Before you borrow from a lending app, Facebook page, loan agent, or small private lender, check two separate things: whether the company legally exists, and whether it is actually allowed to lend money in the Philippines. Many borrowers get confused because a lender may say it is “SEC registered,” but SEC registration alone is not the same as authority to operate as a lending company. This guide explains how to verify a lending company with the SEC, what documents to look for, what red flags to avoid, and what to do if the lender or online lending app appears suspicious.

What Makes a Lending Company Legit in the Philippines?

A legitimate lending company in the Philippines is not just any person, Facebook page, app, or business name offering loans.

Under the Lending Company Regulation Act of 2007, or Republic Act No. 9474, a lending company is a corporation that grants loans from its own capital funds or from funds sourced from not more than 19 persons. The law excludes entities regulated under other special laws, such as banks, investment houses, financing companies, pawnshops, insurance companies, cooperatives, and similar institutions. (Supreme Court E-Library)

The most important rule is this: a lending company must be a corporation and must have authority from the Securities and Exchange Commission, or SEC, to operate as a lending company. RA 9474 specifically provides that no lending company may conduct business unless the SEC has granted it authority to operate. (Supreme Court E-Library)

In practical terms, a legitimate lending company should usually be able to show:

What to Check	What It Means	Why It Matters
SEC Certificate of Incorporation	The company legally exists as a corporation	This is only the first step
SEC Certificate of Authority	The SEC allowed it to operate as a lending company	This is the key license for lending companies
Exact corporate name	The legal name registered with the SEC	App names and Facebook names may be different from the real company
Registered office and contact details	A traceable business address and official channels	Helps you verify and file complaints if needed
Written loan documents	Loan agreement, disclosure statement, payment schedule	Required for transparency and proof
Recorded online lending platform, if applicable	The app or website is connected to a recorded lender	Online apps should match the SEC-recorded platform

A lender that only says “SEC registered” may still be risky if it cannot show its Certificate of Authority or if its app, website, or trade name does not match SEC records.

Legal Basis: Philippine Laws That Regulate Lending Companies

RA 9474: Lending Company Regulation Act of 2007

RA 9474 is the main law governing lending companies in the Philippines. It requires lending companies to operate as corporations and to secure SEC authority before doing lending business. It also gives the SEC power to regulate lending companies, require reports, conduct examinations, and impose sanctions such as fines, suspension, or revocation of authority. (Supreme Court E-Library)

The law also penalizes persons or entities that operate, present themselves, or advertise as lending companies without proper authority. This matters because illegal lenders often use social media pages, text blasts, or mobile apps to look official even when they are not authorized. (Supreme Court E-Library)

RA 9474 also requires a lending company to have at least ₱1 million paid-in capital, although the SEC may prescribe higher capitalization depending on circumstances. The law also imposes nationality requirements: generally, at least a majority of the voting capital stock must be owned by Filipino citizens. (Supreme Court E-Library)

RA 8556: Financing Company Act

Some businesses are not “lending companies” but financing companies. A financing company is typically involved in extending credit facilities such as installment financing, leasing, factoring, or similar credit arrangements. Financing companies are regulated separately under the Financing Company Act, or Republic Act No. 8556.

Like lending companies, financing companies also need SEC authority. RA 8556 penalizes persons who engage in financing company business or hold themselves out as financing companies without the required authority. (Lawphil)

For borrowers, the practical point is simple: whether the business calls itself a “lending company,” “financing company,” “loan provider,” or “cash loan app,” do not rely on labels. Verify the exact legal entity and its SEC authority.

RA 3765: Truth in Lending Act

The Truth in Lending Act, or Republic Act No. 3765, protects borrowers by requiring creditors to clearly disclose the true cost of credit. The law was created to prevent borrowers from being unaware of the actual cost of loans and credit transactions. (Lawphil)

Before the loan is completed, the lender should give the borrower a clear written statement showing important details such as:

Amount financed
Finance charges
Interest rate
Charges deducted from the proceeds
Payment schedule
Late payment charges
Total amount to be paid

RA 3765 requires disclosure of the finance charge both in pesos and as a percentage or simple annual rate. Failure to comply can expose the creditor to civil and criminal consequences under the law. (Lawphil)

This is why a legitimate lender should not be vague about interest, deductions, penalties, or “processing fees.” If the lender refuses to put the loan terms in writing before release, that is a serious warning sign.

