Seeing a GCash transaction you never made is a stressful moment, but the good news is that the Bangko Sentral ng Pilipinas (BSP) requires GCash, as a licensed e-money issuer, to give you a real dispute process with a defined timeline. Acting fast matters — GCash gives you only 15 days from the date of the transaction to file a formal dispute, so the moment you spot a charge you don't recognize, treat it as urgent rather than something to deal with later in the week.
This guide covers Step 1: Secure Your Account Before You Do Anything Else and Step 2: Screenshot Every Unauthorized Transaction Before It Disappears From View, with the full details below.
- You have only 15 days from the transaction date, not the report date, to file a GCash dispute
- Report through the GCash app's Help > Submit a Ticket flow, choosing the unauthorized transaction category
- Reset your MPIN and secure linked bank accounts immediately, before filing the dispute
- GCash investigations typically take 48 hours to 7 business days depending on the case
- If GCash does not resolve your complaint within 30 business days, you can escalate to the BSP via the BOB chatbot or [email protected]
Step 1: Secure Your Account Before You Do Anything Else
Before you even open a dispute ticket, lock down your account so the unauthorized activity can't continue. Open the GCash app, go to your Profile, and reset your MPIN (Mobile Personal Identification Number) — this is the 4 to 6-digit code that authorizes transfers and payments, and if someone else knows it, changing it immediately cuts off their access.
If your GCash wallet is linked to a debit or credit card, or to a bank account through GCash's "Bank Transfer" or "Cash In" features, call that bank's 24/7 fraud hotline right away and ask them to place a hold or freeze on the linked account. Many unauthorized GCash incidents involve a compromised bank card being used to cash in funds first, so securing the bank side closes a second door the scammer might still have open.
Step 2: Screenshot Every Unauthorized Transaction Before It Disappears From View
Open your GCash transaction history (Profile > Transaction History, or the specific wallet like GCash or GSave) and screenshot each unauthorized entry individually. You need the exact date and time, the peso amount, the recipient name or merchant, and — most importantly — the Reference Number, a unique code GCash assigns to every transaction, usually a string of 13 digits shown at the bottom of the transaction detail screen.
Without the reference number, GCash's support team cannot pull up the specific transaction in their backend system, which slows down your case significantly. If the transaction involved a transfer to another GCash number, also note that recipient's mobile number if it's visible, since GCash's fraud team uses it to check if the receiving account has other reported disputes linked to it.
Step 3: File the Dispute Inside the GCash App Within 15 Days
In the GCash app, tap the Help icon (usually a question mark or headset icon on the home screen), then look for "I noticed unauthorized transactions in my GCash account" under the Help Center topics, or go to Profile > Help > Submit a Ticket and select the "Unauthorized Transaction" category. GCash also lets you start this conversation with Gigi, their in-app virtual assistant, which will route you to a human agent for unauthorized-transaction cases.
Attach your screenshots and reference numbers, and write a short factual narrative: what happened, when you noticed it, and that you did not authorize the transaction. GCash's own official help article on reporting unauthorized transactions confirms the 15-day filing window counts from the transaction date itself, not from when you discovered it — so if you only check your GCash history once a month, you could already be close to losing your right to dispute an older charge by the time you notice it.
Step 4: Save Your Ticket Number and Track the Investigation Timeline
Once submitted, GCash issues a ticket or case reference number — write this down or screenshot the confirmation screen, since you'll need it for any follow-up call, email, or BSP escalation later. GCash's stated investigation window ranges from 48 hours for straightforward cases up to 7 business days for more complex ones involving multiple parties or linked bank accounts.
During this period, GCash's fraud and risk team reviews device login records, IP addresses, and transaction patterns to determine whether the activity matches your normal usage or shows signs of account takeover (for example, a login from an unfamiliar device shortly before the disputed transaction). You generally won't be asked for anything further unless they need additional documents, so keep your registered mobile number active and check your email and in-app notifications daily during this window.
Step 5: Use the Right Contact Channel If the App Ticket Stalls
If you don't get a response within a few days or need to escalate directly, GCash's customer care hotline is 2882, dialed for free from a Globe or TM mobile number, and available on other networks by dialing (02) 7213-8882. You can also email [email protected] with your ticket number in the subject line, or call the landline number 02-2139999.
Keep every reference number and the date of each contact attempt — this record becomes important if GCash misses its resolution window and you need to escalate to the Bangko Sentral ng Pilipinas, since BSP will ask for proof that you already raised the issue with GCash first.
Step 6: Escalate to the BSP If GCash Doesn't Resolve It Within 30 Business Days
As a BSP-supervised electronic money issuer, GCash is required to resolve consumer complaints within 30 business days. If that deadline passes without resolution, or if you disagree with GCash's decision, you can escalate directly to the Bangko Sentral ng Pilipinas through the BSP Online Buddy (BOB), a chatbot available 24/7 on the official BSP website and on the BSP's verified Facebook page.
