Finding a lending company or online loan app using a suspicious “SEC certificate” is not a small paperwork issue. In the Philippines, a company cannot legally operate as a lending company just because it has a business name, app, Facebook page, mayor’s permit, BIR registration, or even an SEC Certificate of Incorporation. A lending company needs proper authority from the Securities and Exchange Commission, and a fake, altered, borrowed, expired, revoked, or misleading SEC certificate may point to unauthorized lending, fraud, falsification, unfair debt collection, or data privacy violations. This guide explains how to verify the certificate, preserve evidence, report the matter to the SEC, and know when to involve the National Privacy Commission, PNP, NBI, DOJ, banks, e-wallets, or prosecutors.

Why a Fake SEC Certificate Matters

Many borrowers search “SEC registered lending company Philippines” because collectors, agents, or loan apps often say things like:

“We are SEC registered, so you must pay today.”
“Our SEC certificate proves we are legal.”
“We can file a case because we are licensed by SEC.”
“This app is under a licensed lending company.”

Some of these statements may be true. Some are misleading. Some are completely fake.

The important distinction is this: SEC registration is not always the same as authority to lend.

A corporation may be registered with the SEC as a corporation, but that does not automatically mean it has a valid Certificate of Authority to Operate as a Lending Company. Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be organized as a corporation and cannot conduct lending business unless granted authority to operate by the SEC. The law also gives the SEC supervisory and enforcement powers over lending companies. (Supreme Court E-Library)

A fake SEC certificate can hurt ordinary people in very practical ways. It may be used to convince borrowers to pay illegal “processing fees,” trust an unauthorized app, submit IDs and private contact lists, or comply with abusive collectors. It can also make victims hesitate to report harassment because the company appears “official.”

SEC Registration vs. SEC Authority to Lend

Before reporting, it helps to understand what document you are looking at.

Document or claim	What it may prove	What it does not automatically prove
SEC Certificate of Incorporation / Registration	A corporation may exist under a registered corporate name	That the company is authorized to lend money to the public
Certificate of Authority to Operate as a Lending Company	The company may have SEC authority to operate as a lending company, if valid and current	That every branch, app, collector, advertisement, or fee is lawful
Online lending platform or app listing	The lending app may be connected to a financing or lending company recorded with the SEC	That the app’s debt collection, privacy practices, or disclosures are compliant
Mayor’s permit / barangay clearance / BIR registration	The business may have local or tax registration	That it has SEC authority to operate as a lending company
DTI business name registration	A sole proprietorship name may be registered	That the business can legally operate as a lending company, because lending companies under RA 9474 must be corporations

A common scam is showing a real-looking SEC Certificate of Incorporation and presenting it as a “license to lend.” Another is using a legitimate company’s SEC details while the app, Facebook page, collector, or payment account belongs to a different operator.

Legal Bases: What Philippine Law Says

Republic Act No. 9474: Lending Companies Need SEC Authority

RA 9474 defines a lending company as a corporation that grants loans from its own capital funds or from funds sourced from not more than 19 persons. It also states that no lending company may conduct business unless it has authority from the SEC. (Supreme Court E-Library)

The same law gives the SEC power to:

regulate and supervise lending companies;
require reports;
conduct examinations and exercise visitorial powers;
impose administrative sanctions;
suspend or revoke authority to operate;
impose fines; and
act against unauthorized lending activities. (Supreme Court E-Library)

RA 9474 also penalizes persons who engage in lending business without valid SEC authority, hold themselves out as lending companies without authority, use names or descriptions that imply authority to lend when they do not have it, or make false or misleading statements in required documents. (Supreme Court E-Library)

This is why the exact document matters. A borrower should ask: Is this a valid Certificate of Authority to operate as a lending company, issued to the same corporation that is lending to me, and is it still current?

Revised Corporation Code: SEC Can Investigate Fraudulent Corporate Acts

Republic Act No. 11232, the Revised Corporation Code, gives the SEC broad powers to investigate corporate violations, issue cease and desist orders, impose administrative sanctions, suspend or revoke certificates, and transmit evidence to the Department of Justice when criminal prosecution may be warranted. (Supreme Court E-Library)

This matters when the fake certificate is connected to a corporation, a supposed corporation, or a company using corporate documents to mislead borrowers. If a lending business uses a false SEC document, misuses another corporation’s registration details, or conducts business fraudulently, the SEC may have a role beyond simply confirming whether the certificate is real.

