Before you borrow from a lending app, financing company, or “fast cash” lender, check two things: whether the business is legally authorized by the Securities and Exchange Commission (SEC), and whether the loan terms and collection practices comply with Philippine rules. Many scams look professional, use real-looking registration numbers, or claim to be “SEC registered,” but that is not always the same as being allowed to operate as a lending or financing company in the Philippines.

This guide explains how to verify a lending or financing company, what documents and numbers to look for, which government offices are involved, what red flags to avoid, and what to do if you already dealt with a suspicious lender.

Why “SEC registered” is not enough

A common trick is for a lender to say, “We are SEC registered.” That may sound reassuring, but it is incomplete.

In the Philippines, many corporations can be registered with the SEC for different lawful purposes. But a company that is in the business of lending money to the public generally needs more than ordinary corporate registration. It must also have the proper authority to operate as a lending company or financing company.

For lending companies, the governing law is Republic Act No. 9474, or the Lending Company Regulation Act of 2007. The law defines a lending company as a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons, excluding banks, financing companies, pawnshops, cooperatives, insurance companies, and other institutions governed by special laws. (Supreme Court E-Library)

For financing companies, the governing law is Republic Act No. 8556, or the Financing Company Act of 1998. Financing companies are corporations primarily organized to extend credit facilities through direct lending, factoring or discounting of receivables, financial leasing, and similar credit transactions. (Lawphil)

The practical point is simple: do not stop at “SEC registered.” Ask whether the company has a valid SEC Certificate of Authority or equivalent SEC authority to operate as a lending or financing company.

Lending company, financing company, and online lending app: what is the difference?

Many borrowers use these terms interchangeably, but they are not exactly the same.

Term	What it usually means	What to check
Lending company	A stock corporation that grants loans using its own capital or limited sourced funds	SEC registration and SEC Certificate of Authority under RA 9474
Financing company	A corporation that extends credit facilities, including direct loans, factoring, receivables financing, and financial leasing	SEC authority under RA 8556
Online lending platform or lending app	A website, mobile app, or fintech system used to offer loans	The legal company behind the app, its SEC authority, and whether the platform name is properly reported or recorded with the SEC
Private individual lender	A person lending money privately, often to friends, relatives, or acquaintances	Written loan terms, interest agreement, identity, receipts, and whether the person is actually operating a public lending business
Bank, cooperative, pawnshop, or microfinance NGO	Other credit providers governed by different laws or regulators	Check the proper regulator, such as BSP, CDA, or other agency, depending on the entity

A mobile app is usually only the front end. The real legal question is: which corporation owns or operates the app, and is that corporation authorized by the SEC to lend or finance?

Legal basis: Philippine laws that protect borrowers

Republic Act No. 9474: Lending Company Regulation Act

RA 9474 gives the SEC authority to regulate lending companies, require reports, conduct examinations, impose sanctions, and suspend or revoke authority when warranted. (Supreme Court E-Library)

Under the implementing rules, a lending company must generally be organized as a stock corporation, and the SEC issues a Certificate of Authority allowing it to engage in the lending business. The rules also prohibit a lending company from operating branches, extension offices, or satellite offices without prior SEC approval. (Lawphil)

This matters because a lender using only a business name, social media page, or personal e-wallet account may not be a properly authorized lending company.

Republic Act No. 8556: Financing Company Act

RA 8556 regulates financing companies and states that no person or corporation may hold itself out as a financing company unless authorized under the Act. It also provides penalties for engaging in financing company business without SEC authority. (Lawphil)

Financing companies are often involved in vehicle financing, appliance financing, business receivables, salary loans, consumer credit, equipment leasing, and similar transactions.

Republic Act No. 3765: Truth in Lending Act

The Truth in Lending Act requires disclosure of the true cost of credit so borrowers can understand finance charges, interest, and other costs before agreeing to a loan. (Lawphil)

In practical terms, a legitimate lender should be able to show you a clear loan disclosure or loan agreement stating:

the principal amount;
interest rate;
service fee, processing fee, notarial fee, or other charges;
effective cost of the loan;
due date and payment schedule;
late payment charges;
consequences of default; and
the lender’s legal name and contact details.

If the app says “low interest” but hides deductions, fees, or penalties until after approval, treat that as a serious warning sign.

