A Philippine Legal Guide

In the Philippines, a lending business cannot lawfully operate on the strength of a business name, social media page, mobile app, or office address alone. In many cases, what matters is whether the company has been validly formed, properly registered, and specifically authorized to engage in lending or financing under Philippine law. For the public, borrowers, counsel, compliance officers, and business owners, the most important regulator in this space is the Securities and Exchange Commission (SEC).

This article explains, in Philippine legal context, how to determine whether a lending company is legitimately registered and licensed by the SEC, what documents and facts should be verified, what “registered” and “licensed” really mean, how lending companies differ from financing companies and banks, what warning signs should raise concern, and what legal consequences may follow if a company operates without proper authority.

I. Why SEC registration and licensing matter

In Philippine law, there is a critical difference between:

being registered as a corporation or entity, and
being authorized to conduct lending or financing business.

A company may exist as a juridical person because it has corporate registration, but that does not automatically mean it is allowed to engage in lending. Lending is a regulated activity. A corporation that advertises loans, collects repayments, imposes charges, and holds itself out to the public as a lender must generally have the proper authority under the applicable lending and financing laws, together with the necessary SEC documentation.

For consumers, this matters because dealing with an unregistered or unlicensed lender may expose them to abusive collection, unlawful fees, questionable contracts, privacy violations, and difficulty enforcing rights. For investors and founders, the absence of proper authority can lead to administrative sanctions, penalties, cease-and-desist actions, and other liabilities.

II. The basic legal framework in the Philippines

The main Philippine legal framework commonly involved includes:

1. The Lending Company Regulation Act of 2007

This law governs lending companies in the Philippines. It requires lending companies to comply with regulatory requirements and places them under SEC supervision in the context of corporate and licensing regulation.

2. The Financing Company Act of 1998

This governs financing companies, which are related to but distinct from lending companies. Financing companies typically engage in broader credit arrangements, such as receivables financing, leases, and other financial products, not merely direct cash lending.

3. The Revised Corporation Code of the Philippines

This governs the creation, existence, powers, and compliance obligations of corporations. A lending company usually operates as a corporation duly registered with the SEC.

4. SEC rules, memorandum circulars, and opinions

Beyond statutes, the SEC issues rules on licensing, reportorial obligations, naming restrictions, disclosures, penalties, and special compliance requirements, including those applicable to online lending platforms and lending or financing companies using digital channels.

5. Other laws that may also apply

Depending on the company’s conduct, the following may also become relevant:

Data Privacy Act
Consumer Act principles, where applicable
Anti-Money Laundering obligations in certain circumstances
Truth in Lending Act
Cybercrime and electronic commerce rules
Laws and regulations on unfair debt collection and harassment
Local business permit requirements
BIR registration and tax compliance rules

SEC registration is therefore only one part of legality, but it is the starting point.

III. What is a “lending company” in Philippine context

A lending company is generally a corporation engaged in granting loans from its own capital funds or from funds sourced in the manner allowed by law. Its core business is extending credit or cash loans directly to borrowers.

This should be distinguished from:

A. Financing company

A financing company is broader in scope and may engage in activities such as discounting, factoring, receivables financing, and lease-related financial transactions.

B. Bank

A bank is regulated primarily by the Bangko Sentral ng Pilipinas (BSP), not just the SEC, and may accept deposits. A lending company is not a bank merely because it gives loans.

C. Cooperative

A cooperative is regulated differently and is not simply a lending company under SEC rules.

D. Sole proprietorship or informal lender

A person or business name registration alone does not make one a lawful lending company under the regulatory framework applicable to corporations engaging in lending.

The label used by the business does not control. What matters is the nature of the activity and the authority actually granted by law and by the regulator.

IV. The difference between “registered” and “licensed”

This is the most common point of confusion.

1. Registered

A company is registered when it has been legally formed and recorded with the SEC as a corporation or partnership, with articles of incorporation or equivalent constitutive documents.

This proves that the entity exists as a legal person.

2. Licensed or authorized

A company is licensed or authorized when it has secured the specific regulatory authority required to operate as a lending company or financing company.

This proves that the entity is allowed to engage in the regulated business of lending or financing.

