A fake SEC certificate from a lending company is usually meant to make you feel safe enough to borrow, pay a “processing fee,” give personal documents, or stop questioning an online lending app. In the Philippines, the important question is not just “May SEC certificate ba sila?” The real question is whether the company has the correct primary registration and the required Certificate of Authority to legally operate as a lending or financing company, and whether the app or website is properly recorded with the Securities and Exchange Commission.

Why an SEC Certificate Can Be Misleading

Many scammers show a screenshot or PDF labeled “SEC Registration,” “Certificate of Incorporation,” “Company Registration,” or “Certificate of Authority.” Some are genuine documents used in a misleading way. Others are edited, copied from another company, expired, revoked, or completely fake.

The most common misunderstanding is this:

Document shown by the lender	What it actually proves	Is it enough to legally lend?
SEC Certificate of Incorporation	The corporation was registered with the SEC	No
Articles of Incorporation or By-Laws	The company’s basic corporate documents	No
General Information Sheet (GIS)	The company’s officers, directors, stockholders, and address as reported	No
Certificate of Authority (CA) to Operate as a Lending Company	SEC authority to engage in lending	Yes, if valid and subsisting
Certificate of Authority to Operate as a Financing Company	SEC authority to engage in financing	Yes, if valid and subsisting
App store listing, Facebook page, website, or business permit	Marketing or local business presence	No

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, a lending company must be a corporation and cannot conduct lending business unless granted authority to operate by the SEC. A lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons.

This means a company may be SEC-registered as a corporation but still not be legally authorized to operate as a lending company.

The Legal Basis: What Philippine Law Requires

RA 9474: Lending companies need SEC authority

RA 9474 requires lending companies to be organized as corporations and to obtain SEC authority before conducting lending business. The law also gives the SEC power to regulate, supervise, inspect, suspend, revoke, and impose sanctions on lending companies.

Section 12 of RA 9474 penalizes persons who engage in lending without a validly subsisting authority from the SEC, or who hold themselves out as a lending company through advertisements, documents, or representations without authority.

RA 8556: Financing companies are also separately regulated

Some lenders are not “lending companies” but “financing companies.” Financing companies are governed by the Financing Company Act of 1998, Republic Act No. 8556, as amended. They also need SEC authority to operate as financing companies.

This matters because some suspicious companies use the words “finance,” “loan,” “cash,” “credit,” or “lending” interchangeably. You must verify the exact type of authority they claim.

RA 3765: Borrowers must receive truth-in-lending disclosures

The Truth in Lending Act, Republic Act No. 3765, requires disclosure of the true cost of credit, including finance charges. A legitimate lender should be able to give you a clear disclosure statement showing the loan amount, interest, fees, penalties, and payment schedule.

If a company waves an SEC certificate but refuses to disclose the actual cost of the loan, that is a serious warning sign.

Revised Penal Code: Fake certificates may involve falsification or estafa

If the certificate itself is forged, altered, or knowingly used to deceive borrowers, criminal laws may apply. Depending on the facts, possible offenses include:

Falsification of public, official, or commercial documents under Articles 171 and 172 of the Revised Penal Code;
Use of falsified documents under Article 172;
Estafa under Article 315, if deceit caused a person to part with money or property, such as paying an “advance release fee,” “insurance fee,” “notarial fee,” or “unlocking fee” for a fake loan.

The case depends on evidence: who made the document, who used it, what was represented, when the payment was demanded, and whether the borrower suffered damage.

Primary License vs. Secondary License: The Most Important Distinction

In SEC practice, people often use the terms “primary license” and “secondary license.”

A primary license is the company’s basic SEC registration as a corporation. For example, the SEC Certificate of Incorporation proves the corporation exists.

A secondary license is the authority to engage in a regulated business. For lending companies, this is the Certificate of Authority to Operate as a Lending Company. For financing companies, it is the Certificate of Authority to Operate as a Financing Company.

