Before uploading a selfie, government ID, payslip, or contact references to an online lending app, verify the company behind the app—not just the app’s brand name. In the Philippines, a legitimate non-bank lender should generally pass three separate checks: the operator is registered as a corporation with the Securities and Exchange Commission (SEC), it holds a valid authority to conduct lending or financing, and the app or online lending platform is properly connected to that licensed operator. A Play Store listing, an SEC logo, or a registration number shown in an advertisement does not prove all three.

What “SEC-Registered Lending App” Actually Means

People often ask whether a lending app is “SEC-registered,” but that phrase can refer to different things.

A company may be registered with the SEC simply because it was incorporated. That registration gives the company a legal existence, but it does not automatically authorize the company to lend money to the public.

Under the Lending Company Regulation Act of 2007, or Republic Act No. 9474, a lending company must be organized as a stock corporation and must obtain a Certificate of Authority, commonly called a CA, from the SEC before conducting lending operations. Financing companies are subject to a similar authorization requirement under the Financing Company Act of 1998, or Republic Act No. 8556. (Lawphil)

The checks can be understood this way:

What you are checking	What it proves	What it does not prove
SEC company registration	The corporation legally exists	That it may legally offer loans
Certificate of Authority or secondary license	The company is authorized to operate as a lending or financing company	That every app using its name is genuine
Recorded or reported online lending platform	The app or platform has been identified as operating under the company	That every loan term or collection practice is lawful
Current regulatory status	The authority has not been suspended or revoked	That borrowing from the app is affordable or risk-free

SEC Memorandum Circular No. 19, Series of 2019 requires lending and financing companies to make proper disclosures in advertisements and report their online lending platforms. This is why checking only the corporation’s name is incomplete: the app’s brand or trade name must also be traceable to the licensed company operating it. (SEC Appointment System)

How to Check If an Online Lending App Is SEC-Registered

1. Identify the app’s exact legal operator

Do not begin by searching only the name displayed on your phone. An app called “Quick Peso,” for example, may be operated by a company with a completely different corporate name.

Look for the operator’s full legal name in the following places:

The developer information on the Google Play Store or Apple App Store
The app’s “About,” “Terms and Conditions,” or “Privacy Policy” pages
The website footer
The loan agreement or promissory note
The disclosure statement provided before loan approval
Emails, text messages, or collection notices
The name shown beside the disbursement or payment account

Record as many of these details as possible:

Information to record	Example of what it may look like
App or platform name	ABC Cash
Full corporate name	ABC Lending Corporation
SEC registration number	CS2019XXXXXX
Certificate of Authority number	CA No. XXX
App developer name	ABC Technologies Inc.
Website or domain	abccash.ph
Business address	Full Philippine office address
Customer-service email	support@abccash.ph
App package ID	com.company.appname

An app’s package ID is especially useful when several apps have similar names or when an app changes its display name. On Android, it often appears in the Google Play Store web address after id=.

2. Search the legal company name through “Check with SEC”

Go to the official SEC Check with SEC portal.

Use the company’s complete legal name, not merely the lending app’s brand. Search variations only when necessary—for example, with and without “Inc.,” “Corporation,” or punctuation.

Review the result carefully. You are looking for:

An exact or clearly matching corporate name
A valid SEC registration
A secondary license or authority relating to lending or financing
A Certificate of Authority or license number, when displayed
A status that does not indicate revocation, suspension, cancellation, or expiration

The SEC has repeatedly identified Check with SEC as its official public verification platform. It is safer than relying on screenshots circulated by the lender, social-media posts, crowdsourced lists, or third-party “verification” websites. (Facebook)

3. Confirm that the company has authority to lend

Finding the company in the SEC database is not enough.

Look specifically for wording showing that the entity holds a secondary license, Certificate of Authority to Operate as a Lending Company, or Certificate of Authority to Operate as a Financing Company.

This distinction matters because an ordinary corporation can be incorporated for technology, marketing, consultancy, or other purposes without being authorized to offer loans.

Operating a lending company without a valid SEC authority is punishable under RA 9474. The law provides for fines, imprisonment, or both, depending on the violation and circumstances. (Lawphil)

4. Match the app name to the licensed company

After finding the company, check whether the app or platform is actually associated with it.

The SEC’s financing and lending resources include a List of Recorded Online Lending Platforms. Search both:

The app’s public brand name
The company’s complete legal name

A match is stronger when the list connects the exact app name to the same company and Certificate of Authority found through Check with SEC.

