Philippine Context

Introduction

Unauthorized credit card charges are among the most common consumer finance problems in the Philippines. They can arise from lost or stolen cards, card-not-present fraud, phishing, skimming, account takeover, merchant error, duplicate billing, subscription traps, internal misuse, and digital wallet or installment misuse linked to a card. When these charges appear, the cardholder’s legal position is shaped by a combination of Philippine laws, Bangko Sentral ng Pilipinas regulations, card issuer terms and conditions, evidence rules, and general contract and consumer protection principles.

In the Philippines, a credit cardholder is not without remedies. A customer can dispute unauthorized charges directly with the card issuer, request reversal or chargeback processing, demand investigation, seek correction of billing, escalate the complaint to regulators, and in proper cases pursue civil, administrative, or criminal remedies. The key issue is usually this: who bears the loss when a transaction was not authorized by the cardholder? The answer depends on the facts, especially whether the cardholder contributed to the loss through negligence, whether the issuer complied with regulatory standards and its own duties, whether authentication was properly performed, and whether the transaction can be sufficiently proven as authorized.

This article lays out the Philippine legal framework and practical rights of credit cardholders in detail.

I. What Counts as an “Unauthorized Charge”

An unauthorized charge is any credit card transaction not validly consented to by the cardholder or not otherwise binding on the cardholder under law and contract. It may include:

purchases made using a stolen or lost physical card
online transactions where the cardholder never participated
recurring charges after cancellation of a subscription or authority
duplicate or altered charges
transactions induced by fraud, spoofing, phishing, social engineering, or account takeover
charges resulting from card cloning or skimming
transactions posted despite a blocked, replaced, or expired card
cash advances or quasi-cash transactions the cardholder did not make
installment conversions or balance transfers the cardholder did not authorize
supplementary-card misuse beyond agreed authority in some cases

Not every disputed charge is strictly “unauthorized.” Some are better classified as:

billing error
merchant dispute
defective goods/services dispute
cancelled service still billed
misrepresentation
failure of consideration

That distinction matters because some rights come from fraud protection, while others are processed as chargeback or merchant disputes.

II. Main Philippine Legal Sources

The rights of Philippine credit cardholders do not come from a single statute alone. They come from several layers of law and regulation.

1. The Truth in Lending Act

This law requires proper disclosure of the terms and cost of credit. In dispute situations, it matters because the card issuer must have clearly disclosed finance charges, fees, interest, and billing practices. If a disputed amount remains in the statement, the consumer may question not only the principal charge but also related finance charges and penalties if the charge itself was improper.

2. The Consumer Act of the Philippines

This provides broad consumer protection principles against deceptive, unfair, and unconscionable practices. While it is not a specialized credit card fraud statute, it helps frame the rights of consumers against unfair billing, misleading representations, abusive collection connected to disputed debts, and unfair contract terms.

3. Civil Code of the Philippines

The Civil Code governs obligations, contracts, damages, fraud, negligence, and good faith. Credit card issuance is contractual, but it is also subject to the Civil Code’s rules on consent, mistake, fraud, breach, and damages. If a cardholder never consented to a transaction, that alleged obligation may be challenged. The Civil Code also governs liability where one party’s negligence contributes to the loss.

4. Electronic Commerce Act

Many unauthorized charges now occur in online and electronic environments. Electronic records and electronic signatures may be used as evidence, but the existence of an electronic transaction alone does not automatically prove that the legitimate cardholder authorized it. The issuer still needs to show reliable authentication and valid consent where disputed.

5. Data Privacy Act

If unauthorized charges stem from data breach, weak controls, or misuse of personal or card data, the cardholder may have privacy-related rights as a data subject. Card issuers and related service providers are expected to protect personal information and sensitive financial data with appropriate organizational, physical, and technical measures.

6. BSP Rules and Consumer Protection Regulations

For practical credit card disputes, BSP regulations are central. Banks and credit card issuers supervised by the BSP are subject to consumer assistance and complaints-handling obligations, fair treatment standards, disclosure duties, and risk management expectations for electronic payments and financial products. These regulations are often the most important non-judicial basis for demanding investigation, timely response, transparency, and corrective action.

