I. Introduction

In the Philippines, lending has become increasingly accessible through traditional financing companies, micro-lenders, online lending platforms, mobile applications, and informal credit arrangements. While access to credit can be useful, it has also created opportunities for abusive, unregistered, or fraudulent lenders to prey on borrowers.

A lending corporation is not legitimate merely because it has a website, Facebook page, mobile app, office address, business permit, barangay clearance, or even a Certificate of Registration from the Securities and Exchange Commission. In the Philippine legal context, a lending company must generally be both incorporated or registered as an entity and specifically authorized to engage in the lending business.

The main regulator for lending companies and financing companies in the Philippines is the Securities and Exchange Commission, commonly referred to as the SEC.

This article explains how to determine whether a lending corporation is legitimate, registered, and authorized to operate in the Philippines; what documents to check; what red flags to watch for; what laws apply; and what remedies are available to borrowers.

II. Governing Laws and Regulatory Framework

A. Lending Company Regulation Act of 2007

The primary law governing lending companies in the Philippines is Republic Act No. 9474, also known as the Lending Company Regulation Act of 2007.

Under this law, lending companies are regulated because lending money to the public is a business affected with public interest. A company cannot simply collect money, lend it out, and charge interest without complying with legal and regulatory requirements.

A lending company is generally understood as a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than a limited number of persons, excluding banks, quasi-banks, pawnshops, financing companies, and other entities separately regulated under special laws.

B. SEC as Supervising Authority

The SEC is the government agency primarily tasked with supervising and regulating lending companies. Its role includes:

registering corporations;
issuing Certificates of Authority to lending companies;
monitoring compliance with lending laws and regulations;
receiving complaints against lending companies;
imposing penalties;
suspending or revoking authority to operate;
investigating abusive or unlawful lending practices.

C. Revised Corporation Code

A lending company must usually be organized as a corporation. Its corporate existence is governed by the Revised Corporation Code of the Philippines, Republic Act No. 11232.

The Revised Corporation Code governs matters such as corporate registration, articles of incorporation, bylaws, corporate powers, directors, officers, corporate name, principal office, and corporate compliance.

However, incorporation alone does not authorize a company to operate as a lender.

D. Financing Company Act

Some businesses that appear to be “lenders” may actually be financing companies governed by the Financing Company Act, as amended. Financing companies are also regulated by the SEC but are distinct from ordinary lending companies.

A financing company may be involved in extending credit facilities, installment sales financing, leasing, factoring, receivables discounting, and similar transactions.

The distinction matters because a company may not lawfully conduct financing company activities if it is merely authorized as a lending company, and vice versa.

E. Data Privacy Act

Many abusive lending practices involve the use of phone contacts, social media accounts, identification cards, photos, threats, shaming, and unauthorized disclosure of debt information. These acts may implicate the Data Privacy Act of 2012, Republic Act No. 10173.

The National Privacy Commission may become involved where lenders misuse personal information, access contacts without proper consent, disclose debts to third parties, or harass borrowers using personal data.

F. Consumer Protection Laws

Borrowers are also protected by consumer laws, including the Consumer Act of the Philippines, general civil law principles, SEC regulations, and rules against unfair, deceptive, abusive, or unconscionable collection practices.

G. Cybercrime and Criminal Laws

Where a lender or collection agent uses threats, coercion, libelous posts, identity theft, unauthorized access, fake profiles, or malicious online publication, criminal laws may also apply, including:

the Revised Penal Code;
the Cybercrime Prevention Act;
laws against unjust vexation, grave threats, coercion, and libel;
laws protecting privacy and personal data.

III. What Makes a Lending Corporation Legitimate?

A lending corporation is legitimate only when it satisfies several legal requirements. The most important are:

it is registered as a corporation or lawful entity;
it has authority from the SEC to operate as a lending company or financing company;
it uses its registered corporate name or approved business name;
it operates within the scope of its authority;
it complies with disclosure, interest, collection, privacy, and consumer protection rules;
it is not subject to revocation, suspension, cease-and-desist order, or enforcement action;
it does not engage in fraud, misrepresentation, harassment, or illegal collection methods.

A company can be registered with the SEC as a corporation but still be unauthorized to lend. This is a common source of confusion.

IV. SEC Registration Is Not the Same as Authority to Lend

This is the most important point.

A corporation may possess an SEC Certificate of Incorporation. That certificate merely proves that the corporation exists as a juridical entity. It does not automatically allow the corporation to engage in lending.

To legally operate as a lending company, the corporation must also have a Certificate of Authority to Operate as a Lending Company issued by the SEC.

Therefore, when checking legitimacy, there are two separate questions:

1. Is the company registered as a corporation?

This asks whether the entity legally exists.

2. Is the company authorized by the SEC to operate as a lending company?

This asks whether the entity may lawfully conduct lending business.

