercrime Division
Cybercrime Investigation and Coordinating Center
Local police station for blotter and initial documentation

A criminal report is especially useful if:

Your identity documents were used
Your SIM, email, or device was compromised
There are multiple victims
The amount is large
You need official documentation for the bank or insurer

Step 5: Court options for civil claims

If the dispute becomes a civil claim for reimbursement or damages, court may be an option. The legal basis may include contract and damages principles under the Civil Code. Article 1159 provides that obligations arising from contracts have the force of law between the parties and must be complied with in good faith, while Article 1170 provides liability for damages for fraud, negligence, delay, or contravention of obligations. (Supreme Court E-Library)

For smaller civil money claims, the Supreme Court’s rules on small claims may apply if the claim does not exceed ₱1 million, exclusive of interest and costs. For larger or more complex claims, ordinary civil procedure or other remedies may be involved. (Supreme Court of the Philippines)

Court should be considered carefully because it involves time, evidence, filing requirements, and possible costs. For many credit card disputes, the practical route is still: bank dispute first, BSP escalation next, then formal adjudication or court if needed.

Mistakes That Can Hurt Your Dispute

Avoid these common errors:

Waiting until after the 30-day statement period before reporting
Reporting only by phone and keeping no written record
Paying the disputed amount without saying it is under protest
Ignoring the undisputed portion of the bill
Deleting SMS alerts, emails, screenshots, or call logs
Giving your OTP, CVV, PIN, password, or full card number to someone who contacts you
Filing a vague complaint that says only “please reverse” without explaining why the transaction is unauthorized
Not asking the bank to suspend fees or collection on the disputed amount
Assuming a BSP complaint can be filed first without using the bank’s complaint process
Treating a subscription or refund issue as fraud when the evidence shows it is actually a merchant dispute

Frequently Asked Questions

How many days do I have to dispute an unauthorized credit card transaction in the Philippines?

Under Philippine credit card rules, issuers must give cardholders up to 30 calendar days from the statement date to report a billing error or discrepancy. You should report much earlier if you can, especially for suspected fraud, because immediate reporting helps stop further transactions and strengthens your record. (Supreme Court E-Library)

What if I noticed the charge before the billing statement arrived?

Report it immediately. Do not wait for the statement date. The 30-day rule is a maximum reporting period tied to the statement, not a reason to delay. Early reporting helps the bank block the card, preserve records, and start investigation.

Do I still need to pay the disputed charge while the bank investigates?

Pay the undisputed portion of your bill on time. For the disputed amount, ask the bank in writing to suspend interest, penalties, collection, and adverse treatment while the investigation is pending. If you decide to pay the contested amount to avoid delinquency, clearly state that payment is made under protest and does not waive your dispute.

The bank denied my dispute because an OTP was used. Can I still challenge it?

Yes. An OTP is important evidence, but it is not always the end of the matter. You can ask the bank to explain the basis of denial, provide transaction details it can disclose, and evaluate whether there was phishing, SIM compromise, device takeover, malware, social engineering, account change, or weakness in the bank’s controls. BSP rules require fair evaluation of unauthorized transaction claims and consider both consumer and institution conduct.

What happens if my card was lost or stolen and I reported it late?

Transactions before your report are generally for the cardholder’s account under Philippine credit card rules. However, you still have the right to dispute those transactions. If the investigation shows that they were unauthorized or fraudulent, the issuer must correct or reverse the transactions, including related finance charges and fees. (Supreme Court E-Library)

Can I complain directly to the BSP?

Usually, you must first complain to the bank or BSP-supervised institution through its own complaint or financial consumer assistance mechanism. If the issue remains unresolved, the bank does not respond, or you are dissatisfied with the handling, you may escalate to the BSP Consumer Assistance Mechanism.

Do I need a police report or NBI report to get a reversal?

Not always. The credit card dispute is primarily handled by the issuer. However, a police, NBI, PNP-ACG, or CICC report can be useful, especially for large fraud amounts, phishing, identity theft, account takeover, SIM-related fraud, or when the bank asks for additional documentation.

Can foreigners dispute unauthorized credit card charges in the Philippines?

Yes. A foreigner with a Philippine-issued credit card generally uses the same bank dispute process. The main practical differences are identification documents, Philippine contact details, and documentation if the foreigner is abroad. If a representative will act in the Philippines, the bank or forum may require a Special Power of Attorney, and documents executed abroad may need notarization, consular notarization, or apostille depending on the circumstances. (Philippine Embassy)

What if the card was issued by a foreign bank but used at a Philippine merchant?

File the dispute with the foreign issuing bank because the issuer controls your card account and chargeback process. The Philippine merchant, acquiring bank, or payment processor may be involved in the investigation through the card network, but BSP complaint processes generally apply to BSP-supervised institutions, not foreign banks outside Philippine regulatory jurisdiction.

Will a disputed unauthorized transaction affect my credit record?

It should not be treated the same way as an ordinary unpaid debt if it is properly disputed. Ask the bank in writing to mark the amount as disputed and to avoid collection reporting while the investigation is pending. If the bank endorses the account to a collector or reports negative information despite the dispute, keep records and raise this in your BSP complaint.

Key Takeaways

Report suspected unauthorized credit card transactions immediately and have the card blocked or replaced.
File a written dispute with the issuer and keep proof of submission, reference numbers, screenshots, and statements.
Philippine credit card rules give cardholders up to 30 calendar days from the statement date to report billing errors or discrepancies, and issuers must act within 10 business days after receiving the notice and documents.
The issuer should investigate and either correct the charge or give a written explanation before collecting the contested amount.
If the charge is found unauthorized or fraudulent, the issuer should reverse the transaction and related interest, charges, and fees.
Pay the undisputed portion of your bill, and clearly state “under protest” if you pay the contested amount while preserving your dispute.
Use the bank’s complaint process first, then escalate to the BSP Consumer Assistance Mechanism if the bank fails to resolve the issue.
For phishing, skimming, identity theft, or account takeover, consider a separate report to the PNP-ACG, NBI, CICC, or local police.
Never disclose your OTP, CVV, PIN, password, or full card details to anyone who contacts you about the dispute.