An unauthorized e-wallet transaction is a payment, transfer, cash-out, purchase, or account charge that you did not approve. The first few hours matter: scammers commonly move stolen funds through several accounts and withdraw them quickly. Secure your account, report the transaction through the e-wallet’s official fraud channel, and specifically request the tracing and temporary holding of the disputed funds. This article uses “charged” to mean that money was deducted from your account—not that you were criminally charged.

Identify What Kind of E-Wallet Problem Happened

How you describe the transaction affects how the provider investigates it.

Situation	How to describe it
Someone accessed your wallet and transferred money without your knowledge	Unauthorized transaction or account takeover
A scammer obtained your password, PIN, or one-time password through deception	Social-engineering fraud
You personally sent money because of a fake investment, seller, job offer, emergency, or impersonation scam	Scam-induced or fraudulently induced transfer
You accidentally typed the wrong account number	Erroneous transaction
The app debited you twice or deducted money from a failed transfer	Duplicate, timed-out, rejected, or unsuccessful transaction
You approved payment but the seller did not deliver	Merchant or underlying purchase dispute

This distinction matters. BSP rules for unauthorized transactions are different from rules on failed transfers, mistaken transfers, and disputes over goods or services. The BSP’s electronic fund transfer standards expressly exclude disputes about the delivery of the product or service underlying the payment.

A transaction may still be disputed even when the e-wallet’s records show that an OTP or PIN was used. The real questions include who controlled the account, how the credentials were obtained, whether the transaction pattern should have triggered fraud controls, and what each party did before and after the incident.

Your Rights Under Philippine Law

Financial Products and Services Consumer Protection Act

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act of 2022, protects financial consumers’ rights to:

equitable and fair treatment;
disclosure and transparency;
protection of their assets against fraud and misuse;
data privacy and protection; and
timely handling and redress of complaints.

BSP Circular No. 1160 requires BSP-supervised institutions—including banks and non-bank electronic money issuers—to provide necessary assistance and clear information concerning fraudulent or unauthorized transactions. They must maintain accessible complaint channels and give fraud-related complaints priority.

Anti-Financial Account Scamming Act

Republic Act No. 12010, or the Anti-Financial Account Scamming Act of 2024, expressly covers e-wallets as financial accounts. It criminalizes money-mule activities and social-engineering schemes in which a person deceptively obtains sensitive information and gains unauthorized access or control over another person’s account. (Lawphil)

The law requires financial institutions to use adequate controls such as multi-factor authentication, fraud-management systems, and account-owner verification. An institution may be required to restore the consumer’s money when it failed to employ adequate controls or failed to exercise the highest degree of diligence in preventing losses from financial-account scamming. A criminal conviction of the scammer is not required before restitution may be ordered. (Lawphil)

The law does not, however, guarantee an automatic refund in every scam case. Liability still depends on the facts, including the institution’s security controls, the customer’s conduct, how the transaction was authenticated, how quickly it was reported, and whether the funds remained recoverable.

BSP Rules on Unauthorized Transactions

Under BSP Circular No. 1160, a dispute involving a fund transfer should be filed with the originating financial institution, meaning the e-wallet or bank from which the money left. That institution has primary responsibility for assisting its customer and coordinating with the receiving institution.

Pending investigation, the involved institutions may be required to:

suspend related interest, fees, or charges;
hold the disputed funds if they are still intact;
consider reasonable accommodations such as non-withdrawable provisional credit;
block compromised account access; and
take other steps needed to protect the consumer’s assets.

If the investigation establishes that the transaction was fraudulent or unauthorized, the provider should correct or reverse it, including related charges, or make any provisional credit permanent. The customer must be formally informed of the result within three banking days after the investigation is concluded.

Temporary Holding of Disputed Funds

BSP Circular No. 1215, issued to implement AFASA, created a coordinated process for tracing and temporarily holding funds transferred between financial institutions. The rules cover electronic transfers from one financial account to another, including e-wallet transfers, but generally do not cover ordinary erroneous transactions or credit-card purchases that are not electronic fund transfers. (Bureau of Soils and Water Management)

The initial holding period may be up to five calendar days. During that short period, the originating institution may need supporting documents from the victim to justify an extended hold. The overall temporary holding period cannot exceed 30 calendar days, unless a competent court orders a further extension. (Bureau of Soils and Water Management)

A hold is not the same as an immediate refund. It prevents intact funds from being withdrawn while the institutions verify the transaction. If the coordinated verification reasonably establishes that the money came from social engineering, money muling, illegal sources, or a transaction without an economic purpose, the amount held may be returned through the originating institution. Otherwise, the hold ordinarily lapses and the money is released to the beneficiary, unless a court has extended it. (Bureau of Soils and Water Management)

What to Do Immediately After Discovering an Unauthorized Transaction

1. Secure the E-Wallet and Connected Accounts

Use a trusted device and official app or website to:

Change the e-wallet password and mobile PIN.
Log out all other devices or sessions, if the feature is available.
Disable outgoing transfers, linked cards, or online payments.
Remove unfamiliar devices and linked accounts.
Change the password of the email account connected to the wallet.
Contact your mobile network if your SIM suddenly lost service or you suspect a SIM swap.
Notify any linked bank or card issuer.

