Before you borrow from an online lending app, do not stop at “SEC registered.” In the Philippines, an online lender must be tied to a real corporation with the proper Certificate of Authority from the Securities and Exchange Commission (SEC), and the online lending platform itself should be properly reported or recorded with the SEC. This matters because many abusive apps use impressive-looking names, fake certificates, or borrowed registration numbers to appear legitimate. This guide explains how to check if an online lending company is licensed in the Philippines, what documents and warning signs to look for, and where to report unlicensed or abusive lenders.

What “Licensed” Means for an Online Lending Company in the Philippines

For most non-bank online lenders, “licensed” means more than having a corporation registered with the SEC.

A legitimate online lender usually needs two layers of verification:

What to check	What it means	Why it matters
SEC corporate registration	The entity exists as a corporation	This alone does not authorize lending
Certificate of Authority (CA)	The SEC authorized it to operate as a lending or financing company	This is the key license for lending or financing business
Recorded/reported online lending platform	The app, website, or digital platform is linked to a licensed lending or financing company	This helps confirm that the app is not a rogue or unreported platform

The most common mistake is believing that an SEC Registration Number is enough. It is not.

A corporation may be registered with the SEC for many lawful purposes, but it cannot legally operate as a lending company unless it has the proper SEC authority to do so.

Legal Basis: Why Online Lenders Need SEC Authority

Lending companies under RA 9474

Republic Act No. 9474, or the Lending Company Regulation Act of 2007, governs lending companies in the Philippines.

Under RA 9474, a lending company is generally a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. The law expressly provides that a lending company must be organized as a corporation and must have authority from the SEC before conducting business.

The important rule is simple: no lending company may conduct business unless it has been granted authority to operate by the SEC.

RA 9474 also gives the SEC power to supervise lending companies, require reports, conduct examinations, impose fines, and suspend or revoke the company’s authority to operate.

A person or entity that operates as a lending company without a valid SEC authority may face penalties under RA 9474, including fines and imprisonment, depending on the facts.

Official legal text: Republic Act No. 9474 on the Supreme Court E-Library

Financing companies under RA 8556 and RA 10881

Some online lenders operate as financing companies rather than lending companies.

Republic Act No. 8556, or the Financing Company Act of 1998, regulates financing companies. A financing company may extend credit facilities through direct lending, discounting, factoring, financial leasing, and similar credit transactions.

Republic Act No. 10881 amended certain foreign ownership rules and allowed lending and financing companies to be up to 100% foreign-owned, subject to limitations involving land and constitutional restrictions.

This means a foreign-owned lending or financing company is not automatically illegal. What matters is whether it is properly registered and authorized by the SEC.

Official legal text: Republic Act No. 8556 on Lawphil and Republic Act No. 10881 on the Supreme Court E-Library

Online lending platforms under SEC rules

The SEC issued Memorandum Circular No. 19, Series of 2019, on disclosure requirements for financing companies, lending companies, and online lending platforms.

Under these rules, lending and financing companies using online lending platforms must disclose key information in advertisements and digital platforms, including:

Corporate name
SEC Registration Number
Certificate of Authority number
Clear advisory for borrowers to study the terms and conditions in the Disclosure Statement
Proper reporting or recording of online lending platforms

Official SEC issuance page: SEC MC No. 19, Series of 2019

The Difference Between “SEC Registered” and “SEC Licensed”

This distinction is crucial.

Claim by the lender	What it may mean	What you should check
“SEC registered”	The corporation exists in SEC records	Ask for the SEC Registration Number and corporate name
“With CA” or “licensed lending company”	The company claims authority to lend	Verify the Certificate of Authority number in the SEC list
“Registered online lending app”	The app claims to be reported to the SEC	Check the SEC list of recorded online lending platforms
“DTI registered”	It may only have a business name registration	Not enough for lending company operations
“With mayor’s permit”	It may be locally permitted to operate an office	Not enough for lending authority
“Available on Google Play/App Store”	The app passed platform listing requirements	Not proof of Philippine SEC authority

The safest practical rule is this:

The legal company name, SEC Registration Number, Certificate of Authority number, app name, website, and advertised brand should match or clearly connect with each other.