A corporation may therefore be:

registered but not licensed to lend;
registered and licensed to lend;
registered for another purpose but unlawfully engaging in lending;
dissolved, suspended, revoked, or delinquent even if it once had registration.

For due diligence, one must verify both corporate existence and specific authority to operate in lending.

V. The core things you must verify

To check whether a lending company is registered and licensed by the SEC, verify the following as separate points:

1. Exact corporate name

Ask for the company’s full legal name, not just its brand, trade name, mobile app name, Facebook page, or acronym.

Many problematic operators hide behind:

nicknames,
app titles,
marketing brands,
generic names,
slight misspellings of known companies.

The name appearing on the loan agreement, disclosure statement, official receipts, privacy notice, website terms, and demand letters should be consistent with the SEC-registered corporate name.

2. SEC registration details

The company should be able to identify its SEC registration number or company registration details. This helps confirm that the entity is not fictitious and is dealing under its true juridical identity.

3. Primary purpose in the corporate documents

The company’s primary purpose should support its lending or financing activity. If its corporate purpose is unrelated, that is a red flag.

4. Certificate of Authority or equivalent permission to operate

A legitimate lending or financing company should have the proper SEC authority to engage in lending or financing, not merely a certificate of incorporation.

5. Current status

Even if once registered, the company may no longer be in good standing. Its registration or authority may have been:

revoked,
suspended,
cancelled,
delinquent,
not renewed where renewal-related compliance is required,
subject to enforcement action.

6. Branch authority, if applicable

If dealing through a branch or extension office, check whether the office being used is part of the lawful corporate operation and not a rogue outlet.

7. Online lending platform compliance

If the lender operates through a mobile app, website, or digital platform, verify whether the online brand is actually tied to the registered and authorized corporate entity.

VI. How to check in practice

Even without relying on the company’s own claims, the legal checking process usually involves documentary verification and regulator-facing verification.

Step 1: Ask the company for its full legal identity

Request the following:

Full corporate name
SEC registration number
Certificate of Incorporation
Certificate of Authority to operate as a lending company or financing company
Principal office address
Official website and email domain
Name of authorized representative or compliance officer
Copy of the loan agreement and disclosure statement

A legitimate company should not resist giving its exact legal name and registration basis.

Step 2: Review the loan documents themselves

Check whether the documents identify:

the full legal corporate name,
SEC registration details,
office address,
tax identification details where applicable,
authorized signatory,
terms on interest, charges, penalties, and collection.

If the agreement names only an app brand or a trade name, that is not enough.

Step 3: Compare all names across documents

The same entity name should appear consistently in:

the promissory note or loan agreement,
disclosure statement,
website terms and privacy policy,
collection notices,
official receipts,
app permissions notice,
SMS or email communications.

Name inconsistency is a classic warning sign.

Step 4: Check whether the company’s business is actually lending

Some entities present themselves as:

service providers,
collection agencies,
marketing partners,
consultants,
technology platforms.

Yet in reality they approve loans, disburse funds, compute interest, and collect repayments. The real operator must still be legally authorized.

Step 5: Check for SEC authority to engage in lending or financing

The crucial issue is not merely whether the company is incorporated, but whether it is authorized to conduct lending or financing business.

Where a company cannot show the relevant authority, its claim of legality is doubtful.

Step 6: Check whether the authority is still valid and the company remains compliant

A company with a history of non-compliance, suspension, or revocation may still keep old certificates on display. The existence of an old document does not prove present good standing.

Step 7: Examine the public-facing conduct

Even if paperwork is shown, the company’s conduct may still indicate unlawful or questionable operation, such as:

hidden charges,
usurious-looking effective costs,
harassment,
unauthorized data access,
public shaming,
threats,
refusal to provide formal disclosures,
use of unverifiable app identities.

These do not automatically negate SEC registration, but they are highly relevant to legality and enforcement risk.

VII. What documents should a legitimate lending company usually be able to show

A serious due diligence review commonly asks for the following:

1. SEC Certificate of Incorporation

This shows the entity was formed as a corporation.

2. Articles of Incorporation and By-laws

These show the corporate purposes, structure, and governance.

