A lending company in the Philippines is legitimate only if it is properly registered and authorized to lend by the Securities and Exchange Commission (SEC). The most important point is this: SEC registration alone is not enough. A real lending company must also have a valid Certificate of Authority to Operate as a Lending Company, and if it uses an app, website, Facebook page, or other online lending platform, that platform should also be properly reported or recorded with the SEC. This article explains how to check a lending company, what documents to ask for, which red flags to watch out for, and what to do if you already borrowed from a suspicious lender.

Why Legitimacy Matters Before You Borrow

Many borrowers check only one thing: “May SEC registration ba?” That is a good start, but it is incomplete.

A company can be registered with the SEC as a corporation but still not authorized to operate as a lending company. Think of it this way:

What the lender shows you	What it means	Is it enough?
SEC Certificate of Incorporation	The company exists as a corporation	No
Business name, DTI name, app name, or Facebook page	A trade name or marketing name	No
Mayor’s permit or barangay permit	Local business permit	No
BIR Certificate of Registration	Tax registration	No
SEC Certificate of Authority to Operate as a Lending Company	SEC authorization to engage in lending	Yes, if valid and active
Recorded online lending platform	The app/website was reported to SEC	Needed if the lender operates online

A legitimate lending company should be able to identify its registered corporate name, SEC registration number, Certificate of Authority number, office address, authorized representatives, and loan terms in writing.

Legal Basis: Who Regulates Lending Companies in the Philippines?

The main law is Republic Act No. 9474, or the Lending Company Regulation Act of 2007. Under RA 9474, a lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than nineteen persons. The law specifically excludes banks, pawnshops, cooperatives, financing companies, insurance companies, and other credit institutions already regulated by other laws.

Under Section 4 of RA 9474, a lending company must be established as a corporation, and no lending company may conduct business unless granted authority to operate by the SEC.

Other laws and rules commonly involved are:

Law or rule	Why it matters
RA 9474, Lending Company Regulation Act of 2007	Requires lending companies to be SEC-authorized corporations
RA 3765, Truth in Lending Act	Requires written disclosure of finance charges and the true cost of credit
RA 7394, Consumer Act of the Philippines	Protects consumers from deceptive or unfair practices
RA 10173, Data Privacy Act of 2012	Protects borrowers from unauthorized or excessive use of personal data
RA 11765, Financial Products and Services Consumer Protection Act	Strengthens financial consumer rights, including disclosure, fair treatment, data privacy, and complaint redress
SEC Memorandum Circular No. 18, Series of 2019	Prohibits unfair debt collection practices
SEC Memorandum Circular No. 19, Series of 2019	Requires disclosures in ads and reporting of online lending platforms

The SEC’s dedicated page for lending and financing companies is the best starting point for official lists, advisories, complaint procedures, and current regulatory notices.

The Basic Rule: SEC Registration Is Not the Same as Lending Authority

This is the most common misunderstanding.

A company may show you a Certificate of Incorporation and say, “Legit kami, SEC registered kami.” That only proves that the company was incorporated. It does not automatically prove that it has authority to lend.

For lending companies, look for the secondary license: the SEC-issued Certificate of Authority to Operate as a Lending Company.

Ask for these details before borrowing

A legitimate lending company should be able to give you:

Registered corporate name;
SEC registration number;
Certificate of Authority number;
Principal office address;
Official email address and phone number;
Name of authorized representative;
Written loan agreement;
Disclosure statement under the Truth in Lending Act;
Amortization schedule or payment schedule;
Official receipts or electronic proof for all payments.

If the lender refuses to provide these, treats the request as suspicious, or says “automatic na iyan sa app,” be careful.

How to Check If a Lending Company Is Legitimate in the Philippines

1. Get the lender’s exact corporate name

Do not rely only on the app name, Facebook page name, brand name, or agent’s name.

Many online lenders use names like “Fast Cash,” “Easy Peso,” “Quick Loan,” or similar marketing names. The SEC records are usually under the corporate name, such as “ABC Lending Corporation” or “XYZ Financing Inc.”

Ask:

“What is your SEC-registered corporate name?”
“What is your SEC registration number?”
“What is your Certificate of Authority number?”
“Is this app or website recorded with the SEC under that company?”

If they cannot answer clearly, that is already a warning sign.