7. Anti-Fraud and Criminal Laws

Where unauthorized charges result from theft, estafa, access device misuse, identity fraud, hacking, or related acts, the Revised Penal Code and special penal laws may apply. These may be used against perpetrators, though criminal prosecution is separate from the cardholder’s immediate goal of getting the charge reversed.

III. Nature of the Credit Card Relationship

A credit card arrangement usually involves several legal relationships at once:

cardholder and issuer: governed by the card agreement and banking regulations
issuer and merchant/acquirer: governed by network rules and acquiring agreements
cardholder and merchant: underlying sale or service transaction
issuer and payment network: operational rules for dispute and chargeback

The cardholder usually contracts directly only with the issuer and merchant, not with the payment network. Still, network rules influence how disputes are processed. In practice, the issuer investigates and may pursue a chargeback against the merchant’s acquiring bank if the transaction is invalid or improperly processed.

IV. Core Rights of Credit Cardholders

1. Right to Promptly Report Unauthorized Use

A cardholder has the right to notify the issuer as soon as unauthorized use is discovered. Most issuers provide 24/7 hotlines, app-based card lock features, and emergency blocking channels. Reporting creates a record and usually fixes the point after which further charges should no longer be attributed to the cardholder, subject to the facts and terms.

2. Right to Immediate Card Blocking or Suspension

Once fraud is suspected, the cardholder has the right to request immediate blocking, temporary lock, permanent cancellation, replacement, or account restriction. Delay by the issuer after a proper report may affect the allocation of loss for later transactions.

3. Right to Dispute the Billing

A cardholder has the right to formally dispute a transaction appearing in the statement, whether or not the transaction was made with the physical card. This usually includes the right to submit a written dispute and supporting documents and to receive an acknowledgment or reference number.

4. Right to Investigation

The issuer cannot simply insist that the transaction is valid without reasonable review. A cardholder has the right to a meaningful investigation, which may include examination of:

transaction date, time, amount, and merchant category
EMV chip read, magnetic stripe use, contactless data, or card-not-present indicators
OTP or other authentication logs
IP address, device fingerprint, geolocation, or merchant-side authentication
prior card blocking or replacement status
merchant sales slips or electronic transaction records
installment conversion requests
history of prior fraud alerts
duplicate, reversed, or adjusted entries

5. Right to Explanation and Documentation

The cardholder may demand the basis for the issuer’s decision. While full internal fraud models may not be disclosed, the issuer should provide enough information to explain why the transaction was treated as valid or invalid. If a signed sales slip, electronic order record, delivery proof, authentication log, or merchant confirmation exists, these are often relevant to the dispute.

6. Right to Reversal of Improper Charges

If the issuer determines that the charge was unauthorized or invalid, the cardholder has the right to reversal of:

the principal amount
finance charges attributable to the disputed amount
late payment fees caused by the disputed posting
overlimit fees caused by the disputed posting
related penalties or downstream charges

7. Right Against Being Bound by Charges Not Properly Authorized

Under basic contract principles, a person is generally not liable for obligations never consented to. The issuer may rely on card agreement clauses, but those clauses cannot automatically convert every fraudulent charge into a valid debt of the cardholder, especially where the issuer cannot prove authorization or where its own systems were deficient.

8. Right to Fair Treatment During Investigation and Collection

A disputed amount should not become a basis for abusive or misleading collection tactics. The cardholder has the right to respectful treatment, accurate records, and appropriate handling of disputed accounts. Harassment, misrepresentation, or pressure to admit liability can strengthen the consumer’s case.

9. Right to Escalate to Regulators

If the issuer mishandles the complaint, the cardholder may elevate the matter to the BSP’s consumer assistance channels. Depending on the circumstances, other agencies may also become relevant, such as the National Privacy Commission for data-privacy failures, or law enforcement for fraud.