Republic Act No. 11765: Financial Products and Services Consumer Protection Act

RA 11765 strengthened consumer protection in financial products and services. It recognizes key consumer rights such as fair treatment, disclosure and transparency, protection of consumer assets against fraud and misuse, data privacy, and timely handling of complaints. (Supreme Court E-Library)

The law also gives financial regulators, including the SEC, authority to act against abusive practices, impose sanctions, order consumer redress, and address unreasonable fees, charges, or collection practices within their jurisdiction. (Supreme Court E-Library)

SEC rules on unfair debt collection

The SEC has issued rules against unfair debt collection practices by financing and lending companies. SEC Memorandum Circular No. 18, Series of 2019 covers abusive collection behavior, including threats, use of profane or insulting language, false representations, public shaming, and improper contact with persons who are not guarantors or co-makers. (appointment.sec.gov.ph)

The same circular provides penalties, including fines and, for repeated violations, possible suspension or revocation of the company’s Certificate of Authority.

Data Privacy Act and online lending apps

Online lending apps raise privacy risks because some apps ask for access to contacts, photos, messages, location, camera, or social media accounts. The Data Privacy Act of 2012, or RA 10173, requires personal data processing to follow principles such as transparency, legitimate purpose, and proportionality. (National Privacy Commission)

The National Privacy Commission has specifically warned against excessive app permissions and the use of contact lists for harassment or public shaming. It has also emphasized that character references are not automatically guarantors. (National Privacy Commission)

In 2026, the DICT, NPC, and SEC issued a joint advisory addressing harassment, intimidation, public shaming, and unlawful use of personal data by online lending platforms. The advisory reminds lending and financing companies that unnecessary access to contacts and improper contact with non-guarantors can violate existing rules.

Step-by-step guide: how to check if a lending or financing company is legitimate

1. Get the exact legal name of the lender

Before searching, identify the lender correctly. Many apps use a brand name that is different from the registered corporate name.

Collect and screenshot the following:

app name or website name;
full corporate name;
SEC registration number;
SEC Certificate of Authority number;
business address;
phone number and email address;
privacy policy;
terms and conditions;
name of the payment account;
screenshots of ads, messages, and loan offers.

Be careful with names that are nearly identical to legitimate companies. Scammers may copy the name, logo, or registration details of a real company.

2. Check whether the company is registered with the SEC

Use the SEC’s official online services to search for company information. The SEC’s public services include tools such as eSEARCH and Check with SEC, and the SEC iMessage platform also provides channels for inquiries and complaints. (iMessage)

When searching, use different versions of the name:

exact company name;
app or trade name;
shortened name;
name appearing in the loan contract;
name appearing in the payment instructions.

If nothing appears, do not assume immediately that the lender is illegal, because search results may depend on spelling or database availability. But if the lender refuses to give its legal corporate name, that is already a major red flag.

3. Verify the Certificate of Authority, not just the SEC registration number

A corporation may be registered with the SEC but still not authorized to operate as a lending company or financing company.

Ask for the company’s:

Certificate of Incorporation;
Certificate of Authority to Operate as a Lending Company or Financing Company;
latest business address;
branch authority, if you are dealing with a branch;
online platform or app details, if the loan is offered through an app.

Under RA 9474’s implementing rules, a Certificate of Authority is the SEC-issued certificate allowing a lending company to engage in the lending business. (Lawphil)

A lender that shows only an SEC registration number but cannot show lending or financing authority should not be treated as fully verified.

4. Check if the app or website matches the authorized company

For online loans, make sure the app name is connected to the authorized corporation.

Look for consistency among:

app store listing;
website footer;
privacy policy;
loan agreement;
disclosure statement;
SMS or email notices;
payment instructions;
SEC-registered corporate name.

A mismatch is dangerous. For example, if the app shows “ABC Cash,” the loan agreement names “XYZ Financing Corporation,” but payment is made to a personal GCash account under a different name, you should pause and verify directly with the SEC.

5. Check SEC advisories, suspension orders, or revocation lists

Some lenders were once registered but later suspended, fined, revoked, or ordered to stop certain activities. This is why checking only an old certificate or screenshot is not enough.

Search for:

SEC advisories on unauthorized lending companies;
cease and desist orders;
revoked Certificates of Authority;
suspended lending or financing companies;
advisories on online lending apps;
SEC enforcement actions involving the company name.

Use the exact corporate name and the app name. If the lender recently changed names, search both the old and new names.

6. Request official SEC documents when the risk is high

If the amount is large, or if you are dealing with a business loan, vehicle financing, real estate-related financing, or a lender you do not know, consider getting official SEC documents.