If the app name is “Fast Peso Loan,” but the SEC certificate belongs to a completely different company and there is no clear link between them, treat that as a serious warning sign.

Step-by-Step Guide: How to Check If an Online Lending Company Is Licensed

1. Get the Exact Name of the Company Behind the App

Before checking the SEC lists, gather the lender’s identifying details.

Look for these in the app, website, loan agreement, disclosure statement, privacy notice, SMS messages, emails, or app store page:

App name or platform name
Corporate name of the operator
SEC Registration Number
Certificate of Authority number
Business address
Website URL
Email address and hotline
Name of the financing or lending company funding the loan
App store developer name
Privacy policy company name

Do not rely only on the brand name. Many online lenders use trade names that are different from their corporate names.

Example:

What appears to the borrower	What you need to find
“QuickCash PH”	The corporation legally operating the app
“PesoFast Loan App”	The lending or financing company with SEC CA
“Loan approved by our partner”	The actual lender, not just the marketing platform

If the app refuses to identify the legal company behind it, that is already a red flag.

2. Check the SEC List of Lending Companies With Certificate of Authority

Go to the official SEC list of lending companies:

SEC list of lending companies with Certificate of Authority

Search the exact corporate name using Ctrl + F on desktop or “Find in Page” on mobile.

Check for:

Exact corporate name
SEC Registration Number
Certificate of Authority number
Date of CA issuance
Address, if listed
Status, if indicated

A close spelling match is not enough. Some illegal operators use names that are very similar to legitimate companies.

For example, if the official list says “ABC Lending Corporation,” but the app says “ABC Loan Philippines Ltd.” or “ABC Finance Online,” verify further before sending IDs, selfies, bank details, or contact permissions.

3. Check the SEC List of Financing Companies

Some legitimate lenders are financing companies, not lending companies.

Check the official SEC list here:

SEC list of financing companies

This is especially important if the loan involves:

Installment financing
Buy-now-pay-later arrangements
Gadget or appliance financing
Vehicle financing
Merchant or SME financing
Salary or payroll-related credit
Consumer financing through partner stores or apps

Again, match the corporate name and Certificate of Authority details.

4. Check the SEC List of Recorded Online Lending Platforms

Even if the company has a CA, the specific app or website should also be checked.

Use the SEC’s list of recorded online lending platforms:

SEC list of recorded online lending platforms

Look for both:

The app/platform name; and
The licensed lending or financing company behind it.

This is where many questionable apps fail. A company may have authority to operate as a lending company, but a particular app may not be properly recorded or may be using a different brand not connected to the licensed entity.

If the app is not listed but the company claims it is “new,” ask the company to identify the SEC filing or confirmation showing that the online lending platform has been properly reported.

5. Check the SEC List of Revoked, Suspended, or Penalized Companies

Do not stop after finding a company name in an old list or screenshot. A company may have been licensed before but later suspended or revoked.

Check the SEC’s page for revoked or suspended lending and financing companies:

SEC list of revoked and suspended lending and financing companies

Also search the SEC website for advisories, cease-and-desist orders, and enforcement actions.

Use search terms like:

Company name + “SEC advisory”
App name + “SEC Philippines”
Company name + “revoked”
App name + “online lending platform”
Company name + “Certificate of Authority”

If the company appears in a revocation, suspension, cease-and-desist, or enforcement notice, do not rely on old marketing claims.

6. Check the Required Disclosures in the App or Advertisement

A legitimate online lender should not hide the basic legal details.

Under SEC MC No. 19, Series of 2019, lending and financing companies should disclose key information in advertisements and online lending platforms. In practice, check whether the app or website clearly shows:

Corporate name
SEC Registration Number
CA number
Business address
Contact details
Consumer assistance channel
Privacy notice
Loan terms and conditions
Disclosure Statement

Be cautious if the app only shows a logo, nickname, mobile number, Telegram account, Facebook page, or personal GCash/Maya account.

7. Request Proof Directly From the Company

A legitimate lender should be able to provide basic documents or direct you to official records.

