Introduction

Unauthorized online charges are increasingly common in the Philippines because many Filipinos now use credit cards, debit cards, mobile wallets, online banking, subscriptions, delivery apps, shopping platforms, gaming services, and digital payment channels. A person may suddenly discover a charge for an item not purchased, a subscription not approved, a duplicated payment, an app transaction made without consent, or a foreign online merchant billing the account without authority.

When this happens, the affected consumer should act quickly. Refund rights may depend on the type of account used, the merchant involved, the payment channel, the timing of the report, the evidence available, and whether the transaction was truly unauthorized, fraudulent, erroneous, or merely disputed.

In the Philippine context, a refund request may involve consumer protection law, banking rules, electronic commerce principles, data privacy, contract law, credit card regulations, digital financial services rules, and the internal chargeback or dispute procedures of banks, e-wallets, payment processors, and merchants.

This article explains what unauthorized online charges are, what rights a consumer may have, how to dispute the charge, what documents to prepare, what agencies may be involved, and what practical steps may improve the chances of recovering the money.

What Is an Unauthorized Online Charge?

An unauthorized online charge is a payment, debit, transfer, subscription, or purchase made through an online or electronic channel without the account holder’s permission.

It may appear on:

a credit card statement;
a debit card statement;
an online banking transaction history;
a mobile wallet account;
an e-commerce account;
a subscription account;
an app store billing history;
a payment gateway confirmation;
a bank account;
a virtual card;
a prepaid card;
a linked payment method.

The charge may be local or foreign, small or large, one-time or recurring.

Common Examples of Unauthorized Online Charges

Unauthorized online charges may include:

Credit card fraud A charge appears on the cardholder’s statement even though the cardholder did not buy the item or service.
Debit card fraud Money is deducted directly from the bank account through an online card transaction.
Unauthorized e-wallet transaction A payment, transfer, cash-in, cash-out, or online purchase is made through a mobile wallet without the user’s consent.
Subscription billing without consent A merchant or app charges the user for a subscription the user did not knowingly approve.
Free trial converted into paid subscription The user signs up for a free trial but is later charged after failing to cancel, or without clear notice.
Duplicate charge The user is charged twice for the same transaction.
Failed transaction but money deducted The order failed, but the bank, card, or e-wallet still deducted the amount.
Merchant overcharge The merchant charges more than the authorized amount.
Card-not-present fraud The card details are used online without the physical card.
Phishing-related transaction The account holder was tricked into providing OTP, password, card number, or account details.
Unauthorized recurring billing A merchant keeps charging the account after cancellation.
In-app purchase by another person A child, relative, employee, or third party makes purchases through a saved payment method.
Account takeover Someone gains access to the user’s shopping, gaming, app store, social media, or wallet account and makes purchases.
Unauthorized loan, credit, or buy-now-pay-later charge A digital credit facility is used without the owner’s authorization.

Unauthorized Charge vs. Disputed Charge

Not every unwanted charge is legally “unauthorized.” It is important to distinguish different types of cases.

Unauthorized charge

This means the account holder did not approve or participate in the transaction.

Example: A credit card was used by an unknown person to buy items online.

Erroneous charge

This means the transaction may have been authorized, but the amount, timing, or processing was wrong.

Example: The user was charged twice for one purchase.

Merchant dispute

This means the user authorized payment but has a dispute with the merchant.

Example: The item was not delivered, the product was defective, or the service was not provided.

Subscription dispute

This means the user may have agreed to a trial or plan but disputes the renewal, cancellation, or disclosure.

Example: The user cancelled an app subscription but was still charged.

Fraud induced by scam

This means the user may have been tricked into authorizing a transaction.

Example: The user gave an OTP to a fake bank agent.

Different categories may follow different refund procedures. A bank may treat pure card fraud differently from a merchant dispute or scam-induced transfer.

First Rule: Act Immediately

Time matters. The faster the consumer reports the unauthorized charge, the better the chance of stopping further loss and preserving refund rights.

Once the charge is discovered, the consumer should immediately:

lock or freeze the card or account;
change passwords and PINs;
report the transaction to the bank, card issuer, e-wallet, or payment provider;
contact the merchant, if identifiable;
preserve screenshots and transaction details;
file a formal dispute or chargeback request;
ask for a case or reference number;
monitor the account for more charges.

