Before borrowing from a lending company, loan app, Facebook lender, or “financing agent” in the Philippines, check more than just whether the name appears in the SEC database. A legitimate lending corporation should generally have SEC corporate registration, a Certificate of Authority to operate as a lending company, and, if it lends through an app or website, a recorded online lending platform with the Securities and Exchange Commission. This article explains how to verify those details, what documents to look for, what red flags matter, and what to do if the lender is not properly registered.

Why SEC Registration Alone Is Not Enough

Many borrowers see the words “SEC registered” and assume the lender is automatically allowed to offer loans. That is a common mistake.

In the Philippines, a corporation may be registered with the SEC for corporate existence, but that does not automatically mean it is licensed to lend money to the public.

For lending companies, the more important document is the Certificate of Authority, often shortened to CA. This is the SEC authority that allows the corporation to operate as a lending company.

A proper verification should answer three separate questions:

Question	What it means	Why it matters
Is the corporation registered with the SEC?	The company legally exists as a corporation.	This is only the first layer.
Does it have a Certificate of Authority to operate as a lending company?	The SEC has authorized it to engage in lending.	This is the key license for lending companies.
If it uses an app, website, or online platform, is that platform recorded with the SEC?	The app or website has been reported as the company’s online lending platform.	Many scam or abusive lenders hide behind app names different from the corporate name.

A lender may show a business permit, BIR Certificate of Registration, DTI business name, barangay permit, app store listing, or a mayor’s permit. Those are not substitutes for SEC authority to operate as a lending company.

Legal Basis: What Philippine Law Requires

The main law is Republic Act No. 9474 (2007), known as the Lending Company Regulation Act of 2007.

Under RA 9474, a lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. The law excludes banks, financing companies, pawnshops, cooperatives, insurance companies, and other credit institutions already regulated by other laws.

The most important rule for borrowers is simple: no lending company may conduct business unless it has been granted authority to operate by the SEC.

RA 9474 also provides that a lending company must generally be organized as a corporation, and at least a majority of its voting capital stock must be owned by Filipino citizens. Foreign ownership is allowed only within the limits stated in the law and subject to reciprocity.

For online and consumer lending, other important rules include:

Republic Act No. 3765 (1963), or the Truth in Lending Act, which requires creditors to disclose the true cost of credit, including finance charges and the annualized rate.
Republic Act No. 11765 (2022), or the Financial Products and Services Consumer Protection Act, which protects financial consumers’ rights to fair treatment, disclosure, data privacy, and timely complaint handling.
Republic Act No. 10173 (2012), or the Data Privacy Act, especially when online lending apps collect IDs, selfies, contacts, employment data, phone metadata, or other personal information.
SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by financing and lending companies.
SEC Memorandum Circular No. 19, Series of 2019, which requires financing and lending companies to disclose their corporate name, SEC registration number, Certificate of Authority number, and borrower advisory in advertisements and online lending platforms.
Revised Penal Code provisions on threats and coercion, such as Articles 282 to 287, may become relevant when collection conduct involves threats, intimidation, public shaming, or pressure tactics beyond lawful collection.

The Civil Code also matters. Article 1159 provides that obligations arising from contracts have the force of law between the parties and must be complied with in good faith. Article 1306 recognizes freedom of contract, but only if the terms are not contrary to law, morals, good customs, public order, or public policy. Articles 19, 20, and 21 may apply when a person abuses a right, violates the law, or causes damage in a manner contrary to morals or good customs.

Step-by-Step: How to Check If a Lending Corporation Is Registered in the Philippines

1. Get the Exact Corporate Name

Do not rely only on the app name, Facebook page name, or marketing name.

Many online lenders use brand names that are different from their registered corporate names. For example, the app may be called “Quick Cash PH,” but the actual company may be “ABC Financing Corporation” or “XYZ Lending Corporation.”

Look for the corporate name in:

The loan agreement
Disclosure statement
Promissory note
Privacy notice
App store developer profile
Website footer
SMS or email notices
Collection letters
Payment instructions
SEC disclosure shown in the advertisement or app

A legitimate lending company should not hide its corporate identity.

2. Check the SEC’s Official Verification Tools

Use official SEC channels, not screenshots sent by agents.

The SEC provides public-facing online services through its official websites, including Check with SEC, the SEC Check app, and the SEC’s online services linked through the SEC iMessage portal.

When searching, try different versions of the name:

Exact corporate name
App name or trade name
SEC registration number
Certificate of Authority number
Old corporate name, if the lender says it recently changed names

Be careful with spelling. SEC records may use abbreviations such as “Corp.,” “Corporation,” “Inc.,” “Lending,” “Financing,” or “Credit.”

