Credit Card Fraud in the Philippines: How to Dispute an Unauthorized Charge and How Long You Have to Report It

What to Do in the First Two Hours

Step one is locking the card, not calling. Nearly every major Philippine issuer has a lock card or block card toggle in its mobile app, effective instantly and far faster than waiting in a hotline queue. Be aware that locking also blocks anything auto-billed to the card — utilities, subscriptions, wallet top-ups — which is the correct trade-off. Stop the bleeding first, re-link later. If the physical card was actually lost or taken, request a replacement with a new number rather than a temporary lock.

Step two is the hotline, and the words matter. Say plainly: unauthorized transaction, I want to file a dispute. Dispute routes you into the formal disputes process; complaint may be logged as ordinary customer feedback. Before you hang up, get three things: the agent's name or ID, the case reference number, and how to obtain the dispute form.

Step three is filing in writing the same day. Set out the transaction date, the amount in pesos and in the original currency, the merchant name, where you physically were, and whether the card was in your possession. Send it through the app's ticketing channel or the issuer's designated email. The verbal report starts the process; the written filing is what stops the clock. Screenshot the transaction detail, the SMS alert, and the timestamp of your card lock — those three images carry real weight if you later escalate to the regulator.

How Long Do You Have to Dispute a Charge in the Philippines?

The working answer is: as fast as possible, and never later than the next statement. Philippine cardholder agreements almost always state a dispute deadline, commonly 30 to 60 days from the statement date (some cards count from the posting date). The precise figure is in your card's terms and the issuer's latest notice. Past that point the bank will normally still accept your report, then decline the reversal on the grounds that it was not raised within the agreed period.

Two deadlines get confused constantly, and the difference decides your outcome:

• Your deadline with the bank, set by the cardholder agreement, in the range of one to two months. This is the one that binds you.
• The bank's deadline with the merchant, set by Visa, Mastercard or JCB network rules, typically counted in months from the transaction or expected delivery date. Much longer — and not yours to invoke. If you missed your own window, the bank is under no obligation to use its.

The practical consequence: do not wait for the statement to review everything at once. Turn on per-transaction push alerts and read them. The standard fraud pattern is a tiny test charge first — often the equivalent of a few dollars — to confirm the card works, followed by large charges hours or days later. That small charge is your only early warning, and it is easy to dismiss precisely because the amount is trivial. Lock the card on the test charge, not on the big one.

How the Chargeback Process Works and What You Need to Submit

A chargeback is the mechanism by which your issuing bank recovers funds from the acquiring bank and merchant. You cannot file a chargeback with the card network directly. You file a dispute with your issuer, and the issuer decides whether to raise a chargeback. The sequence is usually:

• 1. Submit the dispute form, generally called a Dispute Form or Transaction Dispute Form, downloadable in the app or sent by the agent.
• 2. Execute an affidavit. For larger amounts or multiple transactions, banks routinely require an Affidavit of Disputed Transaction, and normally require it notarized. Notarisation is done at a law office in the Philippines, costs little, and requires your original passport. The affidavit must match the timeline you already filed.
• 3. Attach evidence: passport stamps or boarding passes proving you were elsewhere, the card-lock screenshot, any merchant correspondence, and the police blotter if you filed one.
• 4. Investigation. The issuer verifies and raises the chargeback; the merchant may contest it through representment.
• 5. Written outcome, either reversal or denial.

Step two is where cases are lost. The affidavit must state whether the card was in your possession, where you were at the time, and that you never disclosed the card number, CVV or OTP to anyone. If that last statement is not true, do not write it. A false affidavit is a criminal matter in the Philippines, and the bank can overturn it instantly by producing the OTP authentication log.

Dispute forms, a notarised affidavit, a written statement in English? → Chinese-language document assistance

Do You Need to File a Police Report for Card Fraud?

Not always — but in four situations you must file and obtain a written copy. In other cases a report is optional and mainly serves to strengthen the dispute file.

• The card was stolen, snatched, or lost with your wallet. You need a police blotter to establish the time of loss.
• The bank explicitly requires a report, which varies by issuer and by amount.
• Identity theft is involved — someone opened a card or loan in your name, which goes beyond a single disputed charge.
• Large or repeated amounts where you intend to pursue recovery legally.

Three channels exist. A police blotter at the nearest station is fastest and is what most downstream processes actually want. The PNP Anti-Cybercrime Group and the NBI Cybercrime Division handle online fraud, phishing and identity theft. The Philippines has dedicated legislation covering fraud involving credit cards and other access devices, so card fraud is a criminal offence, not merely a private dispute.

As a foreigner, bring your original passport, proof of your Philippine address (a utility bill or lease), and the transaction record. Insist on a stamped paper copy of the blotter rather than just a case number — banks want the document. For the broader response to theft and robbery, see what to do if you are robbed in the Philippines, and for boundaries during any law enforcement encounter, handling police shakedowns.