A legitimate lender must generally satisfy both.

V. Key Documents to Check

A. Certificate of Incorporation

A Certificate of Incorporation shows that the corporation was created under Philippine corporate law.

It usually contains:

corporate name;
SEC registration number;
date of incorporation;
confirmation that the articles of incorporation were filed and approved.

However, this document alone is not enough.

B. Articles of Incorporation

The Articles of Incorporation may state the corporation’s primary purpose. For a lending company, the corporate purpose should usually mention lending or credit-related activities.

A mismatch between the company’s advertised business and its stated corporate purpose may be a warning sign.

For example, if a company advertises itself as a lender but its articles state that its purpose is general merchandising, consulting, construction, or online marketing, further verification is necessary.

C. Certificate of Authority to Operate as a Lending Company

This is the most important document. It proves that the SEC has authorized the corporation to engage in lending.

A legitimate lending company should be able to provide or display its SEC-issued Certificate of Authority. The certificate should match the company’s corporate name.

Important details to check include:

exact corporate name;
Certificate of Authority number;
date of issuance;
SEC registration number;
principal office;
authorized business activity;
whether the authority remains valid and has not been suspended or revoked.

D. Business Permit or Mayor’s Permit

A local business permit shows that the company has permission from the local government unit to operate at a certain address.

However, a mayor’s permit does not replace SEC authority. A business permit is not enough to prove that a lending company is legally authorized to lend.

A local government permit may show local compliance, but the legal authority to conduct lending business still comes from the SEC.

E. BIR Registration

A Bureau of Internal Revenue Certificate of Registration shows that the business is registered for tax purposes.

Like a business permit, BIR registration does not prove authority to lend. It only shows tax registration.

F. DTI Registration

Some lenders display Department of Trade and Industry registration. DTI registration usually applies to sole proprietorship business names, not corporations.

A lending company under the Lending Company Regulation Act is generally expected to be a corporation authorized by the SEC. A DTI business name certificate alone is not enough to establish legitimacy as a lending company.

If a supposed lending corporation shows only a DTI certificate, that is a major warning sign.

G. SEC Online Lending Platform Registration or Recorded App Information

For online lending applications, the company operating the platform should be registered and authorized. The name of the app, trade name, website, or online platform should be connected to the authorized corporate entity.

A mobile app may have a catchy name that differs from the corporate name. Borrowers should identify the actual corporation behind the app.

VI. Practical Step-by-Step Verification

Step 1: Get the Exact Legal Name

Ask for the lender’s full registered corporate name. Do not rely only on:

app name;
Facebook page name;
website name;
trade name;
collection agency name;
branch name;
brand name.

The exact legal name matters because SEC records are based on registered entities.

Example:

An app may be called “Fast Peso Loan,” but the actual corporation may be “ABC Lending Corporation.” You must verify the corporation, not just the app name.

Step 2: Ask for the SEC Registration Number

A legitimate lending company should be able to provide its SEC registration number. This number should match the name appearing in SEC records.

Be cautious if the lender refuses to provide it or gives inconsistent details.

Step 3: Ask for the Certificate of Authority Number

The Certificate of Authority number is more important than the ordinary SEC registration number. It indicates authority to conduct lending business.

A company that says “we are SEC-registered” but cannot show a Certificate of Authority may not be authorized to lend.

Step 4: Check the SEC List of Registered Lending Companies

The SEC periodically provides lists, advisories, and notices concerning lending companies, financing companies, online lending platforms, revoked companies, suspended entities, and unregistered operators.

A borrower should check whether the lender appears in the SEC’s official list of registered lending companies or financing companies.

The key information to match includes:

corporate name;
Certificate of Authority number;
SEC registration number;
app name or platform name, if applicable;
business address.

Step 5: Check for SEC Advisories

Even if a company appears to have registration details, it is important to check whether the SEC has issued advisories, warnings, revocation orders, suspension orders, or cease-and-desist orders against it.

A company may once have been registered but later lost its authority.

Step 6: Verify the App or Website

For online lending platforms, verify whether the app, website, or platform is associated with a registered lending company.

Red flags include:

no corporate name disclosed;
no SEC Certificate of Authority number;
vague “About Us” page;
no physical office address;
no privacy policy;
no loan terms before approval;
app requests excessive phone permissions;
app accesses contacts, photos, messages, or files unnecessarily;
app name is not connected to any SEC-authorized company.

Step 7: Check the Loan Agreement

A legitimate lender should provide a written loan agreement or disclosure statement before or at the time of loan release.

The agreement should identify:

creditor or lender;
borrower;
principal loan amount;
interest rate;
service fees;
processing fees;
penalties;
payment schedule;
total amount payable;
consequences of default;
collection procedure;
data privacy terms;
dispute resolution process;
authorized representatives.

