Seeing a foreign charge on your Philippine credit card can be alarming, especially if you never traveled, never bought from that overseas merchant, or still have the physical card with you. The most important thing is to act fast, document everything, and dispute the transaction in writing. Philippine law gives credit cardholders specific protections, but banks also look closely at timing, reporting, OTP use, device history, and whether the cardholder may have shared card details.

First, Confirm What Kind of Foreign Transaction It Is

Not every “foreign” or “international” charge means someone physically used your card abroad. It may be:

An online purchase from a foreign website
A subscription billed by an overseas company
An app store, gaming, cloud storage, hotel, airline, or travel booking charge
A foreign currency transaction later converted into pesos
A card-present transaction abroad using a cloned, stolen, or compromised card
A cash advance or ATM transaction outside the Philippines
A small “test charge” followed by larger fraud attempts

Check the merchant name carefully. Foreign billing descriptors are often unclear. For example, a hotel booking, online platform, or payment processor may appear under a different corporate name from the website you used.

Still, if you do not recognize the charge, treat it as urgent. Do not wait for more transactions to appear.

Your Immediate Priorities

Your goals in the first few hours are simple:

Stop further use of the card.
Create a clear record that you reported the unauthorized transaction.
Preserve evidence showing you did not authorize the purchase.
Start the bank’s dispute and fraud investigation process.
Escalate properly if the bank delays, ignores, or wrongly denies your claim.

Under the Philippine Credit Card Industry Regulation Law, Republic Act No. 10870, credit card issuers are supervised by the Bangko Sentral ng Pilipinas (BSP), must maintain a customer assistance unit, and must act on reported billing errors or discrepancies within the period set by law. (Supreme Court E-Library)

Legal Basis: What Philippine Law Says

Credit card issuers are regulated by the BSP

RA 10870 covers credit card issuers, acquirers, and credit card transactions. It gives the BSP supervisory power over credit card issuers and acquirers, including authority to issue standards, examine compliance, and regulate the reasonableness of fees and charges. (Supreme Court E-Library)

This matters because your dispute is not merely a private argument with the bank. A Philippine credit card issuer is a BSP-supervised financial institution and must follow financial consumer protection rules.

You have a deadline to report billing errors

RA 10870 gives cardholders up to 30 calendar days from the statement date to report any billing error or discrepancy. The issuer must take action within 10 business days from receipt of the notice. (Supreme Court E-Library)

In practice, report the unauthorized foreign charge as soon as you see the SMS alert, app notification, or pending transaction. Do not wait for the statement date if the transaction is already visible.

Lost or stolen cards must be reported immediately

RA 10870 states that when a credit card is lost or stolen, transactions made before reporting to the issuer are for the account of the cardholder. (Supreme Court E-Library)

The older Access Devices Regulation Act of 1998, RA 8484, also provides that upon knowledge of the loss of an access device, the holder must notify the issuer of the details and circumstances, and full compliance absolves the holder from financial liability for fraudulent use from the time the loss or theft is reported. (Lawphil)

This is why timing is critical. If your card is missing, report it immediately. If the card is still with you, say that clearly: “The physical card has never left my possession.”

Unauthorized use may be access device fraud

RA 8484 defines an “access device” broadly to include cards, account numbers, codes, PINs, and other means of account access. A credit card is expressly covered. The law penalizes acts such as using an unauthorized access device with intent to defraud, trafficking in unauthorized access devices, possessing counterfeit access devices, and disclosing card information without authority. (Lawphil)

For ordinary cardholders, the practical point is this: unauthorized foreign use of your card may be both a bank dispute and a criminal matter.

Financial consumers have protection against fraud and misuse

The Financial Products and Services Consumer Protection Act, RA 11765, protects financial consumers and requires financial service providers to establish a free Financial Consumer Protection Assistance Mechanism, or FCPAM, for complaints, inquiries, and requests. In alleged disputed amounts or unauthorized transactions, the financial service provider must suspend the imposition of interest, fees, and charges, or provide similar reasonable accommodations while the final investigation is pending. (Bangko Sentral ng Pilipinas)

BSP financial consumer protection regulations also require BSP-supervised institutions to provide assistance and relevant information for fraudulent or unauthorized transactions, maintain free and active 24/7 reporting channels, acknowledge reports immediately, and resolve claims in a fair, reasonable, timely, and transparent manner. (Bangko Sentral ng Pilipinas)

Newer anti-scam rules may also apply

The Anti-Financial Account Scamming Act, RA 12010, treats a credit card account as a “financial account” and covers social engineering schemes where someone obtains sensitive identifying information, such as credit card details or electronic credentials, through deception. It also requires institutions to protect access to financial accounts through adequate controls such as multi-factor authentication and fraud management systems. (Lawphil)

RA 12010 is especially relevant when the fraud involved phishing, fake bank calls, OTP theft, compromised online banking, account takeovers, or money mule accounts.