10. Right to Judicial Relief

Where reversal is refused and significant loss results, the cardholder may sue for actual damages, moral damages, exemplary damages in proper cases, attorney’s fees, and other relief, depending on the facts.

V. Key Legal Questions in Unauthorized Charge Cases

A. Is the Cardholder Automatically Liable Until the Card Is Reported Lost?

Not automatically. Many card contracts try to allocate pre-notice losses to the cardholder, but such clauses are not absolute. Liability depends on the actual agreement, the reasonableness of the clause, consumer protection principles, and whether the issuer can truly show that the cardholder’s conduct caused the loss.

For example:

If the card was stolen and used before notice, the issuer may argue contractual liability for some pre-notice transactions.
But if the fraud resulted from skimming, merchant compromise, issuer system weakness, or online misuse without physical possession of the card, the issuer may have a weaker position.
If the issuer’s authentication was deficient or the transaction profile was highly suspicious, the cardholder can argue that the issuer should bear the loss.

B. Does Use of OTP Prove Authorization?

No. OTP use is evidence, but not conclusive proof. OTPs may be intercepted, socially engineered, obtained through phishing, or exploited through SIM-related attacks or account compromise. The real question is whether the transaction reflects genuine, informed authorization by the cardholder.

C. If the Transaction Used EMV Chip or Contactless Technology, Is the Charge Final?

No. Technical evidence is relevant but not final. The cardholder can still challenge whether:

the card was cloned
fallback processing occurred
the card was physically stolen
terminal data was compromised
the merchant followed proper verification
the issuer ignored unusual transaction patterns

D. What if the Cardholder Shared Card Details by Mistake?

This is often the hardest category. If the cardholder negligently disclosed the card number, CVV, OTP, or passwords, the issuer will argue contributory negligence or breach of the card agreement. Still, that does not always end the matter. The cardholder may still argue:

the issuer failed to detect suspicious behavior
the merchant lacked proper authentication
the issuer’s alerts or blocking systems were inadequate
the loss allocation clause is unfair or overbroad
social engineering was so sophisticated that the cardholder’s mistake does not fully shift liability

The result becomes fact-intensive.

VI. Contractual Terms: Valid but Not Absolute

Every cardholder agreement contains provisions on:

safekeeping of the card and credentials
immediate reporting of loss or theft
liability before and after notice
dispute periods
documentary requirements
issuer investigation authority
finance charges and penalties
supplementary cards
billing statement review obligations

These terms matter, but they are not beyond challenge. In the Philippines, contract terms are generally binding, yet they may be questioned if they are:

contrary to law
contrary to public policy
unconscionable
inconsistent with mandatory disclosure or consumer protection requirements
ambiguously drafted and construed against the drafter

Banks are not ordinary contracting parties. They are expected to observe a high degree of diligence because banking is imbued with public interest. That principle can be important in disputes involving fraud detection, payment security, and complaint handling.

VII. Standard Duties of the Cardholder

A cardholder’s rights are strongest when the cardholder also performed basic duties. These commonly include:

keeping the card, PIN, passwords, OTPs, and CVV confidential
not writing the PIN on the card
not sharing OTPs or passwords
reviewing statements regularly
reporting suspicious activity immediately
updating contact details to receive alerts
safeguarding phones, email, and banking-linked devices
notifying the issuer of lost cards, SIM compromise, or account takeover
preserving evidence of phishing attempts or suspicious messages

Failure to observe these may not completely defeat a claim, but it can weaken it.

VIII. Standard Duties of the Issuer

Card issuers also have significant duties. These arise from contract, banking standards, consumer protection rules, and ordinary diligence.

1. Duty of Security

The issuer must maintain reasonable systems to protect card accounts against fraud, including monitoring, authentication controls, and risk management.

2. Duty of Accurate Billing

The issuer must send correct statements and reflect valid reversals, credits, and adjustments.

3. Duty to Investigate Complaints

A complaint cannot be perfunctorily denied without real inquiry.

4. Duty of Fair Dealing

The issuer must not use its stronger position to force the consumer into paying a dubious charge without basis.