Revised Penal Code: Falsification and Estafa May Apply

Using a fake SEC certificate may also raise criminal issues.

Under the Revised Penal Code, falsification by private individuals and use of falsified documents may apply when a person falsifies or knowingly uses a falsified public, official, commercial, or private document. Supreme Court decisions discussing Article 172 explain the elements of falsification and use of falsified documents. (Supreme Court E-Library)

If the fake certificate was used to induce someone to pay money, release funds, pay “loan processing fees,” transfer money to an e-wallet, or rely on a false representation, estafa by deceit under Article 315(2)(a) may also become relevant. The Supreme Court has explained that estafa by deceit involves false pretenses or fraudulent representations made before or at the time of the fraud, reliance by the victim, and resulting damage. (Supreme Court E-Library)

Not every suspicious certificate automatically proves a crime. But if the document was fabricated, altered, borrowed, or used to obtain money or personal data, it may support an administrative complaint with the SEC and a separate criminal complaint with law enforcement or the prosecutor’s office.

Truth in Lending, Consumer Protection, and Data Privacy

RA 9474 expressly recognizes the relevance of the Truth in Lending Act and the Consumer Act of the Philippines for matters not covered by the Lending Company Regulation Act. (Supreme Court E-Library)

In practical terms, a lending company should not hide the true cost of credit. Borrowers should be given clear information on interest, finance charges, penalties, and other loan terms.

If the lending company or online lending app collected IDs, contacts, photos, phonebook data, social media information, or other personal data, the Data Privacy Act of 2012, or Republic Act No. 10173, may also apply. The National Privacy Commission has repeatedly addressed online lending practices, including the misuse of personal data and harvesting of contact lists for debt collection. (National Privacy Commission)

Common Forms of Fake or Misleading SEC Certificates

A suspicious SEC certificate is not always a crude fake. Some are more subtle.

Situation	Why it is suspicious
The certificate is blurry, cropped, or missing a certificate number	Scammers often hide details that can be verified
The company name on the certificate differs from the app, collector, Facebook page, or payment account	The certificate may belong to another entity
The document is only a Certificate of Incorporation	It may prove corporate existence, not authority to lend
The Certificate of Authority is expired, revoked, suspended, or issued to a different company	The lending operation may be unauthorized
The app claims to be “under” a licensed company but gives no clear operator details	The relationship may be fabricated or undocumented
The certificate has inconsistent fonts, spacing, seals, signatures, or dates	It may be altered or fabricated
The SEC registration number cannot be verified through official SEC channels	The document may be fake or misquoted
The company refuses to provide its exact corporate name and Certificate of Authority number	This is a major warning sign
The lender asks for an upfront “release fee,” “activation fee,” or “insurance fee” before releasing a loan	This is a common fraud pattern, especially online

Before Reporting: Verify the Certificate Carefully

A good report is easier for the SEC or law enforcement to act on when it includes exact details. Do these checks before filing, if you can do so safely.

1. Identify the real operator, not just the app name

Look for the following:

exact corporate name;
trade name or app name;
SEC registration number;
Certificate of Authority number;
office address;
website domain;
Facebook page or social media account;
Google Play or App Store listing;
customer service number;
collector names and phone numbers;
bank account or e-wallet account used for payments;
loan agreement, disclosure statement, or promissory note; and
privacy policy or terms and conditions.

Online lending apps often use brand names that differ from the legal company name. The respondent in your complaint should be as specific as possible.

2. Check whether the company has SEC authority to lend

Use official SEC channels to verify whether the company is registered and authorized. The SEC maintains online services, including search and verification tools, and its iMessage portal for reports and complaints. (Securities and Exchange Commission)

When checking, compare:

the exact corporate name;
spelling, punctuation, and suffix such as “Inc.” or “Lending Corp.”;
SEC registration number;
Certificate of Authority number;
date of issuance;
registered address;
status of the company;
whether the authority is for lending or financing; and
whether the online lending app is properly connected to that company.

A small name difference matters. “ABC Lending Corporation” is not automatically the same as “ABC Loan App,” “ABC Financing,” or “ABC Credit Online.”