Do not use links sent through suspicious texts, emails, or chat messages. Scammers sometimes contact victims again while pretending to be the provider’s fraud department.

2. Report the Transaction to the Originating E-Wallet

Use the provider’s official fraud hotline, in-app help center, verified website, or official email address. BSP rules contemplate free, active fraud-reporting channels that are available on a 24/7 basis, with immediate written acknowledgment.

Clearly state:

“I am disputing an unauthorized or fraud-related electronic fund transfer. Please secure my account, trace the disputed transaction chain, coordinate with the receiving institutions, and initiate the temporary holding of any funds that remain intact under RA 12010 and BSP Circular No. 1215.”

Provide:

your name and registered mobile number;
transaction reference number;
amount;
date and exact time;
recipient account or mobile number shown in the record;
a short explanation of why you did not authorize the transaction;
how and when you discovered it; and
whether your phone, SIM, password, PIN, or OTP may have been compromised.

Ask for a case or ticket number and save it. If the first report was made by telephone, immediately send a written follow-up summarizing the call.

3. Request Specific Protective Actions

Do not limit the complaint to “please refund me.” Request the operational steps needed to preserve evidence and recover funds:

block further access or transfers;
preserve transaction and authentication records;
notify the receiving financial institution immediately;
trace any onward transfers;
temporarily hold all intact disputed funds;
provide the transaction reference numbers and involved receiving institutions;
suspend disputed fees or charges;
give written status updates; and
provide the final findings and legal or contractual basis for the decision.

Under AFASA’s implementing rules, the source-account owner may request transaction identifiers, information about receiving institutions in the transaction chain, and the dates and times of the transfers. (Bureau of Soils and Water Management)

4. Preserve Evidence Before Deleting or Resetting Anything

Create a secure evidence folder containing:

screenshots of the transaction history;
SMS and email alerts;
scam messages and social-media conversations;
the scammer’s usernames, profile URLs, phone numbers, QR codes, and account details;
screenshots of unknown-device or password-change notifications;
call logs;
receipts and reference numbers;
reports made to the wallet, bank, telco, or merchant;
acknowledgment emails and ticket numbers;
a written timeline in chronological order; and
proof of your location or activity when the transaction occurred, when relevant.

Keep original electronic files when possible. A forwarded screenshot may omit metadata or appear less reliable than the original message or exported conversation.

5. Prepare a Sworn Affidavit or Police Report Quickly

The initial hold may last only five calendar days. BSP rules allow the originating institution to consider a sworn complaint, affidavit, police report, investigation report, or similar supporting document when deciding whether to request an extended hold. These documents should describe what happened and why the transaction is probably fraudulent or disputed. (Bureau of Soils and Water Management)

Your affidavit should state:

your identity and ownership of the wallet;
the disputed transaction details;
that you did not knowingly approve the transaction, or how deception affected the purported approval;
whether you disclosed any credential and the circumstances;
when you reported the incident;
the provider’s response; and
the documents attached to the affidavit.

A sworn affidavit is normally signed before a notary public. Do not wait for notarization before making the initial fraud report; submit the first report immediately, then provide the affidavit as soon as practicable.

6. Report the Fraud to Law Enforcement

A provider complaint deals primarily with account security, tracing, and possible reimbursement. A criminal complaint allows investigators to pursue the scammers, obtain digital evidence, and seek appropriate cybercrime processes.

Reports may be made to:

the PNP Anti-Cybercrime Group;
the NBI Cybercrime Division; or
the Cybercrime Investigation and Coordinating Center.

The BSP’s official complaint guide encourages fraud victims to report criminal activity to these agencies.

Possible laws may include AFASA, the Cybercrime Prevention Act of 2012 or RA 10175, the Access Devices Regulation Act or RA 8484, estafa provisions of the Revised Penal Code, and other laws depending on the conduct. AFASA cases fall within the jurisdiction of the Regional Trial Court, and prosecution under AFASA does not prevent prosecution under the Revised Penal Code or other special laws. (Lawphil)

7. Follow Up in Writing

Ask the provider to confirm:

whether the receiving account was identified;
whether any amount was successfully held;
whether the money had already been withdrawn or transferred onward;
whether an extended hold was requested;
what additional documents are required;
the investigation’s current status; and
the expected next update.

