If you are about to borrow from an online lending app or website in the Philippines, the safest first question is not “How fast can I get the money?” but “Is this lender legally allowed to operate?” Many illegal or unrecorded online lenders look professional, advertise “SEC registered,” and release small loans quickly, but later charge hidden fees, access your contacts, shame borrowers, or threaten criminal cases that do not actually apply. This guide explains how to check if an online lending company is legitimate in the Philippines, what government lists to verify, what red flags to watch for, and what to do if you already borrowed from a suspicious lender.
What Makes an Online Lending Company Legitimate in the Philippines?
An online lending company is not automatically legitimate just because it has an app, Facebook page, business permit, or SEC registration number.
In the Philippines, a legitimate lending company must generally have:
- SEC registration as a corporation
- A Certificate of Authority to Operate as a Lending Company or Financing Company
- A recorded online lending platform, if it lends through an app, website, or other fintech channel
- Transparent loan terms, including interest, fees, penalties, and payment schedule
- Lawful collection practices
- Proper handling of personal data under the Data Privacy Act
The main regulator is the Securities and Exchange Commission (SEC), not the Bangko Sentral ng Pilipinas (BSP), unless the lender is a bank, quasi-bank, e-money issuer, or other BSP-supervised financial institution.
Legal Basis: Philippine Laws and Rules That Apply
Several laws and regulations protect borrowers from illegal or abusive online lenders.
| Law or Rule | What It Covers |
|---|---|
| Republic Act No. 9474, Lending Company Regulation Act of 2007 | Requires lending companies to be corporations and secure SEC authority before operating |
| Republic Act No. 8556, Financing Company Act of 1998, as amended | Regulates financing companies, which may also offer credit products |
| Republic Act No. 3765, Truth in Lending Act | Requires lenders to disclose finance charges and effective interest before the borrower signs |
| Republic Act No. 10173, Data Privacy Act of 2012 | Protects borrowers from unlawful collection, use, sharing, or disclosure of personal data |
| SEC Memorandum Circular No. 18, Series of 2019 | Prohibits unfair debt collection practices by lending and financing companies |
| SEC Memorandum Circular No. 19, Series of 2019 | Requires lending and financing companies to report and register their online lending platforms |
| BSP Circular No. 1133, Series of 2021 and SEC Memorandum Circular No. 3, Series of 2022 | Set interest and fee ceilings for certain small-value, short-term loans |
| Revised Penal Code | May apply to threats, grave coercion, unjust vexation, libel, cyberlibel, or other abusive conduct depending on the facts |
You can check official SEC materials through the SEC lending and financing companies page and file SEC concerns through the SEC iMessage portal. For privacy violations, the National Privacy Commission accepts complaints through its official complaint process.
Step-by-Step: How to Check If an Online Lending Company Is Legitimate
1. Get the Exact Legal Name of the Company
Do not rely only on the app name. Many online lenders use brand names that are different from their SEC-registered corporate names.
Look for:
- Corporate name
- SEC registration number
- Certificate of Authority number
- Business address
- Contact email and phone number
- Name of the online lending platform or app
- Privacy policy
- Terms and conditions
For example, the app name may be “Fast Peso Loan,” but the legal company name may be “ABC Lending Corporation.” You need to verify the corporation, not just the app.
2. Check If the Company Is SEC-Registered
A corporation engaged in lending must be registered with the SEC. But this is only the first layer.
A company may be “SEC registered” as a corporation but still not authorized to lend. This is a common misleading claim.
What you are looking for is not merely:
“Registered with the SEC”
You are looking for:
“Registered with the SEC and issued a Certificate of Authority to Operate as a Lending Company or Financing Company.”
3. Verify the Certificate of Authority
Under RA 9474, a lending company must secure a Certificate of Authority from the SEC before it can operate as a lending company.
Check whether the company appears in the SEC’s official lists of:
- Registered lending companies
- Registered financing companies
- Companies with revoked or suspended authority
- Recorded online lending platforms
- Unrecorded or unauthorized online lending platforms
If the company cannot provide its Certificate of Authority number, or if the name does not match the SEC list, treat that as a serious warning sign.
4. Check If the App or Website Is a Recorded Online Lending Platform
For online lenders, it is not enough that the corporation exists. The actual app, website, or online lending platform should also be recorded with the SEC.
This matters because some companies use multiple app names. Others operate under app names that are not properly reported.
Check whether:
- The app name appears in the SEC list of recorded online lending platforms
- The app is connected to the same legal company name
- The website, privacy policy, and loan agreement all show consistent information
- The platform has not been included in SEC advisories on unrecorded platforms
If the company name and app name do not match, ask for clarification before borrowing.
5. Review the Loan Disclosure Before Accepting
A legitimate lender should clearly disclose the cost of the loan before you accept it.
Under the Truth in Lending Act, borrowers should be informed of key credit terms, including:
- Principal loan amount
- Interest rate
- Finance charges
- Processing fees
- Service fees
- Late payment penalties
- Total amount payable
- Due date or installment schedule
- Effective interest rate, where applicable
Be careful with apps that say “0% interest” but deduct large “processing,” “service,” or “platform” fees before releasing the money. What matters is the actual amount you receive compared with the total amount you must repay.
