If you're looking for a loan in the Philippines—whether for medical bills, education, a small business, or an emergency—and you've landed here after searching about lending companies or loan apps, you're not alone. Thousands of Filipinos and foreigners every year face the same challenge: distinguishing legitimate lenders from those operating illegally or unethically. Unregistered or unscrupulous lenders often use aggressive tactics, hidden charges, or outright scams that leave borrowers in deeper financial trouble or facing harassment. This article gives you a clear, practical, step-by-step process to verify whether a lending company is legitimate under current Philippine law, explains exactly what to look for and why it matters, and helps you protect yourself before sharing personal information or signing anything.

A legitimate lending company in the Philippines must be organized as a corporation registered with the Securities and Exchange Commission (SEC) and must hold a specific Certificate of Authority (CA) to operate as a lending company. Simply having a business name registered with the Department of Trade and Industry (DTI), a barangay permit, or even a general SEC corporate registration is not enough. Without the CA under the governing law, the entity cannot legally engage in the business of granting loans to the public.

Legal Framework: Why Lending Companies Are Strictly Regulated

The primary law is Republic Act No. 9474, the Lending Company Regulation Act of 2007. It declares the State’s policy to regulate lending companies so they operate on a sound basis, provide additional credit sources, and prevent practices harmful to the public. Under RA 9474, a lending company is defined as a corporation (not a bank or other financial institution) engaged in granting loans from its own capital or from funds sourced from not more than 19 persons.

Key requirements include:

SEC registration as a corporation plus a specific Certificate of Authority to operate as a lending company.
Minimum paid-up capital (generally ₱1,000,000 for operations in Metro Manila, with possible adjustments by the SEC for other areas).
Majority ownership by Philippine citizens (foreign equity generally limited to 49%).
Maintenance of proper books of accounts, submission of reports to the SEC, and compliance with rules on capitalization, marketing, and operations.
Loans must carry “reasonable interest rates and charges as may be agreed upon,” but the agreement must fully comply with the Truth in Lending Act (Republic Act No. 3765), which requires clear disclosure of the total finance charge, annual effective interest rate, and all terms before the borrower signs.

The SEC has broad supervisory powers, including the authority to issue rules, conduct examinations, impose sanctions, and revoke authority for violations.

Supporting regulations strengthen consumer protection:

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies and their online platforms. This includes bans on public shaming (e.g., posting borrower details on social media), contacting the borrower’s friends, family, or employer without explicit consent, using threats, vulgar language, or other coercive tactics.
SEC Memorandum Circular No. 19, Series of 2019 requires proper disclosures in advertisements and reporting of online lending platforms (OLPs).
Bangko Sentral ng Pilipinas (BSP) Circular No. 1133, Series of 2021 sets interest rate and fee ceilings for certain small-value, short-term unsecured loans (₱10,000 or less with tenor up to four months) offered by lending companies, financing companies, and OLPs: nominal interest up to 6% per month, effective interest up to 15% per month, late payment penalties capped, and total cost of credit limited.
The Consumer Act of the Philippines (RA 7394) and Data Privacy Act of 2012 (RA 10173) add layers of protection on fair trade practices and personal data handling. Lenders must obtain proper consent before accessing contacts, photos, or other sensitive information and cannot use data for harassment.

Operating without the required CA is illegal. The SEC can impose administrative penalties, fines, and revocation, while serious violations may lead to criminal liability. Borrowers dealing with unregistered entities often lose access to formal complaint mechanisms and consumer protections.

Step-by-Step Guide to Verify If a Lending Company Is Legitimate

Follow these steps before you apply, share IDs or contacts, pay any fees, or sign a loan agreement. The process usually takes only a few minutes for basic checks and longer if you need formal confirmation from the SEC.