How Long the Investigation Takes and Whether You Should Pay the Bill

Thirty to forty-five days is the common range; cross-border or complex cases can stretch to two or three months, with the binding timeline being whatever the bank states in writing. Overseas transactions add time because the acquirer and merchant must respond. What you can do is send a written follow-up every two weeks and keep every reply.

Now the part that costs people money: the statement. Philippine issuers generally do not grant automatic provisional credit while a dispute is under investigation, so the disputed amount may remain on your bill. Some banks will suspend interest or waive late fees on the disputed portion during the investigation, but you must get that confirmed in writing — never assume it.

The safe approach is to pay the undisputed balance in full on time and handle the disputed amount exactly as the bank instructs in writing. Do not withhold the whole payment. Interest, late fees and a delinquency mark on your Philippine credit record follow you into future car loans, mortgages and card applications, and unlike the fraudulent charge, a delinquency you caused yourself does not get reversed. If your account gets frozen during this period, see what to do when a Philippine bank account is frozen.

Can You Get the Money Back? What Usually Wins and What Usually Loses

If the card never left your possession, you never shared an OTP, and you filed in writing within the deadline, recovery odds are good. If the bank can show the transaction passed authentication you personally completed, recovery becomes very difficult. This is not the bank being difficult; it is how the burden of proof is allocated.

Usually recoverable:

• You were in another country or city at the time, supported by passport stamps, boarding passes or hotel records.
• Classic skimming patterns: several charges at one merchant on one day, escalating in value, in a location nowhere near your normal movements.
• Charges posted after you already reported the card lost.
• Small test charges from an overseas site where you never held an account.

Usually not recoverable:

• You gave out the OTP. Even where the caller impersonated your bank, a courier or the police, the log shows you authorised it. This is the single most common reason disputes fail in the Philippines.
• A family member, driver, helper or colleague used the card. Banks treat that as use within your household, i.e. a private matter.
• Chip-and-PIN transactions completed in person while the card was not reported lost.
• You did place the order and are unhappy with the goods or service. That is a merchandise dispute on a different track, not fraud.

One practical warning: do not overstate your innocence in the affidavit. Describe what you actually remember doing and let the bank assess it. Being caught out on one detail destroys the credibility of the entire file.

Foreign-Issued Cards and E-Wallets Follow Different Rules

If your card was issued abroad, the dispute goes back to the issuing bank in that country, not to any Philippine bank. The dispute relationship exists only between you and your issuer; the Philippine acquiring bank will not accept a cardholder filing. Use your home bank's app or the dedicated card services line, state that the transaction location does not match where you physically were, and prepare a written statement with supporting evidence — entry stamps, boarding passes, accommodation records. Your deadline still runs on the statement cycle, but cross-border investigations take noticeably longer. If you struggle to receive verification codes on a home-country number while abroad, see keeping a home number alive for SMS verification. For UnionPay acceptance limits locally, see how far UnionPay gets you in the Philippines.

E-wallets such as GCash and Maya work differently and the credit card playbook does not transfer. Wallet balances are money you already funded, so once it is transferred out there is no merchant-side chargeback mechanism to invoke — you are relying on the platform's dispute and risk-control processes instead. That makes speed even more decisive: file the in-app dispute and request an account freeze immediately, then file a police report. What the platform can do is attempt to freeze the receiving account, which only helps if the recipient has not cashed out yet. See dealing with a frozen GCash account and setting up GCash and Maya as a foreigner.

If the Bank Denies Your Dispute, and How to Prevent a Repeat

A denial is not the end. Ask in writing for the reason and the evidence relied on — the OTP authentication log, the authorisation record — and for the internal reconsideration or appeal route. Many denials are simply the result of an incomplete file, and a notarised affidavit or a set of entry stamps reverses them.

If the internal route is exhausted, or the bank misses its own stated response deadline, you can escalate to the Bangko Sentral ng Pilipinas consumer assistance mechanism. Philippine financial consumer protection legislation empowers the BSP to receive, mediate and adjudicate complaints against supervised institutions, and the channel is free. Submit the full timeline, every exchange with the bank, and the written denial — completeness of the file drives how fast it moves. Where the amount is significant and the facts are clear, small claims court is also available without a lawyer and at low cost; see using small claims court in the Philippines and, if you need advice, how foreigners find a lawyer.

Seven preventive measures, in order of effectiveness:

• Enable per-transaction push and SMS alerts with the threshold set to zero. This is the only measure that cuts detection time to minutes.
• Keep overseas and online transactions switched off by default in the app, enabling them only when needed. Most Philippine issuers support this.
• Set low per-transaction and daily limits on your everyday card, raising them temporarily for large purchases.
• Never let the card out of sight. Ask restaurants to bring the terminal to the table; the same applies at fuel stations.
• Never share an OTP with anyone, including callers claiming to be your bank, a courier, the police or platform support. Banks never ask for it.
• Use a virtual card or e-wallet for online payments to minimise exposure of the real card number.
• Spend one minute a week scanning your transactions, watching specifically for tiny unfamiliar charges. Those are test charges.