3. Check whether the document is being misused

Sometimes the certificate is real but used in a misleading way. Examples:

A collector sends a certificate belonging to a different company.
A Facebook page uses the SEC details of a legitimate lender.
An app displays a certificate but the payment account is under a private person.
A former agent uses an old company certificate to solicit borrowers.
A revoked or suspended company continues to show an old certificate.
A scammer copies a legitimate certificate and changes the name or number.

These details should be included in your report.

4. Save proof before the page, app, or message disappears

Do not rely on being able to find the fake certificate later. Scammers often delete posts, change usernames, replace app listings, or block victims.

Save:

screenshots showing the certificate and where it appeared;
the full URL or app link;
date and time of screenshot;
sender’s phone number or account name;
chat messages before and after the certificate was sent;
payment instructions;
receipts or proof of transfer;
loan documents; and
any threats or collection messages.

If possible, save both screenshots and original files. Screenshots are useful, but original emails, PDFs, SMS, app notifications, and chat exports can be stronger evidence.

Evidence Checklist for a Strong SEC Complaint

Evidence	Why it helps
Copy or screenshot of the fake SEC certificate	Shows the exact document being used
Link or source where the certificate appeared	Helps SEC trace the representation
Exact company name and app name	Avoids confusion with similarly named entities
Claimed SEC registration or Certificate of Authority number	Lets SEC verify authenticity
Loan agreement or disclosure statement	Shows the lender’s representations and terms
Advertisements, Facebook posts, SMS, or app screenshots	Shows how the company presented itself to the public
Payment receipts and receiving accounts	Helps connect the scheme to actual money movement
Collection messages and call logs	Shows pressure, threats, or abusive collection
Borrower IDs or documents submitted	Relevant if personal data was misused
Chronology of events	Helps the investigator understand the sequence quickly

Organize evidence by date. Name files clearly, for example:

2026-06-01_fake_SEC_certificate_from_FB_page.png
2026-06-02_payment_instruction_GCash.png
2026-06-03_collector_threat_SMS.pdf
Loan_Agreement_ABC_App.pdf

Avoid editing screenshots except to redact sensitive information for public sharing. For reports to government agencies, keep unredacted originals available if requested.

How to Report a Fake SEC Certificate to the SEC

The SEC is the main agency for complaints involving fake SEC documents used by lending companies, unauthorized lending, and misuse of SEC registration or authority.

Step 1: Prepare a short written complaint

Your complaint should be clear and factual. It does not need to sound like a legal pleading. Include:

your name and contact details;
the name of the lending company, app, page, or collector;
the date you saw or received the SEC certificate;
where the certificate was posted or sent;
why you believe it is fake, altered, expired, borrowed, or misleading;
what happened to you, such as payment, harassment, data misuse, or threats;
the documents and screenshots attached; and
what you are asking the SEC to verify or investigate.

A useful request is:

I respectfully request the SEC to verify whether the attached SEC certificate and claimed Certificate of Authority are authentic, valid, current, and issued to the same entity operating the lending business or online lending platform. I also request investigation for possible unauthorized lending, misuse of SEC registration, false or misleading representation, and related violations.

Step 2: File through the SEC iMessage portal

The SEC iMessage portal is the SEC’s online channel for submitting reports, feedback, and complaints. The portal includes options to open a new ticket and check ticket status. (Securities and Exchange Commission)

In practice, filing may require you to sign in or register through SEC’s eSECURE system before submitting a ticket. (Securities and Exchange Commission)

When choosing a help topic, select the category closest to your issue. SEC materials include complaint routing for financing and lending company concerns, including “Complaints on Financing and Lending Companies.” (Securities and Exchange Commission)

Step 3: Attach evidence in an organized way

Upload or attach your complaint and evidence. If the portal limits file size, combine related screenshots into a PDF or submit the most important documents first, then state that more evidence is available upon request.

Prioritize these attachments:

the suspicious SEC certificate;
screenshots showing where it was used;
loan agreement or app terms;
messages where the lender claimed to be SEC-registered or SEC-authorized;
payment instructions and proof of payment;
collection threats or harassment; and
verification notes showing mismatched names or numbers.