Be cautious when:

The licensed company’s name appears, but the app does not
The app is listed under a different operator
The app claims to have “partnered” with a licensed lender but does not identify that lender in the loan agreement
The app uses the Certificate of Authority of another company
The developer listed in the app store has no clear relationship to the lender
The app recently changed its name, owner, website, or package ID

Static PDF lists found through search engines may be several years old. A company that appeared on an older SEC list may later have changed its name, stopped operating, surrendered its authority, or been suspended or revoked. Use the live SEC portal and an official status request when the available records conflict.

5. Request official confirmation through SEC iMessage

When the online result is incomplete, unclear, or inconsistent, use SEC iMessage.

The platform creates a trackable ticket for inquiries, requests, and complaints. Under the Financing and Lending Companies Department, the available services include a Request for Certification of Status on Certificate of Authority and complaints involving lending or financing companies. (Securities and Exchange Commission)

Include the following in your request:

Complete corporate name
App or platform name
SEC registration number, if available
Certificate of Authority number, if claimed
Website address
App-store link
Developer name
Screenshots of the app’s representations
Copy of the loan agreement or disclosure statement, if you already received one
A clear question asking whether the company’s authority is active and whether the app is recorded under it

Response times can vary depending on the completeness of the information and whether SEC personnel must examine historical or enforcement records. A request containing exact identifiers is easier to process than one that provides only a generic app name.

6. Search for SEC advisories and enforcement actions

A company may have been properly licensed at one point but later become subject to:

A cease-and-desist order
Suspension of its Certificate of Authority
Revocation of its authority
Cancellation of corporate registration
An SEC advisory warning the public about an unauthorized app
Penalties for unfair collection practices or undisclosed online platforms

Search the SEC website using the company name, app name, and phrases such as:

“[App name] SEC advisory”
“[Company name] suspension”
“[Company name] revocation”
“[App name] cease and desist”
“[Company name] lending complaint”

Check the date of each advisory. An old warning may involve a former version of the app, while a recent order may not yet appear in third-party articles or cached lists.

7. Check the lender named in the actual loan documents

The legal lender should be identifiable in the loan agreement and disclosure statement.

Before accepting the loan, confirm that the documents show:

The lender’s complete legal name
Business address and contact details
Principal loan amount
Interest and finance charges
Processing or service fees
Net proceeds you will actually receive
Payment schedule
Late-payment charges and penalties
Total amount payable
Collection procedures
Consequences of default

The Truth in Lending Act, or Republic Act No. 3765, requires creditors to disclose the true cost of credit before the transaction is completed. The implementing rules for lending companies require disclosure of the principal, interest, service or processing fees, amortization schedule, penalties, collection expenses, and other relevant charges. (Lawphil)

A lender’s registration does not cure a missing, misleading, or incomplete disclosure statement.

How to Read the Verification Results

Signs that the app may be properly authorized

Positive indicators include:

The legal company name appears in the SEC portal
The company has an active lending or financing authority
The Certificate of Authority number is consistent across official records and loan documents
The app appears under the same company in the SEC’s recorded online platform information
The app-store developer, privacy policy, website, and contract identify the same operator or explain their relationship
Payments are directed to an account held by the lender or an identifiable authorized payment processor
The loan cost and collection rules are disclosed before acceptance
The app provides a real office address and functioning complaint channel

No single indicator is conclusive. Look for consistency across all records.

Red flags that require further verification

Red flag	Why it matters
“SEC-registered” claim with no Certificate of Authority	The company may exist but may not be authorized to lend
Certificate issued to a different company	The app may be borrowing or misusing another entity’s credentials
Blurred, cropped, or edited certificate	Important status details may be concealed
Only a social-media page or chat account	There may be no accountable Philippine operator
Payment requested through a personal account	It may be difficult to prove who received the money
Upfront “unlocking,” “insurance,” or “release” fee	Common warning sign in advance-fee loan scams
Legal name changes between the app, contract, and payment instructions	The true creditor may be concealed
No disclosure statement before acceptance	You cannot properly evaluate the true cost of the loan
Excessive demand for contact, photo, or social-media access	The app may be collecting data unrelated to legitimate lending needs
Pressure to act immediately	The operator may be trying to prevent meaningful verification

A processing fee is not automatically unlawful merely because it exists. The serious warning signs are when the fee is undisclosed, deducted differently from what was promised, paid before any genuine loan release, or sent to an unrelated personal account.

What If the App Does Not Appear in the SEC Search?

A missing search result does not always establish that the app is illegal, but it is a strong reason to stop and investigate.