RA 11765: Financial Products and Services Consumer Protection Act

The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765, strengthens the rights of financial consumers in the Philippines. It recognizes consumer rights such as fair treatment, transparency and disclosure, protection against fraud and misuse, data privacy, and timely handling of complaints. (Supreme Court E-Library)

RA 11765 applies to financial products and services offered by financial service providers, and regulators such as the SEC, Bangko Sentral ng Pilipinas, Insurance Commission, and Cooperative Development Authority are given powers over entities under their supervision. (Supreme Court E-Library)

For borrowers, RA 11765 is important because it requires financial service providers to act fairly, give clear and concise disclosures, avoid abusive collection practices, protect customer data, and maintain complaint-handling mechanisms. The law also makes providers responsible for acts or omissions of their agents and accredited third-party service providers, including those involved in marketing and debt collection. (Supreme Court E-Library)

RA 10173: Data Privacy Act

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information and sensitive personal information. This matters especially for online lending apps that ask for access to contacts, photos, messages, location, or other phone data. (National Privacy Commission)

Borrowers have rights as data subjects, including the right to be informed, the right to access personal data, the right to correct inaccurate data, and the right to object, block, remove, or seek destruction of unlawfully processed data in proper cases. Personal information controllers must also implement reasonable security measures and comply with breach notification rules when applicable. (National Privacy Commission)

A lender does not get unlimited rights over your phone, contacts, employer, relatives, or social media just because you borrowed money.

Step-by-Step Guide: How to Check If a Lending Company Is Legit

1. Get the exact legal name of the lender

Start with the exact name of the company, not just the app name or Facebook page name.

Look for the legal name in:

Loan agreement
Promissory note
Disclosure statement
App terms and conditions
Privacy policy
Collection notices
Payment instructions
Official receipts
Email footers
Website “About,” “Terms,” or “Contact” pages

Be careful with names that look similar. For example, “ABC Cash Loan,” “ABC Lending,” and “ABC Financing Corp.” may refer to different entities. The SEC verifies companies based on their registered corporate names, not just branding.

Take screenshots before applying or paying anything. Some online lenders change app names, Facebook pages, or payment details after complaints arise.

2. Check if the company appears in the SEC list of lending or financing companies

The SEC maintains public information on lending and financing companies and online lending platforms. In an official SEC response, the SEC directed the public to its lists of lending and financing companies, online lending platforms, procedures, requirements, and complaints channels. The same response identified the SEC Financing and Lending Companies Division, or FLCD, as the office handling these concerns. (www.foi.gov.ph)

When checking the SEC list, look for:

Exact corporate name
SEC registration number
Certificate of Authority number
Status of authority
Registered online lending platform, if the loan is offered through an app or website

Do not stop at “I found a company with a similar name.” The app or agent may be using the name of a real company without authority, or the company may be registered but not authorized for that specific online platform.

3. Confirm the Certificate of Authority, not just SEC registration

A Certificate of Incorporation proves that a corporation exists. It does not automatically prove that the corporation may legally operate as a lending company.

For lending companies, the more important document is the Certificate of Authority to Operate as a Lending Company issued by the SEC under RA 9474. The law expressly requires SEC authority before a lending company may conduct lending business. (Supreme Court E-Library)

A lender’s statement that it is “registered with SEC” may be incomplete. Ask:

What is the SEC registration number?
What is the Certificate of Authority number?
What is the exact corporate name on the authority?
Is the authority active, suspended, revoked, or expired?
Is the app or website recorded under that company?

If the lender cannot answer clearly, treat the transaction as high risk.

