Quick answer

Do not stop at the words “SEC-registered.” Before using an online lending app or website, verify all three of these:

The operator’s exact corporate name is registered with the Philippine Securities and Exchange Commission.
That corporation has a valid and subsisting Certificate of Authority to Operate as a Lending Company or Financing Company.
The app, website, or brand is genuinely operated by that same corporation.

Use the SEC’s official Check with SEC portal. Search the corporate name—not only the app’s brand name—and confirm that the result shows the proper lending or financing authority.

Under the Lending Company Regulation Act of 2007, an ordinary lending company cannot conduct lending business without SEC authority. A Certificate of Incorporation alone is not enough.

What “SEC-registered” should mean for an online lender

People often use “SEC-registered” to describe two different things:

What appears in the SEC record	What it establishes	Enough to offer loans?
Certificate of Incorporation or primary registration	The corporation is registered as a legal entity	No
Certificate of Authority to Operate as a Lending or Financing Company	The corporation is authorized for the regulated lending or financing activity	Yes, provided the authority remains valid and the app actually belongs to that corporation

A legitimate result should identify the lender as a corporation and show the necessary secondary license or Certificate of Authority. The SEC explains that no lending company may conduct business without authority to operate and distinguishes lending companies from financing companies on its official lending and financing companies page.

Registration does not guarantee that a loan is affordable, that every contract term is enforceable, or that the lender will behave properly. It establishes regulatory status—not an SEC endorsement of the product.

Step 1: Find the lender’s real corporate name

An app’s display name may be completely different from the corporation behind it. Before searching, look for the following in the app, website, advertisement, privacy notice, loan agreement, disclosure statement, or app-store listing:

Complete corporate name
SEC registration number
Certificate of Authority number
Registered office or business address
Customer-service contact details
Name of the company receiving payments

SEC Memorandum Circular No. 19, Series of 2019 requires lending and financing companies to display conspicuously in their advertisements and online platforms their corporate name, SEC registration number, and Certificate of Authority number, together with an advisory to study the disclosure statement before proceeding with the loan.

If the app gives only a brand name, refuses to identify its corporate operator, or displays incomplete numbers, treat that as a serious warning sign. Do not upload an ID, submit a selfie, grant phone permissions, disclose an OTP, or pay an “advance fee” while the operator’s identity remains unclear.

Step 2: Search through the official SEC portal

Go directly to:

Check with SEC

Then:

Enter the lender’s exact corporate name. Try distinctive words from the name if the full name produces no result.
If available, search again using the SEC registration number displayed by the lender.
Open the matching entity carefully. Similar corporate names are not interchangeable.
Confirm that the entity is registered as a corporation.
Look for a secondary license or Certificate of Authority to Operate as a Lending Company or Financing Company.
Compare the authority number in the SEC result with the number shown in the app, advertisement, agreement, and disclosure statement.
Review any status indicating suspension, revocation, cancellation, expiration, or another regulatory restriction.

Use only a genuine sec.gov.ph address reached directly or through the SEC’s official online services. A copied logo, screenshot, social-media post, or look-alike verification website is not reliable proof.

The SEC cautions that information generated by its verification system may be incomplete or subject to ongoing evaluation. If the result is missing, unclear, or inconsistent, do not treat silence as final proof either way. Ask the SEC to verify the entity and request a copy or confirmation of its Certificate of Authority.

Step 3: Match the app to the registered corporation

Finding a licensed corporation with a similar name is not enough. Scammers and unauthorized operators may misuse the name, SEC number, documents, or Certificate of Authority of a real company.

Cross-check these details:

Does the corporate name in the SEC record exactly match the operator named in the privacy notice and loan contract?
Does the Certificate of Authority number match?
Does the app’s developer or publisher have a documented connection to that corporation?
Does the corporation’s official website identify the app or brand?
Are the payment account and collection instructions issued in the corporation’s name or through a clearly disclosed authorized payment provider?
Do the address, telephone number, email domain, and customer-service channels match official records?
Does the loan disclosure statement name the same creditor?

If an agent claims to represent a licensed company, independently contact the company through a verified channel. Do not use only the phone number or link supplied by the agent.

A real corporation’s registration details do not legitimize a different app merely because that app copied them.

Step 4: Check the online platform and regulatory history

An online lending platform may be a mobile app, website, or other technology-enabled system through which a lending or financing company offers its products.

Check the SEC’s official pages for:

Recorded online lending platforms
Advisories against particular apps, websites, agents, or companies
Cease-and-desist orders
Suspended or revoked authorities
Lists relating to lending and financing companies

Start with the SEC’s lending and financing companies section. Because lists and regulatory actions can change, use the latest SEC material available and compare its date with the date of your search.