2. Check the SEC’s official lending and financing company resources

Go to the SEC’s official Lending Companies and Financing Companies page. Look for:

List of lending companies;
List of financing companies;
List of recorded online lending platforms;
List of revoked or suspended lending companies;
Advisories and notices;
Complaint procedures.

Because SEC lists may be updated, use the official SEC website instead of screenshots circulating on Facebook, TikTok, Telegram, or Viber.

3. Use “Check with SEC” or SEC online services

The SEC also provides online verification tools, including Check with SEC and SEC online services linked through its official website.

When checking, search using:

Exact corporate name;
SEC registration number;
App name or platform name, if available;
Names of officers, if you suspect impersonation.

If the company appears in SEC records, still verify whether it has a Certificate of Authority to Operate as a Lending Company. Again, ordinary corporate registration is not enough.

4. Check if the online lending app or website is recorded

If the loan is offered through an app, website, Facebook page, or online portal, check whether the online lending platform itself is recorded or reported with the SEC.

Under SEC rules, lending and financing companies that use online lending platforms must comply with disclosure and reporting requirements. This matters because many abusive lenders hide behind app names that are different from the registered company name.

A good check is to match three things:

Item	What to compare
App or website name	Does it match the platform listed or disclosed?
Corporate name	Is the app operated by the SEC-authorized company?
Certificate of Authority number	Is the lender authorized to lend?

If the app name does not match any disclosed or recorded platform, treat it as high risk.

5. Search the SEC list of revoked or suspended companies

A lender may have been legitimate before but later lost its authority.

Check whether the company appears on the SEC’s list of revoked, suspended, or warned entities. If the company’s Certificate of Authority has been revoked or suspended, it should not continue lending to the public under that authority.

Be especially careful when a lender says:

“Under renewal lang kami.”
“Suspended lang pero operating pa rin.”
“Old SEC permit iyan but still valid.”
“Wala sa listahan kasi bago kami.”

Those explanations should be verified directly with SEC, not accepted on trust.

6. Review the disclosure statement before signing or accepting the loan

Under the Truth in Lending Act, the creditor must provide a written disclosure of the cost of credit before the loan is consummated. In practical terms, the borrower should see the real cost of the loan before agreeing.

Check for:

Principal amount;
Amount actually released to you;
Interest rate;
Service fees;
Processing fees;
Documentary stamp tax, if charged;
Penalties;
Collection charges;
Due dates;
Total amount payable;
Effective interest rate or equivalent annual rate, where applicable.

A common abusive setup is this: the app says you borrowed ₱10,000, but only ₱7,000 is released because ₱3,000 was deducted immediately as “processing fee,” then the lender still charges interest and penalties based on ₱10,000. That does not automatically make the loan void, but it is a serious sign that you must examine the disclosure and computation carefully.

7. Check whether the collection practices are lawful

Even a legitimate lending company cannot use illegal or abusive collection methods.

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by lending and financing companies. In real life, warning signs include:

Threatening to post your photo online;
Messaging your contacts to shame you;
Calling your employer without lawful basis;
Using insults, obscene language, or threats;
Pretending to be police, NBI, court staff, or barangay officials;
Sending fake subpoenas, warrants, or court orders;
Threatening imprisonment for ordinary nonpayment of debt;
Accessing your phone contacts without proper consent;
Telling relatives or co-workers the details of your loan.

Nonpayment of a simple private debt is generally a civil matter. But fraud, bouncing checks, falsified documents, threats, coercion, cyber libel, identity theft, or data privacy violations may create separate legal issues depending on the facts.

Documents a Legitimate Lending Company Should Provide

Before accepting a loan, ask for copies or screenshots of the following:

Document or information	Why it matters
SEC Certificate of Incorporation	Shows the company exists as a corporation
SEC Certificate of Authority to Operate as a Lending Company	Shows authority to engage in lending
Business name registration, if using a trade name	Helps connect the brand/app name to the company
Loan agreement or promissory note	Shows the legal terms of the loan
Truth in Lending disclosure statement	Shows the real cost of credit
Amortization schedule	Shows due dates and payment breakdown
Privacy notice	Explains how your personal data will be used
Official payment channels	Helps avoid paying fake agents
Receipts or payment acknowledgments	Protects you from duplicate collection

If the transaction is entirely online, save everything:

App screenshots;
Loan offer screen;
Disclosure statement;
Chat messages;
SMS reminders;
Email notices;
Payment receipts;
Call logs;
Threatening messages;
Contact list access permissions;
Screenshots of the app permissions requested.

