Quick answer

If a credit card charge was made without your permission, immediately lock the card and report the transaction to the card issuer through its official fraud or customer-assistance channel. Ask for a reference number, replacement card, investigation, reversal of the disputed charge and related fees, and written payment instructions while the investigation is pending.

Philippine rules give cardholders up to 30 calendar days from the statement date to report an error or discrepancy. The issuer must take action within 10 business days after receiving the notice and relevant records. It must complete a thorough investigation, make appropriate corrections, and provide a written explanation within 90 days, before collecting the contested amount subject to the investigation’s result. These are maximum regulatory periods—not reasons to delay reporting.

A claim is not automatically approved merely because a transaction is described as unauthorized. Liability depends on evidence, the circumstances of the transaction, the cardholder’s actions, and any act or omission of the issuer or its service providers. If the investigation finds the transaction unauthorized or fraudulent, it must be corrected or reversed, including related finance charges and fees.

What counts as an unauthorized charge?

An unauthorized charge is generally a transaction that neither the cardholder nor a person acting with the cardholder’s authority approved. Examples may include:

Purchases made using a lost, stolen, cloned, or counterfeit card;
Online or telephone purchases made with stolen card details;
Charges made after the cardholder reported the card lost or compromised;
Transactions initiated through account takeover or identity theft; and
Charges by a merchant with whom the cardholder never transacted.

Not every unfamiliar entry is fraud. A merchant may appear under its corporate or payment-processor name. A free trial may have converted into a paid subscription, or a household member or supplementary cardholder may have made the purchase. Duplicate charges, incorrect amounts, undelivered goods, canceled subscriptions, and unprocessed refunds may instead be billing or merchant disputes.

Check the merchant descriptor and ask authorized users before alleging fraud, but do not let that inquiry consume the 30-day reporting period.

Your principal rights

You may dispute a billing error through documented channels

Under the Philippine Credit Card Industry Regulation Law, Republic Act No. 10870, an issuer must maintain a customer-assistance unit and give cardholders up to 30 calendar days from the statement date to report an error or discrepancy. Notice may be made through written, verbal, or another documented means under the BSP credit-card regulations.

A telephone report can satisfy the rule, but follow it immediately with a message through the issuer’s secure app, email, web form, or branch. Written confirmation makes the date, disputed transactions, and requested relief easier to prove.

The issuer must investigate and explain the result

The issuer must:

Take action within 10 business days after receiving the notice and relevant documents or electronic records;
Conduct a thorough investigation within 90 days after receiving the notice;
Make appropriate corrections to its records; and
Send the cardholder a written explanation or clarification before taking action to collect the contested amount, subject to the investigation’s result.

“Take action” within 10 business days does not necessarily mean that the dispute must be finally resolved by then. The investigation may continue for up to 90 days.

Interest and fees require accommodation during the investigation

The Financial Products and Services Consumer Protection Act, Republic Act No. 11765 requires a financial service provider, pending its final investigation report on an alleged disputed amount or unauthorized transaction, to suspend the imposition of interest, fees, and charges or provide a similar reasonable accommodation.

Ask the issuer to confirm in writing:

Which amount is formally under dispute;
Whether related interest, late fees, and other charges are suspended;
What amount you must pay by the due date;
Whether the disputed amount has been temporarily removed or provisionally credited; and
How the account will be reported while the dispute remains pending.

A provisional credit is not necessarily final. It may be removed if the issuer later finds sufficient proof that the transaction was authorized.

A confirmed unauthorized charge must be reversed

BSP rules require correction or reversal if the investigation establishes that the transaction was unauthorized or fraudulent. The reversal should include finance charges and other fees attributable to that transaction.

The issuer must handle the claim fairly

BSP Circular No. 1160 requires BSP-supervised institutions to evaluate disputed-transaction claims and resolve them fairly and reasonably. Fraud-related concerns should receive priority, with the process and result communicated transparently.

In assessing liability, the institution may consider:

The cardholder’s actions before, during, and after the transaction;
Acts or omissions of the institution, its employees, agents, outsourced entities, or service providers; and
Any failure by those parties to comply with applicable consumer-protection or security requirements.

This is why possession of the physical card, use of an OTP or other authentication method, the timing of notices, and the issuer’s security records may all matter. None should be discussed in the abstract; the actual authentication and transaction records should be examined.

Special rule for lost or stolen cards

Republic Act No. 10870 states that transactions made before the loss or theft is reported are for the cardholder’s account. Current BSP regulations nevertheless preserve the cardholder’s right to dispute those transactions; if the issuer’s investigation finds them unauthorized or fraudulent, they must be reversed with related finance charges and fees.

Report the loss immediately because timing materially affects liability. Do not wait for the next statement or for a police report before notifying the issuer.

For transactions made after prompt notice, the Supreme Court has held that a card issuer cannot continue imposing liability merely because it had not yet notified its merchants. Once the cardholder gave prompt notice, preventing further use became the issuer’s responsibility. See Spouses Ermitaño v. Court of Appeals, G.R. No. 127246, April 21, 1999.

