If you are about to borrow from an online lending app in the Philippines, the safest first move is not to compare interest rates. It is to verify whether the lender is legally allowed to operate. Many illegal or abusive apps use official-looking names, fake SEC certificates, aggressive ads, and fast-approval promises to make borrowers feel safe. This guide explains how to check if an online lending company is legitimate in the Philippines, what SEC registration really means, what warning signs to watch for, and where to report harassment, privacy violations, and unauthorized lending.
What Makes an Online Lending Company “Legit” in the Philippines?
A legitimate online lending company is not just an app you can download from Google Play, the Apple App Store, Facebook, TikTok, or a website.
For an online lending platform to be legally safer to deal with, you should be able to verify three things:
- The company behind the app is a real corporation registered with the Securities and Exchange Commission (SEC).
- The company has the proper Certificate of Authority (CA) to operate as a lending company or financing company.
- The specific app, website, or online lending platform is recorded with the SEC as an online platform of that company.
This distinction matters because scammers often show only a Certificate of Incorporation. That proves only that a corporation exists. It does not automatically mean the corporation may lend money to the public.
Under the Implementing Rules of Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a Certificate of Authority is the certificate issued by the SEC allowing a lending company to engage in the lending business. The same rules define a lending company as a corporation that grants loans from its own capital funds or from funds sourced from not more than 19 persons, excluding banks, financing companies, pawnshops, cooperatives, and other credit institutions regulated by special laws. (Lawphil)
The Main Philippine Laws and Rules You Should Know
Republic Act No. 9474: Lending Company Regulation Act of 2007
RA 9474 regulates lending companies in the Philippines. In practical terms, it means a person or business cannot simply open a lending app and start giving loans to the public.
The law and its implementing rules require a lending company to be organized as a stock corporation and to secure authority from the SEC before operating. The rules also require lending companies to give borrowers a disclosure statement before the transaction is completed, showing the principal, interest rate, fees, amortization schedule, penalties, collection fees, notarial fees, and how the obligation will be computed in case of default. (Lawphil)
Republic Act No. 8556: Financing Company Act of 1998
Some online lenders operate not as “lending companies” but as financing companies. A financing company is also regulated by the SEC. It may extend credit facilities to consumers and enterprises through direct lending, discounting, factoring, leases, chattel mortgages, and similar credit transactions. RA 8556 says no person or corporation may hold itself out as a financing company unless authorized under the law. (Lawphil)
For borrowers, the practical point is simple: whether the app says “loan,” “cash advance,” “pay later,” “financing,” or “credit line,” you should check the company’s exact regulatory status.
Republic Act No. 3765: Truth in Lending Act
The Truth in Lending Act protects borrowers by requiring disclosure of the true cost of credit. It was enacted to protect citizens from lack of awareness of the real cost of borrowing, including interest, finance charges, service fees, and other charges connected with credit. (Lawphil)
If an app approves a loan but hides the real charges until after disbursement, deducts unexplained fees, or refuses to give a clear breakdown, that is a serious warning sign.
Republic Act No. 11765: Financial Products and Services Consumer Protection Act
RA 11765 strengthened financial consumer protection in the Philippines. It recognizes the rights of financial consumers to fair treatment, disclosure and transparency, protection against fraud and misuse, data privacy, and timely handling of complaints. (Supreme Court E-Library)
This law is important for online borrowers because digital loans involve both money and personal data. A legitimate lender must not only be registered; it must also treat borrowers fairly, explain charges clearly, and handle complaints properly.
SEC Memorandum Circulars on Online Lending
The SEC has issued specific rules for financing companies, lending companies, and online lending platforms, including:
| SEC issuance | Why it matters to borrowers |
|---|---|
| SEC Memorandum Circular No. 19, Series of 2019 | Requires disclosure in advertisements and reporting of online lending platforms. |
| SEC Memorandum Circular No. 18, Series of 2019 | Prohibits unfair debt collection practices by financing and lending companies. |
| SEC Memorandum Circular No. 7, Series of 2011 | Implements Truth in Lending rules to improve loan transaction transparency. |
These issuances appear under the SEC’s financing and lending company circulars. (SEC Appointment System)
Step-by-Step: How to Check If an Online Lending App Is Legitimate
1. Identify the Exact Company Behind the App
Do not verify only the app name. Many apps use brand names that are different from the corporation’s legal name.