These records are often important if you later file a complaint with the SEC, National Privacy Commission, police, prosecutor, or court.

Red Flags That a Lending Company May Not Be Legitimate

A lender deserves closer scrutiny if you notice any of the following:

It refuses to disclose its corporate name.
It shows only a DTI business name, barangay permit, or mayor’s permit.
It has no Certificate of Authority number.
The app name is different from the company name, with no explanation.
It uses personal GCash, Maya, or bank accounts under an individual’s name.
It asks for your ATM card or PIN.
It asks for your online banking password.
It requires access to all phone contacts, photos, messages, or social media accounts.
It releases less than the approved loan but charges based on the full amount.
It gives no written contract or disclosure statement.
It threatens jail for nonpayment.
It sends fake court, police, NBI, or barangay documents.
It pressures you to sign immediately.
It refuses to issue receipts.
It uses multiple app names after being reported.

The SEC has specifically warned the public about unrecorded online lending platforms. When in doubt, verify through official SEC channels and do not rely on the lender’s own screenshots.

Are High Interest Rates Automatically Illegal?

Not automatically.

The old Usury Law ceilings were effectively suspended by Central Bank Circular No. 905. Because of this, parties may generally agree on interest, fees, and charges. But that does not mean lenders can charge anything they want.

Under the Civil Code:

Article 1306 allows parties to make contracts, but the terms must not be contrary to law, morals, good customs, public order, or public policy.
Article 1956 provides that interest is due only if it is expressly stipulated in writing.
Article 1409 treats contracts or stipulations contrary to law or morals as void from the beginning.
Article 2209 deals with legal interest when an obligation to pay money is delayed and there is no valid stipulation.

The Supreme Court has repeatedly reduced or nullified excessive, iniquitous, unconscionable, and exorbitant interest or penalty charges. In Manila Credit Corporation v. Viroomal, the Supreme Court explained that even if parties may agree on interest, the rate must still be reasonable and fair. The Court also stressed that willingness to accept an unconscionable interest rate does not automatically make it valid.

So the better question is not only “May interest ba?” but:

Was the interest clearly written?
Was it disclosed before the loan was accepted?
Were all fees itemized?
Is the effective cost grossly excessive?
Were penalties compounded unfairly?
Was the borrower misled about the real total cost?

What If the Lender Is Legitimate but the Collection Is Abusive?

A company can be SEC-authorized and still violate collection rules.

If the complaint involves lending or financing company violations, unfair collection practices, missing disclosure statements, or operation without proper authority, the SEC may act administratively.

If the complaint involves unauthorized access to contacts, data sharing, harassment through personal information, or misuse of personal data, the National Privacy Commission may also be involved.

If the complaint involves threats, coercion, identity theft, fake warrants, cyber libel, or other criminal acts, the police, NBI Cybercrime Division, prosecutor’s office, or the courts may become relevant depending on the evidence.

Possible legal issues include:

Conduct	Possible legal concern
Threatening harm	Grave threats under the Revised Penal Code
Forcing payment through intimidation	Grave coercion or other coercive acts, depending on facts
Public shaming online	Defamation or cyber libel, depending on content and publication
Accessing contacts without proper basis	Data Privacy Act issue
Using fake court or police documents	Possible falsification, usurpation, or fraud-related issue
Pretending nonpayment is automatically jailable	Misleading or abusive collection practice
No written finance charge disclosure	Truth in Lending Act issue

How to File a Complaint Against a Suspicious Lending Company

For SEC complaints

The SEC’s complaint guidance for lending and financing companies generally requires a complete complaint form, supporting evidence, one complaint form per respondent company, and a valid government-issued ID.

You may use the SEC iMessage portal or the SEC’s official complaint channels for lending and financing companies. The SEC may evaluate the complaint, require the company to answer, or proceed administratively if there are sufficient grounds.

Prepare:

Your full name and contact details;
Valid government-issued ID;
Name of the lending company;
App name, website, Facebook page, or agent name;
SEC registration number or Certificate of Authority number, if known;
Loan agreement or screenshots of loan terms;
Disclosure statement, if any;
Payment receipts;
Screenshots of threats, messages, or abusive collection;
Call logs and dates;
Names and numbers used by collectors;
Proof that your contacts were messaged, if applicable.