“Recorded” should not be confused with “recommended.” It does not guarantee favorable rates or lawful conduct in every transaction. Conversely, an app’s presence in Google Play, Apple’s App Store, a social-media advertisement, or a popular e-wallet does not prove SEC authority.

Important exception: some lenders are regulated under other laws

The SEC Certificate of Authority test applies directly to lending and financing companies under SEC supervision. The statutory definition of a lending company excludes banks, investment houses, savings and loan associations, financing companies, pawnshops, insurance companies, cooperatives, and other credit institutions already regulated by law.

For example:

If the creditor is a bank, digital bank, credit-card issuer, or other BSP-supervised financial institution, verify it through the BSP Verifier or the BSP’s directory of banks and non-bank financial institutions.
If the creditor claims to be a cooperative, verify its status and lending authority with the Cooperative Development Authority.
If the service only connects a borrower with another creditor, identify the actual creditor named in the contract. The platform’s status and the creditor’s authority may need separate checks.

Do not assume that every legitimate digital credit product must display an SEC lending-company authority. First determine what entity is legally extending the credit and which regulator covers it.

Red flags that should stop the transaction

Do not proceed until independently verified if the lender:

Cannot provide its complete corporate name
Shows only a Certificate of Incorporation
Gives a Certificate of Authority number that belongs to another company
Uses a personal bank or e-wallet account for advance payments
Demands a “release,” “verification,” “insurance,” or “processing” payment before disbursing the loan without clear contractual support
Promises guaranteed approval while requesting an OTP, PIN, password, or remote access to your device
Sends only cropped or blurred registration documents
Pressures you to act before you can read the disclosure statement
Requests unrestricted access to contacts, messages, files, location, or social-media accounts without a specified and legitimate purpose
Threatens arrest, public shaming, violence, or disclosure of the debt to unrelated contacts
Uses inconsistent corporate names across the app, agreement, payment instructions, and privacy notice
Claims that an app-store listing, mayor’s permit, DTI registration, or BIR registration replaces SEC lending authority

A DTI business-name registration is not a Certificate of Authority to operate an SEC-regulated lending company.

Before borrowing, check more than registration

Even after confirming the lender’s authority, read the disclosure statement and loan agreement before accepting or authorizing disbursement. Check:

Actual amount you will receive
Principal amount recorded as owed
Interest rate and how it is computed
Service, processing, membership, insurance, and other charges
Effective interest rate, where applicable
Total amount payable
Number, amount, and due dates of payments
Late-payment charges and collection costs
Automatic debit or payment authority
Consequences of default
Data collected and the purpose of each device permission
Rules for cancellation, complaints, and account closure

The Truth in Lending Act requires disclosure of the cost of credit before the transaction is consummated. The SEC’s complaint guidance likewise identifies failure to provide the required disclosure statement before consummation as a possible violation.

Do not rely on the promotional rate alone. Compare the cash actually received with the total amount that must be repaid.

Evidence to preserve

Save evidence before links, messages, or app listings disappear:

Screenshots of the app’s name, developer, download page, version, and permissions
Website address and screenshots of advertisements
Corporate name, SEC number, and Certificate of Authority number displayed
Your SEC search result and the date and time of the search
Privacy notice and consent screens
Loan application, promissory note, disclosure statement, and repayment schedule
Proof of disbursement and every payment
Account numbers and names of payment recipients
Emails, text messages, chat logs, call logs, and collection messages
Names and contact details used by agents or collectors
Threats, public posts, or messages sent to your contacts
Complaint reference numbers and responses from the lender or regulator

Keep original electronic files where possible. Do not edit screenshots in a way that removes dates, sender details, URLs, or other identifying information.

What to do if the lender cannot be verified

Do not send more personal information or make an advance payment merely to “complete verification.” Instead:

Ask the lender in writing for its exact corporate name, SEC registration number, Certificate of Authority number, and a copy of the authority.
Search those details independently through Check with SEC.
Ask the SEC to confirm the lender’s status through SEC iMessage.
Preserve the advertisement, app page, conversations, payment instructions, and documents.
If you have already provided account credentials, an OTP, a PIN, or device access, immediately contact the affected bank or e-wallet, change credentials, and secure the account.
If money was sent because of suspected fraud, report the transaction promptly to the payment provider and appropriate authorities. Speed may affect whether funds can be held or traced.

The March 18, 2026 joint government Advisory on Online Lending Platforms directs complaints concerning unfair collection practices to SEC iMessage and lists the SEC hotline 1-4732 (1-4SEC).