A long period of silence should be documented. BSP rules require fraud complaints to receive priority and to be resolved within a reasonable period appropriate to the complexity of the case, although there is no single universal number of days for every investigation.

Documents to Prepare

Document	Why it matters
Government-issued ID	Confirms the identity of the registered account owner
Wallet profile or registration details	Shows ownership of the source account
Transaction history and receipts	Identifies the disputed transfers
Reference or trace numbers	Allows institutions to locate transactions quickly
Screenshots and original messages	Shows the scam method and surrounding circumstances
Written timeline	Prevents inconsistencies and makes investigation easier
Provider complaint and acknowledgment	Proves first-level recourse and prompt reporting
Sworn affidavit or police report	May support an extended temporary hold
Proof of linked bank or card charges	Shows the complete loss
Authorization or SPA	Required when another person handles the complaint

Only provide documents through verified channels. The BSP specifically warns complainants not to send PINs, passwords, full card details, passbooks, passports, or other unnecessary sensitive credentials with a BSP-CAM complaint.

When and How to Escalate the Complaint to the BSP

The e-wallet provider’s Financial Consumer Protection Assistance Mechanism is the required first level of complaint handling. If the provider denies the claim, fails to act within a reasonable period, gives an incomplete explanation, or stops responding, you may escalate the matter through the BSP Consumer Assistance Mechanism.

You may use the BSP Online Buddy and official consumer-assistance channels. If BOB is unavailable, the BSP allows submission of its Complaint, Inquiry, and Request form by email to consumeraffairs@bsp.gov.ph, together with proof that you first complained to the e-wallet provider and copies of supporting documents. (Bureau of Soils and Water Management)

Include:

A concise factual summary.
The exact amount disputed.
The resolution requested.
The provider’s complaint ticket.
Copies of the complaint and provider’s final reply, if any.
Supporting records arranged by date.

BSP-CAM primarily facilitates communication between the consumer and the institution. The BSP’s procedural FAQ estimates that the CAM stage may take approximately 55 to 65 days, although actual time can vary with workload and case complexity.

If CAM does not resolve the dispute, mediation or BSP adjudication may be available. BSP adjudication covers purely civil claims for payment or reimbursement not exceeding ₱10 million, excluding legal interest, attorney’s fees, and costs. The BSP estimates an adjudication period of roughly 180 to 240 days, and a lawyer is not mandatory, although the formal complaint must comply with verification, non-forum-shopping, and documentary requirements.

Will the E-Wallet Automatically Refund the Money?

No. A refund is more likely when the investigation shows that:

the customer did not initiate or knowingly approve the transfer;
account access came from an unrecognized device or session;
authentication or enrollment controls were bypassed;
the transaction was inconsistent with the customer’s normal activity;
fraud alerts or transaction limits failed;
the provider delayed blocking or tracing the transaction after prompt notice;
the institution failed to coordinate with receiving institutions; or
the institution failed to exercise the level of diligence required by law.

BSP rules permit institutions to consider both the customer’s actions and the acts or omissions of the provider, its employees, agents, outsourced entities, and service providers when allocating liability. An OTP or correct PIN is evidence of authentication, but it is not necessarily conclusive proof that the real account owner knowingly authorized the transaction.

Conversely, recovery becomes harder when the money was withdrawn before the report, the victim waited several days, records were deleted, the transfer was knowingly made to a scammer, or the provider demonstrates that its controls operated properly and the customer disregarded clear security warnings.

Common Problems That Cause Claims to Be Denied

“The Correct OTP Was Used”

Explain exactly how the OTP was obtained or used. State whether you received an unexpected OTP, whether someone impersonated the provider, whether your SIM stopped working, or whether an unknown person controlled your phone through screen sharing or remote-access software.

Do not falsely deny disclosing an OTP if you did disclose it. An accurate explanation of deception is more credible than a statement contradicted by system records.

You Personally Pressed “Send”

This is often treated differently from account takeover. Describe the false representations that caused the payment, such as impersonation of a family member, fake customer support, a nonexistent investment, or a fraudulent seller.

Ask the provider to treat the matter as a disputed fraud transaction and attempt tracing and holding. However, reimbursement may be more difficult because the payment instruction came directly from the account owner.

The Transfer Was Merely Unsuccessful

A rejected, returned, or timed-out instant payment should generally be returned within one hour after receipt of the sender’s instruction. For applicable batch transactions, return is generally required within two hours after receipt of the settlement report. These timelines concern unsuccessful or duplicate transfers—not investigations of genuinely unauthorized transactions.