If the lender refuses to provide a written agreement, this is a serious warning sign.

Step 8: Check Interest, Fees, and Deductions

Some abusive lenders advertise a certain loan amount but release a much smaller amount after deducting fees, while still requiring repayment based on the full principal.

For example:

A lender advertises a ₱5,000 loan but releases only ₱3,500 after “processing fees,” “platform fees,” and “service charges,” then demands ₱5,000 plus interest within seven days.

This may indicate predatory or deceptive lending.

A borrower should compute:

amount applied for;
amount approved;
actual amount released;
deductions;
interest;
penalties;
repayment amount;
effective interest rate;
payment deadline.

Step 9: Check Collection Practices

A legitimate lender may collect unpaid debts, but it must do so lawfully. The right to collect does not include the right to harass, shame, threaten, defame, or abuse borrowers.

Illegal or abusive collection practices include:

threatening bodily harm;
threatening arrest without legal basis;
pretending to be police, NBI, court staff, or government officers;
posting the borrower’s face or ID online;
messaging the borrower’s contacts;
telling family, employers, or friends about the debt;
using obscene or insulting language;
creating fake social media posts;
threatening to file fabricated criminal cases;
sending death threats;
repeatedly calling at unreasonable hours;
collecting from persons who are not liable for the loan;
using borrower data beyond the purpose consented to.

Legitimate registration does not excuse abusive collection.

VII. How to Identify Fake or Illegal Lending Companies

A. They Claim “SEC Registered” but Have No Certificate of Authority

Many suspicious lenders show an SEC registration number but not a Certificate of Authority to operate as a lending company. This is misleading.

A corporation may legally exist but still be prohibited from lending to the public.

B. They Use a Different Name from the Registered Company

A lender may use one name in advertisements, another name in the loan agreement, another name in payment instructions, and another name in collection messages. This is a red flag.

The name of the lender, app operator, payment recipient, and collecting entity should be traceable to the authorized company.

C. They Ask for Advance Fees Before Loan Release

Scammers often ask for “processing fees,” “insurance fees,” “notarial fees,” “activation fees,” or “release fees” before releasing the loan.

While legitimate lenders may charge fees, suspicious lenders ask for payment upfront and disappear afterward.

A borrower should be cautious if the lender demands payment before loan release, especially through personal e-wallet accounts.

D. They Use Personal GCash, Maya, or Bank Accounts

If repayment is directed to personal accounts rather than a corporate account, it may indicate informality, tax evasion, fraud, or unauthorized lending.

This is not always conclusive, but it is a major red flag when combined with lack of SEC authority.

E. They Have No Office or Verifiable Address

A legitimate lending company should have a principal office and registered address. Online lenders may operate digitally, but the corporation behind the platform should still have a traceable registered office.

F. They Use Threats of Immediate Arrest

Nonpayment of debt is generally not a crime by itself. A borrower cannot be jailed merely for inability to pay a loan.

However, criminal liability may arise in separate situations, such as fraud, falsification, bouncing checks, identity theft, or other criminal acts. Still, a lender cannot lawfully threaten arrest as a collection tactic without proper legal basis.

Threats like “we will send police to your house today” or “you will be arrested tonight” are common intimidation tactics.

G. They Threaten to Post Borrower Information Online

Posting a borrower’s name, face, ID, address, employer, or debt details online may violate privacy, cybercrime, defamation, and collection rules.

H. They Access Phone Contacts

Online lending apps that access and use phone contacts for collection purposes are especially risky. Even when an app requests consent, the consent may not justify abusive use of personal data.

The borrower’s contacts are not automatically liable for the borrower’s debt.

I. They Do Not Disclose the Total Cost of Credit

A legitimate lender should disclose interest, charges, fees, and penalties clearly. Hidden charges and vague repayment amounts suggest abusive lending.

J. They Pressure Borrowers to Borrow Again

Some lenders encourage borrowers to take new loans to pay old loans, creating a debt cycle. This is common in predatory lending schemes.

VIII. Difference Between Lending Companies, Financing Companies, Banks, Pawnshops, and Informal Lenders

A. Lending Companies

Lending companies are SEC-regulated corporations authorized to grant loans under the Lending Company Regulation Act.

B. Financing Companies

Financing companies are also SEC-regulated but operate under a different legal framework. They may engage in broader credit-related activities.

C. Banks

Banks are regulated by the Bangko Sentral ng Pilipinas. A company cannot call itself a bank or conduct banking business without authority from banking regulators.

D. Pawnshops

Pawnshops are regulated separately and are generally under Bangko Sentral ng Pilipinas supervision. They lend money secured by pledged personal property.

E. Cooperatives

Some credit cooperatives lend to members. Cooperatives are generally regulated by the Cooperative Development Authority, not the SEC as lending companies.

