How to Check if an Online Lending Company Is SEC Registered in the Philippines

A Philippine Legal Article

I. Introduction

Online lending has become common in the Philippines. Many borrowers now apply for loans through mobile applications, websites, social media pages, messaging apps, e-wallet integrations, and online advertisements. Because online loans are fast and convenient, borrowers often submit personal information, identity documents, selfies, phone numbers, bank details, and employment data before verifying whether the lender is legitimate.

This creates serious risk. Some online lenders are properly registered and authorized. Others are merely corporations with no lending authority. Some use misleading names. Some operate through unregistered mobile applications. Some impersonate legitimate lending companies. Others are outright scams.

For this reason, before borrowing from an online lending company, a borrower should verify whether the company is properly registered with the Securities and Exchange Commission, commonly called the SEC, and whether it has authority to operate as a lending company or financing company.

The most important point is this:

SEC corporate registration alone is not enough. The company must also have authority to operate as a lending or financing company, and the online lending platform or app must be properly connected to that authorized company.

II. Why Verification Matters

Checking whether an online lending company is SEC registered protects borrowers from:

  1. fake lenders;
  2. advance-fee loan scams;
  3. identity theft;
  4. unauthorized online lending apps;
  5. abusive collection practices;
  6. excessive or hidden charges;
  7. misuse of personal data;
  8. threats and public shaming;
  9. harassment of contacts;
  10. payments to fake agents;
  11. impersonation of legitimate companies;
  12. untraceable loan transactions.

A borrower who fails to verify the lender may end up giving sensitive personal data to an unlawful operator. Worse, the borrower may pay “processing fees,” “release fees,” or “insurance fees” to scammers and never receive any loan.

III. Legal Framework for Online Lending in the Philippines

Online lending in the Philippines may involve several bodies of law and regulation, including:

  1. the Lending Company Regulation Act of 2007;
  2. the Financing Company Act, if the entity is a financing company;
  3. the Revised Corporation Code;
  4. SEC rules and memoranda on lending companies, financing companies, and online lending platforms;
  5. consumer protection rules;
  6. the Data Privacy Act of 2012;
  7. cybercrime laws;
  8. rules on unfair debt collection practices;
  9. anti-money laundering and counter-terrorism financing rules, where applicable;
  10. tax and local business permit requirements.

The SEC is the principal government agency that registers corporations and regulates lending and financing companies. Online lending companies must therefore be checked through the SEC and other relevant records.

IV. Online Lending Company, Lending Company, and Financing Company

A borrower must understand the difference among commonly used terms.

A. Online lending company

An online lending company is a lender that offers, processes, approves, releases, or collects loans through online channels such as mobile apps, websites, email, social media, or digital platforms.

B. Lending company

A lending company is an entity engaged in granting loans from its own capital funds or from funds lawfully sourced for lending operations. Lending companies are regulated by the SEC.

C. Financing company

A financing company may engage in broader credit and financing activities, such as installment financing, leasing, factoring, receivables financing, or other credit arrangements. Financing companies are also regulated by the SEC under separate rules.

Some online loan providers are lending companies. Others are financing companies. Some are neither, and may be unlawful if they lend to the public without proper authority.

V. SEC Registration Versus SEC Authority to Lend

This is the most common source of confusion.

A company may say: “We are SEC registered.”

That statement may be true but incomplete.

There are two separate questions:

  1. Is the company registered with the SEC as a corporation?
  2. Is the company authorized by the SEC to operate as a lending company or financing company?

A corporation registered with the SEC for general business purposes is not automatically allowed to operate as a lending company. It must have the required authority to conduct lending or financing activities.

Thus, a borrower should not stop at the SEC registration number. The borrower must also verify the company’s Certificate of Authority or other applicable SEC authorization.

VI. The Certificate of Authority

For a lending company, the key document is the Certificate of Authority issued by the SEC.

This document shows that the SEC has authorized the entity to operate as a lending company, subject to law and regulation.

When checking a Certificate of Authority, verify:

  1. the exact corporate name;
  2. the Certificate of Authority number;
  3. the date of issuance;
  4. whether it remains valid;
  5. whether it has been suspended, revoked, cancelled, or expired;
  6. whether the authority belongs to the same company offering the loan;
  7. whether the online app or platform is connected to that company;
  8. whether the company is included in SEC advisories or enforcement lists.

