An online lender can look polished, appear in an app store, and display an “SEC registration number” while still lacking authority to lend in the Philippines. A reliable check has three parts: identify the company behind the app, confirm that the company has an active lending or financing license, and verify that the particular app or website is properly disclosed to the Securities and Exchange Commission (SEC). You should also examine the loan terms, privacy permissions, and collection practices because registration alone does not make every transaction lawful.
What “Registered and Legal” Actually Means
For most non-bank online lenders, four separate questions matter:
- Is the company registered as a corporation?
- Does it hold a valid Certificate of Authority to operate as a lending or financing company?
- Is the app, website, or online lending brand connected to that licensed company in SEC records?
- Does the actual loan comply with disclosure, interest-rate, privacy, and fair-collection rules?
A Certificate of Incorporation answers only the first question. It is a company’s primary SEC registration, not permission to lend money to the public.
The important secondary license is the Certificate of Authority, commonly called the CA. A lending or financing company generally cannot offer loans merely because it has an SEC registration number, a DTI business name, a BIR certificate, or a local business permit.
An app may also use a brand that is different from its operator’s corporate name. For example, “PeraNow” might be only the borrower-facing brand, while the contract identifies “ABC Lending Corporation” as the creditor. You must verify the corporate lender, not just the app name.
Philippine Laws Governing Online Lenders
Lending and financing companies need SEC authority
The Lending Company Regulation Act of 2007, Republic Act No. 9474, regulates corporations that grant loans from their own capital or from funds sourced from not more than 19 persons. It generally excludes banks, financing companies, pawnshops, insurance companies, cooperatives, and other credit institutions already regulated under special laws.
Under RA 9474, a lending company must be organized as a corporation and obtain SEC authority before conducting lending operations.
Financing companies are governed principally by the Financing Company Act of 1998, Republic Act No. 8556. They also require SEC registration and authority, unless another regulator has jurisdiction over the institution.
Online platforms must identify the real lender
SEC Memorandum Circular No. 19, Series of 2019 requires lending and financing companies to disclose their corporate name, SEC registration number, and Certificate of Authority number in advertisements and online lending platforms. Borrowers should also be advised to study the disclosure statement before completing a loan.
The SEC’s regulatory framework is changing in 2026. SEC Memorandum Circular No. 20, Series of 2026, titled “Guidelines Prescribing Prudential, Disclosure, and Market Conduct Requirements for Financing and Lending Companies and Lifting the Moratorium on Online Lending Platforms,” takes effect on August 1, 2026. It lifts the moratorium imposed in 2021 but does not automatically approve new apps.
Under the new framework, lenders must disclose and maintain updated information about each borrower-facing platform, including its brand, websites, applications, and domain names. One Certificate of Authority covers the company’s lending or financing activities, but each online platform must still comply with SEC disclosure, capitalization, operational, and consumer-protection requirements.
Borrowers have a right to know the true cost of the loan
The Truth in Lending Act, Republic Act No. 3765, requires creditors to disclose the finance charges and true cost of credit before the loan is completed.
The Implementing Rules of RA 9474 specifically require a lending company to provide a disclosure statement covering matters such as:
- Principal loan amount
- Interest rate
- Service or processing fees
- Amortization schedule
- Late-payment penalties
- Collection charges
- Notarial and other fees
- Collection and lien-enforcement procedures
- Method for computing the amount due after default
A statement that merely advertises “0.2% interest per day” is not enough if the lender hides processing fees, service charges, or a much smaller net amount actually released to the borrower.
The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, also protects borrowers against deceptive marketing, abusive collection, unfair terms, and inadequate complaint handling.
