Quick answer

A legitimate lending company in the Philippines should satisfy two separate SEC requirements:

It must be registered as a corporation; and
It must hold a valid Certificate of Authority to Operate as a Lending Company.

A Certificate of Incorporation, DTI business-name registration, mayor’s permit, app-store listing, social-media page, or photograph of an alleged SEC certificate is not enough by itself.

Before applying or sending personal information, search the lender’s exact corporate name or SEC number through Check with SEC. Confirm that the result shows authority to conduct lending or financing activities. For an online loan, also verify that the website, app, or platform actually belongs to that licensed company.

If the records do not match, the authority is missing or suspended, or the lender will not disclose its legal identity, do not proceed.

Why SEC authority matters

Under the Lending Company Regulation Act of 2007, a lending company generally must be organized as a corporation and may not conduct lending business without SEC authority.

The Act defines a lending company as a corporation that grants loans from its own capital or from funds sourced from no more than 19 persons. Banks, financing companies, pawnshops, cooperatives, insurance companies, investment houses, and other credit institutions regulated under separate laws are excluded from that definition. Their legitimacy must be checked with the regulator applicable to them.

This means a lender’s absence from an SEC lending-company list is not automatically proof of illegality if the creditor is actually a bank, cooperative, pawnshop, government institution, or another separately regulated entity. First identify what type of institution is extending the credit.

The verification process

1. Get the lender’s exact legal identity

Ask for or locate the following:

Full corporate name, including “Inc.” or “Corp.”
SEC registration number
Certificate of Authority number
Registered business address
Official telephone number and email address
Name of the company that will appear as creditor in the loan agreement
For an app or website, the name of the platform and its operator

For advertisements and online platforms, the corporate identity and licensing details should be disclosed conspicuously under SEC disclosure rules for lending and financing companies.

Do not search only the brand name. A loan app may use a brand completely different from its operator’s corporate name. Check the app-store developer page, privacy notice, terms of service, disclosure statement, and loan contract to identify the actual creditor.

2. Search Check with SEC

Use the SEC-linked Check with SEC company-verification system. Search first by the exact corporate name and, if available, by the SEC registration number.

Check whether:

The corporation appears in the system;
Its name and SEC number match the documents supplied to you;
It has a secondary license or Certificate of Authority for lending or financing;
Its registration or authority is shown as suspended, revoked, or otherwise inactive; and
The result belongs to the same entity operating the app, website, office, or social-media account.

A similar name is not a match. Scammers may copy the name, logo, address, or registration details of a real company. Independently obtain the legitimate company’s contact information and ask whether the agent, account, app, or loan offer is theirs.

The SEC cautions that verification-system information may be incomplete or affected by ongoing evaluations. If the result is missing, unclear, or inconsistent, seek confirmation through SEC iMessage before transacting.

3. Confirm both primary registration and lending authority

The result should not merely say that the company is registered. Corporate registration establishes the corporation’s existence; it does not by itself authorize the company to offer loans to the public.

Look specifically for authority to operate as a:

Lending company; or
Financing company, if the entity says it operates under the Financing Company Act.

A legitimate company should be willing to provide a copy of its Certificate of Authority. Compare every name and number on the certificate with the independent SEC result. If necessary, request official corporate records through the SEC’s document services rather than relying on an image sent through chat.

4. Verify an online lending platform separately

An app’s presence on Google Play, the Apple App Store, or a polished website does not prove that it is authorized to lend.

Confirm that:

The licensed corporation expressly identifies the app as its platform;
The corporate name in the app-store listing matches the privacy notice, terms, disclosure statement, and loan agreement;
The company’s official website or independently verified contact channel confirms the app;
The platform was downloaded from an official or verified source; and
The app does not hide the creditor’s name until after personal data is submitted.

A platform may facilitate a loan without being the creditor. Identify the company legally extending the loan and verify that entity’s authority.

5. Check SEC notices and adverse orders

Review the SEC’s pages for:

Suspended or revoked lending companies;
Cease-and-desist orders;
Advisories and public warnings; and
Suspended or revoked corporate or secondary registrations.

The SEC’s lending and financing company section provides official information and links to relevant lists, rules, notices, and complaint procedures.

Do not rely on an old screenshot of a favorable SEC search. Authority can be suspended or revoked. Check again immediately before signing or releasing money or sensitive information.

Review the loan—not just the license

SEC authority is an essential legitimacy check, but it is not a government guarantee that a particular loan is affordable, fair, or suitable. Review the actual transaction before accepting it.

Demand the written disclosure statement

Under the Truth in Lending Act, a creditor must provide the required written cost-of-credit disclosure before the transaction is consummated.

Depending on the transaction, the disclosure should identify matters such as:

Amount financed;
Individually itemized charges;
Finance charge in pesos and centavos; and
The finance charge expressed as a simple annual rate on the outstanding unpaid balance.

Also obtain the loan agreement, promissory note, payment schedule, and any security or guaranty document. Do not accept “the app will show the charges after approval” as a substitute for seeing the terms before agreeing.