A fake, expired, mismatched, or borrowed certificate is a warning sign.

VII. Why the App Name Is Not Enough

Many online lenders use app names that are different from their corporate names.

For example, an app may be called:

  • “Fast Loan PH”;
  • “Cash Now”;
  • “Quick Peso”;
  • “Easy Wallet Loan”;
  • “LoanExpress”;
  • “Peso Credit.”

But the legal operator may have a completely different name, such as “ABC Lending Corporation.”

A borrower should identify the registered corporate name behind the app. It is not enough to search only the app name. The borrower must check the legal entity that owns, operates, manages, or collects under the app.

If the app does not clearly disclose its registered company name, that is a major red flag.

VIII. Information to Gather Before Checking

Before verifying an online lending company, gather the following:

  1. app name;
  2. website name;
  3. Facebook page or social media page;
  4. full corporate name claimed by the lender;
  5. SEC registration number;
  6. Certificate of Authority number;
  7. business address;
  8. email address;
  9. mobile number;
  10. names of agents or collectors;
  11. developer name shown in the app store;
  12. privacy policy;
  13. terms and conditions;
  14. loan agreement;
  15. payment channel name;
  16. bank account or e-wallet recipient;
  17. screenshots of advertisements;
  18. screenshots of the lender’s claimed registration documents;
  19. customer service messages;
  20. collection messages.

The goal is to connect the online brand to a real, authorized, SEC-regulated entity.

IX. Step One: Identify the Exact Legal Name

The first verification step is to determine the exact corporate name.

A legitimate online lending operator should clearly disclose its legal name in:

  1. the app;
  2. the website;
  3. the privacy policy;
  4. the terms and conditions;
  5. the loan agreement;
  6. the disclosure statement;
  7. customer support emails;
  8. official receipts;
  9. payment instructions;
  10. SEC registration documents.

The name should usually include a corporate suffix such as:

  1. Corporation;
  2. Inc.;
  3. Lending Corporation;
  4. Lending Company;
  5. Financing Corporation;
  6. Financing Company.

If the lender gives only a brand name and refuses to disclose its corporate name, the borrower should not proceed.

X. Step Two: Check the SEC Corporate Registration

After identifying the corporate name, check whether the company exists in SEC records.

Verification should determine:

  1. whether the company is registered;
  2. its SEC registration number;
  3. date of registration;
  4. corporate status;
  5. principal office address;
  6. primary purpose;
  7. company type;
  8. names of officers or directors, where available;
  9. whether the registration has been suspended or revoked;
  10. whether the company’s purpose includes lending or financing.

The borrower should compare the information provided by the lender with official SEC records. Inconsistencies may indicate impersonation or fraud.

XI. Step Three: Check Authority to Operate as Lending or Financing Company

After confirming corporate registration, verify whether the company has SEC authority to lend.

The borrower should look for:

  1. Certificate of Authority to operate as a lending company;
  2. Certificate of Authority to operate as a financing company, if applicable;
  3. inclusion in lists of registered lending or financing companies;
  4. absence from lists of revoked or suspended entities;
  5. absence from SEC advisories warning the public against the company;
  6. consistency between the company name and the certificate;
  7. consistency between the app name and the authorized company.

A lender without authority to operate as a lending or financing company should not be treated as a legitimate regulated lender merely because it is incorporated.

XII. Step Four: Verify the Online Lending Platform or App

For online lending, the app or platform must be checked separately.

A company may be authorized as a lending company, but the app may still be problematic if:

  1. the app is not disclosed as connected to the authorized company;
  2. the app uses a different operator name;
  3. the privacy policy names a different entity;
  4. the loan agreement names another company;
  5. payments are made to personal accounts;
  6. the app asks for excessive permissions;
  7. the app appears in regulatory warnings;
  8. the app is a clone or impersonation of a legitimate lender;
  9. the app is operated by a foreign or unknown entity;
  10. the app’s developer is unrelated to the SEC-registered company.

A borrower should verify both the company and the platform.

XIII. Step Five: Compare the Loan Documents

The loan documents should match the registered company.

Check whether the following documents contain the same legal name:

  1. loan agreement;
  2. disclosure statement;
  3. privacy policy;
  4. terms and conditions;
  5. promissory note;
  6. payment instructions;
  7. collection notices;
  8. official receipts;
  9. email confirmations;
  10. app account profile.

