Phillipines · consumer

How to File a Complaint Against a Bank for an Unauthorized Transaction in the Philippines

When money vanishes from your bank account through fraudulent transfers or unauthorized charges, Philippine law holds financial institutions to the highest standard of diligence. You do not have to accept a bank's automated denial or attempts to deflect blame onto you. By invoking the Financial Products and Services Consumer Protection Act and Bangko Sentral ng Pilipinas (BSP) regulations, you can force a formal investigation and fight for full reimbursement.

What Philippine Law Says About Bank Diligence and Consumer Protection

In the Philippines, the relationship between a bank and its depositor is fiduciary in nature and imbued with public interest. Under the General Banking Law of 2000 (Republic Act No. 8791) and settled Supreme Court jurisprudence, including Bank of the Philippine Islands v. Casa Montessori Internationale (G.R. No. 149454), banks are bound to exercise the highest degree of diligence in handling customer accounts. The fiduciary obligation requires banks to maintain strict security architecture; when a breach occurs, the burden rests heavily on the institution to prove that it exercised extraordinary care rather than merely presuming customer fault.

Your consumer rights are further reinforced by the Financial Products and Services Consumer Protection Act (Republic Act No. 11765) and its implementing rules under BSP Circular No. 1160 (Series of 2022). These regulations require all Bangko Sentral-Supervised Institutions (BSIs) to maintain an effective Financial Consumer Protection Assistance Mechanism (FCPAM) and uphold standards for the protection of consumer assets against fraud and misuse. Under Circular No. 1160, the Originating Financial Institution (OFI) has the primary legal responsibility to assist the consumer, investigate disputed transactions, and immediately coordinate with the receiving financial institution.

How Financial Institutions Try to Deflect Responsibility

When depositors report fraudulent fund transfers, ATM skimming, or unauthorized online card transactions, banks frequently issue template rejections. Common deflections include claiming that a One-Time Password (OTP) was generated, pointing to broad indemnity clauses in their terms and conditions, or alleging account-holder negligence without providing technical evidence. Many institutions drag their feet, hoping the victim will drop the dispute out of frustration.

Under Republic Act No. 11765, adhesion contracts that impose unfair terms—such as clauses that unilaterally absolve the bank of liability for security system failures or bypass the consumer's right to an objective dispute resolution—are prohibited. A bank cannot simply assert that credentials were authenticated; it must be prepared to substantiate that its fraud monitoring systems, transfer limits, and multi-factor authentication controls operated without system errors or vulnerabilities.

Escalating Unresolved Disputes to the Bangko Sentral ng Pilipinas

If the bank ignores your claim, delays beyond reasonable timelines, or issues an unsubstantiated denial, you are entitled to elevate your complaint directly to the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism (BSP-CAM). The central bank acts as the primary supervisory authority and tracks consumer violations by supervised lenders and digital financial service providers.

When consumer-assistance facilitation does not resolve the controversy, RA 11765 empowers the BSP to exercise adjudicatory authority over purely civil financial consumer complaints involving claims for reimbursement up to 10,000,000 Philippine Pesos. This provides an enforceable administrative route for restitution without having to immediately file an expensive civil suit in trial court. To navigate these requirements, you can use Caunsel to research applicable financial regulations, organize your transaction timeline and bank correspondence in a secure case file, or connect with an independent lawyer to assess your legal options.

Steps

• Lock down your accounts immediately: Call your bank's 24/7 fraud hotline the moment you detect the transaction to freeze affected cards, change online credentials, and obtain a formal incident reference number.
• File a formal written dispute through the bank's FCPAM: Submit an official transaction dispute form or notarized complaint letter detailing the unauthorized charges, attaching account statements and demanding an urgent fraud audit.
• Compile and preserve technical evidence: Save timestamped screenshots of account deductions, SMS alert logs showing whether or not an OTP was received, device logs, and any police blotters or sworn affidavits documenting the compromise.
• Escalate your case to the BSP: If the bank fails to provide a substantiated resolution, submit your complaint to the BSP Consumer Assistance Mechanism via the BSP Online Buddy (BOB) chatbot or by emailing consumeraffairs@bsp.gov.ph with your bank ticket number.
• File for BSP Adjudication or formal civil redress: For qualifying monetary disputes up to 10 million pesos, initiate administrative adjudication through the BSP's adjudication rules or have legal counsel issue a formal demand letter.

Common mistakes

• Relying solely on informal phone conversations without securing a written ticket or complaint reference number.
• Failing to demand the bank's internal audit logs and device registration records when disputing claims that an OTP was validated.
• Delaying notification beyond the dispute window established in banking rules and consumer credit card regulations (RA 10870).
• Accepting a generic rejection letter as final instead of elevating the matter to the BSP Consumer Assistance Mechanism.

Questions people ask

Can the bank deny my claim solely by asserting that an OTP was sent to my registered mobile number?

No. Under BSP regulations and the high standard of diligence required of banks, mere assertion that an OTP was transmitted does not absolve the bank from investigating potential SIM-swap fraud, malware, man-in-the-middle vulnerabilities, or unauthorized access device activity. The bank must demonstrate robust security compliance and investigate the receiving account.

What is the monetary limit for money claims that the BSP can adjudicate under RA 11765?

The Bangko Sentral ng Pilipinas has adjudicatory jurisdiction over purely civil financial consumer complaints where the claim for reimbursement or payment does not exceed 10,000,000 Philippine Pesos, exclusive of legal interest, attorney's fees, and litigation costs.

Is a police report mandatory before a bank will investigate an unauthorized charge?

While banks frequently request a police report or sworn affidavit of denial for substantial or complex fraud, the lack of an immediate police report should not prevent you from reporting the dispute. Your primary duty under BSP rules is to notify the bank promptly to mitigate further losses.

General information only, last updated 2026-11-05. Caunsel is not a law firm and does not practise law. AI answers and this guide are not legal advice. Verify filings, deadlines, and statutes with a licensed lawyer in Phillipines.