3. Look for the Certificate of Authority

If the company appears in a general SEC company search, that still does not finish the verification.

Look for confirmation that the company has a Certificate of Authority to Operate as a Lending Company.

The CA usually has a separate number from the SEC corporate registration number. In practice, the lender should be able to provide both:

SEC Registration Number — proof of corporate registration
CA Number — proof of authority to operate as a lending company

If the lender refuses to provide the CA number, gives only a DTI or BIR number, or says “SEC registration is enough,” treat that as a serious warning sign.

4. Check the SEC List of Registered Lending Companies

The SEC maintains lists of lending and financing companies. The official SEC website may update page paths over time, so if a direct page does not load, go to the SEC website and search for:

“List of Lending Companies”
“List of Financing Companies”
“List of Recorded Online Lending Platforms”
“Lending and Financing Companies”

For a lending corporation, check whether the name appears in the list of lending companies with Certificate of Authority.

If the business is a financing company rather than a lending company, check the financing company list instead. Financing companies are covered by a different law, mainly the Financing Company Act, but they are also supervised by the SEC for many consumer lending concerns.

5. If It Is an App or Website, Check the Recorded Online Lending Platform

For online lending, do a second check.

A company may be registered and licensed, but the specific app or website may not be recorded as its online lending platform. This matters because many abusive or fake lending apps use the name or registration details of a legitimate company without authority.

Check whether the app, website, or platform name appears in the SEC’s list of recorded online lending platforms.

Compare all of these:

Item to compare	What to check
App name	Does it match the SEC-recorded platform name?
Corporate operator	Is the app operated by the same licensed company?
Website URL	Is the URL the same as the disclosed or recorded site?
App developer	Does the app store developer match the company or disclosed operator?
Payment account	Is payment made to the company, not to a random individual?
Privacy policy	Does it identify the licensed company clearly?

If the app name is not connected to the licensed company, do not assume it is legitimate.

6. Request SEC Records If the Online Check Is Inconclusive

For higher-risk transactions, large loans, business loans, or disputes, a quick online search may not be enough.

You can request company documents through the SEC Express System, which allows online requests for documents such as Articles of Incorporation, By-Laws, General Information Sheet, Audited Financial Statements, and other company records.

Typical SEC Express delivery information states that documents may be delivered within about 3 to 5 working days from release for Metro Manila and up to around 7 working days for provincial delivery, subject to SEC processing and courier timelines.

Useful documents include:

Articles of Incorporation
Latest General Information Sheet
Amended Articles, if there was a name change
Audited Financial Statements
Secretary’s Certificate or board documents, if relevant
Certification or status confirmation from the SEC, where available

For lending authority specifically, the more direct route is to ask the SEC’s Financing and Lending Companies Department through the SEC’s ticketing system.

7. File a Verification Request Through SEC iMessage

If you need written confirmation, use SEC iMessage, the SEC’s web-based ticketing system for public inquiries, complaints, incidents, and requests.

Prepare these details before filing:

Full corporate name of the lender
App name, website, or Facebook page
SEC registration number, if available
Certificate of Authority number, if claimed
Address and contact details shown by the lender
Screenshots of ads, app pages, loan offer, and payment instructions
Copy of loan agreement or disclosure statement, if you already borrowed
Brief description of what you want verified

Choose the service or department related to financing and lending companies. In practice, verification requests often need to go to the SEC unit handling lending and financing companies, especially if the issue concerns the status of a Certificate of Authority.

What a Legitimate Lending Company Should Be Able to Show

A properly documented lending corporation should be able to provide clear, consistent information.

Document or detail	Why it matters
SEC corporate name	Identifies the legal entity you are dealing with.
SEC Registration Number	Confirms corporate registration.
Certificate of Authority Number	Confirms authority to operate as a lending company.
Registered office address	Helps verify where the company is officially based.
Business name or app name	Should match or be traceable to the licensed company.
Disclosure statement	Required for transparency on interest, fees, penalties, and total loan cost.
Loan agreement or promissory note	Shows the actual obligation.
Privacy notice	Required especially for online lending and personal data processing.
Consumer assistance contact	Required under financial consumer protection rules.

If the lender says everything is “verbal,” refuses to send documents, or pressures you to sign before you can review terms, that is not normal for a regulated lender.