3. SEC Certificate of Authority to Operate as a Lending Company or Financing Company

This is one of the most important documents.

4. Business permit and local government permits

SEC registration does not replace local permitting.

5. BIR registration

Tax registration is separate from SEC authority.

6. Proof of current compliance

Depending on the case, this may include current reportorial filings or proof that there has been no revocation or suspension.

7. Board authority and signatory authority

The person transacting with the public should be acting for the corporation.

8. Disclosure forms and loan contract templates

A lawful lender should be able to explain its pricing and documentary basis.

The absence of one document is not always conclusive, but the absence of core corporate and regulatory documents is serious.

VIII. Online lenders and mobile loan apps: special concerns

In the Philippines, many borrowers first encounter a lender through a mobile app, social media advertisement, website, or messaging platform. This creates a legal problem: the public often sees only the brand, not the actual corporation behind it.

When dealing with an online lender, check:

1. Whether the app or website names the legal entity

The app store listing, website footer, privacy policy, and terms of use should clearly identify the corporation behind the platform.

2. Whether the legal entity matches the loan documents

The company named in the app must match the company named in the contract.

3. Whether the lender discloses its authority

A legitimate operator should not be vague about its SEC status.

4. Whether the app seeks excessive permissions

Access to contacts, photos, call logs, or unrelated phone functions may signal a high-risk operation, especially if used for debt harassment.

5. Whether collection practices are abusive

Even a registered company may violate law through unlawful collection practices.

6. Whether the brand is merely a front

Sometimes the app brand is not the real contracting entity. The true lender must still be identified.

An online presence does not legalize lending. A polished app is not proof of SEC authority.

IX. Common red flags that suggest the lender may not be properly registered or licensed

The following warning signs deserve serious attention:

The company refuses to give its full legal corporate name.
It gives only a trade name, app name, or first name of an “agent.”
It cannot produce a Certificate of Authority to operate as a lending or financing company.
Its documents contain inconsistent names.
The contract is unsigned or names no corporation at all.
The office address is vague, changing, or unverifiable.
It uses personal bank or e-wallet accounts rather than clear corporate channels.
It threatens arrest for nonpayment of debt in routine collection.
It contacts the borrower’s relatives, employer, or contact list without proper basis.
It imposes charges not transparently disclosed.
It refuses to provide a copy of the contract after disbursement.
It uses fake legal jargon or cites non-existent “permits.”
It says SEC registration is unnecessary because it is “only an app” or “only a platform.”
It claims that a DTI registration, mayor’s permit, or BIR registration alone is enough to conduct lending as a corporation.
It invokes “investment,” “membership,” or “processing fee” structures to disguise a lending business.

No single red flag is always decisive, but several taken together strongly suggest a compliance problem.

X. Is a DTI registration enough?

No, not for a lending company in the corporate-regulatory sense discussed here.

A DTI registration generally relates to business names used by sole proprietorships. It is not a substitute for SEC corporate registration, and it is not a substitute for the specific authority required for a lending company or financing company.

A business may present:

DTI papers,
a barangay clearance,
a mayor’s permit,
BIR forms,

yet still lack the legal authority to operate as a lending company under the applicable framework.

These documents may show some form of business registration, but they do not by themselves prove SEC authority to engage in lending.

XI. Is SEC registration alone enough?

Also no.

A Certificate of Incorporation only proves juridical existence. It does not automatically grant authority to undertake every regulated activity. Lending and financing are specialized, regulated lines of business. The company must be authorized for that line of activity and remain compliant with SEC requirements.

Thus, a corporation engaged in lending should not rely merely on “we are SEC registered.” The real question is: SEC registered as what, for what purpose, and with what authority to lend?

XII. Lending company versus financing company: why the distinction matters

The distinction matters because people often use the terms interchangeably, but the legal basis may differ.

A lending company

Typically extends direct loans.

A financing company

May engage in broader financing activities, such as discounting receivables, factoring, leasing-type financing, and other structured credit transactions.

For due diligence, do not stop at the marketing label. Ask:

Is the company a lending company or financing company?
What authority does it hold?
Does that authority cover the specific product it is offering?