You may ask for:

Document or detail	Why it matters
SEC Certificate of Incorporation	Shows the corporation exists
Certificate of Authority to Operate as Lending/Financing Company	Shows authority to lend or finance
SEC Registration Number	Lets you search official records
CA number	Lets you verify lending/financing authority
Disclosure Statement	Shows loan amount, finance charges, rates, fees, and payment terms
Privacy Notice	Shows how your personal data will be collected, used, stored, and shared
Official payment channels	Helps avoid paying scammers or fake collectors

If they send you a certificate image, inspect it carefully. Fake certificates often have blurred text, mismatched names, altered dates, missing CA numbers, or company names that do not match the app.

For official SEC documents, you may use the SEC Express System to request plain or authenticated copies of available SEC records. Delivery is usually within several working days from release by the SEC, with service and delivery fees depending on the request.

8. Verify Through the SEC if the Result Is Unclear

If you cannot confirm the lender from the public lists, submit an inquiry or complaint through the SEC’s official ticketing system:

SEC iMessage

Prepare:

App name
Corporate name, if shown
SEC Registration Number, if shown
CA number, if shown
Website or app store link
Screenshots of the app profile, loan offer, messages, and disclosure statement
Your short explanation of what you want verified

The SEC’s 2026 public advisory on online lending platforms identifies SEC iMessage as the proper channel for unfair debt collection complaints involving lending and financing companies.

Quick Verification Checklist

Use this before borrowing:

Question	Safe answer
Is the legal corporate name visible?	Yes
Does it have an SEC Registration Number?	Yes
Does it have a Certificate of Authority number?	Yes
Is the company in the SEC list of lending or financing companies?	Yes
Is the app or platform in the SEC list of recorded online lending platforms?	Yes
Is the company absent from revoked/suspended lists?	Yes
Does the app provide a Disclosure Statement before loan release?	Yes
Are interest, fees, penalties, and due dates clear?	Yes
Does the app avoid excessive permissions like full contact harvesting?	Yes
Are payment channels under the company’s official name?	Yes

If several answers are “No,” do not treat the lender as verified.

Red Flags of an Illegal or High-Risk Online Lending App

Watch out for these warning signs:

It says “SEC registered” but cannot show a Certificate of Authority.
The SEC Registration Number belongs to a different company.
The app name is not in the SEC list of recorded online lending platforms.
The company is in the SEC revoked or suspended list.
The lender uses only Facebook, Viber, WhatsApp, or Telegram.
It asks for upfront “processing fees” before releasing a loan.
It requires unnecessary phone permissions, such as full contacts, gallery, SMS, or call logs.
It threatens to message all your contacts.
It uses personal bank or e-wallet accounts for payments.
It refuses to give a Disclosure Statement.
It advertises “0% interest” but deducts large hidden fees.
It releases a smaller amount than promised but collects based on a larger amount.
It threatens arrest for ordinary non-payment of a debt.
It shames borrowers in group chats or social media posts.
It claims to be connected with the NBI, police, barangay, court, or immigration without proof.

Your Rights as a Borrower Under Philippine Law

Right to Clear Loan Disclosures

Republic Act No. 3765, or the Truth in Lending Act, requires creditors to give borrowers a clear written statement before the transaction is completed.

The disclosure should show, when applicable:

Total amount financed
Finance charges in pesos and centavos
Interest rate or finance charge expressed as a simple annual rate
Other charges and fees
Payment terms
Amounts credited as down payment or deductions, if any

Official legal text: Republic Act No. 3765 on Lawphil

If an online lender shows only “service fee,” “platform fee,” or “processing charge” without explaining the true cost of credit, that may be a compliance issue.

Right to Fair Treatment and Complaint Handling

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, strengthened the rights of financial consumers.

It protects rights such as:

Equitable and fair treatment
Disclosure and transparency
Protection against fraud and misuse
Data privacy and protection
Timely handling and redress of complaints

RA 11765 also gives financial regulators, including the SEC, stronger enforcement powers over financial service providers under their jurisdiction. The SEC may handle certain purely civil financial consumer claims involving payment or reimbursement of money up to ₱10 million.

