If you are about to borrow from a loan app, or you are already being contacted by collectors, the safest first step is to check whether the online lending app is actually recorded with the Securities and Exchange Commission (SEC) Philippines. In the Philippines, it is not enough that an app appears on Google Play, the App Store, Facebook, TikTok, or a website. A lawful online lending operation should be connected to a lending or financing company with proper SEC authority, and the specific app or platform should appear in the SEC’s recorded online lending platform list.
This guide explains how to check an online lending app’s SEC status, what documents and names to compare, what “SEC-registered” really means, and what to do if the app is missing from the SEC list, using current Philippine law and SEC procedures.
What “SEC-Registered Online Lending App” Means in the Philippines
When people ask, “Is this loan app SEC-registered?”, they usually mean one of three different things:
| What the lender claims | What it really means | Is it enough? |
|---|---|---|
| “We have SEC registration.” | The company may have a Certificate of Incorporation or corporate registration. | No. This only shows the company exists as a corporation. |
| “We are a lending/financing company.” | The company should have a Certificate of Authority from the SEC to operate as a lending company or financing company. | Important, but still not enough for an app. |
| “Our loan app is SEC-recorded.” | The specific online lending platform, app, or website is listed with the SEC under the company’s name. | This is the key check for online lending apps. |
A company may be registered with the SEC as a corporation, but that alone does not authorize it to lend money to the public. Under the SEC’s own registration system, a corporation’s Certificate of Incorporation gives juridical personality but does not authorize activities such as operating as a financing or lending company unless the company obtains the required authority or license. (Esparc)
For ordinary borrowers, the practical rule is simple:
Check both the company and the app. The company should be authorized as a lending or financing company, and the specific app or online lending platform should be recorded with the SEC.
Legal Basis: Why Online Lending Apps Need SEC Authority
Online lending apps are regulated because they extend credit to consumers, collect personal data, charge interest and fees, and often use digital collection systems. Several Philippine laws and SEC rules apply.
Lending Company Regulation Act of 2007 — Republic Act No. 9474
Republic Act No. 9474, or the Lending Company Regulation Act of 2007, governs lending companies in the Philippines. The law defines a lending company as a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. (Supreme Court E-Library)
RA 9474 gives the SEC authority to regulate and supervise lending companies, require reports, exercise visitorial powers, and impose sanctions, including suspension or revocation of authority and fines. (Supreme Court E-Library)
This matters because a lending business cannot simply operate as an informal “pautang app.” If it is lending to the public as a business, it must fit within the regulatory framework.
Financing Company Act — RA 5980, as amended by RA 8556
Some loan apps are operated not by “lending companies” but by financing companies. Republic Act No. 8556, which amended the Financing Company Act, defines financing companies as corporations primarily organized to extend credit facilities through direct lending, discounting or factoring receivables, buying and selling credit instruments, or financial leasing. (Lawphil)
The law also states that no person or entity may hold itself out as a financing company unless authorized under the Act. It imposes penalties for engaging in financing company business without SEC authority. (Lawphil)
SEC Memorandum Circular No. 19, Series of 2019
SEC Memorandum Circular No. 19, Series of 2019 covers disclosure requirements in advertisements of financing and lending companies and reporting of online lending platforms. The SEC lists this circular under its official issuances for financing and lending companies. (SEC Appointment System)
In practical terms, this is why you should not only search for the corporate name. You should also check whether the app name, website, or platform name was reported and recorded.
SEC Memorandum Circular No. 18, Series of 2019
SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies. The SEC lists this circular as the rule on unfair debt collection practices for financing and lending companies. (SEC Appointment System)
This becomes important if an app threatens you, messages your contacts, shames you online, uses fake legal threats, or contacts people who are not guarantors or co-makers.