Delay may weaken the claim, especially if the bank or wallet provider has reporting deadlines in its terms and conditions.

Step-by-Step Guide to Getting a Refund

Step 1: Identify the Transaction

Start by gathering all details of the charge:

transaction date and time;
posting date;
amount;
currency;
merchant name;
reference number;
authorization code, if shown;
payment method used;
last four digits of the card;
account or wallet involved;
screenshots of the transaction;
email or SMS alerts;
order number, if any;
device used, if known;
location or IP information, if available.

Some merchant names on statements are not obvious. A billing descriptor may differ from the app or website name. Search within your email, SMS, app store history, and merchant accounts to see whether the charge is linked to a known subscription or purchase.

Step 2: Secure the Account

Before requesting a refund, prevent further unauthorized transactions.

For cards:

lock or block the card through the bank app or hotline;
request card replacement;
disable online transactions, if available;
remove the card from saved merchants;
change online banking password.

For e-wallets:

change MPIN or password;
unlink compromised cards or bank accounts;
enable biometrics or stronger authentication;
log out of all devices;
report unauthorized access.

For online shopping or subscription accounts:

change password;
remove saved payment methods;
check order history;
cancel unknown subscriptions;
enable two-factor authentication;
review logged-in devices.

For email accounts:

change password;
check forwarding rules;
review recovery email and phone number;
enable two-factor authentication.

A compromised email account can allow attackers to reset banking, shopping, or subscription accounts.

Step 3: Report to the Bank, Card Issuer, or E-Wallet Provider

Immediately contact the financial institution or payment provider.

Use official channels only:

official hotline;
official mobile app support;
official website;
branch;
in-app ticket system;
verified email address.

Avoid calling phone numbers found in suspicious SMS messages, emails, or social media posts.

When reporting, state clearly:

“I am disputing an unauthorized online charge. I did not authorize, participate in, or benefit from this transaction. Please block further charges, investigate, and process a refund or chargeback.”

Ask for:

case number;
dispute form;
required documents;
investigation timeline;
whether provisional credit is available;
whether card replacement is needed;
confirmation that the account is secured;
written acknowledgment.

Step 4: File a Formal Dispute or Chargeback

A phone call may not be enough. Many banks and payment providers require a written dispute form or online ticket.

The dispute should state:

the transaction details;
why it is unauthorized;
when the charge was discovered;
when it was reported;
whether the card or device was in the consumer’s possession;
whether any OTP, password, or PIN was shared;
whether the consumer received alerts;
whether the merchant was contacted;
what refund is requested.

For credit cards, the process may be called a chargeback, transaction dispute, or cardholder dispute.

For e-wallets or online banking, it may be called an unauthorized transaction investigation, fraud report, consumer complaint, or reversal request.

Step 5: Contact the Merchant

If the merchant is identifiable, contact it immediately. This is especially useful for subscription, app store, e-commerce, gaming, travel, food delivery, digital goods, or software charges.

Ask the merchant to:

cancel the unauthorized order;
stop shipment or service delivery;
cancel the subscription;
reverse the charge;
provide order details;
confirm the account used;
preserve logs for investigation;
issue written refund confirmation.

For app store or platform charges, the refund may need to be requested through the platform’s refund system rather than directly from the developer.

Step 6: Preserve Evidence

Evidence is critical. Keep copies of:

bank or wallet statements;
SMS or email alerts;
screenshots of unauthorized charges;
dispute forms;
emails to and from the bank or merchant;
case numbers;
chat transcripts;
cancellation confirmation;
refund request confirmation;
screenshots of account security changes;
proof that the card was in your possession;
proof that you were elsewhere when the transaction occurred, if relevant;
police or cybercrime report, if filed;
affidavits, if required.

Do not delete suspicious emails, texts, or app notifications. They may show phishing, account takeover, or unauthorized access.

Step 7: Follow Up in Writing

After the initial report, send a written follow-up. Written records help if the matter is escalated to regulators or court.