F. Informal Lenders

Informal lenders, including “5-6” lenders, private individuals, and neighborhood moneylenders, may not be registered lending companies. Their arrangements may still create civil obligations, but operating a lending business without the required authority may raise legal issues.

IX. Online Lending Apps in the Philippines

A. Online Lending Is Not Illegal by Itself

Online lending is not automatically illegal. A properly registered and authorized lending company may use a mobile app or website to process loan applications, release funds, and collect payments.

However, online lending has been heavily scrutinized because of abusive practices.

B. The App Must Be Connected to an Authorized Entity

The borrower should identify the company operating the app. The following should be clear:

registered corporate name;
SEC registration number;
Certificate of Authority number;
business address;
contact information;
privacy policy;
app name or platform name;
complaint channel.

C. App Store Availability Does Not Prove Legitimacy

The fact that an app is downloadable from Google Play, Apple App Store, APK sites, or social media ads does not prove it is legitimate.

App store approval is not the same as SEC authorization.

D. Red Flags in Online Lending Apps

Red flags include:

extremely short repayment periods, such as seven days or less;
high deductions before release;
automatic approval without clear terms;
no loan contract;
no SEC authority details;
contact harvesting;
harassment of contacts;
threats through text or chat;
fake legal notices;
use of multiple app names by the same operator;
payment to personal accounts;
excessive penalties;
lack of customer support.

X. What Borrowers Should Look for in the Loan Agreement

A legitimate loan agreement should be understandable and complete. Borrowers should check the following:

A. Identity of the Lender

The agreement should clearly state the full corporate name of the lender.

B. Principal Amount

The principal amount must be clear. If the lender deducts fees before release, the agreement should show both the approved loan and the actual net proceeds.

C. Interest Rate

The interest rate should be stated in understandable terms. Borrowers should check whether the rate is daily, weekly, monthly, or annual.

A “small” daily rate can become very expensive when annualized.

D. Fees and Charges

The agreement should disclose:

processing fee;
service fee;
platform fee;
documentary stamp tax, if applicable;
late payment penalties;
collection charges;
renewal fees;
rollover fees.

E. Payment Schedule

The due date and installment schedule should be clear.

F. Default Provisions

The agreement should explain what happens if the borrower misses payment.

G. Data Privacy Consent

The data privacy section should explain:

what personal information is collected;
why it is collected;
how it will be used;
who may receive it;
how long it will be stored;
how the borrower may request correction or deletion;
whether third-party collectors are involved.

H. Collection Procedure

The agreement should not authorize harassment, public shaming, threats, or unauthorized disclosure of debt information.

I. Dispute Resolution

The agreement should provide a way to raise complaints or disputes.

XI. Interest Rates and Usury in the Philippines

The Philippines historically had a Usury Law, but interest rate ceilings have largely been liberalized. This means parties generally have freedom to stipulate interest.

However, courts may reduce interest rates that are unconscionable, excessive, iniquitous, or contrary to morals and public policy.

Thus, even if a borrower signed a loan agreement, extremely oppressive interest or penalty terms may still be challenged.

Important principles include:

interest must generally be agreed upon in writing;
penalties may be reduced by courts if unconscionable;
hidden charges may be challenged as deceptive or abusive;
lenders must make proper disclosure;
excessive collection practices remain unlawful regardless of the amount owed.

XII. Is Nonpayment of a Loan a Criminal Offense?

As a general rule, nonpayment of a loan is a civil matter, not a criminal offense. The Philippine Constitution prohibits imprisonment for debt.

A borrower cannot be jailed simply because they failed to pay a loan.

However, criminal liability may arise if there are separate criminal acts, such as:

issuing a bouncing check;
using fake identity documents;
falsifying employment information;
fraudulently obtaining money;
using another person’s identity;
committing estafa under circumstances recognized by law.

Even then, the lender must follow lawful processes. It cannot use threats, fake warrants, fake subpoenas, or fake police notices.

XIII. Common Scams Involving Fake Lending Companies

A. Advance-Fee Loan Scam

The borrower is told that a loan has been approved, but must first pay a fee. After payment, the scammer demands more fees or disappears.

B. Fake SEC Certificate Scam

The lender sends a fake SEC certificate, edited image, or document belonging to another company.

Borrowers should not rely on screenshots alone.

C. Identity Theft Lending Scam

The scammer collects IDs, selfies, signatures, and personal information supposedly for loan processing, then uses them for fraud.

D. App-Based Harassment Scheme

The app releases a small amount, demands a much larger repayment, then harasses the borrower and contacts.

E. Loan Renewal Trap

The borrower is encouraged to renew or roll over the loan repeatedly, resulting in escalating fees.

F. Fake Legal Department Scam

The lender sends messages claiming to be from a court, prosecutor, police unit, NBI, barangay, or law office even though no case has been filed.