What to do immediately

Lock or block the card. Use the issuer’s official app or fraud hotline. Request a replacement card and ask whether linked virtual cards or tokens must also be replaced.
Report every disputed transaction. State the transaction date, posting date, amount, currency, and merchant descriptor. Include pending transactions if the issuer accepts reports on them.
Obtain written proof of the report. Save the case number, acknowledgment, date and time, channel used, and the representative’s name or identifier.
Secure connected accounts. Change the issuer-app and email passwords using a trusted device. Sign out other sessions, review stored devices, and enable available multifactor authentication and alerts. Never disclose a PIN, password, CVV, or OTP to someone who contacts you.
Check the full account history. Look for small test charges, cash advances, installment conversions, balance transfers, supplementary-card transactions, or changes to your contact details.
Notify the merchant when appropriate. Ask whether it can identify, cancel, or refund the transaction. Do not allow a merchant discussion to delay the issuer dispute.
Follow the issuer’s documentary requirements promptly. It may request a dispute form, affidavit, proof that the card remained with you, merchant correspondence, or other records. Keep copies of everything submitted.
Ask for payment instructions in writing. Pay the undisputed balance or the amount the issuer confirms is due. Do not simply ignore the whole statement.
Monitor succeeding statements. Check whether the charge, provisional credit, interest, and fees were posted correctly and whether further unauthorized attempts occurred.

What to include in the dispute

A concise written dispute should identify:

Your name and safe contact details;
Only the last four digits of the card;
Each disputed transaction’s merchant descriptor, amount, currency, date, and posting date;
The date and time you discovered and reported the incident;
Whether the physical card was lost, stolen, or continuously in your possession;
Whether you received or entered an OTP, approved an app prompt, or disclosed any credential—and the circumstances;
Why you say the transaction was not authorized;
Any prior relationship with the merchant;
The action already taken to secure the card and account; and
The relief requested: investigation, reversal, removal of related charges, corrected statement, and written findings.

Keep the account truthful and precise. If you interacted with a scammer or entered an OTP, disclose that fact and explain the social-engineering sequence. Concealing unfavorable facts can damage credibility and prevent an accurate investigation.

Evidence to preserve

Preserve original or clearly legible copies of:

The statement and account-activity page showing the transaction;
SMS, email, and push notifications, including timestamps;
Screenshots of suspicious logins or changes to account details;
Call logs, chat transcripts, emails, case numbers, and acknowledgments;
The card’s condition and possession, where relevant;
Receipts, location records, travel records, work logs, or other evidence showing where you were;
Merchant correspondence, cancellation confirmations, and refund promises;
Phishing messages, caller numbers, URLs, social-media profiles, and payment instructions;
The issuer’s dispute form and every attachment submitted; and
Any police, NBI, or other law-enforcement report.

Keep original electronic files where possible. Screenshots are useful, but original messages and downloaded statements may contain dates and other information that screenshots omit.

Handling the bill while the dispute is pending

Do not assume that filing a dispute suspends the entire account. The issuer may still collect amounts not identified as billing errors.

Pay the undisputed portion by the due date unless the issuer gives different written instructions. If the minimum amount due includes the disputed charge, ask for a written recalculation or other accommodation. Keep proof of payment.

If the issuer imposes interest or fees on the disputed amount during the investigation, object in writing and cite Republic Act No. 11765. Ask that the charge be removed or that the issuer explain the reasonable accommodation it provided.

If a collection agency contacts you, state in writing that the specified transaction is under dispute and provide the issuer’s reference number. Do not disclose credentials or send payment to an unverified account. Credit card issuers and collectors may not harass, abuse, or oppress a cardholder or use unfair collection practices.

If the issuer denies the dispute

Request the final investigation report or a sufficiently detailed written explanation. Ask the issuer to identify the evidence it relied upon, such as:

Whether the transaction was card-present or card-not-present;
The authentication method used;
OTP or app-approval timestamps and delivery destination;
Device, login, and account-change records;
Merchant, terminal, or payment-gateway records;
Any signature, sales slip, delivery information, or proof of fulfillment;
The time the card was reported lost or compromised; and
The contractual or regulatory basis for assigning liability.

A bare statement that the transaction was “authenticated,” “valid,” or “3D Secure” may not answer every factual issue. Your response should specifically address the records cited and any inconsistencies in the timeline.

Use the issuer’s reconsideration or appeal channel if available, but preserve all applicable BSP and contractual deadlines.

Escalating the complaint to the BSP

The issuer’s Financial Consumer Protection Assistance Mechanism is the required first-level remedy. If the issuer does not act, misses the applicable period, provides an inadequate explanation, or otherwise leaves the matter unresolved, elevate it to the Bangko Sentral ng Pilipinas.

The most current BSP guidance directs consumers to:

File through the BSP Online Buddy (BOB) on the BSP website;
If BOB is inaccessible, complete the BSP Complaints, Inquiries and Requests form and email it to consumeraffairs@bsp.gov.ph; or
Use the other channels listed on the BSP Consumer Assistance page.

Attach proof that you first used the issuer’s assistance mechanism, the issuer’s response or proof of inaction, a clear chronology, the requested resolution, and supporting records.