SEC Memorandum Circular No. 10, Series of 2021
SEC Memorandum Circular No. 10, Series of 2021 imposed a moratorium on new online lending platforms. Public reports and SEC-related advisories explain that the moratorium meant only online lending platforms recorded as of November 2, 2021 could operate, subject to SEC monitoring, until the policy is formally changed. (Inquirer Business)
As of 2026, the SEC has been working on draft rules to lift or revise the moratorium framework, but draft rules are not the same as a final authority to operate. The safest borrower-side practice remains: verify the app against the SEC’s current official list before borrowing. (Home)
Truth in Lending Act — Republic Act No. 3765
Republic Act No. 3765, or the Truth in Lending Act, requires creditors to give borrowers a clear written disclosure before the credit transaction is completed. The disclosure should include, among others, the finance charge in pesos and centavos and the simple annual rate of interest. (Lawphil)
This means a legitimate loan app should not hide the real cost of borrowing behind vague “service fees,” “processing fees,” or confusing deductions.
Financial Products and Services Consumer Protection Act — Republic Act No. 11765
Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, protects financial consumers, including borrowers of digital financial products and services. It recognizes rights such as fair treatment, disclosure and transparency, data privacy, and timely complaint handling. (Supreme Court E-Library)
The law also gives financial regulators, including the SEC, enforcement powers such as market conduct surveillance, consumer redress mechanisms, fines, suspension, and cease-and-desist orders. (Supreme Court E-Library)
Data Privacy Act of 2012 — Republic Act No. 10173
Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information in government and private-sector systems. The National Privacy Commission explains that personal information includes information from which a person’s identity is apparent or can reasonably be ascertained. (National Privacy Commission)
This matters because many abusive online lending cases involve contact lists, photos, IDs, phone numbers, employment details, and private messages.
The National Privacy Commission’s loan-related circulars specifically address online lending apps and personal data processing. NPC Circular No. 2022-02 allows processing of contact lists only within strict limits, such as identifying and contacting character references or guarantors provided by the borrower, and prohibits processing that results in unfair collection practices. (National Privacy Commission)
Step-by-Step: How to Check If an Online Lending App Is SEC-Registered
1. Get the exact app name and operator name
Before searching the SEC list, collect the exact details. Do not rely only on the name shown in an advertisement.
Look for:
- App name on Google Play or the App Store
- Developer name
- Website or landing page
- Corporate name in the app’s terms and conditions
- Privacy policy name
- SEC registration number, if shown
- Certificate of Authority number, if shown
- Business address
- Customer service email and phone number
- Names used in text messages, Viber, WhatsApp, Messenger, or collection notices
Online lenders often use different names. For example, the app may have a catchy brand name, while the legal operator is a corporation with a completely different name. You need both.
2. Go to the SEC list of recorded online lending platforms
The SEC directs the public to verify online lending platforms through its official list of recorded online lending platforms. SEC-related FOI responses and advisories point borrowers to the SEC page for recorded online lending platforms, as well as the SEC lists for lending and financing companies. (www.foi.gov.ph)
Search for the app name, platform name, website, and corporate operator.
Use several variations:
- Exact app name
- App name without spaces
- Developer name
- Corporate name
- Website name
- Trade name
- Abbreviated name
If the app name does not appear, do not stop there. Sometimes the app is listed under the company name or a slightly different brand name. But if neither the app nor its operator appears after a careful search, treat that as a serious warning sign.
3. Check whether the company is a lending company or financing company
After checking the app, verify the company itself.
The SEC has separate lists for:
- Lending companies with Certificate of Authority
- Financing companies with Certificate of Authority
- Recorded online lending platforms
SEC FOI responses have repeatedly directed the public to check all these lists when verifying lending or financing companies and online lending platforms. (www.foi.gov.ph)
The company name should match the operator shown in the app’s terms, privacy policy, loan agreement, or disclosure statement.
4. Compare the app name with the company name
This is where many borrowers make mistakes.
A company may be legitimate, but a scammer may copy its name. An app may claim to be connected with a real financing company, but the app itself may not be recorded. A Facebook page may use a real company’s SEC registration number but send borrowers to a different mobile app or payment wallet.
