If you are about to borrow from a lending company, loan app, or “easy cash” website in the Philippines, the safest first question is not “How fast can I get approved?” but “Is this lender actually authorized by the SEC?” A legitimate lending company should not only exist as a corporation; it should also have a Certificate of Authority from the Securities and Exchange Commission (SEC) to operate as a lending or financing company. This guide explains what “SEC registered” really means, how to verify it step by step, what documents and details to check, and what to do if the lender, app, or collector appears suspicious.

What “SEC Registered” Means for a Lending Company

Many borrowers are misled by the phrase “SEC registered.” In Philippine practice, there are different levels of SEC registration, and they do not mean the same thing.

A company may have a Certificate of Incorporation, which means it exists as a corporation under the Revised Corporation Code. Under Republic Act No. 11232, a private corporation begins its corporate existence when the SEC issues its certificate of incorporation. (Supreme Court E-Library)

But for lending, that is not enough.

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be a corporation and must have authority from the SEC before it can conduct lending business. The law expressly states that no lending company shall conduct business unless granted authority to operate by the SEC. (Supreme Court E-Library)

So when checking a lender, look for three things:

What to verify	What it means	Why it matters
SEC corporate registration	The corporation legally exists	This is only the first layer
SEC Certificate of Authority	The corporation is authorized to operate as a lending or financing company	This is the key license for lending
Recorded online lending platform, if applicable	The specific app, website, or digital platform is reported/recorded with the SEC	Important for loan apps and online lending sites

A company that only shows a Certificate of Incorporation, business permit, DTI registration, BIR certificate, mayor’s permit, app store listing, or “verified” social media page has not yet proven that it is authorized to lend.

Legal Basis: Why Lending Companies Need SEC Authority

The main law is Republic Act No. 9474, the Lending Company Regulation Act of 2007. It defines a lending company as a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than nineteen persons. It excludes banks, investment houses, savings and loan associations, financing companies, pawnshops, insurance companies, cooperatives, and other credit institutions already regulated by other laws. (Supreme Court E-Library)

The law is strict on authorization:

A lending company must be established as a corporation.
It cannot conduct business unless the SEC grants it authority to operate.
The SEC may require reports, inspect records, issue rules, and impose sanctions.
The SEC may suspend or revoke a lending company’s authority to operate for violations. (Supreme Court E-Library)

RA 9474 also provides penalties for operating without valid SEC authority. A person who engages in the business of a lending company without a validly subsisting authority from the SEC may face fines, imprisonment, or both, depending on the circumstances. Company officers may also be liable if they knowingly operate or represent the business as a lending company without authority. (Supreme Court E-Library)

For financing companies, the relevant law is Republic Act No. 8556, the Financing Company Act of 1998. Financing companies are also regulated by the SEC and are generally corporations that extend credit facilities, including direct lending, leasing, factoring, and similar credit arrangements. RA 8556 states that no person or entity may hold itself out as a financing company unless authorized under that law. (Lawphil)

Lending Company vs. Financing Company vs. Loan App

People often use these terms interchangeably, but they are not exactly the same.

Lending Company

A lending company usually grants loans from its own funds or limited funding sources. It is regulated under RA 9474 and needs a Certificate of Authority to Operate as a Lending Company from the SEC.

Financing Company

A financing company is regulated under RA 8556. It may provide credit facilities, leasing, factoring, installment financing, or similar financing arrangements. It also needs SEC authority.

Online Lending Platform or Loan App

A loan app is usually just the digital channel. The legal operator behind it should be a lending or financing company with SEC authority. The app or website itself should also be properly reported or recorded with the SEC.

This distinction matters because a mobile app name may be different from the registered corporate name. For example, an app called “Fast Peso Loan” may be operated by a corporation with an entirely different legal name. You need to verify the corporation behind the app, not just the app name.

Step-by-Step Guide: How to Confirm If a Lending Company Is Registered with the SEC

1. Get the Exact Legal Name of the Lender

Start by identifying the legal entity, not just the brand.

Look for the company’s:

full corporate name;
SEC registration number;
Certificate of Authority number;
registered office address;
official email address;
app name, website, or online lending platform name;
privacy notice and data protection contact details, if it operates online.

For online lending apps, check:

Google Play or Apple App Store listing;
website footer;
terms and conditions;
privacy policy;
loan agreement;
disclosure statement;
SMS or email notices;
collection letters.

Be careful with names that are almost the same. “ABC Lending Corp.” is not automatically the same as “ABC Credit Services,” “ABC Loan App,” or “ABC Financing.” Exact spelling matters.