If the company name changes across documents, ask for clarification. A legitimate lender should be able to explain the relationship among the brand, corporate entity, and payment processor.

XIV. Step Six: Check SEC Advisories

The SEC may issue advisories, notices, or enforcement actions against entities engaged in unauthorized lending, abusive collection, investment scams, or misrepresentation.

When checking advisories, look for:

  1. the company name;
  2. app name;
  3. trade name;
  4. website name;
  5. social media page;
  6. names of officers or agents;
  7. similar spellings;
  8. revoked Certificate of Authority;
  9. suspended operations;
  10. warnings against public dealing.

If the company or app appears in an SEC advisory, the borrower should be extremely cautious.

XV. Step Seven: Check Whether the Authority Is Current

A company may have been legitimate before but may no longer be authorized.

Check whether:

  1. the Certificate of Authority is still valid;
  2. the company’s authority has been revoked;
  3. the company is under suspension;
  4. the company is delinquent in SEC filings;
  5. the company has changed name;
  6. the company has merged or ceased operations;
  7. the app continues to operate despite revocation;
  8. the company is using old registration documents.

A screenshot of an old certificate is not enough.

XVI. Step Eight: Contact the SEC for Direct Verification

If the amount is substantial or the information is unclear, the borrower may directly inquire with the SEC.

The inquiry should provide:

  1. corporate name;
  2. SEC registration number;
  3. Certificate of Authority number;
  4. app name;
  5. website;
  6. social media page;
  7. screenshots of claimed documents;
  8. loan agreement;
  9. contact details of the lender;
  10. payment channels.

The question should be specific:

“Is this company registered with the SEC, and does it have a valid Certificate of Authority to operate as a lending company or financing company? Is this online lending app connected to that company?”

XVII. Step Nine: Check Payment Channels

A legitimate online lender should use official payment channels.

Check whether payments are made to:

  1. a corporate bank account;
  2. a merchant account;
  3. an authorized payment gateway;
  4. a registered e-wallet merchant;
  5. official over-the-counter partners;
  6. a payment reference number under the company’s name.

Be cautious if the lender asks for payment through:

  1. personal GCash accounts;
  2. personal Maya accounts;
  3. personal bank accounts;
  4. random QR codes;
  5. accounts under unrelated names;
  6. crypto wallets;
  7. remittance centers under an individual collector’s name;
  8. payment channels that change frequently.

Payments to personal accounts are a warning sign, especially when no official receipt is issued.

XVIII. Step Ten: Check Receipts and Tax Registration

A legitimate lending company should issue proper documentation for payments.

Check whether receipts or confirmations show:

  1. registered corporate name;
  2. tax identification details, where applicable;
  3. official receipt or invoice number, if required;
  4. amount paid;
  5. date of payment;
  6. loan account number;
  7. remaining balance;
  8. authorized payment channel.

BIR registration alone does not prove SEC authority to lend, but the absence of proper receipts may indicate irregularity.

XIX. Step Eleven: Check Local Business Presence

If the company claims to have an office, branch, or collection center, verify whether it has a legitimate business presence.

Look for:

  1. official office address;
  2. business permit;
  3. signage with registered name;
  4. customer service desk;
  5. posted privacy notice;
  6. company personnel;
  7. official receipts;
  8. SEC documents displayed or available;
  9. branch authorization, where required;
  10. consistency with SEC records.

Some legitimate online lenders may operate mostly online, but they should still have a traceable legal address.

XX. Step Twelve: Review the Privacy Policy

Online lending apps collect sensitive personal information. The privacy policy should identify:

  1. the legal company collecting the data;
  2. purpose of data collection;
  3. types of data collected;
  4. whether contacts, photos, location, or device data are accessed;
  5. data sharing with collectors or affiliates;
  6. retention period;
  7. borrower rights;
  8. contact details of data protection officer or privacy contact;
  9. complaint process;
  10. security safeguards.

If the privacy policy does not identify the company, or if it authorizes broad access to phone contacts and private files, the borrower should be cautious.

XXI. Step Thirteen: Check App Permissions

An online lending app may request phone permissions. Some permissions may be necessary; others may be excessive.