A concise message may say:

I reported an unauthorized online charge on [date] under case number [number]. I request written confirmation of the status of the investigation, the expected resolution date, and whether a provisional credit or refund will be issued. I also request confirmation that my card/account has been blocked from further unauthorized transactions.

Step 8: Escalate if Denied or Ignored

If the bank, wallet, or merchant denies the refund or fails to act, ask for:

the reason for denial;
documents relied upon;
proof of authorization;
transaction logs;
delivery details;
device or authentication details;
copy of the investigation result;
appeal procedure.

If the response is unsatisfactory, escalation may be made to the institution’s complaints unit, then to the proper regulator or government agency.

Legal Bases and Consumer Rights in the Philippines

Unauthorized online charges may involve several legal principles.

1. Contract and Consent

Payment transactions are based on authority and consent. If a person did not authorize a charge, the merchant or payment processor may be required to prove that the transaction was validly authorized.

A consumer may argue that there was no valid contract, no consent, or no authority to debit the account.

2. Consumer Protection

Consumers are protected against deceptive, unfair, or unconscionable sales acts and practices. If an online merchant misleads the consumer, hides recurring charges, refuses to honor cancellations, or imposes undisclosed fees, consumer protection remedies may apply.

For digital products and services, transparency in pricing, subscription terms, cancellation rules, renewal charges, and refund policies is important.

3. Electronic Commerce

Online transactions, electronic records, and digital confirmations may have legal effect. However, electronic authorization must still be valid. A merchant cannot rely on a mere system entry if the consumer can show that the transaction was unauthorized, fraudulent, or processed in error.

4. Banking and Financial Consumer Protection

Banks, card issuers, and supervised financial institutions are expected to maintain systems for consumer protection, complaint handling, fraud management, and transaction security.

Customers are also expected to exercise care in protecting credentials, OTPs, devices, cards, and passwords. The outcome of a refund claim may depend on whether the unauthorized transaction resulted from system weakness, merchant error, card compromise, phishing, negligence, or customer participation.

5. Data Privacy

Unauthorized online charges may involve improper processing of personal data, especially when card details, account credentials, identity documents, email addresses, or mobile numbers were misused.

A consumer may invoke data privacy rights if a merchant, app, or platform:

processed payment data without authority;
failed to secure personal information;
retained card details without proper basis;
shared personal data with unauthorized parties;
failed to respond to access, deletion, or correction requests;
suffered a data breach affecting the consumer.

6. Cybercrime and Fraud

If the unauthorized charge resulted from hacking, phishing, identity theft, account takeover, malware, SIM-related fraud, or unauthorized access, criminal laws may be relevant.

A consumer may file a report with law enforcement or cybercrime authorities, especially for large amounts, repeated fraud, identity theft, or organized scams.

Credit Card Unauthorized Charges

Credit card disputes are often handled through chargeback rules. The cardholder asks the issuing bank to reverse the charge because it was unauthorized, fraudulent, duplicated, cancelled, or not properly fulfilled.

Advantages of credit card disputes

Credit cards may offer better dispute protection than cash, bank transfer, or debit transactions because payment networks have chargeback procedures.

What to do

The cardholder should:

report the charge immediately;
block the card;
file a dispute form;
identify all unauthorized transactions;
submit supporting documents;
ask whether finance charges will be suspended for the disputed amount;
follow up until resolved.

Common bank questions

The bank may ask:

Was the card in your possession?
Did you share your card details?
Did you receive an OTP?
Did you approve the transaction?
Did a family member use the card?
Did you previously transact with the merchant?
Did you subscribe to the service?
Did you cancel the subscription?
Did you contact the merchant?

Answer truthfully. False statements may damage the claim.

Debit Card Unauthorized Charges

Debit card fraud is more urgent because the money is deducted directly from the deposit account.

The account holder should:

block the debit card immediately;
report unauthorized charges;
request reversal;
ask whether the transaction was PIN-based, OTP-based, or card-not-present;
check if the linked bank account has other suspicious activity;
change online banking credentials;
request replacement card;
monitor the account.

Debit card refunds may take time because the bank may need to investigate whether the transaction was authorized, settled, reversed, or recoverable from the merchant.