2. Check the SEC’s Official Lending and Financing Company Lists

The SEC has publicly directed people to verify lending companies, financing companies, and online lending platforms through its official website lists. In an official FOI response, the SEC pointed users to its lists of lending/financing companies, recorded online lending platforms, procedures, and complaints information. (www.foi.gov.ph)

When checking the list, confirm:

Corporate name The registered name should match the lender behind the loan offer.
Certificate of Authority number A real lender should have a CA number, not only an SEC registration number.
Status Watch for revoked, suspended, expired, cancelled, or delinquent status.
Type of company Confirm whether it is listed as a lending company or financing company.
App or platform name For loan apps, check the list of recorded online lending platforms, not only the list of corporations.

If the app name does not appear but the company claims the app is “under” a registered corporation, verify that connection carefully. A registered corporation may operate multiple brands, but each online lending platform should be properly disclosed or recorded.

3. Use SEC Online Tools and Official Channels

The SEC maintains online systems and public-facing tools that can help verify company information. The SEC iMessage portal lists SEC online services, including eSEARCH and “Check with SEC,” and allows users to open tickets or check ticket status. (Securities and Exchange Commission)

You may also use the SEC Check App, which is described as the official mobile application of the Philippine SEC. The app provides SEC announcements, investor alerts, rules and regulations, and other information for entities supervised by the SEC. (Google Play)

For a careful verification, use more than one method:

check the SEC public list;
search the corporate name through SEC tools;
compare the company’s claimed CA number with the public record;
check SEC advisories for warnings, cease-and-desist orders, suspensions, or revocations;
file an SEC iMessage ticket if the information is unclear.

4. Confirm the Certificate of Authority, Not Just the SEC Registration Number

This is the most common mistake.

A corporation may say:

“We are SEC registered.”

That may only mean it has a Certificate of Incorporation.

For lending, ask:

“What is your SEC Certificate of Authority number to operate as a lending company or financing company?”

A legitimate lender should be able to show:

Certificate of Incorporation;
Certificate of Authority;
official corporate name;
SEC registration number;
CA number;
registered address;
responsible officers;
written loan terms and disclosure statement.

If the company refuses to provide the CA number, gives only a screenshot, or says “we are still processing,” treat that as a serious warning sign.

5. For Loan Apps, Check the App or Website Separately

The SEC has required lending and financing companies operating online to disclose their corporate names, SEC registration numbers, and Certificate of Authority numbers in their advertisements and online lending platforms. It has also required online lending platforms to be reported to the SEC. (Philippine News Agency)

This means you should check both:

the legal company; and
the specific app, website, or platform.

A lender may be registered, but a particular app may still be problematic if it is unrecorded, undisclosed, or operated by another entity.

When checking a loan app, look for these red flags:

app name does not match any SEC-recorded platform;
app store publisher is different from the SEC-registered corporation;
privacy policy names another company;
no physical office address;
no CA number shown;
excessive permissions, such as access to contacts without a legitimate purpose;
threats to message your contacts or employer;
hidden fees shown only after approval.

6. Check SEC Advisories, Revocation Orders, and News Releases

Even if a company once had a license, it may later be suspended, revoked, or penalized. The SEC has revoked the primary registration of thousands of lending companies for failure to secure the required Certificate of Authority and has also revoked certificates of authority of financing/lending companies for violations of SEC rules. (Philippine News Agency)

Check for:

SEC advisories naming the company or app;
cease-and-desist orders;
revocation of Certificate of Authority;
revocation of Certificate of Incorporation;
warnings on unregistered online lending platforms;
penalties for abusive collection practices.

A screenshot of an old SEC certificate is not enough. Licenses and authority can be revoked or suspended.

7. Verify the Loan Documents Before Borrowing

Before signing or accepting a loan, ask for the written terms.

Under RA 9474, lending companies must comply with the Truth in Lending Act, Republic Act No. 3765, and the Consumer Act of the Philippines, Republic Act No. 7394, on loan amounts, interest, and charges. (Supreme Court E-Library)

RA 3765 was enacted to require disclosure of finance charges in credit transactions. (Lawphil)

Before accepting the loan, check whether the lender clearly states:

principal loan amount;
interest rate;
effective interest rate, if applicable;
processing fees;
service fees;
penalties;
late payment charges;
total amount to be received;
total amount to be repaid;
due dates;
consequences of default;
collection process.

A lender that refuses to give a clear disclosure statement before loan release is risky, even if it claims to be registered.