An operator may call itself a “lender” when it is legally organized as a financing company, or vice versa. What matters is the actual legal authority and the nature of the business being conducted.

XIII. Can foreign-owned or foreign-linked lenders operate in the Philippines?

Potentially, but they must still comply with Philippine law. Foreign involvement does not excuse local licensing requirements. If a company offers loans to persons in the Philippines, targets the Philippine market, collects from Philippine borrowers, or operates through local offices, agents, or apps, Philippine regulatory requirements become highly relevant.

Special issues may include:

foreign equity restrictions where applicable,
corporate structuring,
registration of foreign corporations,
local subsidiaries,
platform operators and outsourcing arrangements,
cross-border data handling,
consumer-facing enforcement.

A foreign brand name does not establish legality. The actual Philippine operating entity must still be identified and checked.

XIV. What if the company says it is only a “platform” and not the lender?

That is a frequent argument in digital lending structures. Legally, one must determine who actually:

approves the loan,
bears the credit risk,
disburses the money,
contracts with the borrower,
computes the charges,
collects the payments,
enforces default.

The true lender cannot avoid regulation merely by styling itself as a platform, intermediary, or technology partner if it is functionally engaged in lending.

Where multiple entities are involved, the borrower should identify:

the platform operator,
the legal lender,
the collection agency,
the data processor,
the payment channel provider.

Only then can proper legal accountability be assessed.

XV. What should appear in a lawful loan transaction

While formats vary, a compliant lending relationship should ordinarily include clear disclosure of:

identity of the lender,
principal amount,
interest,
fees and charges,
penalties,
due dates,
method of repayment,
consequences of default,
privacy and data use terms,
borrower remedies and contact points,
governing terms in understandable form.

A lender that withholds its identity or obscures the real cost of credit raises legal concern, whether or not it claims SEC registration.

XVI. Borrower rights and practical protections

A borrower checking a lending company’s legitimacy should insist on the following:

1. Full identification of the creditor

The borrower is entitled to know who the actual lender is.

2. Copy of the contract

Never rely on oral assurances or app pop-ups alone.

3. Breakdown of charges

The borrower should understand what is principal, interest, service fee, penalty, and other charges.

4. Written collection communications

Threatening or abusive practices should be documented.

5. Privacy compliance

The lender should not weaponize access to contacts or personal data.

6. Official receipts or verifiable payment records

Payment proof is essential in any dispute.

A borrower need not wait for a lawsuit to question legitimacy. Due diligence should be done before signing and again at the first sign of abusive conduct.

XVII. What happens if a company lends without proper authority

A company operating without proper authority may face serious legal consequences, including:

administrative sanctions,
fines or penalties,
cease-and-desist orders,
revocation or suspension of registration or authority,
reputational consequences,
difficulty enforcing contracts,
exposure to civil claims,
possible criminal implications where other laws are violated,
actions arising from harassment, privacy breaches, or fraud.

The precise consequence depends on the facts and the specific law violated. Not every defect makes every loan automatically void, but operating without proper authority creates major legal risk for the business and may strengthen consumer complaints and enforcement exposure.

XVIII. Does an unlicensed lender automatically lose the right to collect?

This question is more legally nuanced than many assume.

The fact that a lender lacks proper licensing does not always produce a simple one-line conclusion on the enforceability of every obligation. Courts generally examine the law violated, the nature of the transaction, public policy, and the circumstances. In some situations, regulatory illegality may severely undermine enforceability or expose the lender to sanctions; in others, the borrower’s receipt of funds and the structure of the obligation may still be considered in resolving the dispute.

What can safely be said is this: lack of proper authority is a serious legal defect, and it materially weakens the lender’s position while increasing regulatory and litigation risk.

XIX. Collection abuse is a separate legal issue

A company may be registered and yet still violate the law through improper collection practices.

Examples include:

threats of imprisonment for ordinary debt,
public shaming,
contacting unrelated third parties,
dissemination of personal information,
intimidation,
deceptive demand letters,
excessive or undisclosed charges,
coercive digital access practices.

Thus, the legality inquiry has two levels:

Is the company lawfully registered and authorized?
Is it collecting and operating lawfully?