E-Wallet Unauthorized Transactions

For mobile wallets, unauthorized charges may involve:

wallet-to-wallet transfers;
online payments;
cash-ins;
cash-outs;
linked card charges;
QR payments;
bills payment;
gaming credits;
load purchases;
digital subscriptions.

The user should:

secure the wallet account;
change MPIN/password;
unlink cards and bank accounts;
report through official support;
file an unauthorized transaction ticket;
request temporary account freeze if needed;
submit valid ID and screenshots;
ask for investigation and reversal.

If the wallet provider claims that the transaction was authenticated by OTP or MPIN, the user may need to explain whether the account was compromised, whether the SIM was lost, whether phishing occurred, or whether there was unauthorized device access.

Online Banking Unauthorized Transfers

Unauthorized online banking transactions may involve fund transfers, bills payment, QR transfers, cardless withdrawals, or merchant payments.

The account holder should immediately:

call the bank hotline;
freeze online banking access;
change password;
report unauthorized transactions;
identify beneficiary accounts;
request fund recall;
ask the bank to preserve logs;
file a written complaint;
report to law enforcement if the amount is substantial.

Fund recall is more difficult once funds have been withdrawn or moved to another account, so speed is crucial.

Subscription and Recurring Charges

Subscription disputes are common. These may involve streaming services, app stores, cloud storage, dating apps, productivity tools, gaming platforms, VPN services, online courses, and foreign merchants.

A charge may be unauthorized if:

the consumer never subscribed;
the subscription was created through account takeover;
the merchant continued billing after cancellation;
the consumer was not properly informed of recurring charges;
the free trial terms were misleading;
the account was charged after closure;
the merchant charged a different amount from what was agreed.

What to do

The consumer should:

cancel the subscription immediately;
take screenshots of cancellation;
request refund from the platform or merchant;
dispute with the bank if the merchant refuses;
remove saved payment methods;
check for other recurring payments.

For subscriptions, banks may ask for proof of cancellation or evidence that the charge was not authorized.

Free Trial Charges

A free trial may lawfully convert into a paid plan if the consumer clearly agreed to the terms. But problems arise when terms are hidden, unclear, misleading, or difficult to cancel.

To dispute a free trial charge, gather:

screenshot of the trial advertisement;
terms shown during sign-up;
cancellation attempt;
cancellation confirmation;
emails from the merchant;
date the trial started;
date the charge occurred;
proof that no service was used after cancellation.

Duplicate Charges

Duplicate charges are often easier to resolve than fraud claims.

The consumer should show:

two identical charges;
same merchant;
same amount;
same date or close dates;
same order number, if available;
proof only one order was made;
merchant confirmation of duplicate billing.

The merchant or bank may reverse one of the charges after verification.

Failed Online Purchase but Amount Deducted

Sometimes an online purchase fails, but the amount is deducted or placed on hold. This may be:

a pending authorization;
a failed settlement;
a payment gateway error;
a merchant reversal delay;
an e-wallet or bank posting issue.

The consumer should ask whether the amount is merely pending or already posted. Pending authorizations may automatically fall off after a period, while posted transactions require formal reversal.

Unauthorized App Store or Gaming Charges

For app store or gaming charges, determine whether the purchase was made through:

app store account;
linked credit card;
carrier billing;
e-wallet;
prepaid credits;
gaming account;
console account.

Secure the account and request refund through the platform’s process. If a child made the purchase, the refund may depend on platform policy, parental control settings, and whether the purchase was truly unauthorized.

Family Member or Child Purchases

A charge made by a family member can be complicated. Banks may treat it differently from third-party fraud if the cardholder allowed the family member to use the device, account, or saved payment method.

The consumer should still report the issue, especially if:

the purchase was accidental;
the user was a minor;
parental approval was not obtained;
the platform’s safeguards were inadequate;
the amount was excessive or unusual;
the charge involved deceptive design.

Prevention measures include parental controls, purchase passwords, biometric approval, and removing saved payment methods.

Phishing and OTP-Related Transactions

Many unauthorized charge cases involve phishing. A scammer may pretend to be a bank, wallet provider, delivery service, government agency, or merchant and trick the user into entering credentials or OTP.