For borrowers, the practical rule is simple:

A Certificate of Incorporation alone is not enough. A lending company must also have a valid Certificate of Authority from the SEC.

How to Verify a Fake SEC Certificate from a Lending Company

1. Get the exact details shown on the certificate

Before searching, copy the details exactly as shown. Do not rely on the lender’s nickname, Facebook page name, app name, or agent name.

Look for:

Exact corporate name;
SEC registration number;
Certificate of Authority number;
Date of incorporation;
Date of issuance of the Certificate of Authority;
Registered office address;
Trade name, app name, or online lending platform name;
Name of signatory or issuing SEC office;
QR code, barcode, watermark, or digital signature, if any.

Take screenshots of the certificate, ads, chat messages, payment instructions, website, app store listing, and the lender’s profile. If the lender later deletes the page, these screenshots may matter.

2. Check if the company appears in the SEC list of lending or financing companies

Go to the SEC’s official website and look for the pages for lending and financing companies. The SEC has public lists for:

Lending companies with Certificate of Authority;
Financing companies with Certificate of Authority;
Revoked or suspended lending and financing companies;
Recorded online lending platforms.

If the certificate says “lending company,” check the lending company list. If it says “financing company,” check the financing company list. If the lender operates through an app or website, also check the recorded online lending platform list.

The SEC has repeatedly directed the public to use its official lists for verification, including the list of recorded online lending platforms.

3. Match the name exactly, not approximately

A common scam tactic is to use a name that looks close to a legitimate company.

For example:

What appears online	Why it is suspicious
“ABC Lending Services”	Legitimate company may be “ABC Lending Corporation”
“ABC Cash Loan App”	App name may not be recorded under the registered company
“ABC Finance Philippines”	May be copying the name of a financing company
“ABC Lending Agent”	Individual agents are not the same as the licensed corporation
“ABC Lending Corp.” with a different SEC number	Could be using another company’s name with edited details

Do not assume a match because the first few words are the same. Compare the full corporate name, SEC registration number, CA number, address, and app name.

4. Check if the app or website is separately recorded

Online lending creates another layer of verification. The corporation may be registered, but the app or website may not be properly recorded with the SEC.

Under SEC rules on online lending platforms, financing and lending companies are required to disclose and report their online lending platforms. A 2026 public advisory from the DICT, National Privacy Commission, and SEC described online lending platforms as mobile apps, websites, and fintech-enabled systems where lending or financing products are made available to the public.

For mobile apps and websites, verify both:

The corporation behind the loan; and
The specific app, website, or platform name being used.

If the company is registered but the app name is not on the SEC’s recorded online lending platform list, treat the transaction as high-risk until confirmed directly with the SEC.

5. Search for revocation, suspension, and SEC advisories

A company may have been legitimate before but later suspended, revoked, penalized, or ordered to stop operations.

Check:

SEC advisories;
Revocation orders;
Suspension lists;
Cease-and-desist orders;
News releases from the SEC;
Warnings on unrecorded online lending platforms.

A certificate issued years ago does not prove the authority is still valid today. The key phrase is validly subsisting authority.

6. Use SEC eSEARCH, SEC Express, and SEC iMessage when the public list is unclear

If the public list is outdated, hard to search, or the name has changed, use official SEC channels.

Tool or office	What it helps with
SEC eSEARCH	Checking company records available through SEC’s online search system
SEC Express System	Requesting plain or authenticated copies of company documents such as Articles, GIS, and other records
SEC iMessage	Filing inquiries, reports, complaints, and tracking tickets
SEC Financing and Lending Companies Department	Questions about lending or financing company authority

SEC Express states that SEC documents can be requested online and delivered after release by the SEC, usually within 3 to 5 working days for Metro Manila and up to 7 working days for provincial deliveries.

