Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, creates a cross-sector framework for protecting people who use financial products and services in the Philippines. It applies to services delivered through branches, websites, apps, digital banks, fintech platforms, e-wallets, online lenders, insurers, securities firms, cooperatives, and other channels regulated by the BSP, SEC, Insurance Commission, or Cooperative Development Authority.
Direct answer: RA 11765 gives financial consumers enforceable rights to fair treatment, clear information, protection of assets and data, and timely complaint handling. In practice, you can demand disclosure before you sign, cancel within any cooling-off period that applies, prepay a loan, and correct or stop the sharing of your data. You can also have your complaint handled free of charge and escalate it to the regulator. The regulators can fine providers, stop abusive practices, order disgorgement, and (the BSP and SEC) adjudicate money claims of up to ₱10,000,000 and order reimbursement (RA 11765, Secs. 2, 6 and 8).
For how courts allocate the loss when a bank releases a deposit on a forged signature or SPA, see forged authority and bank deposit liability.
What RA 11765 covers
| Issue | RA 11765 relevance |
|---|---|
| Unauthorized transfer or account takeover | Protection of consumer assets against fraud and misuse; prompt investigation and complaint handling |
| Hidden charges or misleading promotions | Disclosure, transparency, and fair-marketing duties |
| Abusive collection or discriminatory treatment | Right to fair and equitable treatment |
| Misuse of customer information | Financial consumer data protection, alongside the Data Privacy Act |
| Unresolved bank, e-wallet, lending, insurance, or investment complaint | Internal redress first, followed where appropriate by regulator action or adjudication |
For abusive collection by online lending apps, such as messages to your contacts, threats or public shaming, see online lending harassment: your rights and where to report.
“Financial product or service” is defined broadly. It covers savings, deposits, credit, insurance, pre-need and HMO products, securities, investments, payments and remittances, as well as digital financial products and services (Sec. 3(c)). The Act applies to every financial product or service that a financial service provider offers or markets (Sec. 4).
The five core financial-consumer rights
Section 2 lists the five rights, and each one is backed by specific provider duties in Section 8 (RA 11765).
- Fair and equitable treatment. Providers may not discriminate on grounds such as age, gender, disability, religion or political affiliation, although they may make risk-based distinctions. They may not use abusive collection or debt-recovery practices (Sec. 8(d)).
- Disclosure and transparency. Providers must give enough product disclosure, in clear and concise language, before you contract, and must tell you about any change in terms. Their advertising must give the contact details of their consumer assistance unit and name their regulator, and they are legally responsible for their marketing statements (Sec. 8(c)).
- Protection of assets against fraud and misuse. Providers must adopt information security standards protecting your information and transactions (Sec. 8(g)). They are responsible for the acts of their directors, officers, employees and agents, and solidarily liable with accredited third-party service providers, including debt collectors (Sec. 13).
- Data privacy and protection. You may review your data and have it corrected, refuse the sharing of your information with third parties, and ask for your data to be removed when you stop using the provider (Sec. 8(e)). The Data Privacy Act guide explains the parallel privacy framework.
- Timely handling and redress of complaints. Every provider must run a single consumer assistance mechanism that is free to use and must tell you what it has done or will do about your complaint. If you dispute an amount or report an unauthorized transaction, it must suspend interest, fees and charges, or give a similar reasonable accommodation, until its final investigation report. If you are unsatisfied, you may elevate the complaint to the regulator (Sec. 8(f)).