6. Check the Interest and Fees
For certain covered loans, especially small, unsecured, short-term consumer loans of up to ₱10,000 with a tenor of up to four months, BSP and SEC rules impose ceilings.
As a practical guide, watch for these limits:
| Charge | General Ceiling for Covered Loans |
|---|---|
| Nominal interest | 6% per month |
| Effective interest rate, including applicable fees | 15% per month |
| Late payment or non-payment penalties | 5% per month on the outstanding scheduled amount due |
If a loan of ₱3,000 gives you only ₱1,800 but requires ₱3,500 repayment after seven days, that is a major red flag even if the app calls the deduction a “service fee.”
7. Check the App Permissions
A legitimate lender should not demand excessive access to your phone.
Be cautious if the app asks for access to:
- Your entire contacts list
- Photos and videos
- Messages
- Call logs
- Social media accounts
- Location access not needed for the loan
- Permission to post or message people on your behalf
The Data Privacy Act requires personal data processing to be lawful, fair, transparent, and limited to a legitimate purpose. Accessing your contacts to shame you or pressure third parties is a common basis for complaints before the National Privacy Commission.
8. Search for SEC, NPC, and News Advisories
Before borrowing, search the exact app name and corporate name together with phrases like:
- “SEC advisory”
- “unrecorded online lending platform”
- “revoked certificate of authority”
- “NPC complaint”
- “online lending harassment”
- “data privacy violation”
Use official government sources first. Social media complaints can be useful warning signs, but they should not be your only basis.
Quick Legitimacy Checklist Before You Borrow
| Question | Safe Answer |
|---|---|
| Does the app disclose the legal corporate name? | Yes |
| Is the company registered with the SEC? | Yes |
| Does it have a Certificate of Authority to lend or finance? | Yes |
| Is the app or website recorded as an online lending platform? | Yes |
| Are fees, interest, penalties, and due dates clearly shown before acceptance? | Yes |
| Does the app avoid unnecessary access to contacts and private files? | Yes |
| Is there a real office address and customer support channel? | Yes |
| Is it free from SEC or NPC advisories? | Yes |
If you answer “no” or “not sure” to two or more items, do not proceed until you verify further.
Red Flags of an Illegal or Abusive Online Lending App
Be especially careful if the lender:
- Says “SEC registered” but cannot show a Certificate of Authority
- Uses only a mobile number, Telegram, WhatsApp, Viber, or Facebook page
- Has no clear company address
- Refuses to provide a written loan agreement
- Deducts large fees before releasing the loan
- Gives a very short repayment period, such as 7 days, with very high charges
- Requires access to your full contacts list
- Threatens to message your family, employer, neighbors, or barangay
- Sends shame messages or edited photos
- Threatens arrest for non-payment of an ordinary debt
- Claims you committed “estafa” simply because you failed to pay on time
- Uses fake court, police, NBI, or barangay documents
- Pressures you to borrow from another app to pay the first loan
Non-payment of a simple loan is usually a civil obligation, not automatically a criminal case. A lender may pursue lawful collection or file a civil case, but it cannot use threats, public shaming, or false criminal accusations to force payment.
What to Do If You Already Borrowed From a Suspicious Online Lender
1. Save All Evidence
Take screenshots and keep copies of:
- Loan agreement
- App name and app store page
- Company name and contact details
- Disbursement amount
- Repayment demand
- Text messages, calls, emails, and chat messages
- Threats sent to you or your contacts
- Proof of payments
- Any public posts or defamatory messages
- App permissions requested
Do not delete the app immediately if it contains evidence. First, document everything.
2. Pay Only Through Traceable Channels
If you decide to pay, use traceable payment methods such as bank transfer, e-wallet receipt, or official payment channel. Avoid sending money to random personal accounts unless the lender has clearly identified them as authorized collection channels.
Keep receipts. If the lender later claims you did not pay, your records matter.
3. Revoke App Permissions
On your phone settings, remove unnecessary permissions such as contacts, photos, camera, microphone, and location. You may also uninstall the app after preserving evidence.
For Android or iOS, check:
- App permissions
- Contacts access
- Photos access
- Notification access
- Installed device management permissions
4. File a Complaint With the SEC
File with the SEC if the issue involves:
- Unregistered or unauthorized lending
- No Certificate of Authority
- Unrecorded online lending platform
- Excessive fees or interest
- Misleading loan disclosures
- Unfair debt collection practices
- Harassment by collection agents
Use the SEC iMessage complaint portal and prepare your evidence in PDF, image, or document format.
5. File a Complaint With the National Privacy Commission
File with the NPC if the issue involves:
- Accessing your contacts without valid consent
- Messaging your relatives, employer, or friends
- Public shaming
- Posting your photo or personal details
- Using your personal data for threats
- Refusing to delete or correct personal data
- Excessive app permissions
The NPC has a formal complaint process through its filing a complaint page.
