Before installing an online lending app—or giving it your ID, selfie, contacts, bank details, or payment—verify more than the words “SEC registered.” In the Philippines, a legitimate non-bank online lender generally needs three things: an SEC-registered corporation, a valid authority to operate as a lending or financing company, and a record connecting the specific app or website to that company. The company name, license details, loan documents, privacy policy, and payment instructions should all match.

What “SEC Registered” Really Means for a Lending App

“SEC registered” can refer to several different things. They are not interchangeable.

What you are checking	What it proves	What it does not prove
Certificate of Incorporation	The corporation legally exists	That it may legally offer loans
Certificate of Authority	The company is authorized to operate as a lending or financing company	That every app using its name is genuine
Recorded online lending platform	The company has reported the particular app or website to the SEC	That the SEC guarantees the loan or endorses its terms
App-store listing	The app passed the store’s publication process	That the lender is licensed in the Philippines

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be organized as a corporation and cannot legally operate as a lending company without authority from the Securities and Exchange Commission. Merely registering a corporation is therefore not enough. (Supreme Court E-Library)

A lending app may use a brand name that is different from the corporation’s legal name. That is not automatically suspicious. However, the app must clearly identify the corporation behind it, and that corporation’s SEC registration, Certificate of Authority, and recorded platform information must be consistent.

For example:

App name: “FastPeso”
Developer name: ABC Digital Solutions Inc.
Creditor in the loan agreement: XYZ Lending Corporation
Repayment account holder: Juan Dela Cruz

This arrangement requires closer investigation. The app developer may be a legitimate service provider, but the actual creditor should be clearly disclosed, and the repayment account should be traceable to the authorized lender or its properly identified payment partner.

Which Government Agency Regulates the Lender?

Not every app offering credit is regulated in exactly the same way. Identify the actual creditor, meaning the entity legally providing the loan—not merely the app, e-wallet, marketplace, or brand through which you applied.

SEC-regulated lenders

Check with the SEC when the creditor is:

A lending company
A financing company
An online lending platform operated by either type of company

BSP-regulated lenders

Check the Bangko Sentral ng Pilipinas when the creditor is:

A bank
A digital bank
A rural or thrift bank
A BSP-supervised non-bank financial institution

You can search the BSP directory of supervised financial institutions. (Bureau of Small and Medium Enterprises)

Cooperative lenders

If the loan is being offered by a cooperative, verify its registration and authority with the Cooperative Development Authority. A cooperative is not converted into an SEC-regulated lending company simply because it accepts applications through an app.

The regulator’s name should normally appear in the loan agreement, disclosure statement, privacy notice, and consumer-assistance information. Republic Act No. 11765 requires financial service providers to identify their regulator and provide an accessible channel for consumer concerns. (Supreme Court E-Library)

Legal Protections for Online Loan Borrowers

Several Philippine laws and regulations apply to online lending.

Lending Company Regulation Act

Republic Act No. 9474 requires lending companies to secure SEC authority and empowers the SEC to investigate violations, impose administrative sanctions, and suspend or revoke a company’s authority. Operating a lending company without valid authority can result in criminal and administrative consequences. (Supreme Court E-Library)

You can read the full text of Republic Act No. 9474.

Truth in Lending Act

Republic Act No. 3765 requires the creditor to provide a clear written disclosure before the credit transaction is finalized. The disclosure should state matters such as:

The amount financed
Charges not included in the amount financed
The finance charge expressed in pesos
The applicable annual rate
The payment schedule and other essential credit terms

The purpose is to let the borrower see the real cost of credit before becoming bound. A lender should not reveal major fees only after the borrower clicks “Accept” or after money has already been released.

The law is available through the Bangko Sentral ng Pilipinas copy of the Truth in Lending Act.

Financial Products and Services Consumer Protection Act

Republic Act No. 11765 gives financial consumers rights that include:

Fair and equitable treatment
Clear disclosure and transparency
Protection of personal and financial assets against fraud
Data privacy and protection
Accessible complaint handling and redress

The law also prohibits abusive collection practices and makes financial service providers responsible for the conduct of agents and third-party collection agencies acting for them. A lender cannot avoid responsibility merely by saying that the harassment came from an outsourced collector. (Supreme Court E-Library)

You can review the Financial Products and Services Consumer Protection Act.

Data Privacy Act and NPC rules

Online lenders must comply with Republic Act No. 10173, or the Data Privacy Act of 2012, and regulations issued by the National Privacy Commission.