Refund outcomes in phishing cases can be difficult because institutions often argue that the transaction was authenticated. However, the consumer may still raise issues such as:

deceptive fraud by third parties;
failure of fraud detection;
unusual transaction pattern;
delayed or absent alerts;
inability to quickly block the account;
system vulnerabilities;
social engineering;
unauthorized access.

The consumer should report immediately and provide the full timeline.

What Banks and Providers Usually Investigate

A bank, wallet, or payment provider may review:

transaction authorization method;
OTP validation;
device used;
IP address;
merchant category;
prior transaction history;
fraud pattern;
card presence or card-not-present status;
3D Secure authentication;
delivery address;
account login history;
whether the merchant fulfilled the order;
whether the customer previously transacted with the merchant;
whether the card was reported lost or stolen;
timing of the report;
customer conduct.

The institution may deny a claim if it concludes the transaction was authenticated, customer-authorized, or caused by gross negligence. The consumer may appeal if the conclusion is unsupported or incomplete.

Provisional Credit

Some banks may provide provisional credit while the investigation is ongoing, especially for credit card disputes. This means the disputed amount is temporarily credited back but may be reversed if the dispute is denied.

Consumers should ask:

Is provisional credit available?
Will interest or penalties be suspended?
What happens if the dispute is denied?
When will the final decision be issued?

Do not assume that provisional credit is final.

Chargeback

A chargeback is a process where the issuing bank disputes a transaction through the card network and asks the acquiring bank or merchant to reverse it.

Chargebacks may apply to:

unauthorized transactions;
duplicate processing;
cancelled recurring billing;
goods or services not received;
defective goods;
wrong amount;
refund not processed;
fraudulent card-not-present transactions.

Chargeback rights are subject to time limits and documentation. A late dispute may be rejected.

Refund vs. Reversal vs. Chargeback

These terms are related but different.

Refund

The merchant voluntarily returns the money.

Reversal

The payment is cancelled or reversed, often before final settlement or after a processing error.

Chargeback

The card issuer disputes the transaction against the merchant through the card network.

Fund recall

The bank attempts to recover funds transferred to another account.

Provisional credit

Temporary credit given during investigation.

Understanding the difference helps set expectations.

Written Complaint Template

A consumer may send this to the bank, card issuer, e-wallet, or merchant:

Subject: Dispute of Unauthorized Online Charge and Request for Refund

To the Customer Service / Fraud Disputes Department:

I am formally disputing the following unauthorized online transaction:

Account/Card/Wallet: [last four digits or account identifier] Transaction Date: [date] Posting Date: [date] Merchant/Recipient: [merchant name] Amount: [amount and currency] Reference Number: [reference number]

I did not authorize, approve, participate in, or benefit from this transaction. I request immediate investigation, blocking of further unauthorized charges, and refund/reversal of the disputed amount.

I also request written confirmation of the following:

case or ticket number;
status of investigation;
documents required from me;
expected resolution timeline;
whether provisional credit is available;
whether the card/account has been blocked or secured;
basis for any denial, if my claim is rejected.

Attached are screenshots, transaction records, and other supporting documents.

This request is made without prejudice to my right to escalate the matter to the proper regulatory or government agency.

Sincerely, [Name] [Contact Details]

Affidavit of Unauthorized Transaction

Some banks or providers may require an affidavit. It may state that the consumer did not authorize the charge and that the facts are true.

A basic affidavit may include:

name and address of account holder;
account or card details, limited to safe identifiers;
transaction details;
statement that the transaction was unauthorized;
statement that the account holder did not benefit from the transaction;
date of discovery;
date of report to the bank or provider;
actions taken to secure the account;
request for refund or investigation.

Do not include full card number, full passwords, PINs, or OTPs in the affidavit.

Police or Cybercrime Report

A police or cybercrime report may be useful or required when:

the amount is large;
identity theft occurred;
account takeover occurred;
the bank requires it;
multiple accounts were affected;
threats or extortion are involved;
the consumer needs official documentation for an insurance or bank claim;
the consumer wants criminal investigation.

A report should include the transaction details, screenshots, suspicious messages, phone numbers, email addresses, websites, account names, and timeline.