Cybercrime and data privacy laws may be involved

If the unauthorized foreign charge was caused by phishing, malware, account hacking, identity theft, or unauthorized use of computer data, the Cybercrime Prevention Act of 2012, RA 10175, may apply, particularly provisions on computer-related fraud and related offenses. (Supreme Court E-Library)

If your personal information or card data was misused, maliciously disclosed, improperly disposed, or compromised through a data breach, you may also have rights under the Data Privacy Act of 2012, RA 10173, and may file a complaint with the National Privacy Commission. The NPC states that data subjects may file complaints when personal information is misused, maliciously disclosed, improperly disposed, or when data privacy rights are violated. (National Privacy Commission)

Step-by-Step Guide: What to Do Right Away

1. Lock or block the card immediately

Use your bank app if it has a lock, freeze, or block-card feature. Then call the bank’s official hotline or use the official in-app support channel.

Ask for:

Immediate blocking of the card
Replacement card with a new number
Blocking of online, international, and cash advance transactions if available
Removal of the card from digital wallets and saved merchant tokens
A fraud case or dispute reference number

Do not rely only on a phone call. Follow up by email or secure message so there is a written record.

2. Tell the bank the transaction was unauthorized

Be clear and direct. Say:

You did not authorize the transaction.
You do not recognize the merchant.
You did not receive the goods or services.
The physical card is still with you, if true.
You were in the Philippines or another location when the foreign transaction occurred, if true.
You are formally disputing the transaction as unauthorized.

Avoid vague wording like “I am not sure about this charge.” Use the word unauthorized if that is accurate.

3. Dispute the charge in writing within 30 calendar days from the statement date

RA 10870 gives you up to 30 calendar days from the statement date to report billing errors or discrepancies. But do it earlier. (Supreme Court E-Library)

Send your dispute through the bank’s official email, secure message center, branch, or card dispute portal. Keep screenshots or PDFs showing the date and time of submission.

A concise dispute email may look like this:

I am formally disputing the following credit card transaction as unauthorized:

Card ending in: 1234

Transaction date: 15 March 2026

Posting date: 16 March 2026

Merchant descriptor: ABC STORE LONDON

Amount: GBP 500 / PHP equivalent

I did not authorize this transaction, did not receive any goods or services from this merchant, and request immediate investigation, temporary reversal or reasonable accommodation, and suspension of interest, fees, and charges on the disputed amount pending final investigation. Please provide a case reference number and written confirmation of the actions taken.

4. Ask the bank to suspend interest, penalties, and finance charges on the disputed amount

Under RA 11765, for alleged disputed amounts or unauthorized transactions, the financial service provider must suspend the imposition of interest, fees, and charges or provide similar reasonable accommodation while the investigation is pending. (Bangko Sentral ng Pilipinas)

If your statement contains both valid and disputed charges, pay the undisputed portion on time. This helps avoid a separate delinquency issue.

5. Preserve evidence before anything disappears

Banks often decide disputes based on records. Save everything.

Evidence	Why it helps
SMS, email, or app alert showing the foreign charge	Proves when you learned of the transaction
Screenshot of pending and posted transaction	Shows merchant name, amount, date, and currency
Billing statement	Establishes the 30-day dispute period
Proof you were not abroad	Passport pages, immigration record, boarding passes, work logs, location history, or travel documents
Proof the card was with you	Photos are not conclusive, but can support your narrative
Bank call reference numbers	Shows prompt reporting
Emails and chat transcripts with the bank	Creates a written timeline
Police, NBI, PNP-ACG, CICC, or NPC reports	Supports seriousness of the complaint
Merchant emails or account activity	Helps show you did not order or receive anything

Do not delete messages from the bank, merchant, or suspected scammer. If a scammer contacted you through Viber, WhatsApp, Messenger, Telegram, SMS, or email, preserve the entire thread, profile, number, email headers if available, and payment instructions.