The NPC has specifically restricted the unnecessary collection and use of phone contacts. An app may provide a limited method for a borrower to select a reference or guarantor, but it should not indiscriminately harvest the borrower’s entire contact list and use those contacts for debt collection, public shaming, or harassment. Contacting persons other than properly identified guarantors may violate privacy rules.

The DICT, NPC, and SEC have also warned against unnecessary app permissions, excessive personal-data processing, unlawful disclosure, threats, and humiliating collection tactics. See the joint government advisory on online lending platforms.

How to Check If an Online Lending App Is Legitimate

1. Find the lender’s exact legal name

Do not begin with the app’s marketing name alone. Look for the full corporate name in:

The app-store developer information
The app’s “About” page
Terms and conditions
Privacy policy
Loan agreement
Disclosure statement
Customer-service page
Text messages or emails confirming the loan

Take screenshots before applying. Some questionable apps change their descriptions, contact details, or developer names after complaints begin.

A proper legal name usually ends in “Corporation,” “Corp.,” “Incorporated,” or “Inc.” A brand name such as “EasyCash PH” may be difficult to verify unless you first determine which corporation operates it.

2. Search the official SEC verification portal

Use the Check with SEC portal. Search the exact corporate name shown in the app’s legal documents.

Check spelling carefully. Try reasonable variations involving:

“Lending Corporation” and “Lending Corp.”
“Financing Inc.” and “Finance Corporation”
Spaces, punctuation, and abbreviations
The app brand and the stated corporate owner

Do not rely on screenshots of SEC certificates sent through Messenger, Telegram, or text. Certificates can be altered, copied from another company, or used without the real company’s permission.

3. Confirm that the company exists and is in good standing

A search result showing a Certificate of Incorporation means the entity was registered as a corporation. Review the details available, including:

Full corporate name
SEC registration number
Registration date
Company status
Registered address
Primary purpose, when available

However, stop treating “corporation found” as the final answer. A corporation registered for software development, marketing, or general services is not automatically permitted to lend money to the public.

4. Look for a Certificate of Authority

The company should have a Certificate of Authority, sometimes called a secondary license, allowing it to operate as a lending or financing company.

Confirm:

The Certificate of Authority number
Whether the authority is active
Whether it belongs to the same corporation
Whether the authority has been suspended or revoked
Whether the app displays the same number

SEC rules require lending and financing companies to disclose identifying information in their advertisements and online platforms, including the corporate name, SEC registration details, and Certificate of Authority information. (National Privacy Commission)

A company that repeatedly displays only “SEC Registered” without giving its legal name or authority number is withholding information you need to verify it.

5. Confirm that the specific app or website is recorded

The Certificate of Authority belongs to the corporation. The app itself is an online lending platform, which may be an application, website, or other digital channel used to offer or process loans.

Confirm that the specific platform is associated with the same licensed company. Compare:

Exact app name
Website domain
App-store developer
Corporate operator
Privacy-policy entity
Customer-service email domain

A recorded company’s name being used by an unrelated app does not make that app legitimate. Fraudsters may clone an existing lender’s logo, company name, registration number, website design, or customer-service messages.

When the portal information is unclear, submit an inquiry through the SEC iMessage system. The system accepts inquiries and complaints involving financing and lending companies and provides ticket tracking. (Securities and Exchange Commission)

6. Match the lender across every document

Before accepting the loan, the following details should point to the same authorized entity or to clearly identified service providers acting for it:

Item	What to verify
App listing	Developer and operator
Terms and conditions	Contracting company
Loan agreement	Name of the creditor
Disclosure statement	Creditor and complete charges
Privacy policy	Personal information controller
Disbursement notice	Entity releasing the funds
Repayment instructions	Official company or payment partner
Collection messages	Lender or disclosed collection agency

Be especially careful when repayment is demanded through a personal bank account, personal e-wallet, QR code, or account name unrelated to the lender. Ask for written confirmation through the lender’s verified consumer-assistance channel before paying.

7. Read the disclosure statement before accepting

Compare the amount described as the “principal” with the money you will actually receive.

For example:

Stated loan: ₱5,000
“Processing fee”: ₱800
“Service fee”: ₱500
Amount released: ₱3,700
Amount due after seven days: ₱5,500

The cost is not merely the stated interest. The borrower received only ₱3,700 but is being required to repay ₱5,500. Upfront deductions, processing charges, membership fees, insurance, platform charges, and similar amounts may form part of the real cost of credit.

