How to Verify if a Company Is Legitimate in the Philippines

In an increasingly digital economy, the risk of encountering fraudulent entities—ranging from investment scams to fly-by-night contractors—has grown significantly. In the Philippines, the legal framework for business registration is decentralized across several government agencies depending on the nature and structure of the entity. Verifying a company’s legitimacy requires a multi-layered approach involving national and local regulatory checks.


1. Primary Registration: SEC vs. DTI

The first step in verification is determining the business structure. A company's primary registration dictates which government agency holds its records.

Securities and Exchange Commission (SEC)

The SEC oversees Corporations (both stock and non-stock) and Partnerships. If a company claims to be "Inc.," "Corp.," or a "Partnership," it must be registered here.

  • What to look for: A Certificate of Registration and the Articles of Incorporation.
  • Verification Method: Use the SEC CheckApp or the SEC Express System online. You can search by the company name or its SEC Registration Number.
  • Status Check: Ensure the company is "Active." If the status is "Revoked" or "Suspended," the entity is no longer legally allowed to conduct business.

Department of Trade and Industry (DTI)

The DTI handles Sole Proprietorships. These are businesses owned by a single individual.

  • What to look for: A Certificate of Business Name Registration.
  • Verification Method: Visit the DTI Business Name Registration System (BNRS) website. You can search by business name, owner’s name, or keywords.
  • Note: A DTI registration only protects the name of the business; it does not grant the entity a separate legal personality like a corporation.

2. Secondary Licenses and Special Regulators

Primary registration with the SEC or DTI allows a company to exist, but it does not necessarily give them the authority to engage in specific, regulated activities.

The Bangko Sentral ng Pilipinas (BSP)

For entities involving money—such as Lending Companies, Financing Companies, Banks, Remittance Centers, and Virtual Asset Service Providers (Crypto)—a secondary license from the BSP is mandatory.

  • Verification: Check the "List of Supervised Institutions" on the official BSP website. Many online lending apps are "registered" with the SEC but lack the specific "Authority to Operate" as a lending company.

The Bureau of Internal Revenue (BIR)

Every legitimate business must be registered for tax purposes.

  • Document: Look for the BIR Certificate of Registration (Form 2303). This should be prominently displayed at the company’s place of business. It contains the Taxpayer Identification Number (TIN) and the type of taxes the business is required to pay.

The National Privacy Commission (NPC)

If a company handles sensitive personal data (like fintech apps or HR firms), they are often required to register their Data Processing Systems with the NPC. A Seal of Registration from the NPC adds a layer of credibility regarding data security.


3. Local Government Compliance

Regardless of national registration, every business must have the "Right to Operate" in a specific location.

  • Mayor’s/Business Permit: Issued by the City or Municipal Hall where the office is located. This confirms the business has passed local zoning, fire safety, and health inspections.
  • Barangay Clearance: A prerequisite for the Mayor’s Permit, issued by the local district.

4. Comparison of Registration Requirements

Feature Sole Proprietorship Corporation / Partnership
Regulating Body DTI SEC
Proof of Existence Certificate of BN Registration Certificate of Incorporation
Legal Personality Same as the owner Separate Legal Entity
Search Portal DTI BNRS SEC CheckApp / SEC Express

5. Red Flags of Illegitimate Companies

When performing due diligence, the following "red flags" often indicate a fraudulent or high-risk entity:

  • Missing Secondary License: An investment firm that has SEC papers but no "Secondary License to Sell Securities." Under the Securities Regulation Code, the primary SEC registration is not enough to solicit investments from the public.
  • Residential Address for High-Volume Business: If a company claiming to be a major distributor or financial institution is registered to a residential backyard or a non-existent unit.
  • Mismatched Bank Accounts: If you are asked to deposit payments into a personal bank account instead of a corporate account (e.g., paying "Juan Dela Cruz" instead of "ABC Solutions Inc.").
  • Refusal to Provide TIN: Every legitimate business is issued a TIN. A refusal to provide this for invoicing is a major warning sign of tax evasion or non-existence.

6. Verification Checklist

To confirm a company is fully compliant with Philippine laws, verify the following documents:

  1. SEC Certificate of Incorporation (for Corps) OR DTI Business Name Certificate (for Sole Proprietors).
  2. General Information Sheet (GIS): For corporations, this document (filed annually with the SEC) lists the current directors, officers, and stockholders.
  3. Current Mayor’s Permit: Ensure it is for the current calendar year.
  4. BIR Form 2303: Cross-reference the TIN provided on their official receipts.
  5. Physical Office Verification: Use satellite imagery or a physical visit to ensure the office exists.

Legal Note: In the Philippines, "Registration" is not "Endorsement." A company may be registered with the SEC but still engage in illegal activities. Always verify the specific authority to engage in the service they are offering.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.