How to Check an Online Lender Step by Step
1. Find the lender’s complete corporate name
Before installing the app or submitting an ID, look for the “lender of record” in the following places:
- App-store description and developer information
- Website footer
- Terms and conditions
- Privacy notice
- Loan disclosure statement
- Promissory note or loan agreement
- Payment instructions
- Customer-service page
Write down the exact corporate name, including “Inc.,” “Corporation,” “Lending,” or “Finance.” Also record:
- SEC registration number
- Certificate of Authority number
- Business or trade name
- App name and developer name
- Website and domain
- Office address
- Official email and telephone number
The app developer may be a technology contractor rather than the creditor. The loan agreement should clearly identify the company that releases the funds and owns the receivable.
If the app refuses to reveal the creditor until after you upload personal information, treat that as a serious warning sign.
2. Search the SEC’s company verification system
Use the official Check with SEC company verification system. Search using the complete corporate name rather than the short app brand.
Review the result for two different matters:
- The corporation’s registration or primary license
- Its secondary license to operate as a lending or financing company
The desired result is not simply “registered.” It should show that the company has the necessary authority for lending or financing and that the authority is not suspended or revoked.
Search spelling variations if necessary. If more than one company has a similar name, compare the SEC registration number, address, and Certificate of Authority number with the details displayed in the app.
The SEC warns that information generated through the system may be incomplete or subject to ongoing evaluation. A missing or unclear result should therefore lead to a formal verification request—not an assumption that the company is legitimate.
3. Check the SEC lists for the company and its platform
Compare the information with the SEC’s published lists of:
Check both the app name and the corporate operator. A licensed company’s name on a lending-company list does not automatically prove that every app using or copying its name belongs to it.
Under the 2026 framework, platform information may appear through the SEC’s prescribed registry or electronic disclosure system. The essential match remains the same: the borrower-facing app or website must be traceable to the licensed company.
4. Confirm the Certificate of Authority directly when necessary
If the online record is unclear, ask the lender for a copy of its current Certificate of Authority. Compare:
- Corporate name
- CA number
- SEC registration number
- Date of issuance
- Registered office
- Any conditions or annotations
Do not rely solely on the image sent by the lender. Certificates and registration numbers can be copied from legitimate companies.
Submit a verification ticket through the SEC iMessage system and select the Financing and Lending Companies Department or the category for verification of Certificate of Authority status. Include the app name, corporate name, CA number, website, screenshots, and reason for the request.
A basic online search is free and normally produces results immediately. A formal certification or document request may require a payment assessment and manual processing. Allow several working days, and longer if the SEC must reconcile old, amended, suspended, or enforcement records. The ticket can be tracked online.
No notarization is normally needed for a basic verification inquiry.
5. Search for suspension, revocation, and SEC advisories
A lender may once have held a valid authority but later lost it. Search the SEC website using combinations such as:
- Corporate name plus “revocation”
- App name plus “SEC advisory”
- Corporate name plus “cease and desist”
- CA number plus “suspension”
Check the date and exact respondent. An advisory involving a similarly named entity is not necessarily about the lender you are investigating.
Also compare the app’s contact details with those in the SEC record. Fraudsters sometimes impersonate a licensed lender while directing borrowers to a different website, social-media account, or personal e-wallet.
6. Identify the correct regulator if the lender is not an SEC lending company
Not every legitimate lender holds an SEC lending-company CA.
| Type of provider | Primary verification source | What to confirm |
|---|---|---|
| Lending or financing corporation | SEC | Corporate registration, active CA, and disclosed platform |
| Bank or digital bank | BSP Directory of Banks and Non-Bank Financial Institutions | Correct legal name and active BSP-supervised status |
| Cooperative lending to members | CDA Cooperative Masterlist | Registration and operating status |
| Pawnshop or other BSP-supervised provider | BSP | Appropriate authority for the activity |
| Foreign app offering Philippine loans | Relevant Philippine regulator | A foreign license alone is not sufficient |
Registration as an electronic-money issuer or operator of a payment system does not, by itself, prove authority to lend. Payment services and lending are different regulated activities.