Through SEC Express, the public may request documents such as Articles of Incorporation, By-Laws, General Information Sheets, and Audited Financial Statements. The SEC Express system allows searching by registered company name or SEC registration number, and delivery timelines are generally listed as 3 to 5 working days from SEC release within Metro Manila and up to 7 working days for provincial addresses. (secexpress.ph)

These documents can help you confirm:

whether the company exists;
its registered corporate purpose;
its directors and officers;
its registered office;
whether the company details match what the lender gave you.

7. Read the loan disclosure before accepting

Before tapping “Accept,” signing a document, or receiving loan proceeds, check the true cost of the loan.

Look for:

Item to check	Why it matters
Principal amount	This is the amount you are borrowing before deductions
Net proceeds	This is what you actually receive after fees
Interest rate	This must be clear and understandable
Processing or service fee	Some lenders deduct large fees upfront
Effective interest rate	This shows the real cost better than the headline rate
Due date	Many complaints involve very short repayment periods
Late fee or penalty	Check whether the penalty is reasonable and disclosed
Collection policy	Watch for abusive or vague collection terms
Data permissions	Make sure the app does not demand unnecessary access

For certain small, short-term loans covered by BSP Circular No. 1133, Series of 2021, the circular sets ceilings for unsecured general-purpose loans offered by lending companies, financing companies, and online lending platforms where the loan does not exceed ₱10,000 and the tenor does not exceed four months. The circular states caps such as 6% nominal interest per month, 15% effective interest rate per month, 5% monthly late payment penalty on the outstanding scheduled amount due, and a total cost cap of 100% of the total amount borrowed.

Not every loan falls under that circular, but all loan costs should still be properly disclosed and should not be abusive, deceptive, or unconscionable.

8. Check payment channels before sending money

Legitimate lenders usually provide official payment channels. Be careful if the lender asks you to pay:

to a personal GCash, Maya, or bank account;
to an unrelated individual;
through cryptocurrency;
through remittance with no official receipt;
before loan release as a “processing,” “insurance,” “unlocking,” or “verification” fee.

An upfront fee scam often works like this: the borrower is told the loan is approved, then asked to pay a release fee, tax, insurance fee, or notarial fee. After payment, the supposed lender asks for another fee or disappears.

A legitimate lender may charge fees, but those fees should be disclosed in the loan documents and deducted or collected through official channels, not through suspicious personal accounts.

Red flags that a lender may be illegal or unsafe

Be extra cautious if you see any of these warning signs:

The lender says only “SEC registered” but cannot show a Certificate of Authority.
The app or website has no full corporate name.
The lender uses only Facebook, Telegram, WhatsApp, Viber, or text messages.
The company name on the app is different from the loan agreement.
The payment account belongs to a private person.
You are asked to pay an upfront fee before loan release.
The app asks for access to your full contact list, photos, messages, or social media accounts.
The lender threatens to contact your employer, relatives, neighbors, or barangay.
The collector threatens arrest for ordinary nonpayment of a loan.
The loan agreement does not show the interest rate, fees, due date, and penalties.
The lender refuses to issue receipts.
The lender pressures you to sign immediately.
The lender claims “no documents needed” but asks for your ID, selfie, contacts, and bank details.
The lender asks for your OTP, online banking password, SIM card details, or e-wallet PIN.

The biggest red flag is inconsistency. A legitimate lender’s corporate name, authority, contact information, loan documents, app details, and payment channels should match.

Documents and evidence you should keep

Whether you are still verifying the lender or already borrowed money, keep a complete record.

Evidence	Why it is useful
Screenshots of app listing and website	Shows the platform name, developer, contact details, and public claims
Loan agreement	Proves the stated principal, interest, fees, due date, and penalties
Disclosure statement	Shows whether the true cost of credit was properly disclosed
Receipts and payment confirmations	Proves payments made and to whom
SMS, email, chat, and call logs	Useful for complaints about harassment or threats
Screenshots of app permissions	Relevant for privacy complaints
Copies of IDs submitted	Helps show what personal data the lender collected
Name and number of collector	Useful if a third-party collector engaged in abusive practices
SEC documents or screenshots	Helps show whether the company represented itself as authorized

Do not rely on verbal promises. In lending disputes, written records usually matter more than phone conversations.

Special concerns for OFWs and foreigners in the Philippines

OFWs applying from abroad

Many OFWs encounter online lenders through social media. If you are abroad, be careful with lenders that demand passport copies, work contracts, overseas employment documents, or remittance records without a clear privacy policy.