Before accepting, write down:

Amount actually released
Every fee deducted before release
Interest charged
Total repayment
Due date or installment schedule
Late-payment charge
Collection charge
Effective interest rate
Consequences of early or late payment

Under Republic Act No. 11765, pricing and cost information must be accurate, understandable, and disclosed before the consumer enters the transaction. (Supreme Court E-Library)

8. Check whether the loan falls under the BSP interest-rate caps

BSP Circular No. 1133 applies to certain unsecured, general-purpose loans offered by lending companies, financing companies, and their online lending platforms when:

The loan amount does not exceed ₱10,000; and
The loan term does not exceed four months.

For covered loans, the limits include:

Charge	Maximum for covered loans
Nominal interest rate	6% per month
Effective interest rate, including most fees	15% per month
Late-payment penalty	5% per month on the outstanding scheduled amount due
Total cost, including interest, fees, and penalties	100% of the amount borrowed

The 100% total-cost cap means that, for a covered ₱5,000 loan, total interest, fees, penalties, and similar charges generally cannot exceed another ₱5,000. It does not mean every borrower should automatically be charged up to the maximum.

These caps do not automatically apply to every loan of every size or term. Read the official text of BSP Circular No. 1133 before applying the limits to a particular transaction.

9. Review the app’s permissions

A loan app may reasonably need limited information to process an application, verify identity, prevent fraud, or disburse funds. It should not demand unrestricted access unrelated to those purposes.

Treat these requests as serious warning signs:

Full access to all contacts
Permission to read text messages unrelated to verification
Access to photos, videos, or files without a clear reason
Microphone or location access unrelated to the transaction
Permission to post or send messages in your name
Installation of a remote-access or screen-sharing app
Requests for your banking password, e-wallet PIN, or one-time password

Read the privacy policy to determine what data will be collected, why it is needed, who will receive it, how long it will be kept, and how you can exercise your privacy rights.

Common Signs of a Fake or Abusive Lending App

A single red flag may have an innocent explanation, but several together usually justify stopping the application.

Watch for:

The app cannot identify its full corporate operator.
The company appears in SEC records but has no lending or financing authority.
The Certificate of Authority belongs to another corporation.
The app is not associated with the company whose license it displays.
The lender asks for an advance “release,” “verification,” “insurance,” or “unfreezing” fee.
You are told to pay a personal account before receiving the loan.
The app promises guaranteed approval in exchange for a deposit.
Major charges appear only after acceptance.
The loan agreement is missing or cannot be downloaded.
The lender refuses to provide a disclosure statement.
The repayment amount changes without a written computation.
Collectors threaten arrest merely for nonpayment of an ordinary debt.
Collectors threaten to publish your ID, photograph, or contact list.
The app contacts relatives, co-workers, or unrelated contacts to shame you.
Customer support operates only through disposable social-media accounts.
The app requests an OTP, password, PIN, or remote access to your device.
The lender pressures you to borrow from another app to pay the first loan.

Being available on Google Play, Apple’s App Store, Facebook, or a popular e-wallet does not by itself prove that the lender is SEC-authorized.

What to Do If the App Cannot Be Verified

Do not send additional personal information or pay an advance fee while verification is unresolved.

Take these steps:

Save evidence. Capture the app listing, developer name, website, advertisements, claimed SEC numbers, loan terms, account names, phone numbers, messages, and requested permissions.
Check the exact corporate name again. A trade name may not appear in the corporate search. Look in the privacy policy and loan contract for the legal entity.
Ask the lender in writing. Request its SEC registration number, Certificate of Authority number, legal address, regulator, and official complaint channel.
Verify independently. Do not use only the links or phone numbers provided by a suspicious agent. Use the official SEC or BSP websites.
Submit an SEC inquiry. Use SEC iMessage when you cannot confirm the company’s authority or the platform’s relationship to the company.
Do not assume that an absent search result automatically settles every legal issue. Search errors, spelling differences, newly changed names, or incomplete public information can occur. Until the regulator confirms the lender’s status, however, withholding sensitive information and payment is the safer course.

