In the Philippine financial landscape, the proliferation of digital lending platforms and "Online Lending Apps" (OLAs) has made credit more accessible. However, this convenience has also led to a surge in predatory lending practices and unlicensed operations. To protect yourself from harassment, exorbitant interest rates, and data privacy breaches, it is critical to verify the legitimacy of a lending entity through the Securities and Exchange Commission (SEC).

Under Philippine law, specifically Republic Act No. 9474 (The Lending Company Regulation Act of 2007) and Republic Act No. 8556 (The Financing Company Act of 1998), no person or entity shall engage in the business of lending or financing without valid registration with the SEC.

1. The Two-Step Verification Process

A legitimate lending company must possess two distinct sets of credentials. Being "registered" as a corporation is not enough; they must be specifically authorized to lend.

A. Certificate of Incorporation

This proves the company is a registered legal entity in the Philippines. However, a standard corporation is often prohibited from lending unless its "Articles of Incorporation" specifically state that lending is its primary purpose.

B. Certificate of Authority (CA)

This is the most crucial document. The Certificate of Authority to Operate as a Lending/Financing Company is the specific license granted by the SEC allowing a corporation to engage in lending activities. If a company has a registration number but no CA number, it is operating illegally.

2. How to Verify via the SEC Website

The SEC maintains updated databases of licensed entities. To verify a company, follow these steps:

Visit the SEC Official Website: Go to sec.gov.ph.
Navigate to Public Information: Look for the "Lending and Financing Companies" section under the "Lending Companies" tab.
Check the Lists: The SEC regularly updates several PDF lists:

List of Lending Companies with Certificates of Authority.
List of Financing Companies with Certificates of Authority.
List of Revoked/Suspended Certificates of Authority.

Verify the App Name: If you are using a mobile app, ensure the "App Name" is explicitly linked to the "Corporate Name" on the SEC list. Many licensed corporations operate multiple apps; the SEC requires them to disclose all platform names.

3. Red Flags of Illegitimate Lenders

Beyond the lack of an SEC license, illegal lenders often exhibit "predatory" behaviors. Be wary if the entity:

Requests Access to Contacts/Gallery: Illegal OLAs often scrape your phone data to harass your contacts if you default. Legitimate apps must comply with the National Privacy Commission (NPC) guidelines.
Deducts High Service Fees Upfront: If you borrow ₱5,000 but receive only ₱3,500 due to "processing fees," the effective interest rate may exceed legal disclosures.
Lacks a Physical Address: Legitimate companies are required to maintain a principal office and disclose it on their platforms.
Uses Threatening Language: Any lender using debt-shaming, profanity, or threats of violence is violating SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices.

4. Legal Disclosures Required by Law

Under the Truth in Lending Act (Republic Act No. 3765), all lenders are legally mandated to provide a Disclosure Statement before a loan is consummated. This document must clearly state:

The cash price or amount of the loan.
All down payments or credits.
The total amount to be financed.
All finance charges (including interest, service fees, and penalties).
The percentage that the finance charge bears to the total amount to be financed (Effective Annual Interest Rate).

Failure to provide this disclosure is a criminal violation.

5. What to Do If a Lender is Unlicensed

If you discover that a company is lending without a Certificate of Authority, or if a licensed company is engaging in harassment:

Report to the SEC: Contact the Corporate Governance and Finance Department (CGFD) via email at cgfd_enforcement@sec.gov.ph.
File a Complaint with the NPC: If your data privacy has been breached (e.g., your contacts were messaged), file a complaint with the National Privacy Commission.
Cease Communication: Do not provide further personal information or payments to an entity that cannot prove its legal standing through a CA number.

Verification is the primary defense against the "debt trap" and ensures that the consumer is protected by the regulatory oversight of the Philippine government.