You can also email [email protected] or call the BSP Consumer Assistance hotline at (02) 8708-7087. Have ready: your full name and contact details, GCash as the institution involved, a dated narrative of what happened, your original GCash ticket reference number, the specific relief you're asking for (usually a refund), and scanned copies of your ID and transaction screenshots. BOB issues an instant case reference number and automatically forwards your complaint to GCash's senior management for a higher-priority review.
Step 7: Report to the PNP Anti-Cybercrime Group for Larger or Scam-Related Losses
If the unauthorized transaction resulted from a phishing scam, a fake buyer/seller scheme, or a larger loss, file a separate report with the Philippine National Police Anti-Cybercrime Group (PNP-ACG), which investigates online fraud and can assist in tracing the receiving account or filing criminal charges against the scammer. This is a separate track from your GCash dispute — filing a police report does not replace or delay the GCash dispute process, and you should do both in parallel rather than waiting for one before starting the other.
Bring the same documentation you used for your GCash ticket: screenshots, reference numbers, and any chat or call logs with the scammer if applicable. A police report is also often required if you later need to pursue civil recovery of funds from the person who received your money, since GCash itself generally cannot compel another user to return funds without a legal order.
Step 8: Know What GCash Actually Refunds — and What It Doesn't
GCash typically refunds cases where its own systems were compromised (a confirmed account takeover, a technical error, or a duplicate/failed transaction that still deducted funds). Cases where you voluntarily shared your One-Time PIN (OTP) or MPIN with someone — even if you were tricked into doing so by a scammer posing as GCash support — are harder to win, since technically the transaction was authorized using your own verified credentials.
This is part of why GCash and BSP have pushed a broader shift toward removing OTP as a standalone authorization step in favor of biometric and device-bound authentication — the fewer secrets a scammer can trick you into revealing, the harder it becomes to claim a transaction was "authorized." Regardless of how the loss happened, always file the dispute — GCash reviews each case on its individual facts, and a documented, prompt report is always stronger than staying silent.
Frequently Asked Questions
You have 15 days from the date the transaction occurred, not from the date you noticed it, to file a formal dispute with GCash. This is why it's important to check your GCash transaction history regularly rather than only when something looks obviously wrong, since a charge from three weeks ago may already be past the filing window by the time you spot it.
Not automatically — GCash investigates each case individually, reviewing device logs, login history, and transaction patterns before deciding on a refund. Cases involving a confirmed technical error or account takeover where you never shared your MPIN or OTP tend to have stronger outcomes than cases where you were tricked into voluntarily sharing your own verification codes with a scammer.
Gather the exact date and time of the unauthorized transaction, the peso amount, the recipient's name or number if visible, and the transaction's Reference Number from the transaction detail screen in your app. Having these ready before you open a support ticket significantly speeds up GCash's ability to locate and investigate the specific transaction.
Yes, especially for larger losses or scam-related incidents — file a report with the PNP Anti-Cybercrime Group in parallel with your GCash dispute, not instead of it. A police report can support a civil claim for recovery later and is sometimes required as supporting documentation if your case escalates to the BSP.
GCash states that investigations typically take 48 hours to 7 business days depending on complexity, though as a BSP-regulated e-money issuer it is required to resolve consumer complaints within 30 business days overall. If that 30-business-day window passes without resolution, you have the right to escalate directly to the BSP.
BOB is the Bangko Sentral ng Pilipinas' 24/7 chatbot for filing complaints against banks, e-money issuers like GCash, pawnshops, and remittance agents, accessible through the official BSP website and BSP's verified Facebook page. Use it only after GCash's own 30-business-day resolution window has passed, or if you disagree with GCash's final decision on your dispute, since BOB is meant for escalation, not a first point of contact.
It's harder, but not automatically impossible — GCash's real support staff will never ask for your OTP or MPIN over a call, text, or chat, and transactions authorized using a code you voluntarily shared are treated differently from a pure system compromise. Still file the dispute and be fully honest about what happened, since GCash reviews the full context of each case rather than applying a blanket denial.
The GCash dispute is a financial process aimed at getting your money back or correcting an account error, while a PNP Anti-Cybercrime Group report is a law enforcement process aimed at investigating and potentially prosecuting the person responsible. They serve different purposes and should generally be filed together for scam-related losses rather than treating one as a substitute for the other.
Conclusion
The single most important thing to remember is the 15-day clock — file your GCash dispute the moment you notice an unauthorized transaction, gather your reference numbers and screenshots first, and don't wait to see if the problem resolves itself. If GCash's own process stalls past 30 business days, the Bangko Sentral ng Pilipinas gives you a real, documented escalation path through BOB rather than leaving you stuck with an unresponsive support ticket.