Documents and Details You Should Ask From the Lender

Document or detail	Why you need it	What to watch for
SEC Certificate of Incorporation	Confirms the corporation exists	Not enough by itself
SEC Certificate of Authority	Confirms authority to operate as lender or financing company	Must match the corporate name
SEC registration number	Helps search SEC records	Should not be used as a substitute for CA
CA number	Key proof of lending/financing authority	Verify against SEC lists
Corporate name	Identifies the legal operator	Must match loan agreement and app records
App or platform name	Important for online lending	Should be recorded/disclosed
Disclosure statement	Shows loan cost	Must list charges clearly
Privacy notice	Important for loan apps	Watch for excessive contact-list access
Collection policy	Shows how debts will be collected	Threats and public shaming are red flags

Common Red Flags That a Lender May Not Be Legitimate

Be cautious if you see any of these:

“SEC registered” but no Certificate of Authority;
only a DTI business name registration is shown;
the lender is a sole proprietorship or informal group;
the company name in the app differs from the loan contract;
no registered office address;
no written loan agreement;
no disclosure of fees before release;
loan proceeds are much lower than advertised because of hidden deductions;
the app demands unnecessary permissions;
the collector threatens to contact your phonebook;
the lender uses shame posts, group chats, or edited photos to collect;
the lender asks for payment to a personal GCash, Maya, or bank account under a different name;
the lender says complaints are useless because “registered kami.”

Registration does not give a lender the right to harass, threaten, shame, deceive, or misuse personal data.

Online Lending Apps and Data Privacy

For online lending platforms, SEC registration is only part of the safety check. Data privacy is also important.

A 2026 public advisory from the DICT, National Privacy Commission, and SEC reminded online lending operators that unnecessary app permissions, excessive personal data processing, and unconstrained access to borrowers’ contact lists are prohibited. It also states that contacting persons in a borrower’s contact list, other than guarantors, is prohibited for debt collection purposes.

The same advisory reminds borrowers to download online lending platforms only from official or verified sources, read privacy notices carefully, and review app permissions. It warns against deceptive design patterns, such as pre-ticked consent boxes or interfaces that make consent easy to give but difficult to withdraw.

Practical checks before installing or using a loan app:

Does the app request access to your entire contact list?
Does it require photo gallery access unrelated to identity verification?
Does it threaten to message your contacts?
Does the privacy policy clearly identify the operating company?
Does it state why each permission is needed?
Can you revoke permissions after verification?
Is there a Data Protection Officer or privacy contact?

If an app cannot explain why it needs sensitive data, do not treat SEC registration as a complete safety guarantee.

What to Do If the Lender Is Not on the SEC List

If you cannot find the lender or app on the SEC lists:

Recheck the exact corporate name. Search using the full legal name, not only the app name.
Check related names. Look at the privacy policy, terms, app store developer name, SMS sender name, and loan contract.
Ask the lender for its CA number. Do not accept only a screenshot or social media post.
Search SEC advisories. The lender may have been flagged, suspended, or revoked.
Open an SEC iMessage ticket. SEC iMessage allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)
Do not send advance fees. Be especially cautious if the lender asks for “processing,” “unlocking,” “insurance,” or “verification” fees before releasing any loan.
Keep evidence. Save screenshots, app names, URLs, phone numbers, payment accounts, loan agreements, and messages.

If the matter involves harassment, threats, fraud, or misuse of personal data, the 2026 DICT-NPC-SEC advisory identifies proper authorities such as the SEC Financing and Lending Companies Department through imessage.sec.gov.ph, the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

How to File a Complaint Against a Lending or Financing Company

If the lender is registered but violates lending rules, you can still complain.

The SEC has told borrowers to file formal complaints against lending or financing companies and to use a clear email subject format containing the complainant’s name, respondent company, and subject of complaint. It also directed borrowers to verify registered lending companies, financing companies, and recorded online lending platforms through SEC links. (www.foi.gov.ph)

Prepare these before filing:

your full name and contact details;
name of the lending or financing company;
app name or website, if any;
SEC registration number or CA number, if available;
loan agreement;
disclosure statement;
proof of payments;
screenshots of threats, messages, calls, or posts;
app store link;
privacy policy or terms and conditions;
names and numbers used by collectors;
proof that third parties were contacted.

For data privacy violations, such as unauthorized access to contacts or messaging people who are not guarantors, complaints may also involve the National Privacy Commission.

Practical Timelines and Bottlenecks

Task	Usual practical timeline	Common bottleneck
Basic online check of company/app name	10–30 minutes	App name differs from corporate name
Checking SEC lists	Same day if website is accessible	Lists may be updated, moved, or temporarily inaccessible
Confirming through SEC ticket or inquiry	Several days or longer	Incomplete company details
FOI-style request	Often up to a few weeks	Need exact name, date coverage, and clear request
Complaint preparation	1–3 days if evidence is complete	Missing loan documents or screenshots
Data privacy complaint preparation	1–3 days	Need proof of unauthorized access or third-party contact

The most common delay is not the law itself. It is identifying the correct legal entity behind a brand, app, SMS sender, Facebook page, or collection agent.

