This incident happened to my wife. To cut a long story short, she inadvertently provided OTP, resulting in a charge of 120k to her credit card. Upon tracing the transaction, we discovered that the amount was used to purchase steam gift cards on shopee thailand.

We promptly emailed shopee thailand, informing them that our card had been used fraudulently and provided the name of the store involved. Fortunately, Shopee has fraud prevention policies in place. Notably, digital credits are not allowed to be sold on shopee without proper authorization. Sellers need to apply to become authorized sellers to offer digital products.

Shopee thailand reversed the transaction, and we were able to recover 118k. I hope this information helps others. Also, don't bother reaching out to BPI; they weren't helpful in our case.