What RA 11765 lets a consumer do
| Right in practice | What you can do | Source |
|---|---|---|
| Cooling-off period | Cancel or return a contract without penalty during the cooling-off period the provider or regulator sets. The provider may recover approved processing costs. | Sec. 8(b)(2) |
| Loan prepayment | Prepay a loan in whole or in part before maturity. Any prepayment fee must have been disclosed. | Sec. 8(b)(3) |
| Choice in bundled products | Choose the provider of a required add-on, such as insurance, subject to the provider’s reasonable standards. | Sec. 9 |
| Data rights | Correct your data, refuse third-party sharing, and ask for removal after you leave. | Sec. 8(e) |
| No waiver | Ignore any contract term that waives your right to sue, to information, to complaint resolution or to data protection, because such a term is unenforceable. | Sec. 12 |
| Escalation | Take an unresolved complaint to the regulator, then to mediation or adjudication. | Secs. 6(e), 6(f), 8(f) |
The cooling-off right does not apply automatically to every product. Its length is set by the provider, or by the regulator where it prescribes one, and regulators may exclude short-term transactions. For insurance, pre-need and HMO products, the right of return cannot be used after you have made a claim (Sec. 8(b)(2)).
What the regulators can order
The BSP, SEC and Insurance Commission enforce the Act against the providers under their jurisdiction. The Cooperative Development Authority implements it for cooperatives offering financial products, except insurance cooperatives (IC) and cooperative banks (BSP) (Sec. 5). Section 6 gives the regulators these powers:
- Rules and pricing: make rules for specific products and determine whether interest charges or fees are reasonable (Sec. 6(a)).
- Examination and monitoring: examine providers on-site or off-site, compel the production of records, and require reports (Secs. 6(b) and 6(c)).
- Enforcement actions: the regulators can order any of the following (Sec. 6(d)):
- restrict the collection of excessive or unreasonable interest, fees or charges;
- disqualify or suspend responsible directors, officers or employees;
- impose fines, suspensions or penalties;
- issue a cease and desist order without prior hearing where a practice amounts to fraud or may cause grave or irreparable injury to consumers (the provider may request a summary hearing within five calendar days);
- suspend a product or service;
- order an accounting and disgorgement of profits gained or losses avoided, with reasonable interest.
- Consumer redress: provide mediation, conciliation or other alternative dispute resolution, which you may use before adjudication (Sec. 6(e)).
- Adjudication: the BSP and SEC may adjudicate purely civil claims where the consumer seeks only payment or reimbursement of up to ₱10,000,000, and may order that payment. The decision is final and executory. It can be challenged only by certiorari for grave abuse of discretion or lack or excess of jurisdiction, filed within ten days of receipt; for the BSP and SEC, the petition goes to the Court of Appeals (Sec. 6(f)).
- Independent civil action: a regulator may sue on behalf of aggrieved consumers, and civil penalties it recovers may go to a fund for their benefit (Sec. 17).
For BSP-supervised banks and e-wallets, the BSP’s implementing regulations are BSP Circular No. 1160 (2022). The BSP’s complaint, mediation and adjudication process is explained in its FAQ on Circular No. 1169. That FAQ adds that adjudication does not cover the following claims:
- nullifying a foreclosure;
- equitable reduction of interest and penalties;
- investment products, bancassurance or management contracts;
- a plain action for damages.
Prohibited acts and penalties
- Investment fraud is unlawful. It includes Ponzi schemes, boiler-room operations and offering investments without an SEC licence or permit. It is punished under Section 73 of the Securities Regulation Code (RA 8799), plus administrative sanctions (Secs. 3(f) and 11).
- Willful violation of the Act or of regulators’ rules and orders: imprisonment of one to five years, a fine of ₱50,000 to ₱2,000,000, or both. Where the violator is a corporation, the directly responsible directors, officers or employees are liable (Sec. 15).
- Administrative sanctions under each regulator’s charter apply on top of these penalties. For investment fraud, the SEC may fine ₱50,000 to ₱10,000,000 per instance, plus up to ₱10,000 a day for a continuing violation. A regulator may also fine up to three times the profit gained or loss avoided, and may suspend or cancel a provider’s authority for a product (Sec. 16).
- Abusive collection and prohibited discrimination are barred by Section 8(d) and are enforced through the regulators’ powers above.