7. Look for red flags in the document itself

A fake or suspicious SEC certificate often has one or more of these problems:

Blurry logo or inconsistent fonts;
Cropped signatures or seals;
No SEC registration number;
No Certificate of Authority number;
Wrong company type;
Misspelled corporate name;
Address does not match the SEC record;
Certificate claims lifetime authority;
QR code leads to a private Google Drive, Facebook page, or unrelated website;
Certificate is issued to one company but used by another app;
Agent refuses to send a clear copy;
Agent says “registered kami sa SEC” but cannot show the CA number;
Payment is requested to a personal GCash, Maya, bank account, or crypto wallet.

One red flag may have an innocent explanation. Several red flags together usually mean you should stop and verify before sending money or personal documents.

What to Do If You Already Sent Money or Personal Information

If you paid an advance fee

Gather proof immediately:

Screenshots of the loan offer;
The SEC certificate shown to you;
Chat messages;
Payment receipts;
GCash, Maya, bank transfer, or remittance details;
Names, phone numbers, usernames, and links;
Any promise that the loan would be released after payment.

Advance-fee loan scams often use phrases like:

“Pay processing fee first”;
“Unlock your loan”;
“Pay insurance before release”;
“Pay notarial fee through GCash”;
“Your loan is approved but frozen”;
“Pay penalty to cancel the loan.”

A legitimate lender may charge fees, but the fees should be clearly disclosed and usually deducted or handled through proper loan documentation, not demanded through suspicious personal accounts before release.

If your contacts are being harassed

Online lending harassment may involve both SEC rules and data privacy rules. The 2026 DICT-NPC-SEC advisory states that unnecessary, unauthorized, excessive, or disproportionate processing of personal data is prohibited, including excessive access to contact lists and contacting persons other than guarantors for debt collection.

Save:

Harassing text messages;
Call logs;
Screenshots of messages sent to relatives, friends, co-workers, or employers;
Threats of public shaming;
Edited photos or defamatory posts;
Proof that the contacted person was not a guarantor.

Report unfair debt collection practices through SEC iMessage. For privacy violations, report to the National Privacy Commission. For threats, extortion, identity theft, or cyber harassment, preserve the evidence for the PNP Anti-Cybercrime Group or NBI Cybercrime Division.

If someone is using a real company’s name

Sometimes scammers impersonate a legitimate lending company. The real company may be SEC-authorized, but the person messaging you may not be connected to it.

Verify through the company’s official website, official email, or published customer service channels. Do not use the phone number or link given by the suspicious agent as your only source of verification.

Practical Verification Checklist

Use this before borrowing, paying, or uploading IDs.

Question	Safe answer
Does the company have an exact corporate name?	Yes, and it matches SEC records
Does it have an SEC Certificate of Incorporation?	Yes, but this is only the primary license
Does it have a Certificate of Authority to lend or finance?	Yes, and the CA number matches SEC records
Is the app or website on the SEC recorded OLP list?	Yes, if the loan is offered online
Is the authority active, not revoked or suspended?	Yes
Are fees, interest, penalties, and due dates disclosed?	Yes, in writing
Is payment requested through an official company account?	Yes
Does the lender avoid threats and public shaming?	Yes
Does the lender avoid unnecessary access to contacts/photos?	Yes
Are you being rushed to pay first before verification?	No

If the answer to several of these is “no,” the certificate should not be trusted without direct SEC confirmation.

Common Scenarios

“The company sent me a Certificate of Incorporation. Is it legit?”

Not necessarily. A Certificate of Incorporation only proves that a corporation was registered. For lending, you must still verify the Certificate of Authority.

“The company is on the SEC list, but the app name is different.”

Check the recorded online lending platform list. The app or website should be connected to the registered company. A registered company name does not automatically authorize every app using a similar name.

“The agent says they are SEC-registered but the payment account is personal.”

That is a serious red flag. Ask for the official company payment channel and written loan documents. Scammers often use personal e-wallets because they can disappear quickly.

“The certificate looks real but the company is not replying through official channels.”

Treat it as suspicious. A real SEC record can be copied and used by impersonators. Verify through SEC channels and the company’s official contact information, not only through the agent.