Where to Escalate Complaints in the Philippines

Depending on the transaction, possible escalation channels include:

1. The bank or financial institution’s complaints unit

Start with the provider’s internal dispute process. Ask for a written final response.

2. Bangko Sentral ng Pilipinas

For complaints involving banks, credit cards, e-wallets, electronic money issuers, and other BSP-supervised financial institutions, the consumer may escalate to the BSP’s financial consumer protection channels.

3. Department of Trade and Industry

For merchant-related consumer complaints involving goods, services, deceptive sales practices, or refund disputes, the DTI may be relevant.

4. National Privacy Commission

If the unauthorized charge involved misuse, exposure, unauthorized processing, or breach of personal data, a complaint may be filed with the NPC.

5. Cybercrime authorities

If hacking, phishing, identity theft, malware, or online fraud occurred, law enforcement or cybercrime units may be involved.

6. Small claims court or regular court

For money claims against a merchant or person, court remedies may be considered depending on the amount and circumstances.

Evidence Checklist

Prepare a file containing:

screenshot of unauthorized charge;
bank, card, or wallet statement;
SMS or email alerts;
case number from bank or provider;
dispute form;
emails and chat transcripts;
merchant communications;
cancellation confirmation, if subscription-related;
proof of non-delivery or failed transaction, if applicable;
screenshots of suspicious login alerts;
screenshots of phishing messages or fake websites;
police or cybercrime report, if any;
affidavit, if required;
valid ID;
timeline of events;
proof of account security actions.

A clear timeline often makes the complaint stronger.

Sample Timeline

A useful timeline may look like this:

March 1, 2026, 10:15 p.m. – Received SMS alert for ₱15,000 online charge from unknown merchant.
March 1, 2026, 10:20 p.m. – Locked card through mobile app.
March 1, 2026, 10:25 p.m. – Called bank hotline and reported unauthorized charge.
March 1, 2026, 10:35 p.m. – Received case number.
March 2, 2026 – Submitted dispute form and screenshots.
March 3, 2026 – Contacted merchant and requested cancellation.
March 10, 2026 – Followed up with bank.
March 20, 2026 – Received denial; requested basis and appealed.

What to Say When Calling the Bank

The consumer should be direct:

“I am reporting an unauthorized online transaction. I did not make or approve this charge. Please block the card/account, open a fraud dispute, provide a case number, and tell me what documents are needed for refund or chargeback.”

Ask:

Is the transaction pending or posted?
Can it still be stopped?
Has the card been blocked?
Will a replacement card be issued?
Is a dispute form required?
What is the deadline?
Will I receive provisional credit?
Will interest be suspended?
How do I appeal if denied?

Write down the date, time, agent name, and reference number.

Common Reasons Refund Requests Are Denied

Refund or dispute requests may be denied because:

the report was filed late;
the transaction was authenticated by OTP, PIN, or password;
the bank found prior dealings with the merchant;
the charge was a valid recurring subscription;
cancellation was made after the renewal date;
a family member made the purchase;
the goods or service were delivered;
the merchant provided proof of authorization;
the cardholder shared credentials;
the transaction was processed under valid terms;
evidence was incomplete;
the wrong dispute reason was used;
the transaction was still pending and not yet posted;
the claim was filed with the wrong entity;
the consumer failed to cooperate with investigation.

A denial is not always final. The consumer may appeal and submit additional evidence.

How to Appeal a Denied Refund

If the refund is denied, the consumer should request the specific basis for denial.

An appeal should:

refer to the case number;
identify the disputed transaction;
address the reason for denial;
provide additional evidence;
explain why the transaction was unauthorized;
request reconsideration;
ask for copies or summaries of evidence relied upon;
state intention to escalate if unresolved.

Example:

I respectfully appeal the denial of my dispute. I did not authorize the transaction and did not receive any goods or services from the merchant. Please provide the basis for your conclusion that the transaction was authorized, including the authentication method, device information, merchant proof, and any records relied upon.

Unauthorized Charge Involving a Lost or Stolen Card

If a card was lost or stolen, report immediately. The cardholder should provide:

date and time card was last seen;
date and time loss was discovered;
date and time bank was notified;
transactions disputed;
police report, if available;
affidavit of loss, if required.

