The rapid proliferation of Online Lending Platforms (OLPs) in the Philippines has streamlined credit access but introduced significant legal risks regarding the authority of signatories. In a jurisdiction where contract enforceability hinges strictly on "meeting of the minds" and legal capacity, verifying that the person clicking "Accept" or applying a digital signature has the actual authority to bind a person or entity is paramount.
I. The Legal Foundation of Authority
Under Philippine law, the validity of a contract depends on the presence of consent, object, and cause. Consent must be given by a person with the legal capacity to do so.
- For Individuals: The individual must be of legal age (18) and not otherwise incapacitated.
- For Corporations: A corporation has a separate juridical personality, but it can only act through its Board of Directors or authorized officers. Under the Revised Corporation Code (RCC), any act performed by an officer without board authority may be considered ultra vires or unenforceable against the corporation unless ratified.
- For Partnerships/Sole Proprietorships: Authority is governed by the Civil Code provisions on Agency (Articles 1868-1932). A contract entered into in the name of another by one who has no authority is unenforceable under Article 1317, unless ratified.
II. Verification of Corporate Signatories
When the borrower is a juridical entity, the OLP must ensure the representative possesses a specific mandate.
1. The Secretary’s Certificate
The "Gold Standard" for verification remains the Secretary’s Certificate. This document, notarized by a Notary Public, certifies that the Board of Directors passed a resolution authorizing a specific individual to:
- Apply for loans with the specific OLP.
- Sign loan documents and promissory notes.
- Bind the corporation to the terms and conditions.
2. Doctrine of Apparent Authority
Lenders often rely on this doctrine, where a corporation is estopped from denying an agent's authority if it knowingly permitted the agent to act as though they had such power. However, in online lending, relying on "apparent authority" is risky and often leads to protracted litigation.
III. Verification in the Digital Landscape
The Electronic Commerce Act of 2000 (R.A. 8792) provides the legal backbone for online lending. It mandates that electronic signatures are the legal equivalent of handwritten signatures if a reliable method is used to identify the person.
1. E-KYC (Electronic Know Your Customer)
The Bangko Sentral ng Pilipinas (BSP) and the Securities and Exchange Commission (SEC) require robust e-KYC procedures. To verify a signatory's identity, OLPs must utilize:
- Government-Issued IDs: Verification against the Philippine Identification System (PhilSys) or other databases (LTO, DFA, PRC).
- Liveness Checks: Real-time facial recognition or "selfie" videos to prevent identity theft.
- Biometric Authentication: Fingerprint or facial scans linked to the device.
2. Digital Signatures vs. Electronic Signatures
While all digital signatures are electronic signatures, not all electronic signatures are digital.
- Electronic Signatures: A simple "I Accept" tick box or a scanned image of a signature.
- Digital Signatures: Use Public Key Infrastructure (PKI) to ensure the integrity of the document and the identity of the signer. For high-value commercial loans, PKI-based signatures (like those issued by PNRI or private CAs) are preferred for their non-repudiation features.
IV. SEC and BSP Regulatory Compliance
The SEC, through Memorandum Circular No. 19, Series of 2019, and various BSP circulars, imposes strict disclosure and verification requirements on OLPs.
- Proof of Authority: For corporate borrowers, OLPs are increasingly required to store digital copies of the Secretary's Certificate as part of their compliance audits.
- OTP (One-Time Password) Verification: Acts as a secondary layer of verification, confirming that the signatory has control over the registered mobile number or email address associated with the account.
V. Risks of Failure to Verify
Failure to properly verify a representative's authority can lead to the following legal consequences:
| Risk | Legal Consequence |
|---|---|
| Unenforceability | Under Art. 1317 of the Civil Code, the contract cannot be enforced in court if the "representative" had no authority. |
| Corporate Repudiation | The corporation may claim the loan was a "maverick" act by an employee, leaving the lender with a claim only against the unauthorized individual. |
| SEC Sanctions | OLPs may face fines, suspension, or revocation of their Certificate of Authority for failing to follow KYC and anti-money laundering (AML) protocols. |
| Identity Theft Claims | If a signatory is a victim of identity theft, the lender bears the burden of proving they exercised "Extraordinary Diligence" in verification. |
VI. Best Practices for Online Lenders
To mitigate risk, online lending agreements should incorporate the following protocols:
- Multi-Factor Authentication (MFA): Require more than just a password to access and sign loan documents.
- Digital Notarization: Utilize emerging rules on the Remote Online Notarization of Paper Documents (RON) as permitted by the Supreme Court in specific contexts.
- Audit Trails: Maintain a comprehensive electronic log of the IP address, timestamp, device ID, and geolocation of the signatory at the time of execution.
- Verification Call: For significant loan amounts, a recorded video call with the authorized representative to confirm the board's intent is a prudent supplementary measure.
- Periodic Re-verification: Authority can be revoked. OLPs should require updated Secretary’s Certificates at regular intervals or for every new drawdown.