Calculate how much cash you will actually receive and the total amount you must repay. Processing, service, membership, insurance, platform, and similar charges can make a loan far more expensive than its advertised interest rate suggests.

Know when the special interest caps apply

Current ceilings apply to a defined category of loans offered by lending companies, financing companies, and their online lending platforms: unsecured, general-purpose loans of ₱10,000 or less with a term of up to four months.

For those covered loans, the applicable ceilings include:

Nominal interest: 6% per month;
Effective interest rate, including applicable fees and charges but excluding late-payment and nonpayment penalties: 15% per month;
Late-payment or nonpayment penalties: 5% per month on the outstanding scheduled amount due; and
Total cost cap: 100% of the amount borrowed, covering interest, other fees and charges, and penalties, subject to the governing circular’s terms.

These caps do not automatically apply to every loan. Amount, purpose, security, term, creditor type, and transaction date matter. Outside the covered category, there is no single universal numerical ceiling for all private loans, although charges must still comply with applicable law and may be examined by a court under the facts of the case.

Do not assume that a high rate automatically cancels the debt. The SEC’s administrative complaint process cannot rewrite a loan, declare an interest provision void, cancel the obligation, or settle the account; those remedies may require agreement by the parties or court action.

Strong warning signs

Stop and verify further if the lender:

Refuses to provide its corporate name, SEC number, or Certificate of Authority number;
Gives only a DTI certificate or local business permit;
Uses an SEC registration belonging to a differently named company;
Claims that a Certificate of Incorporation alone is a lending license;
Uses only personal email addresses, disposable accounts, or newly created social-media pages;
Demands an “insurance,” “unlocking,” “verification,” “tax,” or “release” payment before disbursing the promised loan;
Requests payment to an unrelated individual or personal e-wallet;
Asks for your ATM card, PIN, password, one-time password, or online-banking credentials;
Pressures you to sign blank or incomplete documents;
Will not show the total repayment amount and payment schedule before acceptance;
Requires excessive phone permissions or access unrelated to identity verification;
Threatens arrest merely for nonpayment, public shaming, violence, or action that cannot legally be taken; or
Contacts unrelated people in your phonebook to collect the debt.

The SEC specifically advises borrowers not to surrender an ATM card as collateral or for any other purpose.

One warning sign may have an innocent explanation, but unresolved identity or licensing discrepancies are enough reason not to continue.

Protect your personal data

The Data Privacy Act and National Privacy Commission rules apply to loan-related data processing. The joint DICT-NPC-SEC 2026 advisory on online lending platforms emphasizes that unnecessary, excessive, or disproportionate processing is prohibited.

Before installing or using an app:

Read its privacy notice and consent screens;
Review permissions before granting them;
Do not allow access that lacks a clear and legitimate purpose;
Watch for pre-ticked consent boxes or interfaces that make refusal difficult;
Download only from official or verified sources;
Tell character references before providing their details; and
Do not name someone as guarantor without that person’s separate consent.

An app may use camera or photo access when genuinely needed for identity verification, but the permission should not become an unrestricted license to collect unrelated data. Unbridled access to contact lists is prohibited. For debt collection, persons in the borrower’s contact list other than a consenting guarantor must not be contacted merely because their numbers were stored on the device.

Evidence to preserve

Keep copies before links, messages, or apps disappear:

Check with SEC search result, with the date and time;
Certificate of Incorporation and Certificate of Authority supplied by the lender;
App-store page, developer name, download link, app version, and permissions;
Website address, advertisements, social-media profile, and agent account;
Privacy notice, consent screens, terms of service, and loan offer;
Disclosure statement, contract, promissory note, and amortization schedule;
Proof of the amount actually released;
Receipts, bank records, e-wallet records, and payment reference numbers;
Names, telephone numbers, email addresses, and account details used by agents;
Screenshots or recordings of threats, false statements, public posts, and collection messages;
Call logs and messages received by relatives, colleagues, or other contacts; and
Your written requests for clarification, account statements, or correction.

Keep original electronic files where possible. Do not edit screenshots. Record the sequence of events in a dated timeline while details are fresh.

What to do if the lender cannot be verified

Pause the transaction. Do not sign, pay an advance charge, upload another ID, or disclose an OTP, PIN, password, or account credential.
Contact the named corporation independently. Use contact details obtained from an official SEC record or confirmed corporate website—not the number supplied by the suspicious agent.
Ask the SEC. Submit an inquiry or complaint through SEC iMessage. The March 2026 government advisory also lists the SEC hotline as 1-4732 (1-4SEC).
Secure your accounts. If credentials or an OTP were disclosed, immediately contact the bank or e-wallet provider through its official fraud channel. Change compromised passwords and revoke suspicious app permissions.
Preserve evidence and report suspected cybercrime. The same government advisory identifies the DICT Cyber Hotline at 1326@dict.gov.ph, the NBI Cybercrime Division at ccd@nbi.gov.ph, and the PNP Anti-Cybercrime Group at acg@pnp.gov.ph.
Address privacy violations separately. Follow the National Privacy Commission’s formal complaint procedure if personal data was unlawfully accessed, disclosed, or used. A formal NPC complaint generally requires the prescribed form, notarization, and supporting material.
Do not ignore genuine court papers. Even if the lender’s conduct appears unlawful, obtain legal advice before deciding that no payment is due.