Before applying, look for:
- The registered corporate name
- SEC registration number
- Certificate of Authority number
- Principal office address
- Official website
- Customer service email and phone number
- App developer name on Google Play or Apple App Store
- Privacy notice and loan terms
For example, the app may be called “FastCash PH,” but the company behind it may be “ABC Lending Company, Inc.” You need to verify the corporation, not just the brand.
Red flag: The app refuses to disclose the company name before you upload your ID.
2. Check the SEC List of Lending and Financing Companies
Go to the official SEC Lending Companies and Financing Companies page and look for the lists of:
- Lending companies with Certificate of Authority
- Financing companies with Certificate of Authority
- Recorded online lending platforms
The SEC page for lending and financing companies includes a section for the List of Recorded Online Lending Platforms, along with laws, issuances, procedures, advisories, notices, and FAQs. (Securities and Exchange Commission)
When checking the list, compare carefully:
| What to compare | Why it matters |
|---|---|
| App name | The exact app should be recorded, not just a similar-sounding name. |
| Company name | The app should match a registered lending or financing company. |
| SEC registration number | Scammers sometimes copy another company’s registration number. |
| Certificate of Authority | This is the key license for lending or financing activity. |
| Website and contact details | Fake apps often use unrelated email addresses, personal numbers, or social media-only pages. |
If the company appears in the list of corporations but the app itself does not appear in the recorded online lending platform list, be cautious. A legitimate company may have many products, but online lending platforms are expected to be reported and recorded.
3. Search the SEC Advisories, Suspension Orders, and Revocation Lists
A company may have been registered before but later suspended, revoked, or named in an advisory. This is why screenshots of old certificates are not enough.
Check the SEC website for:
- Advisories against unauthorized lending apps
- Cease and desist orders
- Revoked Certificates of Authority
- Suspended companies
- Unrecorded online lending platforms
The SEC and other government pages periodically publish advisories warning the public about unrecorded or unauthorized online lending platforms. In a 2026 advisory reposted by a local government unit, the SEC reminded the public that listed unrecorded OLPs were not authorized to offer, process, or provide loan products through app stores or websites. (Bulacan Provincial Government)
Practical tip: Search the app name together with words like “SEC advisory,” “revoked,” “unrecorded,” “harassment,” and “complaint.” If the results show repeated borrower complaints or an SEC warning, do not ignore them.
4. Verify the Certificate of Authority, Not Just the SEC Registration
This is one of the most common borrower mistakes.
A corporation may be registered with the SEC for a general business purpose, but it still may not have authority to operate as a lending company or financing company.
For lending companies, the IRR of RA 9474 states that the Certificate of Authority is the SEC-issued certificate allowing the company to engage in lending. It also provides penalties for engaging in lending business without valid SEC authority, including fines and imprisonment under the law. (Lawphil)
Ask for a clear copy of:
- SEC Certificate of Incorporation
- Certificate of Authority to operate as a lending company or financing company
- Latest corporate name, if amended
- Business name or trade name registration, if the app uses a brand name
- Disclosure statement for the specific loan
Red flag: The lender says, “SEC registered kami,” but cannot show a Certificate of Authority or refuses to identify the SEC-recorded online lending platform.
5. Check the Loan Disclosure Before Accepting the Money
A legitimate lender should show the true cost of the loan before you accept it.
Before tapping “Accept,” “Confirm,” or “Disburse,” look for:
- Principal loan amount
- Amount actually released to you
- Interest rate
- Effective interest rate
- Processing fee
- Service fee
- Verification fee
- Notarial fee, if any
- Due date
- Late payment penalty
- Total amount payable
- Collection process in case of default
Under the RA 9474 IRR, lending companies must furnish a disclosure statement before the transaction is consummated, including the principal, interest rate, fees, amortization schedule, penalties, collection fees, notarial fees, and default computation method. (Lawphil)
A common abusive pattern is this:
| App display | What actually happens |
|---|---|
| “Borrow ₱5,000” | Only ₱3,200 is released after deductions. |
| “0% interest” | Large processing or service fees are charged. |
| “7 days only” | Huge penalties are imposed immediately after default. |
| “No collateral” | The app harvests contacts and threatens public shaming. |
If the app will not show the full cost before release, do not proceed.