G. Fake Collection Agency

A third party claims to be authorized to collect but cannot prove assignment, agency, or authority from the lender.

XIV. How to Verify a Collection Agency

Sometimes the lender is legitimate, but the collection agency is abusive or unauthorized.

A borrower should ask:

What is the full name of the collection agency?
What is its authority to collect?
Is there a written endorsement from the lender?
What account is being collected?
What is the exact amount due?
Can they provide a statement of account?
Are they using lawful collection practices?

A collection agency should not:

threaten arrest;
shame the borrower;
contact unrelated persons;
misrepresent itself as a government office;
demand payment to personal accounts without explanation;
refuse to identify the creditor.

XV. How to Check a Lender’s Legitimacy: Detailed Checklist

Before borrowing, verify the following:

Corporate Identity

Full corporate name is disclosed.
SEC registration number is disclosed.
Corporate address is disclosed.
Officers or representatives are identifiable.
Contact information is working.

Authority to Lend

Certificate of Authority to Operate as a Lending Company exists.
Certificate of Authority number is disclosed.
Company appears in SEC records or lists.
Authority has not been revoked or suspended.
App name or brand is linked to the authorized company.

Loan Terms

Written agreement is provided.
Principal amount is clear.
Net proceeds are clear.
Interest rate is clear.
Fees are disclosed.
Due date is clear.
Total repayment amount is clear.
Penalties are reasonable and disclosed.

Data Privacy

Privacy notice is available.
Data collection is limited and relevant.
App permissions are not excessive.
Contacts are not accessed unnecessarily.
Borrower data is not disclosed to third parties without lawful basis.

Collection Practices

No threats.
No public shaming.
No abusive language.
No false government identity.
No harassment of contacts.
No fake legal documents.
No repeated calls at unreasonable hours.

Payment Channels

Corporate payment channels are available.
Official receipts or acknowledgments are issued.
Payment instructions match the lender’s corporate identity.

XVI. Red Flags That a Lending Corporation May Not Be Legitimate

A borrower should be cautious if the lender:

cannot provide its SEC Certificate of Authority;
only shows a business permit or DTI certificate;
uses a personal bank or e-wallet account;
demands upfront fees before releasing a loan;
refuses to provide a written loan agreement;
has no verifiable office address;
uses multiple names inconsistently;
charges excessive hidden fees;
gives very short repayment periods with high penalties;
threatens arrest for nonpayment;
contacts family, friends, employers, or phone contacts;
posts borrower information online;
uses fake legal documents;
claims to be affiliated with the government without proof;
refuses to issue receipts;
pressures the borrower to borrow again;
has many complaints online for harassment;
hides the identity of its operators;
uses foreign phone numbers or anonymous messaging accounts;
sends loan offers through suspicious links.

XVII. What to Do Before Taking a Loan

Before accepting any loan, the borrower should:

verify the corporate name;
verify SEC registration;
verify Certificate of Authority;
read the loan agreement;
compute the real cost of the loan;
check the repayment date;
avoid apps requesting excessive permissions;
avoid lenders demanding upfront fees;
take screenshots of all disclosures;
save copies of all documents;
avoid submitting IDs to suspicious entities;
confirm official payment channels;
check whether the lender has SEC advisories or complaints;
avoid borrowing from lenders that use threats or pressure tactics.

XVIII. What to Do After Discovering the Lender Is Not Legitimate

If a borrower discovers that the lending company may be unregistered, unauthorized, or abusive, the borrower should preserve evidence immediately.

Relevant evidence includes:

screenshots of the app or website;
screenshots of advertisements;
loan agreement;
proof of loan release;
proof of deductions;
payment receipts;
text messages;
chat messages;
call logs;
names and numbers of collectors;
threats;
social media posts;
evidence of contact harassment;
screenshots of app permissions;
copies of IDs submitted;
bank or e-wallet transaction records.

The borrower should avoid deleting messages, uninstalling the app before saving evidence, or engaging emotionally with abusive collectors.

XIX. Where to File Complaints

A. Securities and Exchange Commission

Complaints against lending companies, financing companies, and online lending operators may be filed with the SEC, especially where the complaint involves:

operating without authority;
abusive collection practices;
misrepresentation;
excessive or undisclosed charges;
online lending app abuses;
violation of SEC regulations;
harassment by lending companies.

B. National Privacy Commission

Complaints may be filed with the National Privacy Commission if the lender:

accessed contacts without proper authority;
disclosed debt information to third parties;
posted personal data online;
misused IDs or photos;
processed personal data beyond the declared purpose;
failed to protect borrower data;
used personal data for harassment.

C. Philippine National Police or NBI Cybercrime Units

Law enforcement may be involved if the conduct includes:

online threats;
cyberlibel;
identity theft;
unauthorized access;
fake accounts;
extortion;
online harassment;
fraud.