Where to report problems

SEC-regulated lending or financing company

Use SEC iMessage for complaints or verification requests. The SEC advises complainants to complete the prescribed form accurately, submit one complaint per respondent company, provide a valid government-issued ID, and attach supporting documents. Its official complaint guidance explains the process.

The SEC can investigate regulatory violations and impose appropriate administrative measures. It does not, through the complaint process alone, rewrite the loan, cancel the debt, declare the contract void, or judicially invalidate an interest rate.

BSP-supervised institution

Complain first through the institution’s consumer-assistance channel. If unresolved, escalate through the BSP Consumer Assistance Mechanism.

Misuse of personal data

For unauthorized or excessive collection, disclosure, or use of personal data, consult the National Privacy Commission’s formal complaint procedure. The NPC states that unrestricted harvesting of contacts and contacting people other than properly identified guarantors for debt collection are prohibited.

Threats, fraud, or immediate danger

Contact the police or another appropriate law-enforcement authority immediately if there are threats of violence, extortion, account takeover, identity theft, or imminent harm. Secure financial accounts first if credentials or OTPs may have been compromised.

Common mistakes

Searching only the app name

The SEC record is usually under the corporation’s legal name. Find the corporate operator before searching.

Treating incorporation as permission to lend

A corporation can exist legally without being authorized to operate a lending or financing business. Look specifically for the Certificate of Authority.

Checking the license number but not the company name

A copied number may belong to an unrelated licensed entity. The name, number, status, and app ownership must all match.

Relying on old screenshots or lists

Authority may later be suspended or revoked. Verify through a current official source close to the transaction date.

Assuming a licensed lender cannot violate other laws

A registered lender may still use an unlawful collection method, mishandle personal data, or fail to make required disclosures. Licensing and conduct are separate issues.

Deleting the app before saving evidence

First preserve the agreement, statements, messages, permissions, and identifying information. Then remove permissions or uninstall the app if appropriate.

Assuming an unverified lender means the debt can simply be ignored

Lack of authority can expose the operator to regulatory or criminal consequences, but the effect on a particular borrower’s contract or repayment obligation may depend on the documents, the parties’ conduct, and applicable law. Do not stop payment solely on an internet conclusion; obtain legal advice for the specific transaction.

When legal help is urgent

Consult a Philippine lawyer promptly if:

The lender has filed or threatened an actual court, foreclosure, or repossession proceeding
You signed a mortgage, chattel mortgage, deed, confession, assignment, or post-dated checks
Your identity or documents are being used for loans you did not obtain
Money was taken from your account without authority
A collector is threatening violence, arrest, public exposure, or harm to your family
The lender has contacted your employer, relatives, or unrelated phone contacts
You are being asked to sign a settlement, waiver, or acknowledgment you do not understand
The amount demanded materially differs from the disclosure statement or payment records
A deadline appears in a summons, subpoena, demand, regulator’s notice, or court document

Do not ignore official legal papers. The response period depends on the type of proceeding and the document served.

Frequently asked questions

Is a lender legitimate if I find its company name in the SEC database?

Not necessarily. Confirm that the company also has a valid Certificate of Authority for lending or financing and that the app genuinely belongs to it.

Where can I verify the lender for free?

Use the official Check with SEC portal. If the result is inconclusive, request confirmation through SEC iMessage.

What if the app name does not appear in the search?

Find the corporate operator in the privacy notice, contract, disclosure statement, advertisement, or app-store developer information. Search that exact corporate name. If the app does not identify an operator, do not proceed.

Does a mayor’s permit or DTI certificate prove authority to lend?

No. Those documents do not replace the SEC Certificate of Authority required of an SEC-regulated lending or financing company.

Does appearing in an app store prove the lender is licensed?

No. App-store availability is not proof of Philippine regulatory authority.

Is an SEC-registered lender automatically safe?

No. Verify the particular platform, read the full cost and repayment terms, limit unnecessary permissions, and preserve your documents.

Can a lender access all my phone contacts?

Unrestricted or excessive processing of contact lists is prohibited. Current government guidance states that lenders may not contact people in a borrower’s contact list for collection unless they are guarantors who have given the required consent.

Can the SEC cancel my loan?

The SEC states that its complaint process cannot change the contract, declare it void, invalidate an interest rate, or cancel or settle the obligation. Those questions may require negotiation, another regulator, or court determination.

What if the lender is a bank or digital bank?

Check the institution through the BSP Verifier. The SEC lending-company framework is not the only regulatory system applicable to online credit.

Official sources

This article provides general legal information, not advice for a particular loan, dispute, or court case. Regulatory records and platform status can change, and conclusions may depend on the actual contract and evidence. Official sources and procedures were checked as of September 3, 2026.