6. Secure your accounts

Unauthorized card use may be only one symptom of a larger compromise. Immediately:

Change your online banking password.
Change the password of the email address linked to your bank.
Turn on multi-factor authentication.
Remove saved cards from browsers, e-commerce apps, and wallets.
Check whether your phone number or email has been changed in your bank profile.
Review recent devices logged in to your bank, email, and shopping accounts.
Scan your phone and computer if you suspect malware.
Never share OTPs, CVV, full card number, online banking password, or PIN.

The BSP’s complaint guidance expressly warns consumers not to share PINs, passwords, account numbers, credit card or ATM card numbers, passbooks, passports, or identification cards when filing BSP-CAM complaints because these are not required for BSP complaint processing.

What to Ask the Bank During the Investigation

Do not simply ask, “Will you reverse it?” Ask for the facts the bank is relying on.

Request written information on:

Whether the transaction was card-present, online, mail order/telephone order, wallet-based, or recurring
Whether OTP, 3-D Secure, app approval, biometric approval, or tokenized wallet credentials were used
Whether the transaction passed fraud screening
The country, merchant category, currency, authorization date, and posting date
Whether the bank filed a chargeback or retrieval request through the card network
Whether a temporary reversal or provisional credit will be given
Whether interest, penalties, and finance charges on the disputed amount are suspended
When the bank expects to issue its final investigation result

BSP regulations require financial institutions to provide clear information on actions taken or to be taken for fraudulent or unauthorized transaction complaints. They must also formally inform the client of the result within three banking days from the conclusion of the investigation. (Bangko Sentral ng Pilipinas)

Common Bank Responses and How to Handle Them

“An OTP was used, so you are liable.”

OTP use is important evidence, but it should not end the discussion automatically. Ask how the OTP was triggered, where it was sent, whether there was SIM swap activity, whether the transaction matched your usual pattern, whether a new device was enrolled, and what fraud controls were applied.

If you were tricked into revealing an OTP through a fake bank call or phishing page, say so honestly. That may raise issues of customer negligence, but it may also raise issues under RA 12010 on social engineering and the institution’s duty to maintain adequate controls. (Lawphil)

“The transaction happened before you reported it.”

For a lost or stolen physical card, pre-report transactions are a serious problem under RA 10870. But if the card was never lost and the transaction was online or through compromised credentials, the issue is more nuanced. The bank should still investigate whether the transaction was actually authorized, whether its systems detected suspicious activity, and whether applicable consumer protection rules require reversal or accommodation.

“The merchant confirmed the transaction.”

Ask for supporting details. For online transactions, relevant details may include delivery address, IP address, email used, device data, invoice, signature, proof of delivery, and authentication records. A merchant’s bare confirmation does not necessarily prove that you authorized the transaction.

“Pay first while we investigate.”

For the disputed unauthorized amount, ask the bank to apply RA 11765 and suspend interest, fees, and charges or provide reasonable accommodation pending final investigation. Continue paying undisputed amounts to avoid a separate default.

“File a police report first.”

A police, NBI, or PNP-ACG report can strengthen your case, but the bank should still receive and process your dispute. For urgent card blocking and dispute timelines, do not wait for a police report before notifying the issuer.

When to Report to Law Enforcement or Other Agencies

Report to the bank first for reversal and card blocking

The bank is your first stop for stopping the card, disputing charges, and seeking reversal.

Report cyber fraud to CICC, PNP-ACG, or NBI when there is hacking, phishing, identity theft, or organized fraud

For cyber-related fraud, you may report to the government’s anti-cybercrime channels. The Department of Justice cybercrime reporting page provides guidance for cybercrime incidents. The NBI Cybercrime Division citizens charter states that complainants may proceed to the Cybercrime Division to file a complaint or request investigation assistance, with initial assistance in filing a complaint sheet. (Department of Justice)

You may also report scams to the Inter-Agency Response Center hotline 1326, which government sources describe as a 24/7 hotline for reporting scams. (Philippine News Agency)

Report data misuse to the National Privacy Commission

If you believe your card information or personal data was leaked, misused, maliciously disclosed, or improperly handled, consider an NPC complaint. The NPC complaint process generally requires a complaint in proper form, and its mechanics page refers to a filled-out and notarized complaint-assisted form or verified complaint with evidence and witness affidavits. (National Privacy Commission)

Escalate to the BSP if the bank does not resolve the complaint properly

The BSP Consumer Assistance Mechanism, or BSP-CAM, is generally a second-level recourse. You first report to the bank’s FCPAM or customer service channel. If dissatisfied with the bank’s action or response, you may escalate to the BSP through the BSP Online Buddy, or BOB, or through the complaint/inquiry/reply form if you cannot access BOB.