Special Notes for OFWs and Foreigners

For OFWs borrowing from abroad

If you are overseas and borrowing from a Philippine lender, insist on documents sent by email or downloadable from the official app:

loan agreement;
disclosure statement;
corporate name;
SEC registration number;
CA number;
official customer service email;
payment channels under the company’s name.

Avoid lenders that communicate only through personal messaging accounts and require payment to individuals.

For foreigners borrowing in the Philippines

A foreigner may borrow from a Philippine lending company, subject to the lender’s documentation and credit requirements. Your focus should be whether the lender is authorized, whether the loan terms are clear, and whether your personal data is processed lawfully.

For foreigners investing in or operating a lending company

Foreign ownership rules matter. RA 9474 provides that at least a majority of the voting capital stock of a lending company must be owned by Philippine citizens, and foreign ownership rules include reciprocity requirements. (Supreme Court E-Library)

For financing companies, RA 8556 has its own capital and ownership rules. It provides minimum paid-up capital requirements depending on location and includes reciprocity language for foreign nationals owning stock in financing companies. (Lawphil)

Foreign documents used for Philippine corporate registration or licensing may need proper authentication, apostille, translation, board approvals, and proof of authority, depending on the document and country of origin.

Frequently Asked Questions

How do I know if a lending company is SEC registered in the Philippines?

Check the SEC’s official list of lending companies and financing companies, then verify that the company has a Certificate of Authority, not just a Certificate of Incorporation. For loan apps, also check the SEC list of recorded online lending platforms. The SEC has officially directed the public to these lists for verification. (www.foi.gov.ph)

Is an SEC registration number enough proof that a lender is legal?

No. An SEC registration number may only prove that the corporation exists. A lending company needs SEC authority to operate as a lender. RA 9474 states that no lending company may conduct business unless granted authority to operate by the SEC. (Supreme Court E-Library)

What is a Certificate of Authority for a lending company?

A Certificate of Authority is the SEC approval that allows a corporation to operate as a lending company or financing company. It is separate from the Certificate of Incorporation. Without it, the company should not be conducting lending business.

Are online lending apps required to be registered with the SEC?

The company behind the app must be authorized as a lending or financing company, and online lending platforms must be disclosed or reported to the SEC. The SEC has required online lending operators to display their corporate names, SEC registration numbers, and Certificate of Authority numbers in advertisements and online lending platforms. (Philippine News Agency)

Can a registered lending company still commit illegal acts?

Yes. SEC authority does not allow harassment, threats, hidden charges, unfair collection, or misuse of personal data. The SEC may impose fines, suspension, revocation, and other sanctions for violations. (Supreme Court E-Library)

What if the loan app is not on the SEC list but says its company is registered?

Ask for the exact corporate name and Certificate of Authority number, then verify both. If the app name is not recorded or disclosed, treat it as a red flag. A registered corporation should be able to clearly connect the app to its authorized lending or financing business.

Can a lender contact my family, employer, or phone contacts?

For online lending platforms, the 2026 DICT-NPC-SEC advisory states that contacting persons on a borrower’s contact list other than guarantors is prohibited for debt collection purposes. It also warns against excessive contact-list processing and personal data use leading to harassment or unfair collection practices.

Where can I complain about a lending company?

You may use SEC iMessage to open a ticket or complaint. The SEC iMessage portal allows users to open a new ticket and check ticket status. (Securities and Exchange Commission) For privacy-related violations, you may also consider the National Privacy Commission. For threats, fraud, or cyber harassment, the 2026 public advisory identifies agencies such as DICT, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

Can a DTI-registered business legally operate as a lending company?

A DTI business name registration is not the same as SEC authority to operate as a lending company. Under RA 9474, a lending company must be a corporation and must have authority from the SEC before conducting lending business. (Supreme Court E-Library)

Does a mayor’s permit prove that a lender is SEC-authorized?

No. A mayor’s permit or local business permit may show local business registration, but it does not replace SEC authority. For lending, the key document is still the SEC Certificate of Authority.

Key Takeaways

Do not rely on the phrase “SEC registered.” Ask whether the lender has a valid SEC Certificate of Authority.
A Certificate of Incorporation means the corporation exists; it does not automatically authorize lending.
Under RA 9474, a lending company cannot conduct business without SEC authority.
For loan apps, verify both the company and the specific online lending platform.
Check the exact corporate name, SEC registration number, CA number, app name, and loan documents.
Registration does not permit harassment, hidden fees, threats, public shaming, or misuse of contact lists.
If the lender is unclear, unlisted, abusive, or using excessive app permissions, keep evidence and verify through official SEC channels.