D. Barangay or Local Authorities

For local disputes or harassment occurring within a community, barangay assistance may be sought. However, barangay proceedings do not replace complaints before the SEC, NPC, or courts.

E. Courts

Borrowers may seek judicial remedies in proper cases, including damages, injunctions, declaration of rights, or defense against collection suits.

XX. Borrower Rights

Borrowers have obligations to pay legitimate debts, but they also have rights.

Important borrower rights include:

the right to know the identity of the lender;
the right to clear loan terms;
the right to receive the actual amount and deductions disclosed;
the right to lawful collection practices;
the right to privacy;
the right not to be harassed;
the right not to be publicly shamed;
the right not to be threatened with unlawful arrest;
the right to dispute incorrect charges;
the right to ask for a statement of account;
the right to receipts or proof of payment;
the right to complain to regulators;
the right to challenge unconscionable interest and penalties;
the right to protection against fraudulent lenders.

XXI. Does an Illegal Lender Mean the Borrower Does Not Have to Pay?

Not necessarily.

If money was actually borrowed and received, the borrower may still have a civil obligation to return the principal or an amount legally due. However, unauthorized lending, excessive charges, illegal interest, hidden fees, or abusive practices may affect enforceability, penalties, interest, and regulatory consequences.

The fact that a lender is unregistered or abusive does not automatically erase all debt. But it may expose the lender to sanctions and may give the borrower defenses or counterclaims.

A practical distinction should be made:

The borrower may still owe money actually received.
The lender may still be liable for operating illegally or collecting unlawfully.
Excessive charges may be challenged.
Harassment may be separately actionable.

XXII. Legitimate Collection vs. Illegal Harassment

A creditor may:

remind the borrower of payment;
send a demand letter;
call during reasonable hours;
assign the account to a legitimate collection agency;
file a civil case;
pursue lawful remedies under the loan agreement.

A creditor may not:

threaten violence;
threaten baseless arrest;
impersonate government officers;
shame the borrower online;
disclose the debt to unrelated persons;
harass contacts;
use obscene or degrading language;
fabricate legal documents;
collect amounts not supported by agreement or law;
use personal data unlawfully.

XXIII. How to Read SEC-Related Claims in Advertisements

Lenders often use phrases that sound official. Borrowers should understand what they mean.

“SEC Registered”

This may mean only that the corporation exists. It does not necessarily mean the company is authorized to lend.

“Registered Business”

This may refer to a business permit, DTI registration, BIR registration, or other registration. It is not enough.

“Government Approved”

This is vague and should be treated with caution unless the lender identifies the specific approval and issuing agency.

“Licensed Lending Company”

This should be supported by a Certificate of Authority from the SEC.

“Partnered with SEC”

This phrase is suspicious. Private lending companies are regulated by the SEC; they are not “partners” of the SEC in the ordinary sense.

“No Need for Documents”

This may indicate a high-risk or predatory lender. Legitimate lenders usually conduct some form of identity verification and credit evaluation.

XXIV. Special Issues for Employees and Workplace Harassment

Some abusive lenders contact the borrower’s employer, HR department, supervisor, or coworkers.

This may be unlawful if the lender discloses the borrower’s debt or personal information without lawful basis.

Debt is generally a private matter. The employer is not liable for an employee’s personal loan unless the employer expressly agreed, guaranteed, or was legally involved.

Borrowers experiencing workplace harassment should document:

who was contacted;
what was said;
when it happened;
what number or account was used;
whether personal information was disclosed;
whether threats were made.

XXV. Special Issues for Family Members and Contacts

A borrower’s spouse, parent, sibling, friend, or phone contact is not automatically liable for the borrower’s debt.

They may become liable only if they signed as:

co-maker;
guarantor;
surety;
co-borrower;
authorized representative under a valid agreement.

Collectors who pressure relatives or contacts to pay may be engaging in abusive collection.

XXVI. Fake Criminal Case Threats

Collectors often send messages claiming:

“estafa case filed”;
“warrant of arrest issued”;
“police dispatch scheduled”;
“NBI tracking activated”;
“court hearing tomorrow”;
“barangay blotter filed”;
“hold departure order issued.”

Borrowers should treat such messages carefully.

A real legal case has formal documents, case numbers, proper notices, and official channels. A collector’s text message is not a warrant, subpoena, or court order.

A warrant of arrest is issued by a judge, not by a lender or collection agent.

XXVII. Protecting Personal Data When Applying for Loans

Borrowers should avoid giving unnecessary personal information to suspicious lenders.

Sensitive documents include:

government IDs;
selfies with ID;
signatures;
payslips;
bank statements;
employment certificates;
contact lists;
home address;
employer information;
social media accounts.

Before submitting data, borrowers should confirm the lender’s authority and privacy practices.