6. Check Whether the Charges Fit Current Interest and Fee Ceilings
For small, short-term loans, interest and fee ceilings now matter.
BSP Circular No. 1133 originally set ceilings for unsecured, general-purpose loans not exceeding ₱10,000 and with a tenor of up to four months: 6% nominal interest per month, 15% effective interest per month, 5% monthly cap on late-payment penalties, and a total cost cap of 100% of the amount borrowed.
The SEC later issued SEC Memorandum Circular No. 14, Series of 2025, recalibrating the effective interest rate ceiling for covered small loans. Based on SEC-reported coverage, the recalibrated rule applies to loans not exceeding ₱10,000 with terms of up to four months, entered into, restructured, or renewed beginning 1 April 2026; the effective interest rate cap is 12% per month, while the nominal interest cap remains 6% per month, late-payment penalties are capped at 5% per month on the outstanding scheduled amount due, and the total cost cap remains 100% of the total amount borrowed. (GMA Network)
For an ordinary borrower, this means:
| Covered loan item | Current practical check |
|---|---|
| Principal | Does not exceed ₱10,000 |
| Term | Up to 4 months |
| Nominal interest | Should not exceed 6% per month |
| Effective interest | Should not exceed 12% per month for covered loans from 1 April 2026 |
| Late penalty | Should not exceed 5% per month on the outstanding scheduled amount due |
| Total cost | Should not exceed 100% of the amount borrowed |
Example: If you borrow ₱5,000 under a covered small loan, the total cost cap means the total interest, fees, charges, and penalties should not exceed ₱5,000, regardless of how long the loan has been outstanding.
7. Review App Permissions and Data Privacy Practices
Many borrowers first realize an app is dangerous only after it accesses their contacts, photos, messages, or social media accounts.
The 2026 joint advisory of the DICT, National Privacy Commission, and SEC warned that government had received numerous reports of online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data in collection practices. The advisory states that unnecessary app permissions, excessive access to contact lists, contacting persons other than guarantors for debt collection, and processing that leads to harassment or unfair collection practices are prohibited.
Before installing or using an online lending app, check whether it asks for:
- Full contact list access
- SMS access
- Call log access
- Social media login
- Gallery access beyond identity verification
- Microphone access without reason
- Location access unrelated to the loan
- Permission that cannot be turned off after verification
The 2026 advisory also warns borrowers to download OLPs only from official or verified sources, read privacy notices carefully, watch for deceptive design patterns like pre-ticked consent boxes, and review permissions required by the app.
Red flag: The app says you must allow full contact access or your loan will not be approved.
8. Test the Lender’s Customer Service Before Borrowing
A legitimate lender should have a working, traceable, professional support channel.
Before applying, try asking:
- What is your SEC-registered company name?
- What is your Certificate of Authority number?
- Is this app recorded with the SEC as an online lending platform?
- Where can I view the full disclosure statement?
- How do I file a complaint or dispute a charge?
- Who is your Data Protection Officer?
- How can I revoke app permissions after KYC?
If the answers are evasive, automated, or threatening, treat that as a warning.
Common Warning Signs of Illegal or Abusive Online Lending Apps
“SEC Registered” but No Certificate of Authority
This is the classic half-truth. SEC registration alone is not enough for lending operations. The lender must have authority to operate as a lending company or financing company.
The App Name Is Not on the SEC Recorded OLP List
If the company is registered but the app is not recorded as an online lending platform, pause. You need to verify whether that app is actually authorized by the company and reported to the SEC.
The Loan Is Released Before You See the Full Charges
Some apps disburse a smaller amount than advertised, then demand repayment based on the full amount. This can violate transparency rules and may be evidence of unfair or deceptive practice.
The App Threatens Arrest, Barangay Action, or Public Shaming
Debt collection may be firm, but it cannot be abusive. Under the 1987 Constitution, no person shall be imprisoned for debt or non-payment of a poll tax. (Supreme Court E-Library)
This does not mean a borrower can ignore a valid loan. A lender may file a civil case, seek collection, or pursue lawful remedies. But threats like “ipapakulong ka namin bukas,” “ipapahiya ka namin sa contacts mo,” or “we will post your ID online” are serious warning signs.