4. Match the app, website, and payment account to the company

Many suspicious lenders use a legitimate-looking company name but ask borrowers to deal with a different app, agent, or payment account.

Compare the following:

Item	Should Match or Be Clearly Connected To
App name	SEC-recorded online lending platform
Website	Official website of the lending or financing company
Loan contract	Exact SEC-registered corporate name
Payment account	Corporate account, not a random personal account
Privacy policy	Same lender or authorized service provider
Collection messages	Same company or disclosed collection service provider

A mismatch does not always prove illegality, because companies can use trade names, apps, or service providers. But the connection should be clear and documented.

Be extra careful if payment is requested through:

Personal GCash or Maya account
Personal bank account
Crypto wallet
Unnamed “agent”
QR code with no company details
Different company name from the contract

5. Ask for the loan disclosure before receiving the money

A legitimate lender should be able to provide the loan terms before you agree.

Under the Truth in Lending Act, borrowers should receive clear written information on the cost of credit, including finance charges and the rate expressed in a way the borrower can understand. (Lawphil)

Before accepting the loan, ask for:

Principal amount
Amount to be released
Deductions before release
Interest rate
Effective interest rate, if applicable
Processing fees
Service fees
Late payment fees
Collection charges
Payment due dates
Total amount payable
Consequences of late payment

A common problem is the “₱5,000 loan” where the borrower receives only ₱3,500 after deductions but must repay ₱5,000 or more within seven days. The legal issue is not only the label of the fee, but whether the true cost was properly disclosed, whether the charges are lawful, and whether the terms are fair and not unconscionable.

6. Check whether interest and fees fall within applicable caps

Not all loans have the same interest rules. For certain small, short-term loans, there are specific caps.

The Bangko Sentral ng Pilipinas previously approved ceilings for unsecured, general-purpose loans offered by lending companies, financing companies, and online lending platforms when the principal amount does not exceed ₱10,000 and the tenor is up to four months.

As of April 1, 2026, updated SEC rules under SEC Memorandum Circular No. 14, Series of 2025 apply to covered loans entered into, renewed, or restructured from that date. For covered loans, the reported ceilings include an effective interest cap of 12% per month, nominal interest not exceeding 6% per month, late payment penalty of 5% per month on the outstanding scheduled amount due, and a total cost cap of 100% of the amount borrowed. (GMA Network)

These caps generally apply to covered small, short-term, unsecured general-purpose loans. They do not automatically apply to every possible loan product, such as larger business loans, secured loans, or longer-term financing. Still, even when a loan is outside the specific cap, excessive or oppressive interest may be challenged under Philippine law and jurisprudence.

The Supreme Court has ruled that while parties may agree on interest rates, deviations from the legal rate must be reasonable and fair. In a 2024 decision discussed by the Court, the Court emphasized that when stipulated interest is more than twice the legal rate, the creditor bears the burden of showing justification based on prevailing market conditions. (Supreme Court of the Philippines)

7. Review the lender’s collection practices

A company can be registered and still violate borrower rights through abusive collection.

The SEC has issued rules prohibiting unfair debt collection practices by financing and lending companies. These rules recognize that companies and their third-party service providers may collect debts through lawful and reasonable means, but they must act in good faith and observe reasonable conduct. Prohibited practices include threats, violence, criminal means, and threats of actions that cannot legally be taken.

Watch for abusive tactics such as:

Threatening to post your face or ID online
Messaging your contacts to shame you
Calling your employer to humiliate you
Claiming you will be jailed immediately for ordinary nonpayment
Using fake court, police, NBI, or barangay documents
Sending threats of violence
Using obscene or degrading language
Contacting people who are not co-borrowers or guarantors
Disclosing your debt to friends, relatives, or coworkers without lawful basis

Ordinary nonpayment of debt is generally a civil matter. However, separate facts such as fraud, falsification, bouncing checks, identity theft, or misuse of documents can create separate legal issues. Do not ignore legitimate notices, but do not be intimidated by fake legal threats.