For apps, borrowers should review permissions. A loan app generally should not need unrestricted access to contacts, gallery, messages, microphone, or social media accounts.

XXVIII. What a Legitimate Lending Company Should Disclose

A transparent lender should disclose:

registered corporate name;
SEC registration number;
Certificate of Authority number;
physical office address;
customer service contact details;
complete loan terms;
interest rate;
fees;
penalties;
total repayment amount;
privacy policy;
complaints mechanism;
collection policy;
official payment channels.

Failure to disclose these items does not automatically prove illegality in every case, but it is a strong reason to investigate further.

XXIX. Sample Borrower Verification Message

A borrower may send a message like this before proceeding:

Please provide your full registered corporate name, SEC registration number, Certificate of Authority to Operate as a Lending Company, principal office address, official payment channels, and a copy of the loan agreement showing the principal amount, net proceeds, interest, fees, penalties, and total amount payable.

A legitimate company should not object to providing basic regulatory and loan information.

XXX. Sample Red-Flag Response from a Suspicious Lender

A suspicious lender may respond:

We are registered. Just pay the processing fee first. No need to ask many questions. Your loan is approved but will be cancelled if you do not pay today.

This response suggests risk because it avoids giving regulatory details and pressures the borrower to pay upfront.

XXXI. Corporate Name Confusion and Trade Names

A corporation may use a trade name, brand, or app name. This is not necessarily illegal, but the connection must be clear.

The borrower should ask:

Who owns the app?
What corporation operates the lending platform?
Is the app name registered or disclosed to the SEC?
Does the loan agreement identify the correct creditor?
Are payments made to the authorized corporation?

A lender should not hide behind multiple names.

XXXII. Foreign-Owned or Foreign-Linked Lending Companies

Some lending businesses may have foreign investors, foreign directors, offshore technology providers, or foreign-controlled apps.

Foreign ownership is a complex regulatory matter. The key point for borrowers is that the Philippine operating entity must still comply with Philippine law and SEC requirements.

Borrowers should be cautious when the lender:

has no Philippine office;
uses foreign numbers only;
requires payment to unknown individuals;
has no Philippine corporate identity;
refuses to identify the local operating company.

XXXIII. Consequences for Illegal or Abusive Lenders

A lender that violates Philippine law may face:

SEC fines;
suspension;
revocation of Certificate of Authority;
cease-and-desist orders;
disqualification of officers;
criminal complaints where applicable;
civil liability for damages;
data privacy penalties;
app takedowns;
reputational consequences.

Where personal data misuse is involved, the National Privacy Commission may also impose sanctions.

Where threats, fraud, or cybercrimes are involved, law enforcement may investigate.

XXXIV. Practical Example

Assume a borrower sees an advertisement for “QuickCash Peso Loan App.”

The app claims:

“SEC registered”
“Instant ₱10,000 loan”
“No documents needed”
“Pay only after approval”
“Download APK now”

The borrower should verify:

What is the corporate name behind QuickCash Peso Loan App?
Is that corporation registered with the SEC?
Does it have a Certificate of Authority to Operate as a Lending Company?
Is the app name listed or connected to that corporation?
Are the loan terms disclosed before approval?
Does the app request access to contacts?
Are fees deducted from the loan proceeds?
Are payments made to a corporate account?
Are there SEC advisories against the app or company?

If the answers are unclear, the borrower should not proceed.

XXXV. Practical Example of Misleading Registration

A company called “XYZ Trading Corporation” shows an SEC Certificate of Incorporation and says it is “SEC registered.” It offers loans through Facebook Messenger and asks borrowers to pay a ₱1,500 processing fee through a personal GCash account.

Problems:

SEC incorporation does not equal lending authority.
The corporate purpose may not include lending.
No Certificate of Authority is shown.
The payment channel is personal.
Upfront fee demand is suspicious.
Facebook-only lending with no loan agreement is risky.

This should be treated as a potential scam or unauthorized lending operation.

XXXVI. Practical Example of Abusive Collection

A borrower receives ₱2,800 after applying for a ₱5,000 loan. The lender demands ₱6,000 after seven days. When the borrower cannot pay, collectors message the borrower’s contacts and call the borrower a scammer.

Possible issues:

undisclosed or excessive deductions;
unclear loan terms;
excessive interest or fees;
unlawful use of contacts;
harassment;
possible data privacy violations;
abusive collection practices.

The borrower should preserve evidence and consider complaints with the SEC and National Privacy Commission.

XXXVII. Common Misconceptions

Misconception 1: “They have an SEC certificate, so they are legal.”

Not always. The relevant question is whether they have SEC authority to lend.

Misconception 2: “They have a mayor’s permit, so they are legal.”

A mayor’s permit does not authorize lending activity under SEC rules.

Misconception 3: “They are on Google Play, so they are legitimate.”

App store availability does not prove SEC authority.