The App Contacts Your Family, Employer, or Phone Contacts
The 2026 DICT-NPC-SEC advisory states that contacting persons in the borrower’s contact list other than named guarantors is prohibited for debt collection; lending and financing companies may contact only the guarantor for debt collection purposes.
A character reference is not automatically a guarantor. A guarantor must separately consent to assume responsibility for the loan if the borrower defaults.
The Interest Looks Small but the Fees Are Huge
An app may advertise “low interest” but add processing fees, platform fees, service fees, verification fees, and penalties. Always look at the effective interest rate and total amount payable, not just the advertised interest.
What Documents Should You Save Before and After Borrowing?
Keep evidence even if the lender appears legitimate. This helps if you later need to dispute charges, report harassment, or defend yourself in a collection case.
| Document or evidence | Why it matters |
|---|---|
| Screenshot of app name and developer | Helps identify the platform used. |
| Screenshot of SEC listing | Shows whether it appeared recorded when you checked. |
| Certificate of Authority copy | Shows claimed authority to lend. |
| Loan agreement | Shows the contractual terms. |
| Disclosure statement | Shows principal, interest, fees, penalties, and schedule. |
| Proof of amount received | Useful when the app deducts fees upfront. |
| Payment receipts | Prevents false claims of non-payment. |
| Chat messages and call logs | Useful for harassment or threat complaints. |
| Screenshots of public shaming posts | Evidence for SEC, NPC, police, or cybercrime reporting. |
| App permission screenshots | Useful for data privacy complaints. |
For overseas Filipinos and foreigners, save documents in PDF or image format with visible timestamps. If messages are in Filipino, Cebuano, or another Philippine language, preserve the original wording. Translation can be done later if needed for a formal process.
Where to Report a Suspicious or Abusive Online Lending Company
The correct office depends on the problem.
| Problem | Where to report |
|---|---|
| Unauthorized lending company or unrecorded OLP | SEC Financing and Lending Companies Department |
| Unfair debt collection by lending or financing company | SEC |
| Excessive or unauthorized use of personal data | National Privacy Commission |
| Threats, extortion, public shaming, identity misuse, cyber harassment | NBI Cybercrime Division or PNP Anti-Cybercrime Group |
| Fraudulent links, phishing, or online scam activity | DICT Cyber Hotline, NBI, or PNP |
The 2026 DICT-NPC-SEC advisory identifies the SEC iMessage portal for unfair debt collection complaints and also lists DICT, NBI Cybercrime Division, and PNP Anti-Cybercrime Group channels for other harassment, threats, fraud, and scams.
You can use the official SEC iMessage portal to submit complaints or inquiries. The SEC describes iMessage as its web-based platform for public inquiries, complaints, incidents, and requests. (Securities and Exchange Commission)
What If You Already Borrowed from an Illegal or Suspicious App?
Do not panic, but do not ignore the situation either.
If the loan was real and you received money
A loan can still create a civil obligation, even if the lender later turns out to have regulatory problems. Under Article 1159 of the Civil Code, obligations arising from contracts have the force of law between the parties and must be complied with in good faith. (Lawphil)
However, that does not give the lender the right to harass you, expose your data, threaten your contacts, or collect illegal charges.
If the interest or penalties are extreme
Article 1956 of the Civil Code states that no interest shall be due unless it has been expressly stipulated in writing. Philippine courts may also reduce interest or penalties that are excessive or unconscionable. In Medel v. Court of Appeals, the Supreme Court described a 5.5% monthly interest rate as excessive, iniquitous, unconscionable, and exorbitant. (Supreme Court E-Library)
For covered small online loans, also compare the charges against the applicable SEC/BSP ceilings.
If collectors are harassing your contacts
Document everything:
- Screenshot the messages sent to your contacts.
- Ask your contacts to preserve the messages.
- Record dates, times, phone numbers, account names, and exact words used.
- Save proof that the contacted person was not a guarantor.
- File with the SEC for unfair debt collection and with the NPC if personal data was misused.
- If there are threats, extortion, fake warrants, or public posts, report to cybercrime authorities.