8. Verify directly with the SEC if you are unsure

If the company name, app name, or Certificate of Authority does not match clearly, verify with the SEC.

The SEC has an official web-based ticketing system called iMessage, which handles public inquiries, complaints, incidents, and requests. It generates a unique electronic ticket so users can track the status of their submission. (imessage.sec.gov.ph)

For lending and financing company concerns, the SEC has also identified the Financing and Lending Companies Division contact details in an official response: finlend@sec.gov.ph, with phone numbers (02) 8818-5990 and 0929-626-3095. (www.foi.gov.ph)

When contacting the SEC, prepare:

Exact corporate name
App name or website
Screenshots of advertisements
Screenshots of loan terms
Loan agreement or disclosure statement
Payment receipts
Collection messages
Names or numbers of collectors
Your timeline of events
Any SEC registration or authority numbers shown by the lender

Common Red Flags That a Lending Company May Not Be Legit

“SEC registered” but no Certificate of Authority

This is one of the most common misleading claims. A corporation may be SEC-registered but not authorized to operate as a lending company. RA 9474 requires SEC authority to conduct lending business. (Supreme Court E-Library)

The lender uses only a Facebook page or messaging app

A legitimate company may use social media for marketing, but it should still have a registered corporate identity, official contact information, proper loan documents, and SEC authority. A lender that conducts everything through Messenger, Viber, Telegram, or text with no formal documents is risky.

The app is not on the SEC list of recorded online lending platforms

Online lending platforms should be connected to a recorded lending or financing company. The SEC has issued advisories identifying online lending platforms, apps, and websites that were not authorized to offer loans, and has directed the public to check the SEC list of recorded platforms. (Bulacan Provincial Government)

The lender demands an upfront fee before releasing the loan

Be careful when a lender asks for a “processing fee,” “verification fee,” “insurance fee,” or “release fee” before you receive loan proceeds, especially if payment goes to a personal e-wallet or bank account.

Not every fee is automatically illegal, but legitimate charges should be disclosed in writing and connected to the loan transaction. A demand for payment before release, followed by repeated requests for more fees, is a common scam pattern.

The contract is missing or vague

Avoid loans where the lender refuses to provide a written agreement. The Truth in Lending Act requires clear written disclosure of finance charges and interest-related information before the credit transaction is consummated. (Lawphil)

The lender asks for excessive phone permissions

Online lenders may need some information to verify identity and assess repayment capacity, but access to contacts, photos, social media, or unrelated phone data can become abusive if used for harassment or shaming.

RA 11765 protects financial consumers against misuse and requires data privacy and protection. The Data Privacy Act also gives borrowers rights over their personal information. (Supreme Court E-Library)

The collector threatens jail, public shaming, or harm

Debt collection must be lawful and reasonable. Threats, violence, humiliation, and threats of legally impossible actions are strong warning signs of unfair collection practices.

Documents and Information You Should Request or Save

If you are still deciding whether to borrow, ask for documents first. If you already borrowed and problems started, save evidence immediately.

Document or Information	Why It Matters	Practical Tip
SEC Certificate of Incorporation	Shows the corporation exists	Not enough by itself
SEC Certificate of Authority	Shows authority to operate as lending or financing company	Check name and status
Exact corporate name	Needed for SEC verification and complaints	Screenshot where it appears
App or website name	Needed for online lending platform verification	Compare with SEC records
Loan agreement	Main proof of terms	Save PDF or screenshots
Disclosure statement	Shows interest, charges, and total cost	Required for transparency
Payment schedule	Shows due dates and amounts	Useful for disputes
Proof of release	Shows how much you actually received	Keep bank or e-wallet record
Official receipts or acknowledgments	Shows payments made	Avoid paying without proof
Collection messages	Evidence of harassment or threats	Screenshot with date, time, number, and sender
Privacy policy	Shows how your data may be used	Save before the app changes terms