Official legal text: Republic Act No. 11765 on the Supreme Court E-Library

Right to Data Privacy

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information in both government and private systems.

Official source: Data Privacy Act of 2012 from the National Privacy Commission

For online lending, this is very important because abusive apps often misuse contact lists, photos, IDs, and social media data.

The National Privacy Commission’s rules on loan-related transactions, including NPC Circular No. 20-01 as amended, restrict excessive and unnecessary processing of personal data.

In the 2026 public advisory issued by the DICT, NPC, and SEC, the government reiterated that:

Unnecessary app permissions are prohibited.
Excessive or disproportionate processing of personal data is prohibited.
Contacting persons in the borrower’s contact list, other than properly identified guarantors, is prohibited.
A character reference is different from a guarantor.
A guarantor must separately consent to assume responsibility for the loan.

Official advisory: DICT-NPC-SEC Public Advisory on Online Lending Platforms

What Online Lenders Cannot Do When Collecting

SEC Memorandum Circular No. 18, Series of 2019, prohibits unfair debt collection practices by financing and lending companies and their third-party collection agents.

Prohibited acts include:

Threats of violence or other criminal means
Threats to take action that cannot legally be taken
Obscene, insulting, or profane language meant to abuse the borrower
Disclosure or publication of borrowers’ names and personal information because of refusal or failure to pay
False representation or deceptive means to collect
Contacting borrowers at unreasonable hours, generally before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions
Contacting persons in the borrower’s contact list other than guarantors or co-makers

Official SEC issuance page: SEC MC No. 18, Series of 2019

If the collection messages involve threats, fake criminal accusations, public shaming, fake edited photos, or defamatory posts, other laws may also become relevant, including the Revised Penal Code and Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

Can You Be Arrested for Not Paying an Online Loan?

For an ordinary unpaid loan, non-payment is generally a civil matter.

Article III, Section 20 of the 1987 Constitution states that no person shall be imprisoned for debt.

However, this does not protect a person from criminal liability if there are separate criminal acts, such as:

Estafa or fraud under the Revised Penal Code
Using fake identity documents
Issuing bouncing checks under Batas Pambansa Blg. 22
Forgery
Identity theft
Cybercrime-related offenses

The Supreme Court has recognized the distinction between simple non-payment of debt and offenses involving separate punishable conduct. For example, in Lozano v. Martinez, the Court treated BP 22 as punishing the act of issuing a worthless check, not merely inability to pay a debt.

Most online lending app defaults do not involve checks. So if a collector says, “You will be arrested tomorrow unless you pay today,” ask for the case number, court, prosecutor’s office, police station, and written basis. Empty threats are common in abusive collection.

If You Already Borrowed From an Unlicensed or Suspicious Online Lender

Do not panic, but preserve evidence before doing anything else.

Take screenshots immediately. Capture the app page, loan amount, disbursement amount, charges, due dates, messages, calls, threats, payment instructions, and privacy permissions.
Download or save the loan agreement and Disclosure Statement. If there is no Disclosure Statement, note that clearly.
Do not delete the app yet if it contains evidence. First save screenshots, emails, PDFs, SMS logs, and transaction receipts.
Revoke unnecessary app permissions. On your phone settings, disable contacts, photos, camera, microphone, location, SMS, and call log permissions that are not necessary.
Do not pay through personal accounts unless verified. Scammers sometimes pretend to be collectors and ask payment through personal GCash, Maya, or bank accounts.
Ask for an official statement of account. Request a written breakdown of principal, interest, penalties, fees, payments made, and remaining balance.
Report harassment or privacy violations. Use SEC iMessage for unfair collection by lending/financing companies, and the National Privacy Commission for misuse of personal data.
Do not assume the debt disappears automatically. Even if a lender violated SEC or privacy rules, a validly received principal loan may still raise civil obligations. Under the Civil Code, contracts have the force of law between the parties if validly entered into, and in a simple loan the borrower generally must return what was received. But unlawful charges, hidden fees, abusive collection, and privacy violations may be challenged.