Filing an SEC complaint

The SEC’s complaint guidance for lending and financing companies covers alleged violations of the Lending Company Regulation Act, Financing Company Act, Truth in Lending Act, and related SEC rules.

Prepare:

A complete complaint form;
One complaint form for each respondent company;
A copy of a valid government-issued ID; and
Supporting evidence, including the disclosure statement, payment schedule, receipts, promissory note, contract, screenshots, and relevant correspondence.

Current government guidance directs reports of unfair debt-collection practices to the SEC Financing and Lending Companies Department through SEC iMessage. Check the SEC complaint page immediately before filing because submission channels, forms, office arrangements, and procedural requirements can change.

The company is generally given an opportunity to answer. Filing a complaint does not by itself suspend payment obligations, alter the contract, or guarantee reimbursement.

Common mistakes to avoid

Treating “SEC registered” as the final answer

A corporation may exist legally but still lack authority to lend. Verify the secondary license.

Searching only the app or brand name

The SEC record may be under another corporate name. Trace the brand to the named creditor, then verify both the company and its connection to the platform.

Trusting a certificate sent by the agent

Documents can be altered or copied from a real company. Compare them against independent SEC records and independently contact the named company.

Assuming a legitimate company cannot be impersonated

A real SEC registration may be used in a fake page, app, or chat account. Verify the particular offer and payment destination.

Paying before reading the complete terms

Do not rely only on a daily or monthly rate. Review the amount released, every deduction, every charge, the due dates, default consequences, and total repayment.

Deleting threatening messages

Preserve the evidence first. Screenshots, original messages, call logs, URLs, and transaction records may be essential to a regulator, investigator, bank, or lawyer.

Believing illegality automatically erases a loan

Licensing, disclosure, privacy, collection, and contract enforceability are different issues. The legal effect depends on the particular violation, governing documents, relief requested, and proper forum.

When help is urgent

Seek immediate assistance when:

Money has been taken through an apparent advance-fee scam;
You disclosed an OTP, PIN, password, card details, or banking credentials;
The app or collector accessed or distributed private photos, contacts, IDs, or messages;
There are credible threats of violence, stalking, extortion, or public shaming;
Your identity appears to have been used for an unauthorized loan;
A lender is attempting to take secured property;
You received a summons, subpoena, demand involving foreclosure, or other official legal document; or
A deadline for responding, filing, or appearing is approaching.

For immediate danger, contact the police or emergency services. For a disputed debt, threatened seizure, identity theft, or pending case, consult a Philippine lawyer or the Public Attorney’s Office if you may qualify for assistance.

FAQ

Is a DTI-registered lending business legitimate?

DTI business-name registration alone does not authorize a person to operate as a lending company. A lending company under Republic Act No. 9474 generally must be a corporation registered with and authorized by the SEC.

Is an SEC Certificate of Incorporation enough?

No. The company must also have a valid Certificate of Authority to Operate as a Lending Company or, where applicable, as a Financing Company.

Does an app-store listing prove legitimacy?

No. Verify the corporate operator, its lending authority, and the app’s actual relationship to that operator.

What if Check with SEC shows the company but no lending authority?

Do not treat the company as authorized to offer loans. Ask the SEC for confirmation before proceeding.

What if the lender is a bank, cooperative, or pawnshop?

Different regulators and laws may apply. Banks are generally supervised by the BSP, cooperatives by the Cooperative Development Authority, and pawnshops operate under their own regulatory framework. Verify with the correct regulator instead of relying solely on the lending-company list.

Are all interest rates above 6% per month illegal?

No. The 6% monthly nominal ceiling applies only to the covered category of unsecured, general-purpose loans of ₱10,000 or less with a term of up to four months from lending companies, financing companies, and their online platforms. Other loans require a separate legal and contractual analysis.

Can a collector contact everyone in my phone?

No. Government privacy guidance prohibits unbridled contact-list processing and contacting persons other than consenting guarantors for debt collection merely because they appear in the borrower’s contacts.

Can nonpayment of an ordinary loan lead to automatic arrest?

Mere failure to pay a debt is not, by itself, a basis for imprisonment. However, separate acts may raise different civil or criminal issues, and court papers should never be ignored.

Does filing an SEC complaint cancel the loan?

No. The SEC says its complaint process cannot change the contract, declare the loan or interest void, or cancel or settle the obligation. Court action or a negotiated resolution may be necessary, depending on the issue.

Official sources

This article provides general legal information, not advice for a particular loan, dispute, or case. Legal consequences can depend on the creditor’s regulatory status, the contract, transaction date, loan amount and term, evidence, and later government issuances. Official sources and procedures were checked as of 3 September 2026.