In the evolving financial landscape of the Philippines, the proliferation of online and traditional lending entities has made consumer vigilance more critical than ever. Operating a lending business is a highly regulated activity under Philippine law. Borrowers must distinguish between a company that is merely "registered" and one that is "authorized" to engage in lending.

The primary regulatory body overseeing these entities is the Securities and Exchange Commission (SEC). This article outlines the legal requirements and the specific steps required to verify the legitimacy of a lending company.

I. The Legal Framework: RA 9474 and RA 8556

The operation of lending and financing companies is governed by two primary statutes:

Republic Act No. 9474 (Lending Company Regulation Act of 2007): This act governs "lending companies," which are corporations engaged in granting loans from their own capital or from funds sourced from not more than 19 persons.
Republic Act No. 8556 (Financing Company Act of 1998): This applies to "financing companies," which extend credit facilities to consumers and industrial, commercial, or agricultural enterprises.

Under Section 4 of RA 9474, no person or entity shall engage in the business of lending unless it is organized as a corporation and has been granted a Certificate of Authority (CA) by the SEC.

II. The "Two-License" Rule: Incorporation vs. Authority

A common tactic used by predatory or illegal lenders is presenting a Certificate of Incorporation as proof of legitimacy. Legally, this is insufficient.

Document	Purpose	Legal Weight for Lending
Certificate of Incorporation	Proves the entity is a registered corporation or partnership.	Primary License Only. Does not allow the company to lend money to the public.
Certificate of Authority (CA)	Specifically authorizes the corporation to operate as a lending or financing company.	Secondary License. The absolute requirement for legal lending operations.

Key Takeaway: Every legitimate lending company must have both a registration number and a CA number. If a company only provides an SEC Registration Number, it is operating illegally.

III. Step-by-Step Verification Process

To ensure a lender is authorized, follow these three verification layers:

1. Consult the SEC Official Lists

The SEC maintains a dynamic database of authorized entities. As of 2026, the Commission regularly updates its "List of Lending Companies" and "List of Financing Companies" on its official website.

Action: Navigate to the Lending & Financing Companies section of the SEC website.
Search: Use the exact corporate name of the entity. Be wary of companies using names very similar to well-known established banks or brands.

2. Verify Online Lending Platforms (OLPs)

If the lender operates via a mobile app or website, it must be specifically recorded with the SEC.

The OLP List: The SEC publishes a List of Recorded Online Lending Platforms. Even if a parent company has a Certificate of Authority, it cannot legally operate an app unless that specific app is declared and recorded with the Commission.
App Permissions: Check the "About" section of the app. It should clearly state the Corporate Name, SEC Registration Number, and Certificate of Authority (CA) Number.

3. Inspect Physical Documentation

By law, a lending company is required to display its original Certificate of Authority in a conspicuous place within its principal office and any branches.

Requesting Copies: Under the SEC Express System, the public may request authenticated copies of a company’s Articles of Incorporation and CA to verify their current status and authorized capitalization.

IV. Statutory Requirements and "Red Flags"

Legally compliant lenders must adhere to the Truth in Lending Act (RA 3765) and the Financial Products and Services Consumer Protection Act (RA 11765).

Mandatory Disclosures

Before a loan is consummated, the lender must provide a Disclosure Statement. This document must include:

The cash price or amount to be financed.
Net proceeds of the loan.
Detailed itemization of charges (service fees, processing fees, etc.).
The Effective Interest Rate (EIR) per annum.
Schedule of payments and late payment penalties.

Red Flags of Unauthorized Lenders

Lack of a Physical Office: Legitimate lenders must have a verifiable business address.
Excessive Upfront Fees: Requests for "security deposits" or "insurance fees" before the loan is released.
Vague Identifiers: Communicating solely through social media apps (e.g., Telegram or Facebook) without providing corporate credentials.
Invasive Permissions: Online apps that require access to your entire contact list or social media accounts (a violation of privacy guidelines and SEC Memorandum Circulars).

V. Legal Recourse and Reporting

Engaging in the business of lending without a valid Certificate of Authority is a criminal offense. Under Section 12 of RA 9474, violators may face fines ranging from PHP 10,000 to PHP 50,000 and imprisonment of six months to ten years.

If you identify an unlicensed lender or fall victim to harassment by a registered lender, you may file a formal complaint with the SEC Corporate Governance and Finance Department (CGFD).

Required Evidence for Complaints:

Screenshots of the lending app or website.
Copies of the Loan Agreement and Disclosure Statement.
Proof of payment or demand letters.
Evidence of harassment or unfair debt collection practices (e.g., SMS threats).