6. Consider Police, NBI, or Cybercrime Remedies for Threats
If the lender sends serious threats, obscene messages, fake warrants, edited photos, or public posts, you may also consider reporting to:
- Philippine National Police Anti-Cybercrime Group
- National Bureau of Investigation Cybercrime Division
- Local police station
- Barangay, if harassment is local and identifiable
Possible legal issues may include unjust vexation, grave threats, grave coercion, libel, cyberlibel, or data privacy violations, depending on the facts.
Common Real-Life Scenarios
“The app says it is SEC registered. Is that enough?”
No. SEC registration as a corporation is not the same as authority to lend. Ask for the Certificate of Authority and check whether the app itself is a recorded online lending platform.
“The lender is messaging my contacts. Does that mean I do not need to pay?”
Harassment does not automatically erase a valid debt. But it may give you grounds to complain to the SEC, NPC, or law enforcement. Separate the two issues: the debt may still exist, but abusive collection can still be illegal.
“Can I be arrested for not paying an online loan?”
For an ordinary unpaid loan, arrest is not the usual remedy. Debt collection is generally civil in nature. Criminal liability may arise only if there are additional facts, such as fraud from the beginning, falsified documents, threats, or other criminal acts. A collector who says “Police will arrest you today if you do not pay” is often using fear as a collection tactic.
“The app deposited money even though I did not clearly accept the loan.”
Document what happened immediately. Save screenshots showing whether you accepted or did not accept the terms. If money was sent without clear consent, do not spend it if possible. Contact the platform in writing and report suspicious conduct to the SEC.
“I am an OFW or foreigner. Can I still complain?”
Yes. You can still gather evidence and file online complaints with the SEC or NPC. If documents were executed abroad and must be used in a Philippine legal proceeding, notarization, consular acknowledgment, or apostille may be needed depending on the document and country. But for initial regulatory complaints, screenshots, receipts, emails, and IDs are usually the most important starting evidence.
Documents and Evidence to Prepare
| Purpose | Useful Documents |
|---|---|
| SEC complaint | App name, company name, screenshots, loan agreement, payment records, collection messages |
| NPC complaint | Screenshots showing use of personal data, contact-shaming, privacy policy, app permissions |
| Police or cybercrime report | Threats, fake warrants, defamatory posts, phone numbers, URLs, account names |
| Payment dispute | Receipts, transaction reference numbers, bank or e-wallet statements |
| Verification | SEC registration number, Certificate of Authority number, app store page, official website |
Frequently Asked Questions
How do I know if an online lending app is legit in the Philippines?
Check whether the company is SEC-registered, has a Certificate of Authority to operate as a lending or financing company, and whether the specific app or website is recorded as an online lending platform. Do not rely only on advertisements or screenshots sent by agents.
Is SEC registration enough for an online lender?
No. A company may be SEC-registered as a corporation but not authorized to lend. A legitimate lending company must have SEC authority to operate as a lending company or financing company.
Where can I check registered lending companies in the Philippines?
Start with the official SEC website, especially its lending and financing companies section. You may also use SEC iMessage to ask or file concerns if you cannot verify the company.
Can online lending apps access my contacts?
They should not access or use your contacts beyond what is lawful, necessary, transparent, and consented to. Using your contacts to shame, threaten, or pressure you may violate the Data Privacy Act and SEC debt collection rules.
What should I do if an online lender threatens to post my photo?
Save screenshots, links, phone numbers, and account names. Report the matter to the SEC for abusive collection, to the NPC for privacy violations, and to cybercrime authorities if there are threats, defamatory posts, or fake legal documents.
Can an online lending company file a case against me?
Yes, a legitimate lender may pursue lawful remedies to collect a valid debt. But it must use legal processes, not harassment, public shaming, threats, or fake police or court documents.
Are high interest rates illegal in online lending?
Some covered small-value, short-term loans are subject to interest and fee ceilings under BSP and SEC rules. Even outside those specific ceilings, Philippine courts may reduce interest, penalties, or charges that are unconscionable, excessive, or contrary to law and public policy.
What if the online lending app is not on the SEC list?
Do not borrow until you can verify it. If you already borrowed and the platform appears unrecorded or unauthorized, gather evidence and report it to the SEC.
Can I complain even if I still owe money?
Yes. A borrower with an unpaid loan can still complain about illegal lending, unfair collection, privacy violations, threats, or harassment. The existence of a debt does not give a lender the right to break the law.
Key Takeaways
- A legitimate online lender in the Philippines must be more than “SEC registered”; it should have a valid authority to lend and a recorded online lending platform.
- Always verify the corporate name, Certificate of Authority, app name, interest, fees, and privacy practices before borrowing.
- Watch for red flags such as hidden fees, access to contacts, fake legal threats, public shaming, and pressure to pay through personal accounts.
- The SEC handles unauthorized lending and abusive collection by lending or financing companies.
- The NPC handles misuse of personal data, contact-shaming, and privacy violations.
- Non-payment of an ordinary loan is generally a civil issue, but threats, harassment, fake documents, and privacy abuse may create separate legal liabilities.