A “yes” to the first does not excuse violations of the second.

XX. What businesses, lawyers, and compliance officers should verify in a formal due diligence review

For professional due diligence, the review should cover at least:

Corporate existence

current SEC registration status,
corporate term and standing,
registered name,
registered office,
amendments to articles and by-laws.

Authority to engage in lending

proper SEC authority,
scope of authority,
whether products offered match authority held.

Governance

board approvals,
signatory authority,
responsible officers,
compliance function.

Operational legality

standard contracts,
disclosure forms,
fee computations,
collection protocols,
outsourcing arrangements.

Regulatory exposure

prior enforcement issues,
consumer complaints,
suspicious rebranding,
digital platform practices.

Data governance

privacy notices,
data processing arrangements,
access permissions,
handling of borrower information.

A superficial check of the company name is not enough for legal due diligence.

XXI. A practical checklist for the public

A borrower or consumer may use this simple screening checklist:

Ask for the following before borrowing:

full corporate name,
SEC registration details,
Certificate of Incorporation,
Certificate of Authority to operate as a lending or financing company,
office address,
copy of the loan contract,
full disclosure of charges.

Confirm the following in the documents:

same company name everywhere,
no unexplained brand/entity mismatch,
no hidden charges,
no blank signature fields,
no purely verbal promises,
no threats embedded in communications.

Watch for these danger signs:

only an app name is shown,
no actual corporation is identified,
personal accounts used for repayment,
aggressive access to contacts,
pressure to borrow before reading the terms,
refusal to provide documentation.

If the company fails these basics, treat the transaction as legally risky.

XXII. Misleading arguments often used by questionable lenders

Certain statements should be treated with caution:

“We are SEC registered.”

This may mean only that the corporation exists, not that it is authorized to lend.

“We have a mayor’s permit.”

Local permits do not replace SEC authority for regulated lending activity.

“We are only a collection agency.”

If the same group approves and controls the loan, that description may be incomplete or misleading.

“We are just a platform.”

Functional involvement may still make the entity part of the regulated lending operation.

“Everyone uses our app.”

Popularity is not proof of legality.

“We can shame delinquent borrowers.”

That is not a lawful collection right.

“You can be arrested for not paying.”

Ordinary nonpayment of debt is not, by itself, grounds for imprisonment.

These statements often reveal either poor compliance understanding or deliberate intimidation.

XXIII. What to do if legitimacy is doubtful

Where there is doubt, the prudent legal approach is to preserve evidence and avoid further undocumented dealings.

Keep copies of:

the app name and screenshots,
the contract,
receipts,
chat messages,
emails and texts,
collection threats,
numbers used by agents,
payment instructions,
privacy permissions requested.

The more the transaction is digitized, the more important documentary preservation becomes.

XXIV. For companies that want to operate lawfully

For founders and businesses, the lesson is straightforward: do not assume that general corporate registration is enough. A lawful lending operation requires proper structuring from the beginning.

At minimum, a compliant operator should ensure:

correct corporate formation,
purposes aligned with lending or financing,
proper SEC authority,
complete reportorial compliance,
clear contracts and disclosures,
lawful fee structures,
compliant collection protocols,
privacy-law compliance,
transparent digital branding tied to the true legal entity.

A company that starts lending first and fixes its papers later is inviting regulatory trouble.

XXV. The legal bottom line

To determine whether a lending company is registered and licensed by the SEC in the Philippines, the decisive inquiry is not whether the company merely exists on paper or online. The real question is whether the company:

has a valid juridical identity,
is properly registered with the SEC,
is specifically authorized to engage in lending or financing,
is operating under its true legal name,
remains in good standing,
and conducts its business in compliance with applicable law.

In Philippine legal practice, registration is not the same as authority, and authority is not the same as lawful conduct. A company may satisfy one and fail the others. That is why proper verification must always go beyond marketing claims, app listings, and generic business permits.

For any person evaluating a lender, the safest rule is this: do not deal with any lending company unless you can identify the exact corporate entity, connect that entity to the loan documents, and verify that it is specifically authorized to engage in lending or financing under Philippine law.