Compare the following carefully:
| Detail to compare | Why it matters |
|---|---|
| App name | The exact online lending platform should be recorded. |
| Corporate name | The operator should match the SEC list. |
| SEC registration number | This should not be copied from another company. |
| Certificate of Authority number | This is more important than ordinary incorporation. |
| Address | Fake apps often use incomplete or mismatched addresses. |
| Website and email domain | Generic emails are not automatically illegal, but they deserve caution. |
| Privacy policy | The legal operator should be clearly identified. |
| Payment recipient | Be careful if payment is requested through unrelated personal wallets. |
If the app says “operated by ABC Financing Inc.” but the SEC list shows a different app under ABC Financing Inc., verify further before submitting IDs or accepting a loan.
5. Check the SEC advisories and unrecorded online lending platform warnings
The SEC and local government units sometimes circulate advisories listing unrecorded or unauthorized online lending platforms. A Bulacan provincial advisory in 2026, for example, pointed the public to the SEC’s official list of authorized OLPs and provided SEC contact details for inquiries or complaints involving illegal lending activities. (Bulacan Provincial Government)
Search for:
- The app name + “SEC advisory”
- The app name + “unrecorded online lending platform”
- The app name + “cease and desist”
- The company name + “revoked license”
- The company name + “SEC complaint”
A lender may have been valid before but later suspended, revoked, penalized, or ordered to stop certain activities. Always check recent information, not old screenshots from Facebook groups.
6. Review the loan disclosure before tapping “Accept”
Even if the app appears in an SEC list, you should still check the loan terms.
Under the Truth in Lending Act, the lender should disclose the true cost of credit before the loan is completed, including finance charges and the annual rate. (Lawphil)
Before accepting, take screenshots of:
- Principal loan amount
- Amount actually disbursed
- Processing fee
- Service fee
- Interest
- Penalty charges
- Due date
- Total repayment amount
- Annual percentage or simple annual rate, if shown
- Name of creditor
- Loan agreement
- Disclosure statement
A common red flag is a loan that says “₱5,000 approved” but only releases ₱3,500 after deductions, then requires repayment of ₱5,000 or more within seven days. The short tenor and hidden fees can make the real cost extremely high.
7. Check app permissions before installing or borrowing
A legitimate online lending app should not require unnecessary access to your phone.
Be cautious if the app demands access to:
- Full contact list
- Photo gallery
- Social media accounts
- SMS inbox
- Call logs
- Exact location when not needed
- Microphone or camera beyond identity verification
- Files unrelated to the loan
A March 2026 public advisory by the DICT, NPC, and SEC reiterated that unnecessary mobile-app permissions, unauthorized or excessive access to contact lists, and processing that leads to harassment or collection from people outside the borrower’s guarantors are prohibited. (National Privacy Commission)
8. Keep evidence before deleting the app
If the app looks suspicious, collect evidence first:
- App store listing screenshots
- App permissions page
- Loan offer screen
- Disclosure screen
- Loan agreement
- Privacy policy
- Messages from collectors
- Calls log
- Payment instructions
- Wallet or bank recipient details
- Harassing posts or messages sent to contacts
- SEC search results showing no match
This evidence is useful if you file a complaint with the SEC, NPC, PNP Anti-Cybercrime Group, or NBI Cybercrime Division.
How to Read the SEC Search Results Correctly
If the app is listed under the SEC recorded OLP list
This is a good sign, but still check:
- Whether the operator matches the company in the app
- Whether the app name is exactly the same or clearly connected
- Whether the loan terms are properly disclosed
- Whether the app respects data privacy
- Whether collectors follow lawful collection practices
Being listed does not give a lender permission to harass, shame, threaten, or hide fees.
If only the company is listed, but not the app
This is a warning sign.
A company may have a Certificate of Authority as a lending or financing company, but the app or online platform itself may still be unrecorded. Under the SEC’s online lending framework, the app/platform is a separate item to check.
Do not assume that a company’s corporate registration automatically covers every app it launches.