Before sending sensitive documents:

verify the lender’s SEC authority;
check whether the website or app is really connected to the authorized company;
avoid sending documents through random chat accounts;
keep screenshots of every submission;
use official company email addresses or secure portals only.

Foreigners living in the Philippines

Foreigners may be asked for a passport, visa page, Alien Certificate of Registration, work permit, proof of address, or proof of income. That request is not automatically illegal, but it should be proportionate and connected to a legitimate loan application.

Foreigners should be especially cautious when asked to sign documents they do not understand, provide blank checks, or give access to foreign bank accounts. If foreign public documents are required for larger secured or business financing, notarization or apostille requirements may arise depending on the document and where it will be used.

Foreign-owned lending or financing companies

Philippine law also has nationality and reciprocity rules for lending and financing companies. RA 9474’s implementing rules include Filipino ownership and reciprocity requirements for lending companies, while RA 8556 contains ownership and reciprocity provisions for financing companies. (Lawphil)

For an ordinary borrower, the main point is not to analyze the company’s ownership structure yourself. The practical step is to confirm that the SEC has actually authorized that corporation to operate.

What to do if you already borrowed from a suspicious lender

If you already received money from a lender that now appears suspicious, do not panic. Separate the issues.

First, the existence of a loan does not automatically disappear just because the lender behaved badly. If you borrowed money, there may still be a civil obligation to pay the lawful amount due.

Second, abusive collection, illegal threats, hidden charges, privacy violations, or unauthorized lending can be reported to the proper government agency.

A practical sequence is:

Stop giving additional personal data. Do not send more IDs, selfies, OTPs, passwords, or contact lists.
Preserve all evidence. Screenshot messages, app screens, payment requests, threats, and collection posts.
Revoke unnecessary app permissions. Remove access to contacts, photos, camera, microphone, location, and storage if not needed.
Pay only through verified official channels. Avoid paying to personal accounts unless you can verify that they are authorized.
Ask for a statement of account. Request a written breakdown of principal, interest, fees, penalties, payments, and remaining balance.
File a complaint with the SEC for lending or financing company issues. The SEC iMessage platform is used for inquiries, complaints, incidents, and requests, including matters involving financing and lending companies. (iMessage)
File a privacy complaint with the NPC if personal data was misused. This is especially relevant if the lender accessed your contacts, posted your information, or messaged people who are not guarantors.
Report cyber threats, fraud, or identity misuse to cybercrime authorities when appropriate. The DICT-NPC-SEC advisory identifies reporting channels for online lending harassment and related cyber concerns.
Do not ignore real legal notices. If you receive a court summons, subpoena, or official notice from a government agency, read it carefully and respond within the stated period.

A collector cannot simply order the police to arrest you for ordinary nonpayment of a loan. However, separate facts such as fraud, falsification, bouncing checks, identity theft, or violation of a court order can create different legal issues. Do not treat every threat as true, but do not ignore official documents.

Common scenarios and what they usually mean

The lender is SEC registered but has no Certificate of Authority

This is not enough for a business publicly operating as a lending or financing company. Ask the lender to provide its SEC authority to operate. If it cannot, verify directly with the SEC.

The app name is different from the company name

This can be legitimate if the app is a brand or platform used by an authorized corporation. But the connection must be clear. The app, privacy policy, loan agreement, and payment channels should all point to the same authorized company.

The lender contacts your relatives or employer

A lender may verify information or contact a guarantor, co-maker, or authorized reference in proper circumstances. But harassment, public shaming, threats, and improper contact with persons who are not guarantors or co-makers may violate SEC debt collection rules and data privacy rules.

The lender deducts huge fees before releasing the loan

This is a common complaint in short-term online loans. Check the disclosure statement. If the lender advertised one amount but released much less because of undisclosed fees, that may violate transparency and truth-in-lending principles.

The lender asks you to pay first before releasing the loan

Be very careful. Processing fees, documentary fees, or notarial fees should be clearly disclosed and paid through official channels. Repeated demands for “release fees” before you receive the loan are a classic scam pattern.