Be cautious if the app demands access to:

  1. contacts;
  2. photos;
  3. camera;
  4. microphone;
  5. SMS;
  6. call logs;
  7. location;
  8. file storage;
  9. social media accounts;
  10. installed apps.

Excessive access may create risks of harassment, public shaming, identity theft, or data privacy violations.

A legitimate lending app should collect only what is necessary and lawful.

XXII. Step Fourteen: Check Collection Practices

Registration does not excuse abusive collection.

Before borrowing, review whether the lender or app has complaints involving:

  1. threats;
  2. obscene messages;
  3. public shaming;
  4. contacting all phone contacts;
  5. posting borrower photos;
  6. threatening arrest for ordinary debt;
  7. pretending to be police, court staff, or government officers;
  8. calling employers without lawful basis;
  9. sending fake subpoenas or warrants;
  10. using defamatory labels;
  11. harassment at unreasonable hours;
  12. unauthorized disclosure of debt.

A company may be SEC registered yet still violate collection and privacy rules.

XXIII. Step Fifteen: Check Whether the Lender Is an Impostor

Scammers may use the name of a legitimate SEC-registered lending company.

Signs of impersonation include:

  1. use of a similar but slightly different name;
  2. fake Facebook page;
  3. altered SEC certificate;
  4. unofficial Gmail or free email address;
  5. payment to personal account;
  6. advance fee before loan release;
  7. inconsistent logos;
  8. no official website;
  9. refusal to verify through official contact numbers;
  10. pressure to pay immediately.

If a person claims to represent a known lending company, contact the company through official channels and confirm the agent’s authority.

XXIV. Common Red Flags of an Unregistered or Unauthorized Online Lender

Warning signs include:

  1. no corporate name disclosed;
  2. no SEC registration number;
  3. no Certificate of Authority number;
  4. only DTI registration is shown;
  5. only barangay or mayor’s permit is shown;
  6. only BIR certificate is shown;
  7. payment required before loan release;
  8. approval guaranteed without review;
  9. no written loan agreement;
  10. no disclosure statement;
  11. app asks for excessive phone permissions;
  12. payment goes to personal e-wallet;
  13. no official receipt;
  14. customer support refuses verification questions;
  15. certificate belongs to another company;
  16. app name does not match any registered company;
  17. social media page recently created;
  18. fake testimonials;
  19. hidden interest and charges;
  20. threats even before due date.

Multiple red flags should be treated as a serious warning.

XXV. DTI Registration Is Not Enough

Some online lenders show a DTI business name registration.

A DTI registration is not the same as SEC registration and is not the same as authority to operate as a lending company.

A DTI business name registration usually relates to the registration of a business name, especially for sole proprietorships. It does not automatically authorize public lending operations.

If a lender claims to be an online lending company, the borrower should ask for SEC registration and lending authority, not merely DTI registration.

XXVI. Mayor’s Permit Is Not Enough

A mayor’s permit or business permit may show that the business has local permission to operate in a city or municipality.

However, it does not prove that the business has SEC authority to operate as a lending or financing company.

Local permits are supplementary. They do not replace SEC authority.

XXVII. BIR Registration Is Not Enough

A BIR Certificate of Registration shows tax registration.

It does not prove that the company is licensed or authorized to operate as a lending company.

An entity may be registered with the BIR for tax purposes but still lack SEC authority to lend to the public.

XXVIII. App Store Availability Is Not Proof of Legality

The fact that an app can be downloaded from an app store does not prove that it is legally authorized in the Philippines.

App stores are distribution platforms. They do not replace government licensing.

A borrower should verify the company behind the app and check SEC authority separately.

XXIX. Social Media Popularity Is Not Proof of Legality

A Facebook page, TikTok account, sponsored advertisement, or influencer endorsement does not prove registration.

Scammers can buy ads, create fake reviews, use stolen certificates, and imitate legitimate lenders.

Legal verification must rely on official records and documents, not popularity.

XXX. How to Ask the Lender for Verification

Before submitting personal data or applying for a loan, ask:

  1. What is your full SEC-registered corporate name?
  2. What is your SEC registration number?
  3. What is your Certificate of Authority number?
  4. Are you a lending company or financing company?
  5. What is your official business address?
  6. Is this app or website operated by the same company?
  7. Where can I read the loan agreement before applying?
  8. What are the interest, fees, and penalties?
  9. What are your official payment channels?
  10. Do you issue official receipts?
  11. What personal data do you collect?
  12. Do you access my contacts?
  13. What is your complaint process?