For online payments, read this together with Cybercode’s digital payment consumer-rights guide. Scam incidents may also trigger the Anti-Financial Account Scamming Act, the Cybercrime Prevention Act, and criminal laws on fraud.
Complaint path: where to go
Every route starts with a written complaint through the provider’s own consumer assistance mechanism. If you are unsatisfied, escalate to the regulator that supervises that provider (Secs. 5 and 8(f)).
| Provider | Regulator to escalate to | Next step |
|---|---|---|
| Bank, e-wallet or other BSP-supervised institution | Bangko Sentral ng Pilipinas | Follow the step-by-step route in how to complain to the BSP about a bank or e-wallet. |
| Lending company, securities firm or investment adviser | Securities and Exchange Commission | Complain to the company first, then to the SEC, which supervises lending companies under the Lending Company Regulation Act (RA 9474, Sec. 11); for scams, see reporting an investment or crypto scam to the SEC. |
| Insurer or other provider under the Insurance Commission | Insurance Commission | Complain to the company first, then to the Insurance Commission. |
| Cooperative offering savings or credit | Cooperative Development Authority | Complain to the cooperative first, then to the CDA. |
If money left your account without your consent, start with the unauthorised e-wallet transaction guide, which covers the fund hold under RA 12010. A crime can be reported to law enforcement in parallel.
What to bring:
- the transaction reference and date;
- the contract or terms and conditions;
- your written complaint and its ticket number;
- the provider’s written reply;
- screenshots and messages.
Your first action: send the provider a written complaint that states the amount, the facts and the remedy you want, and keep the ticket number.
The law does not make every loss automatically reimbursable. Outcomes depend on the facts, applicable regulations, authentication records, consumer conduct, provider controls, and evidence. A consumer cannot be forced to waive rights granted by the Act (Sec. 12).
How long you have: prescription
Actions and claims under RA 11765 prescribe five years after the transaction was consummated, or five years after the discovery of deceit or non-disclosure of material facts. In any event, they prescribe ten years after the violation was committed. For insurance contracts, the Insurance Code’s prescriptive period applies instead (Sec. 14).
Frequently asked questions
Does RA 11765 cover e-wallets and digital banks?
Yes, when the product or provider falls within the jurisdiction of a financial regulator. The delivery channel may be fully digital.
Is every online scam solely an RA 11765 case?
No. Consumer-protection duties may overlap with RA 12010, cybercrime, estafa, privacy, and payment-system rules. Report the transaction both to the provider and the appropriate authorities.
Where should I file first?
Start with the financial service provider’s formal assistance mechanism, unless urgent law-enforcement reporting is also needed. Then escalate to the regulator with jurisdiction.
Can a regulator order a provider to pay me back?
Yes, in adjudication. The BSP and SEC can order payment or reimbursement in purely civil claims for money of up to ₱10,000,000. Regulators can also order disgorgement and set up a fund for affected consumers.
What are the penalties for violating RA 11765?
Willful violations carry imprisonment of one to five years, a fine of ₱50,000 to ₱2,000,000, or both, in addition to administrative sanctions imposed by the regulator.
Primary authority
Read the official text: Republic Act No. 11765, Bangko Sentral ng Pilipinas copy (Secs. 2–6, 8, 9, 11–17). For BSP-supervised institutions, see also BSP Circular No. 1160 and the BSP FAQ on Circular No. 1169 (complaints, mediation and adjudication).
This guide is general legal information, not legal advice. Regulatory circulars and product-specific rules may add requirements.
Related: Investment or crypto scam: how to report it and what the SEC can do — including the limit on the Section 6(f) reimbursement power when the operator was never a licensee.
Related: the e-wallet dispute and refund path, where these rights are used in a real complaint.
Related: Section 6(f)’s power to adjudicate a claim “solely for the payment or reimbursement” of a sum of money is directly useful when a transfer lands in a stranger’s account. See what to do when you send money to the wrong recipient, which sets out the escalation gate and the clocks your institution is held to first.
Sources rechecked as of: October 2, 2026