Collect the exact details the lender must provide. Ask for or note from their website, app “About” or “Legal” section, advertisements, or office: the full corporate name (not just the brand or app name), SEC Registration Number (or Company Registration Number), Certificate of Authority (CA) Number and date of issuance, principal office address, and official contact details (landline and verified email, not just mobile or social media). Legitimate companies are required to display these prominently. Red flag: vague or missing information, only a brand name like “FastCash Now,” or instructions to send payments to a personal GCash or bank account.
Visit the official SEC website (www.sec.gov.ph). Use the public company search tools, i-View, or eSPARC-related public modules to search by the exact corporate name or SEC Registration Number. Confirm the entity exists as a registered corporation, its status is “active” (not revoked, suspended, or dissolved), and its authorized purpose includes lending activities.
Check the specific SEC lists for lending and financing companies. Navigate to the Lending & Financing Companies section or Public Information area on the SEC site. Look for the most recent List of Lending Companies (regulated under RA 9474) or List of Financing Companies (under RA 8556) that hold a valid Certificate of Authority. Cross-reference the CA Number the lender provided against any published lists of active, revoked, or suspended authorities. If the company or its CA does not appear on the appropriate list, or if the status shows problems, treat it as a serious warning.
Verify online lending platforms separately. If you’re dealing with a mobile app or website, confirm it is operated by or properly recorded with an SEC-authorized lending or financing company. Check the app description and in-app disclosures for the corporate name, SEC numbers, and CA details. Note that as of 2026 the SEC has been consulting on updated guidelines that may lift the previous moratorium on new online lending platforms while imposing stricter prudential, disclosure, and conduct rules—always check the latest status directly on the SEC site.
Confirm physical presence and secondary requirements. Search the stated office address online or via maps. Legitimate companies usually have a verifiable physical office. While not a substitute for SEC verification, you can also note whether they appear to hold other basic permits (DTI business name registration, BIR, or local government permits). Many legitimate lenders operate branches; fly-by-night operations often do not.
Review the loan terms and disclosures before applying. Even if the company checks out, read the full contract or key information statement. It must clearly state the nominal and effective interest rates, all fees, penalties, total amount payable, payment schedule, and your rights. Use the Truth in Lending requirements as your benchmark. For small loans covered by BSP Circular 1133, check that rates stay within the prescribed ceilings. Ask questions in writing if anything is unclear.
Check for complaints, enforcement actions, or advisories. Search the SEC website for any recent enforcement actions, advisories, or flagged entities related to the company. You can also reach out to the SEC’s Public Assistance or relevant department (contact details and channels are listed on www.sec.gov.ph—common options include hotline numbers and email such as crd@sec.gov.ph or public assistance portals) and request verification of the CA status by providing the corporate name and numbers.
Apply extra scrutiny for data privacy and collection practices. Legitimate lenders have clear, accessible privacy policies that comply with the Data Privacy Act. They should explain why they need access to contacts or other data and obtain proper consent. Avoid any lender that demands broad device access (gallery, contacts, location) without transparent justification tied to the loan process.

If the company fails any of these checks—or if something feels off—walk away. You can always seek loans from banks (supervised by the BSP), established financing companies with clear CA, or other properly verified channels.

Common Pitfalls, Red Flags, and Real-Life Scenarios

Many ordinary borrowers—especially those needing fast cash for emergencies—skip verification and later face serious problems. Here are frequent issues:

Informal “5-6” or daily lenders: These often operate without corporate registration or CA. Interest can reach 20% per day or more, with little or no written contract. Borrowers have limited legal recourse and may face social pressure or threats. While some small-scale lending happens in communities, treating it as a business without SEC authority violates RA 9474.
Online loan apps promising “instant approval” with minimal documents: Many operate without proper CA or violate collection rules. Borrowers report hidden fees that make the effective rate far exceed advertised figures, plus aggressive follow-up that includes calling family members, posting on social media, or using vulgar language—practices banned under SEC MC 18, s. 2019.
Advance-fee scams: “Pay a processing or insurance fee first and we’ll release your loan.” Legitimate lenders deduct fees from the disbursed amount or clearly disclose them; they do not require upfront payment to “approve” or release funds.
Debt traps from rollovers or multiple loans: Even some registered lenders can create problems if terms are not fully understood. High effective rates combined with short tenors lead to repeated borrowing.
Privacy breaches: Unscrupulous apps harvest contacts and photos, then use them for collection. This violates the Data Privacy Act and SEC rules.

For overseas Filipino workers (OFWs) or foreigners: The verification steps are identical. However, cross-border enforcement of contracts or collection can be more complex, and some apps specifically target OFWs with tailored marketing. Always verify the Philippine operating entity the same way and consider having important documents reviewed if the amount is substantial.

What Legitimate Lenders Typically Provide and What You Can Expect

A properly authorized lender will:

Clearly display corporate name, SEC Registration Number, and CA Number in all public materials.
Provide a written or digital loan agreement with full Truth in Lending disclosures (nominal rate, effective rate, total charges, schedule).
Follow fair collection practices—no public shaming, no unauthorized contact with third parties.
Maintain records and be subject to SEC oversight, giving you a formal channel for complaints if issues arise (e.g., billing disputes or unfair practices).
Comply with data privacy rules and obtain proper consent.

