Credit Card Fraud Liability in the Philippines: What Ermitaño v. BPI Means for Cardholders

Theft of a credit card raises an urgent question: who pays for unauthorized purchases made after the cardholder reports the loss? In the Philippines, the Supreme Court addressed this squarely in Spouses Ermitaño v. BPI Express Card Corp. The ruling protects consumers who act promptly, clarifying that a cardholder who notifies the credit card company of a lost or stolen card should not be held liable for subsequent unauthorized charges—even if the company has not yet alerted its merchants.

The Legal Backdrop: Contracts of Adhesion

Credit card agreements in the Philippines are typically contracts of adhesion—standardized forms drafted by the credit card company and presented to the cardholder on a "take it or leave it" basis. Philippine law recognizes these contracts as valid, but the Supreme Court has consistently held that they are not exempt from judicial scrutiny, particularly when their terms are one-sided or oppressive.

Article 1306 of the Civil Code allows parties to agree on any terms they wish, provided these are not contrary to law, morals, good customs, public order, or public policy. A stipulation that violates public policy is unenforceable. In consumer transactions, public policy leans toward protecting consumers from unfair practices, especially where the parties have unequal bargaining power.

The Disputed Stipulation

The Ermitaños' credit card agreement contained a clause stating that the cardholder would remain liable for purchases made with a lost or stolen card until:

1. The cardholder reported the loss in writing to BPI Express Card Corp. (BECC), and
2. BECC had communicated the loss to its member establishments.

The second condition proved decisive. It made the cardholder's liability depend on an act entirely within the credit card company's control—and on a process that could take an indeterminate amount of time.

What Happened in Ermitaño

Manuelita Ermitaño's bag was snatched at a Makati mall; her BPI Express Card was inside. That same evening, she called BECC to report the loss, and she followed up with a written letter the next day, explicitly stating she would not be responsible for charges incurred after the date of the theft.

Despite her prompt notice, billing statements later included unauthorized purchases made the day after the theft, totaling P3,197.70. BECC insisted the Ermitaños remained liable because it had not yet notified its member establishments.

The case moved through three levels of courts:

• Regional Trial Court: Ruled for the Ermitaños. The RTC found the stipulation void as against public policy and dependent on the sole will of the credit card company, and awarded damages.
• Court of Appeals: Reversed, upholding the stipulation and noting that Mr. Ermitaño, being a lawyer, should have understood the terms.
• Supreme Court: Overturned the Court of Appeals and reinstated the RTC decision with modifications.

The Supreme Court's Reasoning

The Supreme Court rejected the notion that a cardholder must wait until the credit card company completes its internal notification process before being relieved of liability. As the Court put it, prompt notice by the cardholder to the credit card company should be enough to relieve the cardholder of liability for unauthorized use of a lost or stolen card.

The questioned stipulation, the Court held, placed the cardholder at the mercy of the credit card company. It imposed an unreasonable burden and gave the company excessive control over when the cardholder's liability would end. Applied to the facts, the stipulation was against public policy and unenforceable.

The Court affirmed the award of moral damages and attorney's fees, though it reduced the exemplary damages granted by the trial court.

Practical Takeaways

• Report loss or theft immediately. A phone call is a good first step, but follow up in writing as soon as possible. The date and time of your report can determine your liability.
• Keep records. Document when you called, whom you spoke with, and retain a copy of your written notice. These records are crucial if a dispute arises.
• Review statements carefully. Scrutinize monthly statements for unauthorized charges, especially after a reported loss, and dispute suspicious transactions in writing.
• Know your agreement. Familiarize yourself with the lost-or-stolen card clause in your credit card agreement. Unfair terms may be unenforceable, but knowing your rights starts with knowing your contract.
• For credit card companies: Efficient notification procedures and fair contract terms protect both consumers and the company's reputation. Stipulations that place disproportionate burdens on cardholders risk being struck down by the courts.

Frequently Asked Questions

Am I liable for charges made before I report my card lost? Generally, yes. This is why prompt reporting is essential.

Am I liable for charges made after I report the loss? Under Ermitaño, no—provided you gave proper notice to the credit card company.

What if my agreement says I'm liable until the company notifies all merchants? The Supreme Court has indicated that such a stipulation, if it imposes indefinite liability after the cardholder has reported the loss, may be void as against public policy.

Does this apply to debit cards? Ermitaño specifically concerns credit cards. The principle of prompt notice and reasonable liability may extend to debit cards, but the applicable regulations differ and should be reviewed separately.

This article is general information and not legal advice. For your specific situation, consult a lawyer or ask ASG Legal AI.