Step 4: Ask for specific verification and action

Be precise. Instead of only saying “Please help,” ask the SEC to:

verify whether the certificate is authentic;
verify whether the company has a valid Certificate of Authority to operate as a lending company;
check whether the online lending platform is properly recorded or connected to the company;
investigate possible unauthorized lending;
investigate false or misleading use of SEC registration;
issue warnings, advisories, cease and desist orders, or administrative sanctions if warranted; and
endorse the matter to law enforcement or the Department of Justice if criminal violations appear.

The SEC has authority under the Revised Corporation Code to investigate, issue cease and desist orders, impose sanctions, and transmit evidence for possible criminal prosecution. (Supreme Court E-Library)

Step 5: Keep the ticket number and monitor follow-up

After filing, save:

ticket number;
confirmation email;
date and time of filing;
list of attached documents; and
any follow-up messages from the SEC.

If the SEC asks for clearer copies, additional identification, affidavits, or company details, respond with organized documents. Delays often happen because complaints name only the app nickname or Facebook page, without the legal entity, address, payment account, or certificate number.

Sample SEC Complaint Format

Subject: Fake SEC Certificate / Unauthorized Lending Complaint against [Company or App Name]

Complainant: Name: [Your full name] Email: [Your email] Mobile: [Your mobile number] Address or country of residence: [City/province/country]

Respondent: App or business name: [Name] Claimed corporate name: [Name, if known] Website or app link: [Link] Facebook page or social media account: [Link or username] Phone numbers or collector accounts: [Details] Payment account used: [Bank/e-wallet/account name, if any]

Facts: On [date], I saw or received an SEC certificate from [source]. The certificate was used to claim that [company/app] is legally authorized to operate as a lending company. I believe the certificate may be fake, altered, borrowed, expired, or misleading because [state reasons clearly: name mismatch, unverifiable number, different company name, suspicious document, demand for advance fee, harassment, etc.].

Harm or risk: As a result, I [paid money / submitted IDs / borrowed through the app / received collection threats / had my contacts messaged / was asked to pay fees / suffered other harm].

Request: I respectfully request the SEC to verify the authenticity and validity of the attached certificate, determine whether the respondent has authority to operate as a lending company, investigate possible unauthorized lending and false or misleading use of SEC registration, and take appropriate regulatory action.

Attachments:

Suspicious SEC certificate
Screenshots of where the certificate was posted or sent
Loan agreement or app screenshots
Payment instructions and receipts
Collection messages or threats
Other supporting documents

Where Else to Report Depending on What Happened

A fake SEC certificate complaint may involve more than one agency. The SEC handles the corporate and lending regulation side, but other agencies may be relevant depending on the facts.

Problem	Where to report	Practical notes
Fake SEC certificate, unauthorized lending, misuse of SEC registration, no Certificate of Authority	SEC	Main agency for lending company authority and corporate misuse
Online lending app accessed contacts, messaged your contacts, posted your photo, or misused personal data	National Privacy Commission	NPC complaints may require a verified or notarized complaint and supporting evidence
Fake website, online scam, phishing, threats, account hacking, cyber fraud	PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DOJ Office of Cybercrime	Useful when the conduct is online and involves fraud, threats, identity misuse, or cybercrime
Falsification, estafa, threats, coercion, harassment	City or Provincial Prosecutor’s Office / law enforcement	Usually requires affidavits, evidence, and identification of respondents if known
Payments sent to bank or e-wallet accounts	Bank or e-wallet provider	Report quickly and provide transaction reference numbers and complaint records
Fraudulent app listing	Google Play, Apple App Store, or platform host	Platform reports can help remove the app but do not replace SEC or law enforcement reporting

For data privacy complaints, the NPC provides complaint procedures and recognizes filing by data subjects, authorized representatives, and juridical entities through proper authority documents. (National Privacy Commission)

The DOJ Office of Cybercrime also maintains official contact channels for cybercrime-related concerns. (cybercrime.doj.gov.ph)

If the Lending Company Also Harasses You or Your Contacts

Fake SEC documents often appear together with abusive collection practices. Watch for these red flags:

threats of imprisonment for nonpayment of a civil debt;
threats to contact your employer, family, or barangay;
public shaming on social media;
messages to your phone contacts;
use of your photo, ID, or personal information to shame you;
fake subpoenas, fake warrants, or fake court documents;
collectors pretending to be police, lawyers, prosecutors, or court personnel;
repeated calls late at night or to unrelated people; and
demands for payment to personal e-wallet accounts.

