My GCash/Maya was debited without my authorization — who is liable?
Last updated: 2026-07-11 · Educational content; not legal advice.
Short answer
For a truly unauthorized transaction — one you did not make and did not enable through your own fraud or gross negligence — you should not bear the loss. RA 11765 (2022) gives financial consumers the right to protection of their assets against fraud and misuse, and requires the provider to assist you, investigate, and inform you of the actions taken on a fraudulent or unauthorized transaction. GCash (G-Xchange, Inc.) and Maya are electronic money issuers supervised by the BSP, so report the unauthorized debit in writing the moment you see it, freeze the account, and demand an investigation. If the provider does not resolve it, escalate to the BSP; if you shared your OTP or PIN, expect the provider to argue you were negligent, which is why what you disclose matters.
Primary sources
Frequently asked
Do I automatically get my money back for an unauthorized debit?
Not automatically — the provider must investigate first. But RA 11765 protects your assets against fraud and misuse, so if the transaction was unauthorized and not caused by your own fraud or gross negligence, you should not be left to absorb the loss. Report immediately, in writing, and demand the investigation result.
What counts as my negligence?
Sharing your PIN, MPIN, OTP, or password, or approving a login you did not initiate, can be treated as negligence that shifts responsibility to you. Never share a one-time PIN — no legitimate provider will ask for it. If you did not share anything and the account was still breached, that points to a provider-side failure.
How fast must I report?
Immediately. Fast, written reporting lets the provider attempt to freeze funds and starts the record for your claim. Capture the transaction reference, amount, date/time, and screenshots, and file through the in-app dispute channel.
Take action
Related issues
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Disputes, holds, and unauthorized transactions on GCash, Maya, and other e-wallets.