Common Red Flags of Unregistered or Suspicious Lenders

Be extra careful if you see any of these:

The lender claims to be “SEC registered” but cannot provide a CA number.
The only proof is a screenshot, not an official SEC result.
The loan is offered through a personal Facebook, Telegram, Viber, WhatsApp, or TikTok account.
The lender asks for an “advance processing fee,” “unlocking fee,” “insurance fee,” or “activation fee” before releasing the loan.
Payment is sent to an individual GCash, Maya, or bank account unrelated to the company.
The lender uses the name of a known company, but the email address, app, or payment account does not match.
The app demands full access to contacts, photos, files, SMS, or call logs without a clear legitimate purpose.
The agent threatens arrest, barangay blotter, immigration hold, deportation, or public posting for unpaid debt.
The lender refuses to issue an official statement of account.
The interest and fees are hidden until after approval.
The lender tells you not to check with the SEC.

A legitimate lender may collect unpaid debts, but it cannot use threats, public shaming, deceptive practices, or abusive contact methods.

What If the Company Is Registered But the App Is Not?

This is common in online lending.

A company may have SEC registration and even a Certificate of Authority, but its app or website may not be properly recorded or may not be the same platform reported to the SEC.

That situation can happen when:

A legitimate company launches a new app without proper reporting.
A third party uses a licensed company’s name without authority.
A lending app changes names frequently to avoid complaints.
A collection group misrepresents itself as connected to a registered lender.
A fake app copies the details of a real SEC-registered corporation.

Do not rely on the company name alone. Match the app, website, developer name, privacy policy, loan agreement, and payment channel to the licensed entity.

What If You Already Borrowed From an Unregistered Lender?

Do not panic, but do not ignore the situation.

An unregistered lender’s lack of authority does not automatically mean every peso borrowed disappears. Philippine law still recognizes that money received under a transaction may create obligations, depending on the facts. However, operating as a lending company without valid SEC authority is a serious regulatory issue, and abusive terms or collection practices may be challenged.

Practical steps:

Save evidence immediately. Keep screenshots of the app, loan offer, payment records, messages, threats, caller IDs, collection posts, and contacts used.
Ask for a written statement of account. It should show principal, interest, penalties, payments made, and remaining balance.
Avoid paying to random personal accounts. Pay only through traceable channels clearly connected to the lender.
Do not give more personal data than necessary. Avoid sending extra IDs, selfies, contact lists, or passwords.
File a complaint with the SEC if the lender is unlicensed or abusive.
For data privacy abuse, complain to the National Privacy Commission.
For threats, extortion, hacking, identity misuse, or public shaming, preserve evidence for the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor’s office.

Debt is usually a civil matter. Nonpayment of an ordinary loan does not automatically mean jail. But separate acts, such as issuing bouncing checks, using fake documents, identity theft, threats, or fraud, can create other legal consequences depending on the facts.

Debt Collection Rules You Should Know

SEC Memorandum Circular No. 18, Series of 2019, prohibits unfair debt collection practices by financing and lending companies and their third-party service providers.

Examples of prohibited or problematic conduct include:

Threats of violence or harm to person, reputation, or property
Threats to take action that cannot legally be taken
Obscene, insulting, or profane language meant to abuse the borrower
Disclosure or publication of borrower names and personal information for allegedly refusing to pay
False representations or deceptive means to collect
Contacting borrowers at unreasonable or inconvenient times, generally before 6:00 a.m. or after 10:00 p.m., subject to stated exceptions
Contacting people in the borrower’s contact list other than those named as guarantors or co-makers

The 2026 public advisory of the DICT, NPC, and SEC on online lending platforms also emphasized that unnecessary app permissions, excessive processing of personal data, and contacting people in a borrower’s contact list other than guarantors are prohibited.

How Foreigners and OFWs Should Check Lending Companies

Foreigners and Filipinos abroad often deal with Philippine lenders for family emergencies, business financing, condo payments, online loans, or vehicle purchases.

The verification process is the same, but a few extra precautions help:

Ask for the full Philippine corporate name, not just the brand name.
Check whether the lender’s address and contact numbers are in the Philippines.
Make sure the loan contract identifies Philippine governing law and the legal entity lending the money.
Avoid sending passports, alien certificates, visas, or foreign IDs unless the lender explains the lawful purpose and safeguards.
If documents are signed abroad, the lender may require notarization or apostille depending on the transaction.
For large transactions, request official SEC documents and not merely screenshots.
Be cautious if a “loan agent” says the loan can be approved only through a personal remittance to an individual.

For foreigners who want to own or invest in a lending company, RA 9474 has citizenship and reciprocity requirements. Borrowing from a Philippine lender is different from owning a lending company.