For data privacy complaints

If the lender accessed your phone contacts, messaged your relatives, exposed your loan, or used your personal data beyond what you agreed to, review the National Privacy Commission’s complaints process.

Useful evidence includes:

Screenshot of app permissions;
Privacy notice shown by the app;
Screenshots from relatives or friends who received messages;
Proof that the messages came from the lender or collector;
Dates, numbers, and accounts used;
Your loan documents and app screenshots.

For criminal threats or fake legal documents

If there are threats of harm, fake warrants, fake subpoenas, impersonation of police or court personnel, or serious harassment, preserve the evidence and consider reporting to the appropriate law enforcement office or prosecutor’s office.

For online harassment, cyber-related impersonation, or threats sent through digital platforms, the NBI Cybercrime Division or PNP Anti-Cybercrime Group may be relevant.

Practical Timeline: What Usually Happens After You Verify or Complain

Step	Practical timeline	Notes
Checking SEC website or lists	Same day	Fast if you have the exact corporate name
Requesting SEC documents through SEC Express	Often several working days after release	Delivery may take longer outside Metro Manila
Filing SEC complaint online	Same day once documents are complete	Incomplete complaints may be delayed or dismissed
Company response to SEC complaint	Often around 10 days from receipt, based on SEC complaint guidance	May vary depending on service and case handling
NPC complaint preparation	Several days to weeks	Evidence from contacts is often needed
Police/NBI cyber complaint	Same day filing may be possible	Bring printed and digital evidence

The most common bottleneck is not the law itself. It is lack of evidence. Borrowers often delete app screenshots, chat messages, and payment records out of fear or frustration. Save copies before uninstalling the app or changing phones.

Special Notes for OFWs and Foreigners in the Philippines

OFWs borrowing from Philippine lenders

If you are abroad and borrowed from a Philippine lending app, keep a complete digital evidence folder. Include screenshots, app details, payment records, and messages sent to your Philippine contacts.

For documents executed abroad, Philippine agencies or courts may require notarization, consular acknowledgment, or an apostille depending on the country and purpose. The Philippines is part of the Apostille Convention, so documents from apostille countries may generally be apostilled instead of consularized.

Foreigners borrowing in the Philippines

Foreigners may borrow money in the Philippines, subject to the lender’s internal requirements and immigration or identification checks. The more important issue is whether the lender is properly authorized.

Foreigners should be especially careful with:

Passport copies;
ACR I-Card details;
Work permits;
Visa documents;
Foreign bank information;
Personal data shared through loan apps.

A lender should collect only data that is necessary, proportionate, and connected to the loan transaction. Excessive permission requests, especially access to unrelated contacts, photos, or social media accounts, should raise concern.

Foreigners investing in or owning lending companies

This is different from borrowing. Under RA 9474, at least a majority of the voting capital stock of a lending company must be owned by Philippine citizens, and foreign ownership is subject to reciprocity. Foreigners who want to invest in or operate a lending company in the Philippines need to consider nationality restrictions, SEC licensing, corporate structuring, anti-dummy law concerns, tax registration, and ongoing reportorial requirements.

Common Real-Life Scenarios

Scenario 1: The lender shows an SEC certificate but no Certificate of Authority

This is not enough. Ask for the Certificate of Authority to Operate as a Lending Company. If they cannot provide it, verify directly with SEC before borrowing.

Scenario 2: The loan app has a different name from the corporation

This is common, but it must be explainable. The app or platform should be connected to the registered lending or financing company and properly reported or recorded where required. If the app hides the operator’s identity, that is a red flag.

Scenario 3: The lender deducted large fees before releasing the loan

Check the disclosure statement. You should know the amount financed, finance charge, charges deducted, interest, penalties, and total payable before accepting the loan. If the real cost was hidden, that may raise Truth in Lending and consumer protection issues.

Scenario 4: The collector threatens to post your photo online

That may violate SEC collection rules, data privacy principles, and possibly other laws depending on what was posted or threatened. Save the messages and identify the lender, platform, collector number, and dates.

Scenario 5: The lender says you will go to jail if you do not pay

Ordinary nonpayment of debt is generally not a crime by itself. However, separate acts like fraud, issuing bouncing checks, falsifying documents, or using another person’s identity may create criminal exposure. A collector should not mislead borrowers by making blanket threats of imprisonment for a simple unpaid loan.