5. Duty of Proper Recordkeeping

The issuer should be able to retrieve logs, merchant records, and transaction data sufficient to evaluate a dispute.

6. Duty to Exercise Extraordinary or High Diligence

Philippine jurisprudence often emphasizes the special diligence expected of banks. While credit card disputes can involve nuances distinct from deposit handling, this general principle often supports consumers where banking institutions failed to act prudently.

IX. Timelines and Notice Periods

Most issuers require disputes to be raised within a specific period from statement date or transaction posting date. Commonly, this is stated in the cardholder agreement. Missing the contractual period can complicate recovery, but it does not always extinguish rights, especially where fraud was concealed, the statement was not properly received, or the issuer itself failed in disclosure or investigation.

Best practice for the cardholder:

report immediately upon discovery
follow up with written notice even if phone report was made
keep screenshots, emails, SMS alerts, app notifications, and reference numbers
check whether the issuer requires a dispute form, affidavit, police report, or ID submission

A bank may ask for additional documents, but it should not impose unreasonable barriers that effectively nullify the consumer’s right to dispute.

X. Burden of Proof

The burden of proof often shifts in practical ways.

What the cardholder should show:

the charge was not made, approved, or benefited from
the card may have been lost, stolen, or compromised
report to the issuer was made promptly
any phishing or fraud circumstances
lack of receipt of goods or services
absence from the location of the transaction, if relevant
timing inconsistency, such as simultaneous transactions in different places

What the issuer should be able to show:

how the transaction was authenticated
whether the physical card was used
whether OTP, PIN, or 3D Secure verification occurred
whether merchant records match the issuer’s claim
whether the chargeback rights were pursued or denied and why
whether the transaction pattern was normal or flagged as suspicious

In a court or regulatory setting, bare assertions like “system shows valid transaction” may be insufficient if the consumer presents credible contrary facts.

XI. Evidence That Helps the Cardholder

Useful evidence includes:

screenshots of SMS/email fraud alerts
proof the card was in the cardholder’s possession while overseas or elsewhere
travel records, CCTV, work logs, or receipts showing impossibility of the transaction
records of prior card blocking request
screenshots of app lock or freeze action
police blotter or affidavit of loss
phishing messages or spoofed calls
proof of cancelled subscription or revoked merchant authority
delivery nonreceipt
correspondence with the merchant and issuer
replacement card history
SIM replacement or mobile compromise records
proof of device theft or email takeover

XII. Merchant Disputes vs Fraud Disputes

These are often mixed up.

Fraud / Unauthorized Use

The cardholder says: “I did not do this transaction.”

Merchant / Service Dispute

The cardholder says: “I did the transaction, but the goods were defective, undelivered, misrepresented, cancelled, or billed incorrectly.”

The legal and operational path may differ:

fraud disputes focus on consent and authentication
merchant disputes focus on performance of the sale or service
both may still result in reversal or chargeback under proper conditions

XIII. Recurring Transactions and Subscriptions

Recurring charges deserve special attention. A transaction may become unauthorized if:

the consumer cancelled the subscription but billing continued
the merchant billed a different amount than authorized
free trial converted without valid consent
card was replaced or blocked but tokenized recurring billing continued improperly
merchant failed to honor cancellation

Here, the cardholder’s rights may arise from:

lack of continuing authority
billing error
deceptive or unfair sales practice
failure to disclose recurring terms clearly

The consumer should preserve the cancellation confirmation and notice to the merchant.

XIV. Supplementary Cards

Liability for supplementary card use depends heavily on the agreement. Usually, the principal cardholder bears responsibility for authorized supplementary use. But disputes can arise where:

the supplementary card was issued or activated without proper authority
the transaction exceeded limits or restrictions
the issuer negligently processed transactions after revocation or block
fraud occurred independent of the supplementary holder’s legitimate authority

The principal cardholder is not automatically helpless; the issuer still must prove the charge falls within valid authority.

