Someone made an unauthorized online transaction on my card — what do I do?
Last updated: 2026-07-11 · Educational content; not legal advice.
Short answer
Treat it as fraud and act fast. Report it to your card issuer immediately to block the card and open a dispute, then file a billing-error dispute in writing under RA 10870 §18 (within 30 calendar days of the statement; issuer acts within 10 business days). Unauthorized use of your card or account details can be a crime under RA 8484 (Access Devices Regulation Act) and, when done online, under RA 10175 (Cybercrime Prevention Act) — so also report it to the PNP or NBI cybercrime unit. If the bank won't resolve it, escalate to the BSP under RA 11765.
Primary sources
Frequently asked
Is unauthorized card use a crime?
Yes. RA 8484 penalizes the fraudulent use of a credit card or its details (an 'access device'), and RA 10175 penalizes computer-related fraud when it is done online. You can file a criminal complaint with the PNP Anti-Cybercrime Group or the NBI Cybercrime Division in addition to the bank dispute.
Will I have to pay for the fraudulent transaction?
Dispute it as unauthorized under RA 10870 §18. If the loss did not result from your own fraud or gross negligence, you should not bear it; report immediately and keep the reference numbers. If the bank still charges you and won't resolve it, escalate to the BSP under RA 11765.
What evidence should I gather?
The transaction details, the date/time you reported it and the reference number, any phishing message or suspicious link you received, and your written dispute. This supports both the bank dispute and a cybercrime complaint.
Take action
Related companies
Related issues
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Hidden fees and charges you never agreed to, and how to claim a refund.