Scenario 6: The lender asks for your ATM card or PIN

Do not surrender your ATM card or PIN. The SEC’s lending company FAQ specifically warns that an ATM card owner should not relinquish possession of the ATM card as collateral or for any other purpose.

Quick Verification Checklist Before You Borrow

Before accepting money from any lending company, check all of these:

The lender has a clear registered corporate name.
The company is registered with the SEC.
The company has a valid SEC Certificate of Authority to Operate as a Lending Company.
The company is not on the SEC revoked or suspended list.
The app, website, or online platform is properly identified and connected to the company.
The loan agreement is in writing.
The disclosure statement is provided before acceptance.
The total amount payable is clear.
Payment channels are under the company’s official name, not random individuals.
The lender does not demand your ATM card, PIN, passwords, or unnecessary phone permissions.
Collection rules are professional and lawful.
You can save or download copies of all documents.

Frequently Asked Questions

How do I know if a lending company is SEC registered?

Check the SEC’s official website, especially the lending and financing companies section, and search using the exact corporate name. But remember: SEC registration only proves corporate existence. For lending, ask for the SEC Certificate of Authority to Operate as a Lending Company.

Is a lending company legitimate if it has a mayor’s permit?

Not necessarily. A mayor’s permit is a local government permit. It does not replace the SEC Certificate of Authority required for lending companies under RA 9474.

Is a DTI-registered lender legitimate?

A DTI business name is not enough for a lending company. Under RA 9474, a lending company must be a corporation and must have authority from the SEC to operate as a lending company.

What is the difference between a lending company and a financing company?

A lending company under RA 9474 generally grants loans from its own capital funds or from funds sourced from not more than nineteen persons. A financing company is governed by RA 8556 and may engage in activities such as direct lending, discounting, factoring receivables, and financial leasing. Both are regulated by the SEC, but they have different legal bases and licensing requirements.

Are online lending apps legal in the Philippines?

Yes, online lending can be legal if operated by a properly registered and authorized lending or financing company and if the online platform complies with SEC rules. An app is suspicious if it hides its corporate operator, lacks a Certificate of Authority, is unrecorded where required, or uses abusive collection practices.

Can a lending app access my contacts?

A lending app should not collect or use personal data in an excessive, deceptive, or unauthorized way. If your contacts are accessed or messaged for shaming or harassment, that may raise issues under the Data Privacy Act and SEC rules on unfair debt collection.

Can I be jailed for not paying an online loan?

For a simple unpaid private debt, nonpayment is generally civil in nature. But criminal issues may arise if there is fraud, falsification, identity theft, bouncing checks, threats, or other criminal conduct. Be careful not to ignore legitimate court papers, but also do not be intimidated by fake warrants or fake police threats.

What if the interest is too high?

High interest is not automatically illegal just because it is high, but interest must be in writing, disclosed, and not unconscionable. Courts may reduce or nullify excessive interest or penalty stipulations that are contrary to morals, law, public policy, or fairness.

Where can I complain about an abusive lending company?

For lending or financing violations, file with the SEC through its official complaint channels or SEC iMessage. For privacy violations, check the National Privacy Commission’s complaints process. For threats, impersonation, fake warrants, or cyber harassment, law enforcement or the prosecutor’s office may be relevant depending on the facts.

Should I uninstall the loan app after harassment starts?

Before uninstalling, save screenshots of the app name, loan details, disclosure statement, permissions, messages, payment records, and collection threats. Evidence is often lost when borrowers uninstall apps or change phones too quickly.

Key Takeaways

SEC registration alone does not prove a lender is authorized to lend.
A legitimate lending company must have a valid SEC Certificate of Authority to Operate as a Lending Company.
If the lender operates through an app or website, check whether the online lending platform is properly identified and recorded where required.
Ask for the loan agreement, disclosure statement, amortization schedule, official payment channels, and receipts.
Do not surrender your ATM card, PIN, passwords, or unnecessary phone permissions.
Excessive interest may be challenged if it is unconscionable, undisclosed, or not properly written.
Abusive collection, public shaming, threats, and unauthorized contact-list use may violate SEC rules, privacy law, and other laws.
Save evidence before filing a complaint or deleting the app.
Use official SEC and government sources, not social media screenshots, when checking whether a lender is legitimate.