Relevant Civil Code provisions include Article 1159 on the binding force of valid contracts, Article 1953 on simple loans, and Article 1956 stating that no interest is due unless it has been expressly stipulated in writing.

Where to Report an Unlicensed or Abusive Online Lending Company

Problem	Office or agency	What to prepare
Unlicensed lending or questionable SEC authority	SEC	App name, company name, SEC/CA numbers, screenshots, app store link
Unfair debt collection by lending/financing company	SEC Financing and Lending Companies Department through iMessage	Collection messages, call logs, threats, proof of loan
Unauthorized use of contacts, photos, IDs, or personal data	National Privacy Commission	Screenshots, privacy notice, app permissions, messages to contacts
Threats, extortion, fake posts, cyber harassment, identity misuse	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Screenshots, URLs, phone numbers, account names, transaction proof
Fake app or scam listing	Google Play or Apple App Store reporting channels	App link, screenshots, explanation
Bank or digital bank loan issue	BSP consumer assistance channels	Name of BSP-supervised institution, account details, complaint summary
Cooperative lending issue	Cooperative Development Authority	Cooperative name, membership/loan documents

For SEC complaints and inquiries, use: SEC iMessage

For privacy concerns, use the official National Privacy Commission website: National Privacy Commission

Documents and Evidence to Keep

Good documentation often makes the difference between a vague complaint and an actionable one.

Keep these:

Screenshot of the app store page showing app name and developer
Screenshot of the app’s “About,” “Terms,” “Privacy Policy,” and “Contact Us” pages
Loan agreement
Disclosure Statement
Promissory note, if any
Screenshots of the amount offered, amount released, and deductions
Proof of disbursement to bank or e-wallet
Payment receipts
Collection messages
Call logs
Voice recordings, where legally obtained and relevant
Screenshots of messages sent to family, friends, employer, or contacts
Screenshots of social media posts or group chats
The lender’s claimed SEC Registration Number and CA number
Screenshots of SEC list search results
Timeline of events

For OFWs or foreigners abroad, a digital inquiry may be enough for an initial SEC or NPC report. If a formal affidavit is later required, documents executed outside the Philippines may need consular notarization or apostille, depending on the agency or proceeding.

Practical Timelines and Costs

Task	Typical time	Usual cost
Searching SEC public lists	10–30 minutes	Free
Checking app permissions and privacy policy	10–20 minutes	Free
Submitting an SEC iMessage inquiry	Same day	Free
Requesting SEC documents through SEC Express	Several working days from release	Service/delivery fees apply
Preparing a complaint with evidence	1–3 days, depending on records	Usually free if self-prepared
Agency review or action	Varies widely	Usually free for filing public complaints

Timelines can be longer if the company uses different trade names, the app has been removed from app stores, screenshots are incomplete, or the complaint involves multiple agencies.

Special Notes for Foreigners and OFWs

Foreigners and Filipinos abroad often encounter Philippine online lending issues because of family members, local mobile numbers, Philippine e-wallets, or loans taken while visiting the Philippines.

Keep these points in mind:

A lender’s foreign ownership does not automatically make it illegal because RA 10881 allows up to 100% foreign ownership of lending and financing companies, subject to legal limits.
A foreign app store listing does not replace Philippine SEC authority if the lender is operating as a lending or financing company in the Philippines.
If the loan is offered by a bank, digital bank, or e-money-related institution, BSP rules may also be relevant.
If your Philippine contacts are being harassed, preserve screenshots from the recipients, not just from your own phone.
If you are abroad and need to submit sworn statements, check whether the receiving Philippine agency requires consular notarization, apostille, or other authentication.

Common Scenarios

The app says it is “SEC registered,” but I cannot find its CA number

Treat it as unverified. Ask for the exact corporate name and Certificate of Authority number. Then check the SEC list of lending or financing companies. If it only has a corporation registration but no CA, that is not enough.

The company is licensed, but the app name is not listed

This needs caution. A licensed company may have multiple platforms, but online lending platforms should be properly reported or recorded. Ask the company to identify where the app appears in SEC records or what filing supports the platform’s operation.