Liability may depend on timing, bank rules, cardholder conduct, and whether transactions occurred before or after reporting.

Unauthorized Charge While Card Was Still in Possession

This usually indicates card-not-present fraud, data compromise, merchant breach, skimming, phishing, or account takeover.

The cardholder should state clearly:

“The physical card was in my possession at the time of the transaction. I did not authorize the online charge and did not provide my card details to this merchant.”

This may support a card fraud investigation.

Unauthorized Charge From a Foreign Merchant

Foreign merchant charges may take longer because of currency conversion, card network rules, and cross-border investigation.

The consumer should check:

whether the merchant is a subscription provider;
whether the amount includes foreign transaction fees;
whether the charge is pending or posted;
whether the merchant name is a billing descriptor;
whether the transaction was made through an app store or platform.

Dispute the charge as soon as possible because international chargeback deadlines still apply.

Unauthorized Charges After Card Replacement

If charges continue after card replacement, possible reasons include:

recurring billing token automatically updated;
merchant has account updater access;
another linked account is compromised;
the new card was added to the same compromised account;
wallet token remains active;
subscription remains active.

Ask the bank to stop recurring merchant billing and review tokenized payment methods. Also cancel the subscription directly with the merchant or platform if possible.

Tokenized Payments and Saved Cards

Many digital wallets and merchants use tokenized card credentials. This means the merchant may not store the full card number but may still charge a token linked to the card.

When disputing recurring or app-based charges, ask the bank whether there is a tokenized merchant authorization and whether it can be revoked.

Buy Now, Pay Later and Digital Credit Charges

Unauthorized charges may also occur through buy-now-pay-later accounts or digital credit lines. If a person’s account is used without permission, the consumer should:

secure the account;
report unauthorized purchase;
request suspension of billing;
contact the merchant;
ask for delivery cancellation;
preserve account logs;
dispute any interest or penalties;
file a complaint if collection begins despite unresolved fraud.

Carrier Billing Charges

Some online purchases are charged to a mobile phone bill or prepaid load through carrier billing.

If unauthorized, contact:

the mobile network provider;
the merchant or app platform;
the payment aggregator, if identified.

Request blocking of premium services, subscriptions, or third-party billing to prevent further charges.

Data Privacy Requests After Unauthorized Charges

The consumer may send a data privacy request to the merchant, app, or payment provider asking:

what personal data was used to process the transaction;
what account or device initiated it;
what email or phone number was linked;
whether personal data was shared;
whether there was a data breach;
whether saved payment details are retained;
how to delete stored card or account data.

Do not request passwords, full card numbers, or sensitive security data that cannot lawfully be disclosed. Ask for a reasonable summary.

Refund Rights Against Merchants

If the merchant charged without authorization, the consumer may demand refund directly.

The demand should include:

transaction details;
statement of non-authorization;
request for cancellation;
request for refund;
deadline for response;
warning of escalation to bank, DTI, platform, or regulator.

If the merchant refuses, the consumer may proceed with bank dispute, platform refund request, or agency complaint.

Refund Rights Against Banks and E-Wallets

Banks and e-wallets are not automatically liable for every unauthorized charge. They investigate whether the transaction was validly authenticated, whether the consumer was negligent, whether fraud controls worked, and whether the merchant should bear the loss.

However, consumers may challenge unreasonable denial where:

report was timely;
transaction was unusual;
alerts were delayed or absent;
the institution failed to block quickly;
the provider ignored the complaint;
the investigation was not explained;
the consumer did not authorize the charge;
the institution’s system or merchant controls failed;
the provider violated consumer protection standards.

Responsibility of Consumers

Consumers should protect their accounts by:

never sharing OTPs;
never sharing passwords or PINs;
using strong passwords;
enabling two-factor authentication;
locking cards when not in use;
avoiding suspicious links;
using official apps only;
updating phone security;
checking statements regularly;
avoiding public Wi-Fi for financial transactions;
not saving cards on untrusted sites;
monitoring subscriptions;
reporting loss immediately.

A refund claim may be weakened if the consumer voluntarily gave away credentials or ignored repeated warnings, although each case depends on facts.