XV. Finance Charges, Interest, and Late Fees on Disputed Amounts

A major issue is whether the issuer may continue imposing interest and penalties while the dispute is unresolved.

In practice, some issuers require at least payment of the undisputed portion of the bill. This is sensible and protects the cardholder from broader delinquency. As to the disputed amount, the cardholder can argue:

no finance charge should accrue on an unauthorized charge
penalties triggered solely by the disputed amount should be reversed
credit standing should not be prejudiced by an invalid debt
collection should be limited or qualified while investigation is pending

Even where temporary billing continues operationally, a successful dispute should ordinarily lead to reversal of all resulting charges tied to the disputed transaction.

XVI. Credit Reporting and Collection Consequences

If the issuer treats the disputed amount as due, the cardholder may face:

collection calls or letters
account suspension
cancellation
negative internal account tagging
possible credit reporting consequences where applicable

The consumer should respond in writing that the amount is under dispute and should maintain payment on the undisputed portion where possible. If the issuer or collector makes inaccurate, harassing, or misleading claims, that may create additional legal issues.

XVII. Escalation Paths in the Philippines

1. Internal Complaint with the Issuer

Always begin with the issuer:

hotline report
email complaint
dispute form
branch submission if needed
request for written findings

2. BSP Consumer Assistance Mechanisms

If unresolved, the cardholder may elevate the matter to the BSP through its consumer help channels. This is often the most practical escalation against BSP-supervised financial institutions. The complaint should include:

full name and contact details
card issuer
timeline of events
disputed amounts and dates
copies of statements
proof of prior complaint to the issuer
reference numbers
supporting screenshots and correspondence

3. National Privacy Commission

If the problem involves data leak, misuse of personal data, or security failure involving personal information, a privacy complaint may be appropriate.

4. Law Enforcement / NBI / PNP Anti-Cybercrime Units

Where there is actual fraud, hacking, phishing, identity theft, or access device misuse, criminal complaint routes may be used.

5. Courts

For substantial loss or principled challenge, civil action remains available.

XVIII. Possible Causes of Action

A cardholder’s legal theory may be one or more of the following:

absence of consent to the transaction
breach of contract by the issuer
negligence in fraud monitoring or security
inaccurate billing
unlawful imposition of interest and penalties
unfair or unconscionable contract enforcement
data privacy violation
damages due to bad faith or gross negligence
merchant breach, misrepresentation, or failure of service
criminal fraud by unknown persons or merchants

XIX. Possible Remedies

The cardholder may seek:

reversal of the disputed charge
reversal of interest, finance charges, and penalties
correction of billing records
replacement of the card
restoration of account access or credit limit
cessation of collection on the disputed amount
written confirmation of resolution
damages, in proper cases
attorney’s fees, in proper cases
regulatory sanction against the issuer, where warranted
criminal prosecution of perpetrators

XX. Defenses Commonly Raised by Card Issuers

Issuers often argue:

transaction was authenticated by OTP/PIN/3D Secure
cardholder failed to safeguard credentials
dispute was filed late
merchant submitted proof of delivery or signed slip
cardholder benefitted from the transaction
recurring charge was previously authorized
transaction pattern matched prior usage
no system breach occurred
contract places pre-notice losses on the cardholder

Each defense is contestable depending on facts.

XXI. Counterarguments Available to Cardholders

A cardholder may respond that:

OTP or authentication was obtained through fraud, not valid consent
the issuer’s fraud systems failed despite obvious red flags
the merchant used weak or irregular verification
the card was already blocked or replaced
the charge was impossible given the cardholder’s location or circumstances
the contract clause is unfair, vague, or contrary to public policy
the issuer failed to provide documentary proof
the account credentials were compromised due to third-party or system weakness
delay in discovery was caused by nonreceipt of statements or hidden posting
continued billing after cancellation revoked any prior authority

XXII. Special Issue: Social Engineering and Phishing

Many modern disputes involve the consumer being tricked into giving information. Philippine law does not simply reward carelessness, but neither does it automatically absolve the bank. Courts and regulators look at the whole picture:

Was the phishing scheme sophisticated and convincingly spoofed?
Were bank alerts sufficient and timely?
Were transaction velocity and amount abnormal?
Did the issuer provide adequate anti-fraud friction?
Did the issuer act quickly after the report?
Did it block subsequent suspicious transactions?