The lender uses a different company name for payments

This is a red flag unless clearly explained in the loan documents. Payments should be made through official channels connected to the lender or its authorized payment processor. Be very careful with personal e-wallet accounts.

The app accessed my contacts and messaged my relatives

This may involve both unfair debt collection and data privacy violations. SEC rules restrict unfair collection practices, while the Data Privacy Act and NPC rules restrict excessive and unauthorized use of personal data. Save screenshots from your relatives’ phones if possible.

The lender gave me less money than the approved loan but wants full repayment

Check the Disclosure Statement. Some lenders deduct fees upfront, but the true cost of credit must be clearly disclosed. Hidden or misleading charges may violate the Truth in Lending Act, RA 11765, and SEC rules.

Frequently Asked Questions

How do I know if an online lending company is legit in the Philippines?

Check the SEC’s official list of lending or financing companies with Certificate of Authority, then check whether the specific app or website appears in the SEC list of recorded online lending platforms. Also verify that the company is not suspended, revoked, or the subject of an SEC advisory.

Is SEC registration enough for an online lending app?

No. SEC corporate registration only proves that a corporation exists. A lending or financing company must also have a Certificate of Authority from the SEC to operate as such. For online lending, the platform should also be properly reported or recorded.

What is a Certificate of Authority?

A Certificate of Authority, often called a CA, is the SEC authorization allowing a corporation to operate as a lending company or financing company. Without it, a corporation cannot legally hold itself out as a lending company under RA 9474.

Where can I check SEC-registered online lending apps?

Use the SEC website pages for lending companies, financing companies, recorded online lending platforms, and revoked or suspended companies. Start with the SEC list of recorded online lending platforms and match the app name with the licensed company behind it.

Can an online lending app contact my phone contacts?

Generally, an online lending platform should not freely harvest or use your contact list for debt collection. The 2026 DICT-NPC-SEC advisory states that contacting persons in the borrower’s contact list other than proper guarantors is prohibited. A character reference is not automatically a guarantor.

Can an online lender post my name or photo online if I do not pay?

No. Public shaming, disclosure of personal information, threats, and abusive collection may violate SEC rules, the Data Privacy Act, and possibly criminal laws depending on the conduct.

Can I be jailed for not paying an online loan?

For an ordinary unpaid debt, no. The Constitution prohibits imprisonment for debt. But a separate criminal act, such as fraud, forgery, identity theft, or issuing a bouncing check, may create criminal liability. Collectors often exaggerate this to scare borrowers.

What if the online lender is not on the SEC list?

Do not treat it as verified. Preserve evidence, avoid giving more personal data, ask the lender for its exact legal details, and verify through SEC iMessage. If the app is collecting aggressively or misusing data, report it.

Are foreign-owned online lending companies legal in the Philippines?

They can be, if properly registered and authorized. RA 10881 allows up to 100% foreign ownership of lending and financing companies, subject to legal limitations. The key issue is not nationality alone, but whether the company has the proper SEC authority and complies with Philippine law.

What should I do before downloading a loan app?

Check the SEC lists first, read the privacy notice, review app permissions, confirm the legal company name and CA number, and make sure you receive a clear Disclosure Statement before accepting the loan.

Key Takeaways

“SEC registered” is not the same as licensed to lend. Look for a valid SEC Certificate of Authority.
Check both the licensed company and the specific online lending platform.
Use the SEC lists of lending companies, financing companies, recorded online lending platforms, and revoked/suspended entities.
A legitimate lender should clearly disclose its corporate name, SEC Registration Number, CA number, loan charges, and complaint channels.
Online lenders cannot use threats, public shaming, false legal claims, or abusive language to collect.
Excessive use of contacts, photos, IDs, and personal data may violate the Data Privacy Act and NPC rules.
Non-payment of an ordinary loan is generally a civil issue, not a reason for arrest.
Preserve screenshots, loan documents, messages, payment receipts, and app details before reporting.
Report unfair collection to the SEC and personal data misuse to the National Privacy Commission.