If problems occur with a legitimate lender, you can file a complaint with the SEC (through their public assistance or iMessage channels), the National Privacy Commission for data issues, or appropriate courts. For unregistered lenders, options are more limited, which is why verification upfront is critical.

Comparison of Key Indicators

Aspect	Legitimate (SEC-Authorized)	Red Flag / High Risk
Corporate Identity	Full corporate name + SEC Reg. No. + CA No. displayed	Only brand/app name; no numbers or vague details
SEC Verification	Appears on active lending/financing company lists with valid CA	Not found, revoked/suspended, or no CA
Interest & Fees	Clear nominal + effective rate disclosure; complies with applicable BSP caps	Hidden/add-on fees; effective rate far above norms without explanation
Collection Practices	Follows SEC MC 18 rules (no shaming, proper consent)	Harasses family/employer, social media posts, threats
Data Handling	Clear privacy policy; consent-based access	Demands broad device access without justification
Payment	Official company accounts; transparent process	Personal e-wallets or “send money first” demands

Frequently Asked Questions

Is registration with the DTI or a barangay permit enough to make a lending company legitimate?
No. DTI registers business names and barangays issue local permits, but lending activity specifically requires SEC corporate registration plus a Certificate of Authority under RA 9474. Many illegal operators have basic permits but lack the CA.

What if the lending app shows an SEC number but I can’t find the CA?
Corporate registration alone is insufficient. You must confirm the specific Certificate of Authority to operate as a lending company. Search the SEC lists and consider sending a verification request to the SEC if the information is unclear.

Are there legitimate quick-loan apps in the Philippines?
Yes, but only those operated by or properly recorded with SEC-authorized lending or financing companies that follow disclosure and collection rules. Always perform the verification steps above—availability on app stores does not equal legitimacy.

What interest rates are allowed?
Rates must be reasonable and disclosed under the Truth in Lending Act. For certain small loans (₱10,000 or less, tenor up to 4 months), BSP Circular 1133 imposes specific ceilings. Anything significantly higher or with undisclosed charges should raise concerns.

Can I report an illegal or harassing lender?
Yes. Report to the SEC (via their website channels or public assistance), the National Privacy Commission if data privacy was violated, or local authorities (PNP or barangay) for threats or harassment. Document everything—screenshots, messages, call logs.

What should I do if I already borrowed from an unregistered lender and they are harassing me?
Stop communicating if possible and document all incidents. Report to the SEC, NPC, and consider seeking help from a lawyer or legal aid organization. You may still have rights under general laws (Revised Penal Code for certain acts, Civil Code on contracts and damages), but options are narrower without SEC oversight.

Is the process different for financing companies?
Financing companies are regulated under RA 8556 (Revised Financing Company Act) and also require an SEC Certificate of Authority. The verification steps are very similar—check the appropriate SEC list for financing companies.

Do pawnshops, cooperatives, or microfinance NGOs follow the same rules?
Pawnshops have separate regulations (often under the Bangko Sentral or local rules). Cooperatives are generally under the Cooperative Development Authority (CDA). Microfinance NGOs may have specific SEC or other registrations. Always confirm the specific regulator for the type of entity.

How long does verification take and is there a fee?
Basic online checks via the SEC website are usually free and take minutes to an hour. Formal written verification requests may take several business days. There is typically no or minimal fee for public information requests.

As a foreigner or OFW, do I have the same protections?
Yes, the same laws and verification process apply. Consumer protection laws generally do not distinguish based on nationality for domestic lending transactions, though enforcement across borders can be more involved.

Key Takeaways

A lending company is legitimate only if it is an SEC-registered corporation and holds a valid Certificate of Authority under RA 9474 (or the equivalent for financing companies).
Always gather the full corporate name, SEC Registration Number, and CA Number, then verify them directly on the official SEC website (www.sec.gov.ph) using company search tools and published lists.
Legitimate lenders must display these numbers prominently, provide clear Truth in Lending disclosures, and follow strict rules against unfair collection and improper data use.
Red flags include missing or unverifiable numbers, demands for advance fees, vague addresses, personal payment accounts, or aggressive collection tactics.
Verification protects you from financial loss, privacy breaches, and harassment while giving you access to formal remedies if problems arise later.
For online platforms, confirm both the operating company’s authority and the platform’s proper recording with the SEC, keeping in mind ongoing regulatory updates in 2026.
When in doubt, contact the SEC directly for confirmation before proceeding with any loan application or sharing sensitive information.

By taking these straightforward steps, you put yourself in a much stronger position to borrow safely and confidently. Philippine law provides real tools for consumer protection—use them.