Legitimate Lender vs. High-Risk Lender: Quick Comparison
| Checkpoint | Legitimate lender | High-risk or suspicious lender |
|---|---|---|
| Corporate identity | Clearly discloses registered company name | Uses app name only |
| SEC status | Has SEC registration and CA | Shows only incorporation papers |
| OLP status | App or website appears in recorded OLP list | App is missing, newly renamed, or copied |
| Disclosure | Gives full breakdown before release | Hides fees until after disbursement |
| Data privacy | Requests only necessary permissions | Requires full contact list or SMS access |
| Collection | Uses lawful notices and professional collectors | Threatens, shames, or contacts non-guarantors |
| Fees | Clear and within applicable caps | Large deductions and unclear penalties |
| Complaint process | Has traceable channels | Uses personal numbers, fake pages, or disappearing accounts |
Frequently Asked Questions
How do I know if an online lending app is SEC registered?
Check the SEC’s official lists for lending companies, financing companies, and recorded online lending platforms. Verify the exact company name, app name, Certificate of Authority, and registration number. Do not rely only on a screenshot sent by the lender.
Is SEC registration enough for an online lending company?
No. SEC registration only proves that the corporation exists. A lending or financing company also needs the proper Certificate of Authority, and its online lending platform should be recorded with the SEC if it offers loans through an app, website, or similar digital platform.
What is the difference between a lending company and a financing company?
A lending company generally grants loans from its own capital funds or limited funding sources. A financing company extends credit facilities through direct lending, leases, factoring, discounting, or similar transactions. Both are regulated by the SEC when they operate under RA 9474 or RA 8556.
Can an online lending app access my contacts?
An app should not demand unnecessary or excessive access to your contacts. Government guidance states that contacting people in your contact list other than named guarantors for debt collection is prohibited. A character reference is not automatically a guarantor.
Can I be jailed for not paying an online loan in the Philippines?
Nonpayment of debt alone is not a jailable offense because the Constitution prohibits imprisonment for debt. However, this does not erase a valid loan. A lender may pursue lawful civil collection remedies. Separate criminal issues may arise only if there is fraud, identity theft, falsified documents, or other criminal conduct.
What if the app is on Google Play or the App Store?
Being on an app store does not automatically mean the lender is licensed in the Philippines. Always check the SEC company and recorded OLP lists. App stores are distribution platforms, not Philippine lending regulators.
What if the company is legitimate but the collectors are abusive?
Report the collection conduct. A company may be registered and still violate debt collection, disclosure, consumer protection, or data privacy rules. Save screenshots, call logs, messages, and proof that third parties contacted were not guarantors.
Are online lending interest rates capped in the Philippines?
For covered small, short-term unsecured loans, yes. As of the recalibrated rules effective in 2026, covered loans not exceeding ₱10,000 and payable within up to four months are subject to ceilings on nominal interest, effective interest, late-payment penalties, and total cost. Larger or different loan products may be treated differently, so always read the disclosure statement and current SEC rules.
Where can I report an illegal online lending app?
For unauthorized lending or unfair debt collection, report to the SEC through its official channels, including the SEC iMessage portal. For misuse of personal data, report to the National Privacy Commission. For threats, fraud, extortion, fake warrants, or cyber harassment, report to the NBI Cybercrime Division or PNP Anti-Cybercrime Group.
Should foreigners in the Philippines use online lending apps?
Foreigners should be extra careful because some illegal lenders use immigration threats, fake police claims, or passport-related intimidation. Verify the SEC status first, avoid apps that demand unnecessary data, keep copies of all documents, and do not surrender passports or original IDs to a lender.
Key Takeaways
- A legitimate online lender should have a real SEC-registered company, a valid Certificate of Authority, and a recorded online lending platform.
- SEC incorporation alone is not enough proof that a company may legally lend to the public.
- Always verify the exact app name, company name, CA number, and SEC status using official SEC sources.
- Read the disclosure statement before accepting a loan; check the real amount released, total amount payable, interest, fees, and penalties.
- Online lending apps should not harvest contacts, shame borrowers, or contact non-guarantors for debt collection.
- Nonpayment of debt alone is not punishable by imprisonment, but a valid loan may still be collected through lawful civil remedies.
- Keep screenshots, contracts, receipts, app permissions, and messages before and after borrowing.
- Report unauthorized lending, unfair collection, data misuse, threats, and scams to the proper Philippine government agency.