Possible explanations include:

You searched the brand instead of the corporate name. The SEC database may contain “XYZ Lending Corporation,” while the app is marketed as “PesoGo.”
The developer is not the lender. A technology company may maintain the app while a separate licensed company extends the credit. The loan documents must clearly identify the actual creditor.
The company changed its name. Search the former name, amended name, and SEC registration number.
The loan is offered by a bank or another BSP-supervised institution. Banks and certain financial institutions are primarily regulated by the Bangko Sentral ng Pilipinas rather than licensed as lending companies under RA 9474. Verify the institution through the BSP directory of regulated financial institutions. (Bangko Sentral ng Pilipinas)
The app is a marketplace or loan facilitator. The platform may connect borrowers with several lenders. Each actual lender should be clearly identified before a loan is accepted.
The authority was suspended, revoked, or surrendered. An old certificate or article may no longer reflect the current status.
The app is genuinely unauthorized. Do not provide additional IDs, contact access, one-time passwords, or upfront payments while its status remains unconfirmed.

When the result is uncertain, request a formal status confirmation through SEC iMessage rather than accepting the lender’s own explanation as proof.

Does SEC Registration Mean the Lending App Is Safe?

No. SEC registration and a valid Certificate of Authority are threshold requirements, not a government guarantee that an app is affordable, secure, ethical, or suitable for you.

A registered lender can still face complaints involving:

Undisclosed charges
Misleading advertisements
Excessive or confusing loan renewals
Unauthorized personal-data collection
Threats or humiliation during collection
Contacting unrelated persons
Misrepresentation of legal consequences
Improper use of photos, contact lists, or social-media information

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt-collection practices by financing and lending companies. The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765, also recognizes consumers’ right to protection from abusive collection or debt-recovery practices. (SEC Appointment System)

Check the App’s Permissions and Privacy Practices

Under the Data Privacy Act of 2012, or Republic Act No. 10173, personal information must be collected and processed for a declared, lawful, and proportionate purpose.

National Privacy Commission rules prohibit online lending apps from harvesting a borrower’s phone or social-media contact lists for harassment. References and co-makers should also be given appropriate privacy information rather than having their data silently collected through the borrower’s phone. (National Privacy Commission)

Before granting permission, ask whether the requested access is genuinely necessary:

Permission	Questions to ask
Contacts	Why does the lender need the entire contact list rather than the references you voluntarily provide?
Photos and media	Is access limited to uploading a selected ID or document, or does the app seek access to the entire gallery?
Camera	Is it needed only for identity verification?
Location	Is precise continuous location necessary, or would a stated address be sufficient?
Microphone	What legitimate lending purpose requires it?
SMS	Is the app reading only a verification code, or requesting broad access to messages?

A March 2026 joint advisory from the Department of Information and Communications Technology, National Privacy Commission, and SEC reminded borrowers to download lending apps only from official or verified sources, examine deceptive consent designs, limit permissions to what is necessary, and be cautious about applications seeking access to contacts, photos, and other personal data.

Verify Where the Money Is Going

Before paying any amount, compare the payment instructions with the verified lender’s identity.

Be especially careful when instructed to pay through:

A personal GCash or Maya account
A personal bank account unrelated to the lender
Cryptocurrency
A remittance recipient using an individual’s name
A newly created QR code without merchant identification
Multiple accounts that change from one collection message to another

Ask for an official payment channel and receipt showing:

The lender’s legal name
Your loan or account reference
Amount paid
Date and time
Purpose of the payment
Remaining balance, when applicable

A digital wallet may be only the payment channel. The company named in the loan contract—not necessarily the wallet brand—is the entity whose authority must be verified.

Evidence to Save Before Reporting a Suspicious Lending App

Preserve evidence before uninstalling the app or losing access to your account.

Save:

App-store listing and URL
App name, icon, version, developer name, and package ID
Website and privacy-policy pages
Loan advertisements
SEC registration and Certificate of Authority claims
Loan application screens
Disclosure statement and contract
Amount promised and amount actually received
Receipts and account statements
Payment account names and numbers
Text messages, emails, and in-app chats
Call logs and voice messages
Threats, defamatory posts, or messages sent to contacts
Permission screens and consent notices
Names, phone numbers, dates, and times

Keep full, uncropped screenshots when possible. Cropped images may omit the sender, date, URL, or account information needed to authenticate the evidence.

Where to Report an Unlicensed or Abusive Lending App

Securities and Exchange Commission

Use SEC iMessage for:

Suspected unlicensed lending
Misuse of another company’s Certificate of Authority
Unrecorded online lending platforms
Misleading advertisements
Unfair debt-collection practices
Requests for confirmation of a lender’s current authority

The SEC’s Financing and Lending Companies Department handles complaints and Certificate of Authority status requests. The government’s March 2026 joint advisory also directed complaints involving unfair collection practices to the SEC through iMessage and the SEC hotline.

National Privacy Commission

Report possible violations involving:

Unauthorized access to contacts
Disclosure of debt to unrelated persons
Posting or circulating personal information
Use of photographs for humiliation
Excessive or deceptive data collection
Failure to honor data-subject rights

Information on privacy complaints is available through the National Privacy Commission website.