BSP materials state that the entire BSP-CAM process may take about 55 to 65 days from receipt of the complaint to termination, while mediation may take about 50 to 60 days from referral. (Bangko Sentral ng Pilipinas)

Practical Timeline

Time from discovery	What to do	Why it matters
Immediately	Lock card, call issuer, request block and replacement	Stops further unauthorized use
Same day	Send written dispute with transaction details	Creates proof and starts formal process
Within 24 hours	Save evidence, screenshots, alerts, travel proof	Prevents loss of digital evidence
Before statement deadline	Confirm written dispute is filed within 30 calendar days from statement date	RA 10870 gives this reporting period for billing errors or discrepancies
During investigation	Ask for suspension of fees/charges and provisional credit or accommodation	RA 11765 supports accommodation for disputed unauthorized transactions
After bank decision	Request written basis if denied	Needed for BSP escalation or legal action
If unresolved	Escalate to BSP-CAM	BSP supervises credit card issuers and handles consumer complaints against BSP-supervised institutions

Required Documents Checklist

For a bank dispute, prepare:

Government-issued ID
Credit card number, preferably only last four digits in emails
Transaction date, posting date, amount, currency, and merchant name
Screenshot of transaction alert or app entry
Billing statement showing the disputed item
Written explanation of why the transaction is unauthorized
Proof of your location when the transaction occurred
Proof the card was in your possession, if applicable
Copies of bank emails, reference numbers, and call logs
Police/NBI/PNP-ACG/CICC report, if available

For BSP escalation, prepare:

Proof that you first reported to the bank’s FCPAM or customer service
Bank’s final response or proof of inaction
Your dispute letter
Supporting documents
A clear timeline
BSP-CAM reference number, if already generated

For NPC or law enforcement complaints, you may need:

Complaint-affidavit or complaint form
Evidence screenshots
Witness affidavit, if any
IDs
Notarization, depending on the agency and filing mode
Special Power of Attorney if a representative will file or follow up for you

If You Are Abroad or a Foreigner Dealing With a Philippine-Issued Card

If you are overseas when you discover the unauthorized foreign transaction, you can usually start the bank dispute through hotline, email, secure app messaging, or online banking. Notarization is usually not required just to block a card or file the initial bank dispute.

However, if someone in the Philippines will file documents, follow up with government agencies, or sign sworn statements for you, a Special Power of Attorney may be required. Philippine embassies and consulates can notarize or acknowledge private documents such as affidavits and SPAs for use in the Philippines, and some foreign-notarized documents may need an apostille depending on where they were executed and where they will be submitted. (Philippine Embassy Canberra)

For foreigners with Philippine-issued credit cards, the same bank dispute and BSP consumer protection framework generally applies because the issuer is a BSP-supervised institution. If the card was issued abroad but fraud occurred in the Philippines, your primary dispute is usually with the foreign issuer, but Philippine law enforcement may still be relevant if the suspect, merchant, device, or money trail is in the Philippines.

Civil and Criminal Liability: What Remedies May Exist

Unauthorized credit card use can trigger different forms of liability:

Possible remedy	Against whom	Practical purpose
Bank dispute or chargeback	Credit card issuer and card network process	Reverse the disputed transaction
BSP-CAM complaint	BSP-supervised financial institution	Regulatory escalation and consumer redress
Criminal complaint under RA 8484	Fraudster, card-data seller, unauthorized user, or accomplice	Prosecution for access device fraud
Criminal complaint under RA 10175	Hacker, phisher, identity thief, cyber fraud actor	Cybercrime investigation and prosecution
Complaint under RA 12010	Social engineering actor, money mule, or responsible institution depending on facts	Anti-scam enforcement and possible restitution issues
NPC complaint	Entity that misused, leaked, or mishandled personal data	Data privacy accountability
Civil action for damages	Bank, merchant, fraudster, or other responsible party depending on evidence	Recovery of loss and damages

The Civil Code may also be relevant. Article 1170 makes persons liable for damages when, in performing obligations, they are guilty of fraud, negligence, delay, or contravene the tenor of their obligations. Article 2176 covers quasi-delict, where a person who causes damage through fault or negligence must pay for the damage done. Philippine jurisprudence also recognizes that banks, because their business is affected with public interest, are held to a high degree of diligence in handling client accounts. (Lawphil)

Frequently Asked Questions

Can I refuse to pay the unauthorized foreign credit card charge?