A legitimate lender should answer clearly.

XXXI. Sample Verification Message

A borrower may send:

Good day. Before proceeding with my loan application, please provide your full SEC-registered corporate name, SEC registration number, Certificate of Authority number to operate as a lending or financing company, official office address, and confirmation that this app/page/website is officially operated by your company. Please also send the loan disclosure statement, privacy policy, and official payment channels.

If the lender refuses, delays, or pressures the borrower to proceed without verification, the borrower should not continue.

XXXII. What to Check in the Loan Agreement

A legitimate online lender should provide a written loan agreement or disclosure statement before or at the time of loan release.

Check for:

  1. lender’s full corporate name;
  2. borrower’s name;
  3. principal amount;
  4. amount actually released;
  5. interest rate;
  6. effective interest rate, where disclosed;
  7. processing fees;
  8. service fees;
  9. late payment fees;
  10. penalties;
  11. payment schedule;
  12. due date;
  13. total amount payable;
  14. collection policy;
  15. privacy consent;
  16. dispute procedure;
  17. official payment channels;
  18. borrower’s right to receive receipts.

Do not accept a loan if the charges are hidden or the lender refuses to provide the terms in writing.

XXXIII. Net Proceeds Versus Principal Amount

Some online lenders advertise one loan amount but release a smaller amount after deductions.

For example, the app may say the loan is PHP 5,000, but only PHP 3,500 is released after service fees. The borrower may still be required to repay PHP 5,000 plus interest.

Before accepting, ask:

  1. What is the principal amount?
  2. What is the net amount I will receive?
  3. What deductions will be made?
  4. What is the total repayment amount?
  5. When is the due date?
  6. What penalties apply if late?

A registered lender should disclose these terms clearly.

XXXIV. Hidden Charges and Short-Term Loans

Many online lending disputes involve short-term loans with high effective costs.

Charges may be labeled as:

  1. processing fee;
  2. platform fee;
  3. service fee;
  4. verification fee;
  5. credit assessment fee;
  6. membership fee;
  7. convenience fee;
  8. late fee;
  9. extension fee;
  10. rollover fee.

Even if the nominal interest looks low, fees may make the actual cost extremely high. A borrower should compute the total amount payable before accepting.

XXXV. Advance-Fee Loan Scams

A major red flag is a lender demanding payment before releasing the loan.

Scammers may call the payment:

  1. processing fee;
  2. insurance fee;
  3. notarial fee;
  4. release fee;
  5. activation fee;
  6. account verification fee;
  7. tax fee;
  8. bank transfer fee;
  9. legal fee;
  10. anti-fraud deposit.

After the borrower pays, the scammer may disappear or demand more money.

A legitimate lender may impose fees, but these should be disclosed and deducted or collected through lawful and official channels. Payment to a personal e-wallet before loan release is highly suspicious.

XXXVI. If the Lender Claims “SEC Registered” but Gives No Certificate of Authority

A borrower should treat this as incomplete verification.

Ask directly:

“Do you have a Certificate of Authority to operate as a lending company or financing company?”

If the lender cannot provide one or refuses to answer, the borrower should avoid the loan.

A corporate registration number is not the same as lending authority.

XXXVII. If the Certificate Name Does Not Match the App

If the Certificate of Authority belongs to one company but the app uses another name, ask:

  1. Is the app a registered trade name?
  2. Is the app owned by the certificate holder?
  3. Is the app operated by the certificate holder?
  4. Is there a public document connecting the app to the company?
  5. Does the loan agreement name the certificate holder?
  6. Do receipts name the certificate holder?
  7. Are payments made to the certificate holder?

If the connection is unclear, the app may be unauthorized or impersonating a legitimate company.

XXXVIII. If the Lender Is Not Found in SEC Records

If the lender cannot be found, possible reasons include:

  1. the borrower searched the app name instead of the corporate name;
  2. spelling is different;
  3. the company changed name;
  4. the lender gave a fake name;
  5. the entity is not SEC registered;
  6. the entity is a sole proprietorship;
  7. the company is foreign and not locally registered;
  8. the app is operated by an unknown entity;
  9. the lender is using another company’s certificate;
  10. the lender is a scam.