If only an SEC registration number is shown
This is not enough.
An ordinary SEC registration number usually means the entity was incorporated or registered as a juridical entity. For lending or financing, you should look for authority to operate as a lending or financing company and the recording of the specific online lending platform.
If the app says it is “DTI-registered”
This is not enough.
A DTI business name registration is different from SEC authority. DTI registration may show a business name, but it does not authorize a corporation to operate as a lending or financing company.
If the app says it is “BIR-registered”
This is not enough.
BIR registration relates to taxation. It does not prove that the lender has authority from the SEC to lend money or operate an online lending platform.
Red Flags That an Online Lending App May Be Illegal or Unsafe
Be careful if you see any of these signs:
- The app is not in the SEC recorded online lending platform list.
- The company is not in the SEC lending or financing company list.
- The app uses a different company name in the loan agreement.
- The app shows only a generic Gmail, Yahoo, or personal email.
- The app requires access to your entire contact list before showing loan terms.
- The app deducts large fees before disbursement.
- The loan term is extremely short, such as 7 days, with unclear charges.
- The collector threatens barangay blotter, arrest, cyber libel, estafa, or posting your photo without legal basis.
- The collector messages your employer, relatives, friends, or social media contacts.
- The app asks you to repay through a personal GCash, Maya, or bank account unrelated to the company.
- The app uses the name of a real company but the website, email, or payment account does not match.
- The app refuses to give a copy of the loan contract or disclosure statement.
Common Real-Life Scenarios
“The app is on Google Play, so it must be legal.”
Not necessarily. App store availability is not the same as SEC authority. App stores may remove apps after complaints or regulator requests, but their presence alone does not prove compliance with Philippine lending laws.
“The collector said they will file a criminal case if I do not pay today.”
Failure to pay a loan is generally a civil obligation, but fraud may become a criminal issue depending on facts, such as using false identity or deceit from the beginning. Collectors often use exaggerated threats to pressure borrowers.
For ordinary unpaid consumer loans, the lender’s normal remedies are demand letters, collection, credit reporting if allowed, or a civil collection case. They cannot lawfully threaten violence, shame you publicly, or contact unrelated third persons.
“The app contacted my contacts even though they were not co-makers.”
That may raise both SEC and data privacy issues. SEC rules prohibit unfair collection practices, and NPC loan-related rules restrict the use of contact lists and debt collection outside proper guarantors or references. (SEC Appointment System)
“I am a Filipino abroad. Can I still complain?”
Yes, if the app is operating in the Philippines, targeting Philippine borrowers, or processing personal information of Philippine citizens or residents. The Data Privacy Act has extraterritorial provisions where the act relates to personal information of a Philippine citizen or resident, or where the entity has links with the Philippines. (National Privacy Commission)
Practical bottleneck: if you are abroad, you may need to organize digital evidence carefully, use online complaint portals, and prepare an affidavit or complaint form that can be signed, notarized, or consularized if a government office later requires a sworn statement.
“I am a foreigner in the Philippines. Can I use the same checks?”
Yes. Foreigners borrowing from a Philippine online lending app should use the same SEC verification steps. If your passport, visa, ACR I-Card, employer details, or Philippine phone number were collected, keep records of what you submitted and how the app used your information.
For foreign-owned lending or financing companies, Philippine law has ownership and reciprocity rules depending on whether the entity is a lending company or financing company. For example, RA 9474 requires majority Filipino voting capital for lending companies, while RA 8556 has separate financing company rules, including a reciprocity requirement for foreign stock ownership. (Supreme Court E-Library)
What to Do If the Online Lending App Is Not SEC-Registered or Not Recorded
1. Do not submit more personal information
If you have not borrowed yet, do not upload your ID, selfie, contacts, payslip, employer information, or bank details.
If you already borrowed, avoid giving more information than necessary. Do not allow additional app permissions.
2. Screenshot everything
Save proof before the app disappears or changes names. Include the date and time when possible.