The Dispute Is Really Against a Merchant

When you knowingly paid a legitimate merchant but dispute the product, delivery, subscription, or refund, use the provider’s merchant-dispute process and pursue the seller under consumer and contract rules. Do not describe a knowingly approved payment as unauthorized.

The Victim Is Abroad

An overseas Filipino or foreign account holder may usually submit the first complaint electronically. When another person in the Philippines will act for the account owner, BSP procedures allow representation through written authority; formal proceedings may require a Special Power of Attorney.

If a sworn affidavit or SPA is executed abroad, follow the receiving agency’s requirements. Depending on the country, this may involve notarization and an apostille, or execution before a Philippine embassy or consulate. Civil Code Article 17 recognizes the formalities of the country where an instrument is executed, while documents executed before Philippine diplomatic or consular officials follow Philippine formalities. (Lawphil)

Other Legal Remedies

If the dispute cannot be resolved through the provider and BSP mechanisms, a civil action may be considered based on the contract, financial-consumer laws, negligence, or other applicable causes of action.

Civil Code Articles 19, 20, and 21 require persons to act with justice and good faith and provide remedies for damage caused through unlawful or abusive conduct. Article 2176 governs a quasi-delict, meaning damage caused by fault or negligence even without a pre-existing contract. The precise defendants and court will depend on the amount claimed, the allegations, and whether the case is against the institution, the scammer, or both. (Lawphil)

A civil or BSP claim against the provider is separate from the criminal complaint against the scammer. AFASA also provides that a criminal conviction carries civil liability, which may include restitution to the victim. (Lawphil)

Frequently Asked Questions

How quickly should I report an unauthorized e-wallet transaction?

Report it immediately—ideally within minutes or hours. Prompt reporting increases the chance that receiving institutions can identify and temporarily hold funds before withdrawal or onward transfer.

Should I report to the sender’s wallet or the recipient’s wallet?

Start with the institution from which your money was transferred. Under BSP rules, the originating financial institution has primary responsibility for assisting you and coordinating with the receiving institutions.

Can an e-wallet refuse a refund because an OTP was used?

It may rely on the OTP as evidence, but OTP use does not automatically resolve every dispute. The provider should still examine device access, authentication records, social engineering, security controls, transaction patterns, and the conduct of both sides.

How long can disputed funds be frozen?

The initial hold may be up to five calendar days. The hold may be extended, but the total period under the BSP rules cannot exceed 30 calendar days unless extended by a competent court. (Bureau of Soils and Water Management)

Is a police report required before the wallet investigates?

It should not be a reason to delay your initial report. Report to the wallet first and obtain a case number. A police report, sworn complaint, or affidavit may then be required or useful for extending the hold and supporting the investigation.

Can I recover money sent to the wrong e-wallet account?

Report the error immediately. The involved institutions should make reasonable recovery efforts, but they generally cannot simply take money from an innocent recipient without a proper basis. A mistaken transfer is not treated exactly like an unauthorized transaction.

Can BSP order an e-wallet to reimburse me?

After the required complaint and CAM stages, BSP adjudication can decide qualifying civil claims for payment or reimbursement of up to ₱10 million. Larger claims ordinarily belong in the appropriate court unless the excess is waived.

Will filing a BSP complaint automatically freeze the recipient’s account?

No. A BSP-CAM complaint is an escalation and communication mechanism. The urgent request to trace and hold funds should first be made directly to the originating wallet under the AFASA process.

What happens if the recipient’s account was also an innocent victim?

The beneficiary may challenge the hold and submit documents showing that the transaction was legitimate. If legitimacy is established, the institution must lift the hold. This protects genuine account holders from malicious or mistaken reports. (Bureau of Soils and Water Management)

Can someone be punished for making a false fraud report?

Yes. AFASA penalizes malicious or bad-faith reporting of completely unwarranted or false information that results in the temporary holding of funds. Honest complaints made on a reasonable factual basis are different from deliberately fabricated reports. (Lawphil)

Key Takeaways

Report the transaction immediately through the originating e-wallet’s official fraud channel.
Ask for account blocking, transaction tracing, preservation of records, and temporary holding of intact funds.
Keep the ticket number and follow every telephone report with a written complaint.
Submit a sworn affidavit, police report, or other evidence quickly because the initial holding period may be only five calendar days.
An OTP or correct PIN does not automatically prove that a transaction was knowingly authorized.
A temporary hold can last up to 30 calendar days in total unless a court extends it.
Escalate unresolved complaints to the BSP only after first using the provider’s complaint mechanism.
BSP adjudication may cover qualifying reimbursement claims of up to ₱10 million.
A provider refund claim, BSP complaint, and criminal complaint against the scammer are separate remedies that may proceed through different processes.