Misconception 4: “They can arrest me if I do not pay.”

Nonpayment of debt alone is generally not a criminal offense.

Misconception 5: “My contacts must pay because they were listed as references.”

A reference is not automatically a guarantor, co-maker, or surety.

Misconception 6: “If the lender is illegal, I can ignore everything.”

The borrower may still have obligations for money actually received, but the lender may face sanctions and unlawful charges may be challenged.

XXXVIII. Best Practices for Borrowers

Borrow only from verified lenders.
Do not rely on advertisements.
Check both SEC registration and Certificate of Authority.
Avoid lenders demanding upfront payment.
Read the full loan agreement.
Compute total repayment before accepting.
Avoid apps that access contacts.
Save all transaction records.
Pay only through official channels.
Demand receipts.
Report harassment.
Do not panic over fake arrest threats.
Protect IDs and personal data.
Avoid loan rollovers that create debt traps.
Seek legal assistance for serious harassment or litigation.

XXXIX. Best Practices for Legitimate Lending Companies

A lawful lending company should:

maintain SEC authority;
disclose its corporate identity clearly;
use transparent loan agreements;
disclose all charges;
avoid misleading advertisements;
protect borrower data;
use lawful collection methods;
train collection agents;
avoid contacting unrelated third parties;
issue receipts;
maintain complaint channels;
comply with SEC and data privacy rules;
avoid unfair or abusive loan structures;
keep app permissions limited and justified;
monitor outsourced collectors.

XL. Legal Effect of Revocation or Suspension

If the SEC suspends or revokes a lending company’s authority, the company may no longer lawfully engage in lending business.

Borrowers should distinguish between:

existing loan obligations;
the company’s authority to continue lending;
the legality of charges and collection methods;
remedies available to regulators and borrowers.

A revocation or suspension may support a complaint, but borrowers should still obtain advice before deciding not to pay any amount, especially if a real loan was received.

XLI. Documentation Checklist for Complaints

A borrower preparing a complaint should organize evidence as follows:

Identity of Lender

app name;
corporate name;
website;
Facebook page;
phone numbers;
email addresses;
office address;
SEC details shown by lender.

Loan Details

date of application;
amount applied for;
amount approved;
amount released;
deductions;
repayment amount;
due date;
interest and penalties;
loan agreement.

Payment Records

receipts;
bank transfers;
e-wallet payments;
reference numbers;
payment instructions;
account names and numbers.

Harassment Evidence

screenshots;
call logs;
recordings where legally obtained;
messages to contacts;
social media posts;
threats;
fake legal notices;
names of collectors.

Privacy Violations

app permissions;
contact access;
disclosure to employer or family;
publication of ID or photo;
unauthorized use of personal data.

XLII. Important Legal Principles

A. Corporate Existence Is Separate from Regulatory Authority

A corporation may exist but lack authority to lend.

B. Business Permits Do Not Replace SEC Authority

Local permits and tax registrations are not substitutes for a Certificate of Authority.

C. Debt Collection Must Be Lawful

A valid debt does not justify abusive collection.

D. Privacy Rights Continue Despite Debt

Borrowers do not lose privacy rights because they owe money.

E. Nonpayment of Debt Alone Is Not Imprisonable

Civil debt does not automatically result in criminal liability.

F. Courts May Review Excessive Charges

Unconscionable interest, penalties, and charges may be reduced or invalidated.

G. Written Terms Matter

Borrowers should preserve written agreements and disclosures.

XLIII. Summary: The Core Test of Legitimacy

To determine whether a lending corporation is legitimate in the Philippines, ask these core questions:

Does the corporation legally exist?
Does it have SEC authority to operate as a lending company or financing company?
Does the name used in advertisements match the authorized corporation?
Are the loan terms clear, written, and complete?
Are the interest, fees, and penalties disclosed?
Are payment channels official and traceable?
Does the lender protect borrower data?
Does it collect debts lawfully?
Has the SEC issued any warning, suspension, or revocation involving the lender?
Does the lender avoid threats, harassment, and misrepresentation?

A legitimate lending corporation should pass all of these checks.

XLIV. Conclusion

Checking whether a lending corporation is legitimate in the Philippines requires more than asking whether it is “registered.” The borrower must verify both corporate registration and regulatory authority to lend. The most important document is not merely the SEC Certificate of Incorporation, but the SEC Certificate of Authority to Operate as a Lending Company or the appropriate authority for a financing company.

Borrowers should be especially careful with online lending apps, social media lenders, advance-fee loan offers, and companies that use threats or access personal contacts. A legitimate lender is transparent about its corporate identity, authority, loan terms, fees, privacy practices, and collection procedures.

The safest rule is simple: no clear SEC authority, no clear loan agreement, no clear cost disclosure, and no lawful collection policy means the borrower should treat the lender as high-risk.