Responsibility of Banks, Wallets, and Merchants

Financial institutions and merchants should:

authenticate transactions properly;
detect unusual activity;
provide timely alerts;
maintain complaint channels;
investigate disputes fairly;
protect personal and payment data;
disclose subscription terms clearly;
provide cancellation mechanisms;
process legitimate refunds promptly;
prevent unauthorized recurring charges;
secure stored payment credentials.

A provider’s failure to implement reasonable safeguards may support a complaint.

Preventive Measures

To prevent future unauthorized online charges:

Use a separate card for online purchases.
Set low transaction limits.
Enable instant alerts.
Lock the card when not in use.
Use virtual cards when available.
Avoid saving cards on websites.
Review subscriptions monthly.
Remove payment methods from unused apps.
Use strong and unique passwords.
Enable two-factor authentication.
Never share OTPs.
Download apps only from official sources.
Beware of fake delivery, bank, and wallet links.
Check bank statements frequently.
Report suspicious activity immediately.

Special Note on Refund Timing

Refund timing varies. A merchant refund may appear within days, while card chargebacks or bank investigations may take longer. International transactions, wallet transfers, and scam-related fund recalls may take additional time.

Consumers should keep following up and maintain written records.

Frequently Asked Questions

Can I get a refund if I did not authorize an online charge?

Possibly. You must report immediately, file a dispute, submit evidence, and cooperate with the bank, wallet, or merchant investigation.

Should I contact the merchant or the bank first?

For clear fraud, contact the bank or wallet provider immediately to block further charges. If the merchant is identifiable, contact the merchant as well.

What if the transaction is still pending?

Ask the bank whether it can be cancelled or whether you must wait for posting before filing a dispute. Still report it immediately.

What if I received an OTP but did not approve the transaction?

Report the transaction and explain exactly what happened. If you entered the OTP on a fake site or gave it to someone, the case may be treated as phishing, but you may still ask for investigation.

What if I gave my card to a family member?

The bank may treat the transaction as authorized or as a private family matter unless there is evidence of misuse beyond permission. You may still dispute accidental app or child purchases with the merchant or platform.

What if I forgot to cancel a subscription?

If the subscription terms were clear and you failed to cancel, refund may depend on merchant policy. If the terms were misleading or you cancelled before billing, you may have stronger grounds.

Can I refuse to pay my credit card bill while the dispute is pending?

Ask the bank whether the disputed amount, interest, and finance charges will be suspended. Do not ignore the entire bill without clarification, because undisputed amounts may still be due.

Can I file a complaint with the BSP?

For banks, e-wallets, credit cards, and other BSP-supervised institutions, escalation to the BSP may be available after or alongside the institution’s complaint process.

Can I file a complaint with DTI?

For merchant refund issues, defective goods, non-delivery, misleading sales, or unfair trade practices, DTI may be relevant.

Can I file a cybercrime report?

Yes, especially if there was hacking, phishing, identity theft, account takeover, malware, or online scam activity.

Practical Action Plan

A consumer who finds an unauthorized online charge should do the following:

Screenshot the charge immediately.
Lock or block the card, wallet, or account.
Change passwords and enable two-factor authentication.
Call the bank, issuer, wallet, or provider through official channels.
File a written dispute or chargeback request.
Contact the merchant or platform for cancellation and refund.
Preserve evidence and case numbers.
Follow up in writing.
Appeal if denied.
Escalate to the proper agency if unresolved.

Conclusion

Getting a refund for unauthorized online charges in the Philippines requires speed, documentation, and persistence. The consumer should immediately secure the account, report the transaction, file a formal dispute, contact the merchant, and preserve all evidence.

The proper remedy depends on the payment method and the nature of the charge. Credit card transactions may involve chargebacks. Debit card and online banking cases may involve bank investigation and fund recall. E-wallet cases may require an unauthorized transaction report. Subscription and merchant disputes may require cancellation proof and refund requests. Fraud and identity theft may require cybercrime reporting.

A consumer’s strongest position comes from prompt reporting, clear evidence, written follow-ups, and careful escalation. While not every disputed charge will automatically be refunded, Philippine consumers have legal and regulatory remedies when online charges are unauthorized, fraudulent, erroneous, deceptive, or improperly processed.