For online lending apps, contact harvesting and contacting people from a borrower’s phonebook can raise serious data privacy issues. The NPC has specifically addressed online lending practices involving the harvesting of contact lists and harassment of borrowers’ contacts. (National Privacy Commission)

When reporting harassment, include:

screenshots of messages to you and your contacts;
names and numbers of collectors;
dates and times of calls;
copies of public posts;
proof that your contacts were messaged;
app permissions requested by the loan app; and
the privacy policy or loan app terms, if available.

Be careful about secretly recording calls. The Philippines has an Anti-Wiretapping Law, and recording private communications without proper consent can create a separate legal issue. Safer evidence usually includes screenshots, call logs, voicemails voluntarily left by the caller, written messages, emails, and witnesses who received the threats.

Practical Timelines, Fees, and Bottlenecks

Process	Typical practical timeline	Possible cost	Common bottleneck
Preparing evidence and complaint	Same day to several days	Usually none	Missing company name, certificate number, or proof
SEC online ticket or report	Filing can be done online; review time varies	Usually none for complaint filing	Incomplete respondent details or unclear attachments
SEC verification or investigation	Weeks to months, depending on complexity and workload	Certification or document requests may have fees	Need to match app name with legal entity
NPC complaint	Varies; formal complaints may require verified or notarized documents	Notarization, copying, courier, or authentication costs	Incomplete complaint form or lack of data privacy evidence
Bank or e-wallet report	Report immediately; internal review varies	Usually none	Delayed reporting or missing transaction reference
Police, NBI, or prosecutor complaint	Initial report can be immediate; investigation can take weeks or months	Affidavits, printing, notarization, travel	Unknown identity of scammer or foreign/online-only operator
Documents executed abroad	Additional time for consular notarization or apostille	Consular, notary, apostille, courier fees	Authentication and translation requirements

In real life, the biggest delay is often not the law itself. It is identifying the correct respondent. Many online lending operations use changing app names, multiple collector numbers, personal payment accounts, and copied certificates from unrelated companies.

If You Are Abroad or a Foreigner

Filipinos abroad and foreigners dealing with Philippine lending companies can still document and report suspicious SEC certificates.

Practical points:

Use the company’s exact Philippine corporate name if available.
Keep the original online messages, app screenshots, and transaction receipts.
If you paid through an overseas remittance channel, save the remittance receipt and receiving account details.
If you need to execute an affidavit abroad, Philippine agencies or prosecutors may require consular notarization or foreign notarization with apostille, depending on the document and where it will be used.
If documents are not in English or Filipino, a translation may be needed.
If the complainant is a corporation or employer affected by fake collection messages, an authorized representative may need a board resolution, secretary’s certificate, special power of attorney, or similar authority document.

Foreigners should also check whether the entity claims foreign ownership or foreign operation. Lending companies in the Philippines are subject to specific corporate and regulatory requirements under RA 9474, including rules on corporate form and authority to operate. (Supreme Court E-Library)

Common Mistakes When Reporting a Fake SEC Certificate

Mistake 1: Reporting only the app name

An app name is not always the legal name. Include the corporate name, app name, website, social media page, payment account, and collector details.

Mistake 2: Assuming “SEC registered” means “allowed to lend”

A Certificate of Incorporation is not the same as a Certificate of Authority to operate as a lending company.

Mistake 3: Paying a “release fee” because of an SEC certificate

Legitimate lending companies do not need to prove legitimacy by pressuring you to send advance fees to personal accounts. A fake SEC certificate is often used to make upfront-fee scams look official.

Mistake 4: Deleting the app too early

If safe, preserve screenshots of the app profile, loan terms, permissions, messages, and certificate before uninstalling. Once deleted, some evidence may be harder to recover.

Mistake 5: Posting the certificate and personal data publicly

Public posts can spread your own ID, address, loan details, or phone number. They can also create defamation or privacy risks if facts are incomplete. Government reports are usually safer and more useful than public shaming.

Mistake 6: Filing only a barangay blotter

A barangay blotter may help document harassment, but it does not replace an SEC complaint, NPC complaint, cybercrime report, or criminal complaint where those are appropriate.