The more the issuer looks passive in the face of obvious fraud indicators, the stronger the cardholder’s position.

XXIII. Special Issue: Digital Wallets and Tokenized Card Use

Credit cards may be linked to wallets, e-commerce accounts, ride-hailing apps, delivery apps, and subscriptions. Unauthorized charges in these ecosystems raise added questions:

who stored the card credentials
whether tokenization was used
whether device-level authentication occurred
whether a linked account was hacked
whether the merchant or platform retained valid billing authority
whether the issuer treated token transactions as low-risk without enough controls

Even when the card was not physically used, the charge can still be unauthorized.

XXIV. Civil Liability of Banks and Standard of Care

Philippine banking law and jurisprudence generally impose a high standard of diligence on banks because of the nature of their business. This principle is powerful in fraud disputes. A bank or issuer cannot hide behind boilerplate contract language if its own systems, controls, or response were substandard.

Bad facts for the issuer may include:

ignoring obvious unusual transactions
failing to send or act on fraud alerts
processing transactions after a block request
inability to produce records
insisting on payment despite weak proof
failing to reverse connected fees even after fraud finding
disclosing or mishandling customer data

Good facts for the issuer may include:

strong authentication logs
immediate response after report
documented merchant proof
clear evidence of cardholder participation
warnings repeatedly ignored by the cardholder

XXV. Can the Cardholder Refuse to Pay the Entire Bill?

Usually, the safer course is to pay the undisputed portion and contest the disputed portion in writing. Refusing to pay everything can expose the cardholder to broader default consequences. The dispute should be made precise:

identify transaction date, amount, and merchant
state why unauthorized
reserve rights as to related charges

This preserves credibility and limits escalation.

XXVI. Practical Dispute Procedure

A Philippine cardholder facing unauthorized charges should generally do the following immediately:

Block or lock the card at once.
Call the issuer and get a reference number.
Send a written dispute by email or official channel the same day if possible.
Identify each disputed transaction by amount, date, and merchant.
State clearly that the charge was unauthorized.
Request reversal and suspension of related interest/fees.
Ask for replacement card/account if needed.
Change passwords and secure linked email, phone, and apps.
Preserve evidence of phishing, alerts, location, and correspondence.
Pay the undisputed portion of the statement if feasible.
Follow up in writing within the issuer’s stated period.
Escalate to BSP if the response is delayed, inadequate, or unsupported.

XXVII. What a Strong Written Dispute Should Say

A strong dispute letter or email should include:

cardholder name
masked card number
account reference
date of discovery
date and time of prior report
hotline reference number
specific transactions disputed
statement that the transactions were unauthorized
whether the card was lost, stolen, or remained in possession
request for investigation and reversal
request to waive all interest, penalties, and fees tied to the disputed charges
request for documentary basis if the issuer denies the claim
reservation of rights to escalate to regulators and pursue legal remedies

It should be factual, firm, and organized.

XXVIII. Limits of Cardholder Protection

Not every cardholder wins every case. Rights can be weakened by:

deliberate participation or later denial
family member use tacitly tolerated
repeated sharing of card credentials
failure to report for a long period without explanation
use of insecure channels despite explicit warnings
inability to contradict merchant proof
admissions in messages or call recordings
prior similar authorized use pattern

Still, the issuer must do more than rely on assumptions.

XXIX. Interaction with Criminal Complaints

Filing a police report or cybercrime complaint may help document the incident, but it does not automatically compel the bank to reverse the charge. The billing dispute and the criminal complaint are separate processes. A bank may ask for an affidavit or blotter, but it should still independently assess the billing issue.