If you are abroad and need someone in the Philippines to request documents or file papers for you, you may need a Special Power of Attorney, affidavit, or authorization. For documents executed outside the Philippines, Philippine Embassy notarization or apostille may be required depending on the country and the document’s intended use. The Philippine Embassy in Washington, D.C. explains that private documents for use in the Philippines may be notarized at the Embassy, or apostilled through the competent authority when applicable. (Philippine Embassy)

Where to Complain About an Illegal or Abusive Lender

SEC Financing and Lending Companies Division

For complaints involving lending companies, financing companies, or online lending platforms, the SEC is the main regulator. The SEC can act on issues involving unauthorized lending, unrecorded online lending platforms, violations of lending and financing regulations, and abusive practices by regulated entities. RA 9474 gives the SEC authority to supervise lending companies and impose sanctions, including fines, suspension, and revocation of authority. (Supreme Court E-Library)

Prepare a clear complaint with:

Your name and contact details
Name of the lender or app
SEC registration number or Certificate of Authority, if shown
Date of loan application and release
Amount borrowed and amount received
Charges deducted
Payment history
Screenshots of threats, harassment, or misleading statements
Copies of loan documents and receipts
Names, numbers, or accounts used by collectors

The SEC’s iMessage system can be used for public inquiries and complaints, and it provides a ticket number for tracking. (imessage.sec.gov.ph)

National Privacy Commission

If the lender accessed, used, or disclosed your personal data without proper basis, the matter may also involve the National Privacy Commission, or NPC.

Examples include:

Contacting your phonebook contacts without lawful basis
Posting your ID, face, address, or loan details online
Sharing your debt with coworkers or relatives
Using your personal data for threats or humiliation
Continuing to process data after withdrawal or objection where legally applicable

The Data Privacy Act protects personal information and gives data subjects rights to information, access, correction, objection, blocking, removal, or destruction in proper cases. (National Privacy Commission)

Police, NBI, or Cybercrime Authorities

If the lender or collector uses threats, extortion, identity theft, hacking, fake documents, or other criminal acts, the issue may go beyond SEC regulation.

Possible offices include:

Philippine National Police Anti-Cybercrime Group
National Bureau of Investigation Cybercrime Division
Local police station, especially for threats or harassment
Barangay, for local disturbance or mediation when appropriate

A barangay cannot determine whether a lending company is licensed by the SEC. But barangay records may help document harassment, threats, or local incidents.

Practical Scenarios

Scenario 1: The app says it is SEC registered but the company name is different

Ask for the exact corporate name and Certificate of Authority. Then compare the app name with the SEC’s recorded online lending platform information. If the app is not connected to the company, do not rely on the lender’s claim.

Scenario 2: The lender releases less than the approved amount

For example, you apply for ₱10,000 but receive only ₱7,000 because of “processing fees,” “service fees,” or “advance interest.” Ask for the disclosure statement showing all deductions and the effective cost of the loan. The Truth in Lending Act requires disclosure of finance charges and credit cost information. (Lawphil)

Scenario 3: The collector threatens to message all your contacts

Save screenshots and screen recordings where possible. This may involve unfair debt collection and data privacy issues. RA 11765 protects financial consumers against unfair treatment and misuse, while the Data Privacy Act protects personal information. (Supreme Court E-Library)

Scenario 4: The lender claims you will be jailed tomorrow

Ordinary inability to pay a debt is generally not the same as a criminal offense. But do not ignore the matter. Check whether there are separate allegations such as fraud, false documents, or bounced checks. Ask for written notices and verify whether any court or government document is real.

Scenario 5: You are an OFW or foreigner dealing with a Philippine lender

You can still verify the lender through SEC records and file complaints with supporting documents. If you need someone in the Philippines to act for you, prepare a written authorization or Special Power of Attorney. If signed abroad, check whether notarization at a Philippine Embassy or apostille is needed for use in the Philippines. (Philippine Embassy)

Frequently Asked Questions

Is SEC registration enough to prove a lending company is legit?

No. SEC registration only shows that a corporation exists. A lending company must also have SEC authority to operate as a lending company under RA 9474. Ask for the Certificate of Authority and verify it with the SEC. (Supreme Court E-Library)

How do I check if an online lending app is registered with SEC?