Useful screenshots include:
- App store listing
- App permissions
- Loan offer
- Contract
- Disclosure statement
- Privacy policy
- Messages and threats
- Payment instructions
- Search results from the SEC list
- Any claim that the app is SEC-registered
3. File a complaint or report with the SEC
The SEC has an iMessage system for public inquiries, complaints, incidents, and requests. The SEC describes iMessage as its official web-based platform for managing public interactions and generating an electronic ticket. (imessage.sec.gov.ph)
When filing, prepare:
| Item | Why it helps |
|---|---|
| Your full name and contact details | Needed for complaint processing |
| App name and company name | Identifies the respondent |
| Screenshots of the app and loan terms | Shows the lending activity |
| Proof of payments or disbursement | Establishes the transaction |
| Harassing messages or calls | Supports unfair collection complaint |
| SEC search screenshots | Shows why you believe the app is unrecorded |
| IDs or documents submitted | Helps assess data privacy risk |
| Names of contacted third persons | Relevant for harassment or privacy issues |
Older SEC FOI guidance instructed complainants to use a clear subject format when emailing complaints, such as: complete name, respondent company, and subject of complaint. Although the SEC has since promoted iMessage for ticketing, the same practical principle applies: make the complaint title specific and easy to route. (www.foi.gov.ph)
4. File a privacy complaint with the National Privacy Commission if contacts or personal data were abused
If the issue involves contact list harvesting, messages to your family or employer, unauthorized posting of your photo, or misuse of IDs, the NPC may be the proper agency for the data privacy aspect.
The NPC’s website provides complaint channels and notes that it receives complaints and investigates matters involving personal information. (National Privacy Commission)
5. Consider cybercrime reporting for threats, fake posts, identity misuse, or extortion
If the app or collector uses threats, fake edited photos, public shaming, identity theft, or extortion-like tactics, preserve the evidence. Depending on the facts, the matter may involve laws beyond SEC regulation, including the Cybercrime Prevention Act, Revised Penal Code offenses, or data privacy violations.
For practical handling, borrowers commonly prepare:
- Screenshots with timestamps
- URLs of posts or profiles
- Phone numbers used
- Wallet or bank accounts used
- Names of contacted relatives or employers
- Copies of IDs or photos misused
- Police blotter or barangay record, if harassment is ongoing offline
A barangay blotter does not replace an SEC, NPC, PNP, or NBI complaint, but it can help document ongoing harassment in your locality.
Practical Checklist Before Borrowing From Any Loan App
Use this checklist before tapping “Accept”:
- Search the app name in the SEC recorded online lending platform list.
- Search the operator in the SEC lending or financing company list.
- Check whether the app name and company name match the loan contract.
- Look for a Certificate of Authority, not just SEC incorporation.
- Check the SEC advisories for unrecorded or unauthorized OLPs.
- Read the disclosure statement before accepting.
- Compute how much you will actually receive versus how much you must repay.
- Review app permissions before installation or submission.
- Avoid apps that require full contact list access.
- Save screenshots of the offer, disclosure, contract, and payment details.
Documents and Information You Should Keep
| Document or evidence | Keep it before borrowing? | Keep it after borrowing? |
|---|---|---|
| App store listing | Yes | Yes |
| App permissions screen | Yes | Yes |
| SEC search result | Yes | Yes |
| Loan agreement | Yes | Yes |
| Disclosure statement | Yes | Yes |
| Disbursement receipt | Yes | Yes |
| Repayment schedule | Yes | Yes |
| Payment receipts | Not yet | Yes |
| Collector messages | Not yet | Yes |
| Screenshots of threats or public posts | Not yet | Yes |
| Names of contacted third persons | Not yet | Yes |
Typical Timelines and Bottlenecks
| Step | Usual practical timeline | Common bottleneck |
|---|---|---|
| Checking SEC lists | Same day | App uses different brand and company names |
| Gathering screenshots | Same day | App content changes or disappears |
| Filing SEC iMessage ticket | Same day | Missing details about company/operator |
| SEC complaint evaluation | Varies depending on case and volume | Incomplete evidence or unclear respondent |
| NPC complaint preparation | Several days if evidence is organized | Need to show how personal data was misused |
| Police/NBI cybercrime report | Depends on office and urgency | Need screenshots, URLs, phone numbers, account details |
The most common delay is not the law itself but incomplete evidence. Many borrowers delete the app or messages before saving proof. If the app is abusive, document first, then secure your accounts.