7. Verify the loan terms before pressing “Confirm”
Even a licensed lender can violate the law in a particular transaction. Before accepting, save or download:
- Complete disclosure statement
- Loan agreement and promissory note
- Amortization schedule
- Privacy notice
- Collection policy
- Net amount to be released
- Total amount and dates of repayment
- Itemized interest, fees, and penalties
Do not proceed if the app displays only the installment amount without showing the principal, net proceeds, finance charges, and effective cost.
Interest and Fee Limits for Small Short-Term Online Loans
BSP Circular No. 1133 and SEC Memorandum Circular No. 3, Series of 2022 impose specific ceilings on an unsecured, general-purpose loan of ₱10,000 or less with a term of four months or less.
| Charge | Maximum for a covered loan |
|---|---|
| Nominal interest | 6% per month, approximately 0.2% per day |
| Effective interest, including most fees | 15% per month, approximately 0.5% per day |
| Late-payment or non-payment penalty | 5% per month on the outstanding scheduled amount due |
| Total interest, fees, charges, and penalties | 100% of the amount borrowed |
For example, if a covered loan has a principal of ₱5,000, the combined interest, fees, charges, and penalties cannot exceed another ₱5,000, regardless of how long it remains outstanding.
The ceilings do not automatically apply to every loan above ₱10,000 or longer than four months. However, larger loans remain subject to disclosure rules, consumer-protection law, and the Civil Code. Courts may reduce interest or penalties that are iniquitous or unconscionable. In Medel v. Court of Appeals, the Supreme Court treated a stipulated rate of 5.5% per month, or 66% per year, as excessive and contrary to morals.
Privacy and Collection Practices to Check
The Data Privacy Act of 2012, Republic Act No. 10173, NPC Circular No. 2020-01 as amended, and the government’s 2026 Advisory on Online Lending Platforms restrict how lenders use borrower data.
An online lender should not:
- Require unnecessary or excessive phone permissions
- Copy an entire contact list for debt collection
- Contact people in the borrower’s phonebook who are not guarantors
- Treat a character reference as a guarantor
- Publicly shame the borrower
- Threaten violence, arrest, or an action that cannot legally be taken
- Send the borrower’s debt information to employers, relatives, or social-media contacts merely to pressure payment
The app should provide separate fields for character references and guarantors. A guarantor must separately and expressly consent to become responsible for the debt.
Camera or gallery access may be reasonable for identity verification, but access must be limited to a specified legitimate purpose. Once the purpose has been completed, the borrower should be prompted to revoke or turn off the permission.
Common Red Flags That a Loan App May Be Illegal or Impersonating a Lender
| Red flag | Why it matters |
|---|---|
| Only an app name is shown, with no corporate creditor | You cannot verify who owns the loan |
| The app shows an SEC registration number but no CA number | Corporate registration alone does not authorize lending |
| The CA belongs to a different company | The app may be impersonating a legitimate lender |
| Payment is demanded through an employee’s personal account | This may indicate fraud or unauthorized collection |
| An “advance fee” is required before release | A common loan-scam pattern |
| The lender promises approval without identity or affordability checks | Inconsistent with responsible lending and KYC practices |
| Terms appear only after disbursement | Potential Truth in Lending violation |
| The app sends money without affirmative confirmation | Unauthorized disbursement is prohibited under the 2026 framework |
| It demands access to all contacts, messages, or social-media accounts | Potential Data Privacy Act violation |
| Collectors threaten immediate arrest or a “barangay warrant” | Ordinary non-payment is not punished by imprisonment |
| The company relies only on a foreign license | Philippine authority may still be required |
What to Do If the Lender Cannot Be Verified
- Do not submit additional IDs or grant more permissions.
- Do not pay an advance “release,” “insurance,” or “verification” fee.
- Preserve evidence before uninstalling the app. Capture the app-store page, developer name, permissions, URLs, advertisements, loan terms, payment accounts, messages, and collection calls.
- Ask for the creditor’s complete corporate name, SEC number, CA number, and itemized statement of account.
- Submit the details to the SEC through iMessage.