Ask the lender for the exact SEC-registered name and number. If still unverifiable, do not proceed.

XXXIX. If the Company Is Registered but Has No Lending Authority

This means the entity may exist as a corporation but may not be authorized to conduct lending operations.

A borrower should:

  1. avoid taking a new loan;
  2. ask for proof of Certificate of Authority;
  3. preserve screenshots and documents;
  4. report the entity to the SEC if it continues offering loans;
  5. avoid submitting personal data;
  6. avoid paying advance fees;
  7. seek legal advice if already indebted.

Corporate existence does not equal lending authority.

XL. If the Company’s Authority Was Revoked or Suspended

If the company’s authority was revoked or suspended, it should not continue operating as a lending company.

A borrower should:

  1. avoid new transactions;
  2. preserve all documents;
  3. ask for a statement of account if already borrowed;
  4. pay only through traceable official channels if payment is made;
  5. demand receipts;
  6. report continued operations to the SEC;
  7. document any threats or harassment;
  8. seek legal advice on disputed charges.

A revoked or suspended lender may still attempt collection. The borrower should handle the matter carefully and not ignore official legal papers.

XLI. What if You Already Borrowed Before Verifying?

If the borrower already took a loan and later discovers the lender may be unregistered or unauthorized, the borrower should:

  1. keep all loan documents;
  2. save screenshots of the app and account;
  3. request a statement of account;
  4. verify the company’s status;
  5. pay only through traceable channels if payment is made;
  6. demand receipts;
  7. do not give more personal data;
  8. document harassment;
  9. file complaints if there are violations;
  10. seek legal advice before refusing payment entirely.

The lender’s lack of authority does not always automatically mean the borrower may keep the money without consequence. However, it may affect complaints, penalties, interest, charges, and the lender’s regulatory liability.

XLII. Can You Refuse to Pay an Unregistered Online Lender?

This requires caution.

If the borrower received money, there may still be civil issues involving repayment, unjust enrichment, or obligation to return what was received.

However, an unregistered or unauthorized lender may face regulatory consequences, and unlawful interest, penalties, or collection practices may be challenged.

A borrower should distinguish among:

  1. principal amount actually received;
  2. interest;
  3. hidden fees;
  4. penalties;
  5. unlawful charges;
  6. collection harassment;
  7. data privacy violations.

Before refusing to pay, a borrower should seek legal advice, especially if the amount is substantial.

XLIII. Can an Unregistered Lender File a Case?

An unregistered or unauthorized lender may attempt to sue, collect, or assign the debt.

If sued, the borrower should not ignore the summons or court notices.

Possible defenses may include:

  1. lack of authority to operate as a lender;
  2. illegal or unconscionable interest;
  3. hidden charges;
  4. lack of disclosure;
  5. payment already made;
  6. absence of valid loan documents;
  7. defective assignment of account;
  8. harassment or unlawful collection;
  9. data privacy violations;
  10. lack of standing or personality of plaintiff.

The proper defenses depend on the documents and facts.

XLIV. Borrower Rights Against Abusive Collection

Whether the lender is registered or not, abusive collection may be challenged.

Improper practices may include:

  1. threats of violence;
  2. threats of imprisonment for ordinary debt;
  3. use of profane or obscene language;
  4. public shaming;
  5. posting borrower’s photo online;
  6. contacting all phone contacts;
  7. sending messages to employer without lawful basis;
  8. pretending to be police, prosecutor, judge, or court personnel;
  9. sending fake warrants or subpoenas;
  10. disclosing debt to unrelated persons;
  11. harassment at unreasonable hours;
  12. using personal data beyond lawful purpose.

A borrower should preserve evidence and file complaints with the proper agencies.

XLV. Ordinary Debt Nonpayment and Imprisonment

A common collection threat is: “You will be jailed if you do not pay.”

As a general principle, ordinary nonpayment of debt does not by itself result in imprisonment. However, separate criminal liability may arise if the borrower committed fraud, falsification, identity theft, issued bouncing checks, or engaged in other criminal conduct.

Thus, a borrower should not be intimidated by false threats of automatic arrest, but should also avoid fraudulent conduct.