Get the app name, website, and exact corporate name behind the app. Then check whether the company appears in the SEC list of lending or financing companies and whether the app appears as a recorded online lending platform. If the names do not match, verify directly with the SEC Financing and Lending Companies Division. (www.foi.gov.ph)

What is the difference between a lending company and a financing company?

A lending company primarily grants loans from its own capital or limited funding sources under RA 9474. A financing company is regulated separately under RA 8556 and may offer credit facilities such as installment financing, leasing, or similar arrangements. Both types of companies generally need SEC authority before operating. (Supreme Court E-Library)

Can a lending company ask for fees before releasing a loan?

Be very careful. Legitimate charges should be disclosed in writing and reflected in the loan documents. If the lender asks you to send money first to a personal account before releasing the loan, that is a major red flag. Do not rely on verbal promises or chat messages only.

How much interest can online lending apps charge in the Philippines?

For covered small, short-term unsecured general-purpose loans not exceeding ₱10,000 and payable within up to four months, updated ceilings effective April 1, 2026 reportedly include a 12% monthly effective interest cap, 6% monthly nominal interest cap, 5% monthly late payment penalty cap on the outstanding scheduled amount due, and a total cost cap of 100% of the amount borrowed. These caps do not automatically apply to every type of loan, so check whether your loan is covered. (GMA Network)

Can an online lender contact my friends or post me on Facebook?

A lender should not use debt collection to shame, threaten, or unlawfully disclose your personal information. Contacting unrelated persons, posting your identity or debt online, or using your phone contacts for humiliation may involve unfair debt collection and data privacy violations. (Supreme Court E-Library)

Can I go to jail for not paying a lending company?

Ordinary nonpayment of debt is generally a civil matter, not automatic imprisonment. However, separate acts such as fraud, falsification, identity theft, or issuing bad checks may create separate legal consequences. Always verify notices and do not ignore real court papers.

What should I do if the lender is not on the SEC list?

Do not proceed unless the lender can prove its authority. Save screenshots and documents, then verify with the SEC. If you already borrowed, keep records of the loan, payments, and collection messages. You may file a complaint through SEC channels if the lender appears unauthorized or abusive.

What if the lending company is legit but the collector is abusive?

A registered lender can still be liable for abusive collection practices. RA 11765 makes financial service providers responsible for the acts or omissions of agents and accredited third-party service providers in marketing and debt collection. Save evidence and complain to the SEC, and consider NPC or cybercrime channels if personal data misuse, threats, or online harassment are involved. (Supreme Court E-Library)

Can foreigners and OFWs complain against Philippine online lending apps?

Yes. The important issue is whether the lender is operating under Philippine regulation or dealing with borrowers in the Philippines. Foreigners and OFWs should save digital evidence, verify the lender with the SEC, and prepare properly authenticated or apostilled documents if someone in the Philippines will act on their behalf. (Philippine Embassy)

Key Takeaways

A legitimate lending company in the Philippines should be more than “SEC registered.” It should have SEC authority to operate as a lending company.
For online loans, check whether the app or website is connected to a recorded online lending platform.
Ask for the exact corporate name, SEC registration number, Certificate of Authority, written loan agreement, disclosure statement, and payment schedule.
Be cautious of lenders that use only social media, demand upfront fees, hide loan charges, use personal payment accounts, or threaten public shaming.
The Truth in Lending Act requires clear disclosure of finance charges and credit costs.
RA 11765 protects financial consumers from unfair treatment, poor disclosure, misuse, and abusive practices.
The Data Privacy Act protects borrowers from unlawful use or disclosure of personal information.
For covered small short-term loans, interest, penalties, and total cost may be subject to specific caps.
Complaints involving lending companies, financing companies, and online lending platforms generally go to the SEC, while data misuse may also involve the National Privacy Commission.
Save screenshots, contracts, payment receipts, and collection messages early because digital evidence can disappear quickly.