XXX. Damages in Court

If litigation becomes necessary, possible damages may include:

actual damages: proven financial loss
moral damages: in appropriate cases involving anxiety, humiliation, bad faith, or serious distress
exemplary damages: where conduct was wanton, fraudulent, reckless, or oppressive
attorney’s fees and costs: where legally justified

The strength of a damages claim usually depends on whether the issuer acted merely incorrectly or acted in bad faith or with gross negligence.

XXXI. Unfair Contract Terms and Adhesion Contracts

Credit card agreements are often contracts of adhesion: drafted by the issuer and accepted by the consumer largely on a take-it-or-leave-it basis. Such contracts are not automatically invalid, but ambiguities are generally construed against the drafter, and oppressive terms may be limited by courts.

Potentially vulnerable clauses include:

extremely short dispute periods buried in fine print
blanket waivers of issuer liability for all electronic fraud
clauses making issuer logs conclusive in all cases
clauses imposing unlimited liability regardless of issuer negligence
terms allowing continued collection without meaningful investigation

XXXII. Data Privacy Dimension

Where unauthorized charges follow compromise of personal or account data, the cardholder may have separate concerns:

Was card data stored securely?
Was there a breach notification issue?
Was excessive data collected or exposed?
Did a vendor or merchant mishandle data?
Were authentication channels compromised because of poor data governance?

A privacy-based complaint may complement, not replace, the billing dispute.

XXXIII. Common Fact Patterns

1. Lost Wallet, In-Person Purchases Before Notice

Liability turns on time of notice, cardholder negligence, merchant verification, and whether suspicious transactions should have been blocked.

2. Online Charges from Foreign Merchants While Cardholder Has Physical Card

Usually a strong fraud scenario. Focus on card-not-present authentication, OTP, account compromise, and issuer fraud controls.

3. Phishing Followed by OTP-Based Charges

Harder case. Cardholder negligence is argued, but issuer’s systems and the sophistication of fraud remain relevant.

4. Continued Billing After Subscription Cancellation

Often a merchant dispute or revoked-authority issue; consumer can seek reversal and proof of cancellation.

5. Transactions After Card Was Frozen, Replaced, or Reported

Strong case against the issuer if the block should have prevented them.

6. Duplicate Posting or Excessive Merchant Billing

Usually billing error or merchant dispute, but still reversible.

XXXIV. Good Practices That Strengthen Future Claims

enable transaction alerts
use app-based temporary lock features
avoid sharing screenshots containing full card details
monitor tokenized merchants and recurring subscriptions
save cancellation confirmations
separate email hygiene from finance accounts
secure SIM and mobile number
immediately report suspicious small “test” transactions
keep account records organized

These are practical, but also legally useful because they demonstrate diligence.

XXXV. Realistic Limits of “Zero Liability”

Some issuers market fraud protection in broad terms. In practice, “zero liability” is usually subject to exclusions, especially fraud caused by the cardholder’s own disclosure of credentials. Marketing language does not erase the actual terms, but neither should issuers use the exclusions unfairly. A misleading mismatch between advertised protection and actual handling may itself become an issue.

XXXVI. Final Legal Position

In the Philippines, a credit cardholder has substantial rights when disputing unauthorized charges. Those rights rest on contract law, consumer protection, banking regulation, electronic commerce principles, privacy law, and the broader legal expectation that banks exercise a high degree of diligence. A cardholder is generally entitled to:

dispute charges not truly authorized
demand prompt blocking and investigation
require reasonable explanation and documentation
seek reversal of the transaction and its related fees
resist unfair collection of a genuinely disputed amount
escalate to the BSP and other authorities
pursue damages when loss is worsened by bad faith or negligence

The decisive question is rarely just whether the transaction posted. It is whether the issuer can fairly and credibly show that the cardholder authorized it, or that the cardholder legally bears the loss under enforceable terms and the actual facts. Where the evidence shows fraud, system weakness, poor investigation, or unfair treatment, the cardholder has a strong basis to demand full relief.

Important caution

Because this was written without checking current regulations, circulars, or recent Philippine cases, it should be treated as a comprehensive legal overview rather than a substitute for updated legal advice on a live dispute.