Where to Check or Report

Purpose	Office or platform	Notes
Quick company verification	Check with SEC or SEC Check app	Useful for preliminary company search.
Check lending or financing company lists	SEC website	Search for lending companies, financing companies, and recorded online lending platforms.
Request company documents	SEC Express System	Useful for Articles, GIS, AFS, and other company records.
Ask SEC to verify CA status or file complaint	SEC iMessage	Use for public inquiries, requests, and complaints.
Data privacy issues	National Privacy Commission	Relevant for contact list abuse, excessive app permissions, doxxing, or unlawful processing.
Cyber threats, scams, identity misuse	NBI Cybercrime Division or PNP Anti-Cybercrime Group	Preserve screenshots, links, numbers, and payment proof.

Documents and Evidence to Keep Before You Complain

A complaint is stronger when it is organized. Save the evidence before the app, page, or account disappears.

Keep copies of:

Loan agreement
Disclosure statement
Promissory note
Amortization schedule
Screenshots of app permissions
Screenshots of the app store page
Privacy policy
SEC registration or CA number claimed by the lender
Chat messages and SMS
Call logs
Collection letters
Proof of payments
GCash, Maya, bank, or remittance receipts
Names and numbers of collectors
Screenshots of threats or public posts
List of people contacted by the lender

For screenshots, include the date, time, sender name, phone number, URL, or app page where possible.

Frequently Asked Questions

How do I know if a lending company is legit in the Philippines?

Check whether it has both SEC corporate registration and a Certificate of Authority to operate as a lending company. If it lends through an app or website, also check whether the online lending platform is recorded with the SEC. Do not rely only on screenshots, business permits, or the words “SEC registered.”

Is SEC registration the same as a lending license?

No. SEC registration means the corporation exists. A lending company also needs a Certificate of Authority from the SEC before it can legally operate as a lending company.

Can a sole proprietor or individual legally operate a lending company?

Under RA 9474, a lending company must be established as a corporation. A person who casually lends personal money is different from someone operating a lending business to the public. A business regularly offering loans to the public as a lending company must comply with SEC requirements.

What if the app is not on the SEC list of recorded online lending platforms?

Treat it as a warning sign. The corporate operator may be registered, but the specific app may be unrecorded, unauthorized, newly launched, or possibly using another company’s identity. Verify directly with the SEC before borrowing or paying.

Can a registered lender charge high interest?

Philippine law generally allows parties to agree on interest, but the charges must be properly disclosed and should not be unconscionable, abusive, or contrary to law. The Truth in Lending Act requires disclosure of finance charges and the annualized rate. Courts have also reduced unconscionable interest in cases such as Medel v. Court of Appeals. Under RA 11765, financial regulators may also act on unreasonable interests, fees, or charges within their jurisdiction.

Can I be jailed for not paying an online loan?

Ordinary nonpayment of debt is generally civil in nature. However, separate acts such as fraud, falsification, identity theft, threats, or issuing bouncing checks may create criminal issues depending on the facts. Collectors who threaten automatic arrest or imprisonment for a simple unpaid online loan are often misleading borrowers.

Is it legal for a loan app to contact my phone contacts?

Not in the broad, abusive way many borrowers experience. Current privacy and SEC rules prohibit unnecessary or excessive processing of personal data. For debt collection, contacting people from a borrower’s contact list other than actual guarantors is prohibited. Character references are not automatically guarantors.

What should I do if a lender uses my photos or posts my debt online?

Save screenshots immediately, including URLs, account names, dates, and messages. This may involve unfair debt collection, data privacy violations, cyber harassment, or other legal issues depending on the facts. Complaints may be filed with the SEC for lending-related violations, the NPC for data privacy issues, and law enforcement for threats, scams, or cyber-related abuse.

Can a foreigner borrow from a Philippine lending company?

Yes, a foreigner may borrow if the lender’s policies allow it and the borrower can provide required identification and documents. The foreigner should still verify the lender’s SEC registration, Certificate of Authority, privacy policy, and loan terms. For documents signed abroad, notarization or apostille may be required depending on the transaction.

What is the safest proof that a lender is registered?

The safest proof is a match between official SEC records and the lender’s own documents: corporate name, SEC registration number, Certificate of Authority number, registered address, app or website name, and disclosure statement. If those details do not match, verify directly with the SEC.

Key Takeaways

SEC registration alone is not enough. A lending company must also have a valid Certificate of Authority from the SEC.
For online loans, check both the company and the specific app or website.
A DTI name, BIR certificate, mayor’s permit, barangay permit, or app store listing does not replace SEC authority to lend.
Legitimate lenders should clearly disclose their corporate name, SEC registration number, CA number, loan charges, and consumer assistance contact.
Unfair collection practices, public shaming, threats, and contact list harassment are not allowed.
If the online search is unclear, use SEC iMessage or request SEC records before borrowing, paying, or giving more personal data.
Keep screenshots, contracts, payment proof, and messages because verification and complaints depend heavily on evidence.