Where to Report an Online Lending App

Securities and Exchange Commission

Report matters such as:

Operating without lending or financing authority
Misrepresentation of SEC registration
Use of another company’s license
Unrecorded or unauthorized online lending platforms
Undisclosed charges
Abusive collection by a lending or financing company
Failure to provide consumer-assistance channels

Submit the complaint or inquiry through the SEC iMessage portal. Include the app name, legal company name, Certificate of Authority number if available, screenshots, loan documents, payment records, and a chronological account of what happened. (Securities and Exchange Commission)

National Privacy Commission

Report matters involving:

Unauthorized access to contacts
Disclosure of your debt to unrelated persons
Public posting of your identity or loan information
Threats to distribute photographs or personal data
Unnecessary collection of device information
Continued processing after a valid objection, when applicable
Failure to respond to a data-privacy request

The NPC’s formal process generally requires a completed complaint-assisted form or verified complaint, supporting evidence, identification, and separate documentation for each respondent. Depending on the filing method, notarization may be required. Complaints may be submitted through the methods stated on the NPC complaint page. (National Privacy Commission)

Bangko Sentral ng Pilipinas

If the creditor is a bank, digital bank, or another BSP-supervised institution, use the institution’s consumer-assistance mechanism first and escalate through the BSP’s official consumer-protection channels when the matter remains unresolved.

Police or NBI

Report conduct involving possible fraud, identity theft, account takeover, extortion, threats of violence, falsified documents, or unauthorized transactions to the Philippine National Police or National Bureau of Investigation.

Bring organized evidence rather than only verbal allegations. Useful records include:

Screenshots with dates and numbers
Original text messages and emails
Bank or e-wallet transaction records
Loan agreements and disclosure statements
App-store URLs
Names of account holders who received money
Copies of threatening or defamatory posts
Proof that third parties were contacted

Frequently Asked Questions

Is an online lending app legitimate because it is on Google Play or the App Store?

No. An app-store listing does not replace SEC or BSP verification. Check the actual creditor, its regulatory authority, and the app’s connection to that creditor.

Is an SEC registration number enough?

No. It may show only that the corporation exists. A non-bank lender must also have the appropriate Certificate of Authority, and the specific online platform should be properly associated with that licensed company.

Can the app name be different from the company name?

Yes. Apps frequently use trade or brand names. The legal corporate operator and creditor must nevertheless be clearly disclosed, and all registration and authority details should match.

How do I know who the actual lender is?

Look at the loan agreement and disclosure statement. The creditor named there is more important than the app logo, app-store developer, payment processor, or e-wallet through which the loan is released.

Are all online loan charges limited to 15% per month?

No. The 15% effective monthly cap under BSP Circular No. 1133 applies only to loans within its coverage, including the specified amount and term limits. Other laws and rules may apply to loans outside that scope.

Can an online lender access my entire contact list?

An app should not indiscriminately collect and use your contacts. Limited access that allows you to choose a reference or guarantor is different from copying your entire address book and contacting people to pressure or shame you.

Can collectors call my employer, relatives, or friends?

They should not disclose your debt to unrelated persons or use third parties to embarrass you. Communications with a properly named guarantor may be treated differently, but harassment, public shaming, and unlawful disclosure of personal data remain prohibited. (Supreme Court E-Library)

What if the lender threatens to have me arrested?

Ordinary failure to pay a loan is generally a civil matter, not automatic grounds for arrest. Criminal liability depends on separate facts, such as fraud or another specific offense. A collector cannot lawfully use false threats of immediate arrest merely to force payment.

If the lender is unregistered, does that mean I no longer have to repay anything?

Do not automatically assume that lack of authority erases every obligation. The validity of the principal debt, interest, penalties, and collection remedies may involve separate legal questions. Preserve the amount actually received, payment records, contract, and charge computations while reporting the lender’s regulatory violation.

Can a foreigner file a complaint against a Philippine online lender?

Yes, particularly when the lender operates in the Philippines or the transaction and personal-data processing occurred here. A passport may serve as identification. When another person files for the complainant, the agency may require written authority or a special power of attorney; a document executed abroad may need notarization and an apostille depending on how it will be used.

Key Takeaways

“SEC registered” may mean only that the corporation exists; confirm its Certificate of Authority to lend or finance.
Verify that the specific app or website is genuinely associated with the licensed company.
Match the corporate name, creditor, privacy-policy entity, authority number, and payment details across all documents.
Read the disclosure statement and calculate the loan based on the money actually received, not merely the advertised principal.
App-store availability is not proof of government authorization.
Unnecessary access to contacts and the use of personal data for harassment or public shaming may violate Philippine privacy and consumer-protection laws.
Report licensing and lending violations to the SEC, privacy violations to the NPC, BSP-supervised lenders to the BSP, and suspected fraud, threats, or identity theft to the police or NBI.