Frequently Asked Questions
How do I know if a loan app is SEC-registered in the Philippines?
Check the SEC’s list of recorded online lending platforms and the SEC lists of lending and financing companies. You need to verify both the specific app or platform name and the company operating it. A corporate SEC registration number alone is not enough.
Is SEC registration the same as a Certificate of Authority?
No. SEC corporate registration means the entity exists as a corporation. A lending or financing company generally needs authority from the SEC to operate in that regulated business. For online lending, the specific app or platform should also be recorded with the SEC.
What if the company is SEC-registered but the app is not listed?
Treat it as a red flag. The company may be legitimate for other lending operations, but that does not automatically mean every app, website, or online platform it uses is recorded. Verify directly through the SEC’s official lists and advisories.
Can an online lending app access my contact list?
Online lending apps should not process your contact list in an excessive, unauthorized, or disproportionate way. NPC rules allow limited processing for character references or guarantors provided by the borrower, but using contacts for harassment or collection outside proper guarantors is prohibited. (National Privacy Commission)
Is it legal for collectors to message my family, employer, or friends?
Collectors should not contact people who are not legally involved in the loan, such as guarantors or co-makers, especially to shame, threaten, or pressure you. That may involve unfair debt collection and data privacy violations.
Can I ignore a loan if the app is not SEC-recorded?
An unrecorded or illegal app may face regulatory consequences, but this does not automatically erase every factual obligation if you actually received money. The safer approach is to preserve evidence, avoid further data exposure, question unlawful charges, and report the app’s conduct to the proper agencies.
What if the app threatens to have me arrested?
Ordinary nonpayment of debt is generally not a basis for immediate arrest. However, fraud-related facts may create separate legal issues. Be careful with threats that misuse terms like “estafa,” “cybercrime,” “warrant,” or “barangay case” merely to scare you into paying. Save the messages and include them in your complaint.
Can the barangay help with online lending harassment?
The barangay can help document local harassment, threats, or disturbances through a blotter or mediation if the parties are within its jurisdiction. But online lending regulation is mainly handled by the SEC, and data privacy complaints go to the NPC. Cyber threats may require PNP or NBI cybercrime assistance.
Are foreign online lenders allowed to lend to people in the Philippines?
A foreign company targeting Philippine borrowers may still need to comply with Philippine laws, especially if it carries on lending or financing business in the Philippines, processes personal data of Philippine citizens or residents, or uses Philippine-based collection and payment systems. Foreign ownership rules and reciprocity requirements may also apply depending on the type of lending or financing entity. (Supreme Court E-Library)
What is the safest sign that a loan app is legitimate?
The safest sign is a consistent match across official records and documents: the app appears in the SEC recorded online lending platform list, the operator appears as a lending or financing company with SEC authority, the loan agreement uses the same legal name, the disclosure statement clearly states the true cost of credit, and the app does not demand excessive phone permissions.
Key Takeaways
- Do not rely on app store availability, Facebook ads, influencer posts, or screenshots of old SEC lists.
- A corporation’s SEC registration is not the same as authority to operate as a lending or financing company.
- For online loans, check the specific app or platform in the SEC recorded online lending platform list.
- Verify the company name, app name, SEC registration number, Certificate of Authority, address, website, and payment recipient.
- A listed app must still follow the Truth in Lending Act, SEC debt collection rules, the Financial Products and Services Consumer Protection Act, and the Data Privacy Act.
- If the app is missing from SEC records, uses excessive phone permissions, hides fees, or contacts your personal network, preserve evidence and report through the appropriate government channels.