- Report unlawful personal-data processing through the NPC’s formal complaint portal. A formal NPC complaint generally requires a notarized complaint-assisted form or verified complaint with supporting evidence.
- Report threats, extortion, identity theft, or fraudulent payment instructions to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
A regulatory complaint to the SEC or NPC does not require prior barangay conciliation. Barangay proceedings are separate and may apply only to certain disputes falling within the Katarungang Pambarangay system.
Do not assume that an unregistered lender’s regulatory violation automatically erases money actually borrowed. Demand a correct accounting, avoid paying unidentified collectors, and challenge unlawful interest, fees, or collection conduct through the proper agency or court.
Frequently Asked Questions
Is an SEC registration number enough to prove a loan app is legal?
No. The company must also have a valid Certificate of Authority to operate as a lending or financing company, unless it belongs to another regulated category such as a BSP-supervised bank. The app must also be traceable to that company.
Does being available on Google Play or the Apple App Store prove legality?
No. App stores are distribution platforms, not Philippine financial regulators. An app may be listed before a complaint is resolved, may use misleading company information, or may impersonate a licensed lender.
What if the app name is different from the company name?
Look for the lender of record in the disclosure statement and loan agreement. Verify both the corporate lender and the borrower-facing brand. A different brand can be legitimate, but the connection must be properly disclosed and reflected in SEC records.
Can an SEC-registered lender charge any interest rate it wants?
No. Covered small, short-term loans are subject to specific BSP and SEC ceilings. Other loans remain subject to disclosure requirements, consumer-protection rules, the written-interest requirement under Article 1956 of the Civil Code, and the rule against unconscionable terms.
Can a lending app access my entire contact list?
It cannot use unrestricted contact-list access for harassment or debt collection. Current NPC and joint government guidance prohibits contacting anyone on the borrower’s contact list for collection unless that person separately consented to act as guarantor.
Can an online lender contact my employer or family?
Not merely to shame or pressure you. Debt information should not be disclosed to unrelated third parties. A properly consenting guarantor may be contacted about the guaranteed obligation.
Can I be arrested for not paying an online loan?
Ordinary failure to pay a debt does not result in imprisonment. Article III, Section 20 of the 1987 Constitution prohibits imprisonment for debt. Separate criminal conduct—such as proven fraud or violations involving checks—must be established through lawful proceedings. A collector cannot issue an arrest warrant.
If the lender is unregistered, do I still have to repay?
Lack of registration does not automatically mean a borrower may keep money received. However, the lender may face regulatory penalties, and unlawful interest, hidden fees, or abusive collection may be challenged. Obtain a complete statement of account and pay only through a verified channel belonging to the actual creditor.
How can an OFW or foreign borrower verify a Philippine loan app?
Use the same SEC, BSP, or CDA records. A foreign license or overseas office does not replace the Philippine authority required for lending activities directed at borrowers in the Philippines. Compare the loan contract’s creditor with the Philippine-regulated entity and avoid remitting money to unidentified foreign or personal accounts.
How long does lender verification take?
The Check with SEC system and published lists can be reviewed within minutes and are free. A formal status certification or manual SEC verification may take several working days or longer when records are outdated, amended, suspended, or under investigation.
Key Takeaways
- Verify the corporate lender, not only the loan app’s brand or developer.
- A Certificate of Incorporation is not a license to lend.
- Look for an active Certificate of Authority and a properly disclosed online platform.
- Cross-check the corporate name, SEC number, CA number, app, website, address, and payment account.
- App-store availability, a DTI registration, or a copied SEC certificate does not prove legality.
- Review the complete disclosure statement, net proceeds, interest, fees, penalties, and repayment schedule before accepting.
- Unrestricted contact harvesting, public shaming, threats, and contacting non-guarantors are prohibited.
- Preserve screenshots and transaction records before reporting an unverifiable or abusive lender to the SEC, NPC, PNP, or NBI.