Fees, timelines, and offices involved

Task	Office or platform	Usual cost	Practical timeline
Basic online check of company name	SEC online search tools / Check with SEC	Usually free	Same day, if information is available
Inquiry or complaint about lending/financing company	SEC iMessage / SEC Financing and Lending Companies Department	Usually free to file	Ticket-based; response time depends on issue and volume
Request corporate documents	SEC Express	Service and document fees vary	SEC Express states delivery may be 3–5 working days from SEC release in Metro Manila and up to 7 working days for provincial addresses
Privacy complaint	National Privacy Commission	Usually free to initiate	Depends on completeness of evidence and case handling
Cyber fraud or threats	DICT, NBI Cybercrime Division, PNP Anti-Cybercrime Group	Usually free to report	Depends on urgency, evidence, and investigation needs
Court case or collection suit	MTC/RTC, depending on amount and nature of action	Filing fees apply	Can take months or longer, depending on court docket

For most borrowers, the fastest first step is to screenshot everything, verify the company with the SEC, and avoid sending money or sensitive data until the lender’s authority is clear.

Frequently Asked Questions

How do I know if a lending company is legit in the Philippines?

Check whether the company has both SEC registration and a valid SEC authority to operate as a lending company or financing company. Then verify whether the app, website, loan agreement, payment channel, and company name all match. A legitimate lender should also provide clear loan disclosures, official contact details, and proper receipts.

Is SEC registration enough for a lending company?

No. SEC registration only proves that a corporation may exist. A company publicly engaged in lending or financing must have the proper SEC authority under the relevant law. For lending companies, that authority is tied to RA 9474 and its implementing rules. (Supreme Court E-Library)

What is a Certificate of Authority?

A Certificate of Authority is the SEC-issued authority allowing a lending company or financing company to operate in that regulated business. For lending companies, the implementing rules of RA 9474 define it as the certificate issued by the SEC for a lending company to engage in the lending business. (Lawphil)

How do I check if an online lending app is registered?

Do not check only the app name. Identify the corporation behind the app, then verify that corporation’s SEC registration, Certificate of Authority, business address, and platform details. Also search for SEC advisories, suspension orders, or complaints involving both the app name and corporate name.

Can a DTI-registered business legally operate as a lending company?

A DTI business name registration is not enough for a public lending business. Lending companies regulated under RA 9474 are generally required to be stock corporations with SEC authority. A private loan between individuals is different from operating a lending business open to the public.

Can a lending app access my contacts?

A lending app should not demand unnecessary permissions or use your contact list for harassment, public shaming, or pressure. Data processing must comply with the Data Privacy Act’s principles of transparency, legitimate purpose, and proportionality. NPC guidance has specifically addressed excessive permissions and improper use of contacts by online lending apps. (National Privacy Commission)

Can a lender contact my family or employer if I do not pay?

A lender may have limited legitimate reasons to contact a guarantor, co-maker, or properly identified reference. But contacting relatives, friends, co-workers, or employers to shame, threaten, or pressure you may violate SEC debt collection rules and data privacy rules, especially if those persons are not guarantors or co-makers.

Can I be arrested for not paying an online loan?

Ordinary nonpayment of a loan is generally a civil debt issue, not something that allows a collector to have you immediately arrested. Be cautious, however, if the situation involves alleged fraud, falsified documents, bounced checks, identity misuse, or a real court order. Threats of instant arrest by a collector are a red flag.

What interest rate is legal for lending apps in the Philippines?

For certain unsecured general-purpose loans not exceeding ₱10,000 and with a tenor of up to four months, BSP Circular No. 1133 sets specific caps, including 6% nominal interest per month and 15% effective interest rate per month. Other loans may have different treatment, but lenders must still disclose charges clearly and avoid abusive or unreasonable terms.

Where can I complain about an abusive lending company?

For lending or financing company issues, file with the SEC through its official channels, including SEC iMessage. For misuse of personal data, contact the National Privacy Commission. For cyber threats, fraud, identity misuse, or online harassment, report to appropriate cybercrime authorities such as DICT, NBI Cybercrime Division, or PNP Anti-Cybercrime Group, depending on the facts. (iMessage)

Key Takeaways

“SEC registered” is not enough. A public lending or financing business must have the proper SEC authority to operate.
Always verify the exact corporate name, not just the app name or Facebook page name.
Ask for the lender’s Certificate of Authority, loan disclosure, official address, and official payment channels.
For online lending apps, check whether the app, privacy policy, loan agreement, and payment account all match the authorized company.
Hidden charges, upfront release fees, personal payment accounts, excessive app permissions, and threats to shame or arrest you are serious red flags.
Borrowers have rights under Philippine laws on lending regulation, truth in lending, financial consumer protection, debt collection, and data privacy.
Keep screenshots, receipts, loan documents, disclosure statements, app permission records, and collection messages.
Suspicious lenders and abusive collectors may be reported to the SEC, NPC, and cybercrime authorities depending on the violation.