Mistake 7: Ignoring the payment trail

If you paid money, the receiving bank or e-wallet account is important evidence. Report quickly and keep transaction reference numbers.

Mistake 8: Naming the wrong respondent

If a fake certificate belongs to a legitimate company but was copied by scammers, the legitimate company may also be a victim. Explain clearly who used the certificate, where it appeared, and why you think it was misused.

Frequently Asked Questions

Is SEC registration enough for a lending company to operate in the Philippines?

No. A lending company generally needs SEC authority to operate as a lending company under RA 9474. SEC corporate registration may show that a corporation exists, but it does not automatically prove that the corporation is authorized to conduct lending business. (Supreme Court E-Library)

What if the SEC certificate looks real but the app name is different?

Treat it as suspicious and verify the relationship. The app may be a trade name, platform, or brand of a licensed company, but it may also be using another company’s certificate without authority. Compare the app name, operator name, corporate name, Certificate of Authority number, privacy policy, payment accounts, and SEC records.

Can I report a fake SEC certificate even if I did not borrow money?

Yes. You can report the use of a suspicious SEC certificate if it is being used to solicit borrowers, advertise lending services, collect advance fees, impersonate a licensed company, or mislead the public. Actual financial loss strengthens the evidence, but it is not the only reason to report.

Can I report anonymously?

You may be able to send information or a tip, but a formal complaint is usually stronger when you provide your identity, contact details, and evidence. Agencies often need a complainant who can authenticate screenshots, receipts, messages, and the sequence of events. If you fear retaliation, state that concern in the report and limit public posting of personal details.

Is using a fake SEC certificate a crime?

It can be, depending on the facts. If the document was falsified or knowingly used as falsified, Article 172 of the Revised Penal Code may be relevant. If the fake certificate was used to deceive someone into paying money or giving property, estafa under Article 315 may also be relevant. (Supreme Court E-Library)

Where do I report if the lending app messaged my contacts?

Report the lending company issue to the SEC, and report the personal data issue to the National Privacy Commission. If threats, extortion, hacking, impersonation, or online fraud are involved, cybercrime authorities may also be relevant. The NPC has official procedures for filing data privacy complaints. (National Privacy Commission)

Should I stop paying the loan if the certificate is fake?

A fake or misleading certificate raises serious questions about the lender’s authority and conduct, but it does not automatically answer every issue about money already received, payments already made, or civil obligations. Preserve evidence, verify the company’s authority directly through official channels, avoid paying suspicious advance fees or personal accounts, and document all demands and payments.

What if the company is registered with the SEC but has no Certificate of Authority?

That is a serious issue. Under RA 9474, a lending company must have authority from the SEC to operate as a lending company. A corporation that merely exists on SEC records is not automatically licensed to lend to the public. (Supreme Court E-Library)

Do I need a notarized affidavit to report to the SEC?

For an initial SEC online report, a clear written complaint with evidence may be enough to start the process. For criminal complaints, prosecutor filings, or some formal proceedings, sworn affidavits and properly authenticated documents may be required. If you are abroad, notarization, consular acknowledgment, or apostille may become relevant depending on how the document will be used.

Can a lending company use threats of jail to collect payment?

Nonpayment of an ordinary debt is generally a civil matter, not automatic imprisonment. However, separate criminal issues may arise if there is fraud, falsified documents, bouncing checks, identity misuse, or other criminal conduct. Collectors who use fake criminal threats, public shaming, or abusive tactics may create separate legal and regulatory issues.

Key Takeaways

SEC registration is not the same as authority to lend. A lending company needs proper SEC authority under RA 9474.
A fake, altered, borrowed, expired, or misleading SEC certificate should be reported to the Securities and Exchange Commission with screenshots, links, certificate details, loan documents, and payment records.
If the fake certificate was used to get money, it may also involve falsification or estafa under the Revised Penal Code.
If the lending app accessed your contacts, messaged other people, or exposed your personal data, the National Privacy Commission may also be involved.
If there are threats, cyber fraud, phishing, impersonation, or online scams, consider reporting to cybercrime authorities and preserving digital evidence immediately.
The strongest complaints identify the exact company, app, certificate number, payment account, collector details, and timeline of events.
Do not rely on screenshots of “SEC registered” claims alone. Verify the exact company and its authority through official SEC channels.