Law-enforcement and cybercrime agencies

Report scams, account takeovers, identity theft, extortion, serious threats, or fraudulent payment demands to the appropriate authorities, which may include:

Philippine National Police Anti-Cybercrime Group
National Bureau of Investigation Cybercrime Division
Cybercrime Investigation and Coordinating Center
Local police, particularly when there are immediate threats to safety

Do not erase threatening messages or payment records before making copies.

Special Considerations for OFWs and Foreign Borrowers

The same basic verification process applies whether you are in the Philippines or abroad.

For an app offering a loan governed by Philippine law, check the Philippine legal entity identified as the creditor. Registration of a foreign parent company in another country does not replace the Philippine authorization required for the local lending operation.

Also check:

Whether the contract identifies a Philippine lender
Which country’s law governs the loan
Where disputes must be filed
Whether the app has an actual Philippine office or authorized representative
Whether payment instructions lead to the verified creditor
Whether the requested passport, visa, or foreign identity documents are proportionate to legitimate identity verification

An ordinary consumer loan application should not require apostilled foreign documents merely because the borrower is abroad unless the lender can clearly explain why they are necessary. Avoid sending highly sensitive documents through personal messaging accounts or unverified upload links.

Frequently Asked Questions

Is an SEC registration number enough to prove that a lending app is legitimate?

No. An SEC registration number may prove only that the corporation exists. Check whether the company also holds a valid Certificate of Authority to operate as a lending or financing company and whether the app is connected to that authorized operator.

How do I know whether a Certificate of Authority is still active?

Check the company through the official SEC portal and search for recent suspension, revocation, or cease-and-desist orders. When the status remains unclear, request a Certification of Status on Certificate of Authority through SEC iMessage.

Why can I find the company but not the lending app?

The app may use a different brand, may be operated by a technology provider, may not have been properly reported, or may be falsely claiming a relationship with the company. Compare the app’s privacy policy, developer details, contract, and recorded platform information.

Can an app be available on Google Play or the Apple App Store and still be unauthorized?

Yes. App-store availability is not the same as Philippine regulatory approval. Store screening and SEC licensing are separate processes. Verify the company and its lending authority independently.

Are loan offers inside GCash, Maya, or another e-wallet automatically SEC-registered?

Not necessarily. The wallet may serve only as a platform or payment channel. Read the loan documents to identify the actual lender, then verify that lender through the SEC or, when it is a bank or BSP-supervised institution, through the BSP directory.

Is the loan automatically cancelled if the lender is unregistered?

Do not assume that the debt or principal automatically disappears. Operating without authority may expose the lender to regulatory and criminal penalties, but the legal consequences for an existing loan can depend on the contract, the amounts actually received, applicable interest and charges, and the circumstances of the transaction. Preserve the records of disbursement and all payments.

What should I do if I already borrowed from a suspicious app?

Save the contract, disclosure statement, disbursement record, payment history, communications, and app information. Verify the operator’s status, pay only through an identifiable official channel, obtain receipts, and report unlicensed activity, threats, or privacy violations to the appropriate agency.

Can a registered lender contact my family, employer, or phone contacts?

Registration does not give a lender unlimited authority to disclose your debt. Contacting a properly designated guarantor or reference for a legitimate purpose is different from broadcasting the debt, threatening contacts, or using the contact list to shame the borrower. Those practices may violate SEC collection rules and data-privacy requirements.

Does SEC registration mean the interest and fees are automatically lawful?

No. Registration does not validate undisclosed, misleading, or otherwise unlawful charges. Review the disclosure statement, actual proceeds, finance charges, payment schedule, penalties, and total amount payable before accepting the loan.

Can a foreign-owned company legally operate a lending app in the Philippines?

Foreign ownership may be allowed under applicable corporate and investment rules, but the lending operation must still be conducted through a properly registered and authorized entity. A foreign company’s overseas license or website is not a substitute for the required Philippine authority.

Key Takeaways

Search the company behind the app, not only the app’s brand name.
SEC incorporation alone is insufficient; look for a valid Certificate of Authority to operate as a lending or financing company.
Confirm that the app or online platform is properly connected to the same licensed operator.
Use the official Check with SEC portal and request formal status confirmation through SEC iMessage when records are unclear.
Treat app-store availability, SEC logos, certificate screenshots, and social-media claims as supporting information—not conclusive proof.
Verify the loan disclosure, payment account, privacy permissions, and collection practices even when the lender is properly registered.
Preserve complete evidence and report suspected unlicensed lending, harassment, fraud, or privacy violations to the appropriate government agency.