You should formally dispute the charge and ask the issuer to suspend interest, fees, and charges on the disputed amount while the investigation is pending. Pay the undisputed portion of your bill to avoid a separate delinquency issue.

How long do I have to dispute an unauthorized credit card transaction in the Philippines?

For billing errors or discrepancies, RA 10870 gives cardholders up to 30 calendar days from the statement date to report the issue. Report earlier if you discover the charge through an alert or app notification.

Is the bank required to reverse the unauthorized transaction immediately?

Not always immediately. The bank will usually investigate first. However, under financial consumer protection rules, it should handle fraud concerns promptly, provide clear information, and give reasonable accommodation such as suspending interest, fees, and charges or granting provisional credit when appropriate.

What if the credit card was never lost and is still with me?

Tell the bank clearly that the physical card remained in your possession. This helps distinguish your case from a lost or stolen card case. Many foreign fraud cases are card-not-present transactions, compromised card data, tokenized wallet misuse, or online account takeover.

What if an OTP was used for the transaction?

OTP use is evidence, but you may still ask the bank to investigate how the OTP was triggered, where it was sent, whether your SIM or email was compromised, whether a new device was enrolled, and whether fraud detection controls were applied. If deception or phishing was involved, RA 12010 on social engineering may be relevant.

Should I file a police report for an unauthorized foreign credit card charge?

For small isolated disputes, the bank dispute may be enough. For larger amounts, repeated fraud, phishing, identity theft, hacked accounts, or known suspects, a report to CICC, PNP-ACG, or NBI can help preserve evidence and support your bank dispute.

Can the BSP order my bank to reverse the charge?

The BSP-CAM process helps financial consumers escalate complaints against BSP-supervised institutions and facilitates resolution. It is not the same as immediately filing a court case. The process may involve communication, evaluation, mediation, or adjudication depending on the circumstances and applicable BSP rules.

What if the bank denies my dispute?

Ask for the denial in writing and request the factual basis: authentication records, merchant evidence, transaction type, OTP or 3-D Secure details, device information, and reasons for finding you liable. Then escalate to BSP-CAM with your timeline, evidence, bank response, and proof that you first used the bank’s complaint mechanism.

Can a foreign merchant be pursued from the Philippines?

Sometimes, but it is often difficult. In practice, the fastest path is usually through the Philippine issuer’s dispute and chargeback process. If the merchant, scammer, receiving account, or accomplice has links to the Philippines, Philippine law enforcement may have a more practical role.

Will filing a dispute affect my credit record?

A proper dispute should not automatically make you delinquent on the disputed amount, especially if the issuer grants accommodation. But unpaid undisputed balances, ignored statements, or unresolved amounts after final denial can create collection and credit reporting issues. Keep paying valid charges and keep written proof of the dispute.

Key Takeaways

Report the unauthorized foreign charge to your credit card issuer immediately and get a reference number.
File a written dispute; RA 10870 gives cardholders up to 30 calendar days from the statement date to report billing errors or discrepancies.
Ask the bank to suspend interest, fees, and charges on the disputed amount while the investigation is pending.
Preserve screenshots, alerts, statements, travel/location proof, call logs, and all bank communications.
If hacking, phishing, OTP theft, or identity misuse is involved, consider reporting to CICC, PNP-ACG, NBI, or the National Privacy Commission.
If the bank delays, ignores, or denies your dispute without a clear basis, escalate through BSP-CAM after first using the bank’s FCPAM or customer service channel.
Do not share your OTP, CVV, full card number, PIN, password, or IDs unnecessarily when filing complaints.
The strongest disputes are those with a clear timeline, prompt reporting, written evidence, and a specific request for reversal or reasonable accommodation.