XLVI. Data Privacy Risks in Online Lending

Online lending apps often request personal data. Borrowers should protect:

  1. government IDs;
  2. selfies;
  3. addresses;
  4. employment details;
  5. bank and e-wallet details;
  6. phone contacts;
  7. references;
  8. photos;
  9. location data;
  10. device data.

A lender that accesses contacts and uses them to shame the borrower may violate data privacy and collection rules.

Borrowers should review app permissions before installation and should uninstall suspicious apps after preserving evidence, where appropriate.

XLVII. Complaints Against Unregistered or Abusive Online Lenders

Depending on the issue, complaints may be filed with:

  1. SEC — for unregistered lending, lack of authority, abusive practices by lending or financing companies, false claims of SEC registration, or violations of SEC rules;
  2. National Privacy Commission — for misuse of personal data, unauthorized access to contacts, public shaming, unlawful disclosure, or failure to protect personal information;
  3. NBI Cybercrime Division — for online fraud, threats, identity theft, fake apps, hacking, phishing, or cyber harassment;
  4. PNP Anti-Cybercrime Group — for cybercrime-related complaints;
  5. Department of Trade and Industry — for certain consumer protection concerns, where applicable;
  6. Bangko Sentral ng Pilipinas — if a bank, e-wallet, payment service provider, or BSP-supervised institution is involved;
  7. local government units — for unpermitted local operations;
  8. courts — for civil, criminal, or injunctive relief.

The proper forum depends on the violation.

XLVIII. Evidence to Prepare for a Complaint

A complaint should be supported by evidence.

Prepare:

  1. screenshots of the app;
  2. app store page;
  3. website screenshots;
  4. social media page screenshots;
  5. loan agreement;
  6. disclosure statement;
  7. payment records;
  8. screenshots of claimed SEC registration;
  9. screenshots of claimed Certificate of Authority;
  10. messages from agents;
  11. collection messages;
  12. call logs;
  13. proof of threats;
  14. proof of public shaming;
  15. bank or e-wallet transfer receipts;
  16. name of payment recipient;
  17. borrower’s statement of facts;
  18. list of witnesses, if any;
  19. identity of collectors, if known;
  20. proof that the company could not be verified.

Organize evidence chronologically.

XLIX. Sample Complaint Narrative

A borrower may state:

I am filing this complaint against the online lending app/page known as [name]. It offered loans to the public and claimed to be SEC registered under [claimed name or number]. However, it failed to provide a valid Certificate of Authority to operate as a lending company. The app required access to my phone contacts and later used abusive collection messages after I questioned the charges. Payments were demanded through a personal e-wallet account under [name]. Attached are screenshots of the app, claimed registration, loan terms, payment records, and collection messages.

This type of narrative is clear, factual, and useful for regulators.

L. Sample Demand for Verification and Accounting

A borrower who already has a loan may send:

Please provide your full SEC-registered corporate name, SEC registration number, Certificate of Authority number, and confirmation that the app/page [name] is officially operated by your company. Please also provide a complete statement of account showing the principal released, interest, fees, penalties, payments received, and remaining balance. All further collection communications should be sent through lawful and official channels only.

This creates a written record.

LI. Protecting Yourself Before Applying for an Online Loan

Before applying:

  1. identify the corporate name;
  2. verify SEC registration;
  3. verify Certificate of Authority;
  4. check whether the app is connected to the company;
  5. read the loan agreement;
  6. check total repayment;
  7. review privacy policy;
  8. check app permissions;
  9. avoid advance fees;
  10. avoid personal-account payments;
  11. check for SEC advisories;
  12. ask for official payment channels;
  13. do not send unnecessary personal data;
  14. compare alternatives from reputable financial institutions.

Verification should happen before submitting IDs and selfies.

LII. Protecting Yourself After Borrowing

After borrowing:

  1. keep the loan agreement;
  2. save proof of disbursement;
  3. keep payment receipts;
  4. ask for statement of account;
  5. pay only through official channels;
  6. do not ignore due dates;
  7. document all communications;
  8. report harassment;
  9. do not agree to illegal rollover fees;
  10. do not give passwords or OTPs;
  11. do not sign blank documents;
  12. seek help if charges are unclear or abusive.