Do not send the BSP your PIN, password, full account or credit-card number, CVV, or OTP. Redact unnecessary sensitive details. The BSP’s current filing guide also cautions consumers against submitting full card numbers and identification documents that are not required.

Under BSP Circular No. 1169:

BSP-CAM is the second-level recourse after the institution’s assistance mechanism;
The BSP-CAM process may take approximately 55 to 65 days;
Mediation is voluntary and requires the parties’ consent; and
After BSP-CAM, the BSP may adjudicate a purely civil financial claim seeking only payment or reimbursement of money not exceeding ₱10 million, subject to the circular’s jurisdictional and procedural requirements.

A lawyer is not required for BSP mediation or adjudication, although legal assistance may be advisable for a formal complaint, a large claim, disputed authentication evidence, or related court proceedings.

Criminal and regulatory complaints are separate

Fraudulent use of credit cards and access-device information may constitute an offense under the Access Devices Regulation Act, Republic Act No. 8484, and potentially other criminal laws depending on the conduct.

Report promptly to the NBI, PNP, or another appropriate law-enforcement agency when the card was stolen, identity theft or phishing is involved, the fraud is continuing, or substantial losses occurred. The NBI provides an online complaint page and investigative assistance for victims of computer-related crime.

A criminal report does not replace the dispute with the issuer, and the issuer dispute should not be postponed while waiting for law enforcement.

The temporary-holding procedures under the Anti-Financial Account Scamming Act should not be confused with credit-card chargeback procedures. The BSP’s Circular No. 1215 expressly excludes credit-card transactions from those temporary-holding rules.

Common mistakes to avoid

Waiting for the monthly due date before reporting;
Reporting only to the merchant and not to the issuer;
Failing to identify every disputed transaction;
Assuming a telephone call is enough without saving a reference number or written acknowledgment;
Ignoring requests for relevant documents;
Failing to pay the undisputed balance;
Treating a merchant-service dispute as card theft without checking the facts;
Deleting phishing messages, alerts, or account records;
Sending a PIN, CVV, password, OTP, or full card number in an ordinary email;
Accepting a verbal denial without requesting written findings;
Missing BSP-CAM replies—the BSP may terminate CAM if it receives no further communication from the complainant within 30 days after the institution’s last response; and
Assuming that the general five-year prescription period under Republic Act No. 11765 replaces the much shorter 30-day credit-card billing-dispute period.

When legal help is urgent

Consider obtaining legal advice promptly if:

The disputed amount is substantial or the issuer has threatened suit or setoff against your deposit;
The issuer continues collecting or reporting the disputed amount despite a pending investigation;
A collection agency is harassing you or communicating inaccurate credit information;
The issuer alleges that you participated in the fraud or intentionally made a false report;
Your identity or several financial accounts have been compromised;
A formal BSP adjudication, court pleading, subpoena, demand letter, or summons has been received;
The evidence involves disputed OTP, device, biometric, signature, or merchant records; or
A deadline is near and the issuer or BSP process remains unresolved.

Frequently asked questions

Must the bank remove the charge immediately?

Not necessarily. The issuer must investigate. It may issue a provisional credit or another accommodation, but the final reversal ordinarily depends on the investigation. If the charge is found unauthorized or fraudulent, it and related finance charges and fees must be reversed.

Is an OTP enough to make me automatically liable?

The rules do not create a universal rule that the presence of an OTP automatically decides liability. The issuer may consider the authentication record and your actions, together with its own systems, security controls, personnel, and service providers. Explain exactly how the OTP was delivered or used and request the underlying authentication timeline.

What if I still have the physical card?

Report immediately. Card details can be used online or through a cloned card even while the original remains with you. Preserve evidence that the card remained in your possession.

What if I discovered the charge after 30 days?

Report it anyway and explain when and how you discovered it. The 30-day rule is the express credit-card billing-dispute window, so delay can make the claim harder. However, do not assume that every possible claim or remedy is automatically extinguished; that conclusion may depend on the contract, facts, and applicable law.

Should I pay the disputed amount?

Ask the issuer for written instructions and for the statutory accommodation on interest, fees, and charges. Pay the undisputed portion on time. Do not withhold the entire bill merely because one transaction is disputed.

Can I cancel the card while the dispute is open?

You can request that the compromised card be blocked and replaced. Terminating the credit-card account does not by itself erase legitimate outstanding obligations or end the investigation. Confirm how the dispute and replacement or closure will be handled.

Do I need an affidavit or police report?

The issuer may request supporting documents under its reasonable procedures. Do not wait for them before giving initial notice. Submit additional documents promptly when requested and keep copies.

Can BSP order reimbursement?

For qualifying claims, BSP adjudication can address purely civil financial transactions where the relief sought is solely payment or reimbursement of up to ₱10 million. BSP-CAM must generally be completed first, and the formal requirements of Circular No. 1169 apply.

Official references

This article provides general legal information, not advice for a particular dispute. Liability may depend on the credit-card agreement, transaction and authentication records, timing of notice, and other facts. Official sources and procedures were checked as of July 22, 2026.