“The lending app accessed my contacts and threatened my relatives.”

Preserve screenshots and report the conduct. Contacting people on your contact list who are not guarantors may violate data privacy and debt collection rules, especially if used for harassment or public shaming.

Where to Verify and Report

Concern	Where to go
Verify lending or financing authority	SEC website, SEC eSEARCH, SEC Financing and Lending Companies Department
Request company documents	SEC Express System
File complaint or inquiry with SEC	SEC iMessage
Data privacy violation	National Privacy Commission
Threats, extortion, cyber harassment, identity theft	PNP Anti-Cybercrime Group or NBI Cybercrime Division
Immediate physical threats	Local police station or barangay blotter

For evidence, keep original screenshots and export chat logs when possible. Do not edit images except to make backup copies. If you submit evidence, organize it chronologically: first contact, certificate sent, payment demand, payment made, threats, follow-ups, and damage suffered.

Frequently Asked Questions

How do I know if an SEC certificate from a lending company is fake?

Compare the certificate against SEC records. Check the exact corporate name, SEC registration number, Certificate of Authority number, address, and app or website name. If the company is not on the SEC list of lending or financing companies, or the app is not on the recorded OLP list, treat it as suspicious.

Is SEC registration enough for a lending company in the Philippines?

No. SEC registration as a corporation is only the primary license. A lending company also needs a Certificate of Authority from the SEC to operate as a lending company.

What is the difference between SEC registration and Certificate of Authority?

SEC registration means the corporation exists. A Certificate of Authority means the SEC has authorized the corporation to engage in a regulated activity, such as lending or financing. For borrowers, the Certificate of Authority is the more important document.

Can a lending company operate only through Facebook or Messenger?

A legitimate lender may advertise online, but it must still be properly registered and authorized. If it operates through an app or website, the online lending platform should also be recorded with the SEC. Be careful with lenders that only use social media accounts, personal numbers, or personal e-wallets.

What if the SEC certificate is real but the lender is a scammer?

This can happen when scammers impersonate a real company. Verify using the company’s official website, official email, or SEC records. Do not rely only on the contact details provided by the person messaging you.

Can I report a fake SEC certificate to the SEC?

Yes. You can report suspected fake certificates, unauthorized lending, or abusive collection practices through SEC iMessage. Include screenshots, the certificate, the company or app name, payment details, and the names or numbers used by the agents.

Can I get my money back if I paid a fake lending company?

Recovery depends on how payment was made and whether the account can still be traced or frozen. Report quickly to the e-wallet provider or bank, preserve proof of payment, and consider reporting to the SEC and law enforcement if there was fraud.

Is it illegal for a lending app to message my contacts?

It may be unlawful if the app accessed or used your contacts excessively, without proper consent, or for harassment. Government advisories have emphasized that contacting persons other than guarantors for debt collection is prohibited.

Should foreigners verify Philippine lending companies differently?

Foreigners should verify the same SEC records, but should be extra careful with online-only lenders, cross-border remittances, and requests for passport copies. If a document will be used abroad, authenticated SEC documents or apostilled records may be needed depending on the foreign institution’s requirements.

What is the safest way to verify before borrowing?

Use a three-step check: confirm the company’s SEC registration, confirm its Certificate of Authority, and confirm the app or website is recorded if the loan is online. If any step fails, do not send money or personal documents until the SEC or the company’s official channel confirms the authority.

Key Takeaways

A Certificate of Incorporation is not enough; a lending company needs a valid SEC Certificate of Authority.
Match the exact corporate name, SEC registration number, CA number, address, and app or website name.
For online loans, verify both the company and the specific online lending platform.
Check SEC lists for registered, recorded, revoked, suspended, and warned entities.
Fake or altered SEC certificates may involve falsification, estafa, unauthorized lending, and data privacy violations.
Do not pay advance fees to personal accounts or upload sensitive IDs until verification is complete.
Preserve screenshots, payment receipts, chat logs, and app details if you need to report the lender.