LIII. What Legitimate Online Lenders Should Do

A legitimate online lending company should:

  1. disclose its full corporate name;
  2. provide SEC registration details;
  3. provide Certificate of Authority details;
  4. identify its online lending platform;
  5. issue clear loan terms;
  6. disclose all charges;
  7. provide privacy policy;
  8. collect only necessary personal data;
  9. use lawful collection practices;
  10. issue receipts;
  11. use official payment channels;
  12. maintain customer complaint channels;
  13. train collectors;
  14. comply with SEC reportorial requirements;
  15. avoid misleading advertisements.

Transparency is a core sign of legitimacy.

LIV. Common Misconceptions

1. “If the app is downloadable, it must be legal.”

False. App availability does not prove SEC authority.

2. “If the company has SEC registration, it can lend.”

Not always. It must also have authority to operate as a lending or financing company.

3. “If the lender has a DTI certificate, it is enough.”

No. DTI registration is not equivalent to SEC lending authority.

4. “If many people use the app, it must be safe.”

No. Popularity is not proof of legality.

5. “If I borrowed from an unregistered lender, I automatically do not need to pay.”

Not necessarily. The lender may have regulatory liability, but the borrower may still have obligations depending on the facts.

6. “A registered lender can use any collection method.”

No. Registration does not authorize harassment, threats, public shaming, or privacy violations.

LV. Frequently Asked Questions

1. How do I know if an online lending company is SEC registered?

Identify the exact corporate name, then check SEC corporate registration records. After that, verify whether the company has a valid Certificate of Authority to operate as a lending or financing company.

2. Is SEC registration number enough?

No. A registration number only shows corporate registration. You must also verify lending or financing authority.

3. What is the most important document to check?

The Certificate of Authority to operate as a lending company or financing company.

4. What if the app name is different from the company name?

Ask for proof that the app is officially operated by the registered and authorized company. The loan agreement, privacy policy, and payment channels should confirm the connection.

5. Can I trust a lender that shows only a screenshot of an SEC certificate?

Not automatically. Screenshots can be outdated, altered, or borrowed from another company. Verify the details independently.

6. What if the lender asks for a fee before releasing the loan?

Be cautious. Advance-fee demands are a common scam indicator, especially if payment is made to a personal e-wallet.

7. What if the lender contacts my phone contacts?

This may raise data privacy and abusive collection issues. Preserve evidence and consider filing a complaint.

8. What if the lender threatens arrest?

Ordinary debt nonpayment does not automatically lead to imprisonment. Threats of arrest may be abusive if used for intimidation.

9. Where can I complain?

Usually with the SEC for unregistered or unauthorized lending. If personal data is misused, the National Privacy Commission may be relevant. If threats, hacking, identity theft, or online fraud are involved, cybercrime authorities may be appropriate.

10. Should I uninstall the app?

Preserve evidence first. Save screenshots, loan details, permissions, messages, and account information. Then consider uninstalling if the app is suspicious or accessing unnecessary data.

LVI. Practical Verification Checklist

Before borrowing, confirm:

  • exact corporate name;
  • SEC registration number;
  • valid Certificate of Authority;
  • company status is active;
  • app is connected to the authorized company;
  • no SEC advisory against the app or company;
  • loan agreement names the registered company;
  • privacy policy names the registered company;
  • fees and interest are disclosed;
  • payment channels are official;
  • receipts are issued;
  • app permissions are reasonable;
  • no advance-fee scam indicators;
  • no abusive collection reputation;
  • customer service answers verification questions.

If the lender fails several items, do not proceed.

LVII. Conclusion

To check if an online lending company is SEC registered in the Philippines, a borrower must do more than ask for a registration number. The borrower must identify the exact corporate name, verify SEC corporate registration, confirm that the company has a valid Certificate of Authority to operate as a lending or financing company, and ensure that the online app, website, or social media page is truly connected to that authorized entity.

A borrower should also examine the loan agreement, payment channels, privacy policy, app permissions, receipts, collection practices, and any regulatory advisories. DTI registration, mayor’s permit, BIR registration, social media popularity, and app store availability are not substitutes for SEC authority.

The safest rule is simple: verify the company, verify the authority, verify the app, and verify the terms before submitting personal data or accepting the loan. If the lender cannot clearly prove its legal identity and authority to lend, the borrower should walk away.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.

Privacy Policy

Terms of Use

Lawyer Login

 
 
Privacy Policy         Terms of Use         Lawyer Login