When you search whether a company is “legit” in the Philippines, you are usually trying to avoid a scam, a fake seller, an illegal recruiter, an unauthorized lender, or an investment scheme using an impressive-looking certificate. The safest approach is not to rely on one document. A company can be registered with the SEC or DTI and still be unauthorized to do the specific activity it is offering you. This guide explains how to verify a Philippine company step by step, what documents to ask for, which government databases to check, and what red flags matter in real life.

What “Legitimate Company” Means in the Philippines

In the Philippines, “legitimate” can mean several different things:

Question	What you are checking	Why it matters
Is the business name registered?	DTI registration for sole proprietorships, or SEC registration for corporations/partnerships	Confirms that the name or entity exists in a government registry
Is it allowed to operate locally?	Mayor’s permit or business permit from the city/municipality	Confirms local authority to operate at a specific address
Is it registered for taxes?	BIR Certificate of Registration	Confirms the business is registered as a taxpayer
Is it licensed for its industry?	SEC, BSP, Insurance Commission, DMW, DHSUD, FDA, CDA, or other regulator	Confirms authority to do regulated activities
Is it actually trustworthy?	Contracts, receipts, track record, officers, address, payment channels, complaints	Registration alone does not prove honesty or financial capacity

The most important point: registration is not the same as authority to solicit investments, lend money, recruit workers, sell real estate projects, operate as a bank, or sell regulated products.

A business may be “registered” but still illegal for the specific transaction being offered.

Main Government Offices Used to Verify a Company

SEC: Corporations, Partnerships, and Foreign Corporations

The Securities and Exchange Commission (SEC) registers and regulates corporations, partnerships, associations, and foreign corporations doing business in the Philippines. The main law is the Revised Corporation Code, Republic Act No. 11232, which modernized Philippine corporation law.

Use the SEC if the business claims to be:

A corporation, such as “ABC Trading Corporation”
A One Person Corporation or “OPC”
A partnership
A foreign corporation with a Philippine branch, representative office, or regional office
An entity offering investments, securities, lending, financing, or other SEC-regulated products

Useful SEC tools include:

SEC eSPARC for company registration-related information
SEC eSEARCH for downloading SEC-submitted documents
SEC Express System for ordering copies of company documents such as Articles of Incorporation, By-Laws, General Information Sheet, and Audited Financial Statements
SEC iMessage for complaints, inquiries, and reports

SEC Express allows online requests for documents such as Articles of Incorporation or Partnership, By-Laws, General Information Sheet, Audited Financial Statement, board resolutions, secretary’s certificates, and other company-related documents. Delivery is typically 3 to 5 working days within Metro Manila and up to 7 working days for provincial delivery, counted from release by the SEC for delivery.

DTI: Sole Proprietorship Business Names

The Department of Trade and Industry (DTI) handles business name registration for sole proprietorships. A sole proprietorship is a business owned by one natural person, not a separate corporation.

The legal basis is Act No. 3883, the Business Name Law, and DTI Department Administrative Order No. 18-07, Series of 2018. Act No. 3883 requires a person using a business name other than his or her true name to register that business name before using it in business transactions.

Use the DTI Business Name Search if the business looks like a small shop, freelancer, online seller, trading name, or individual enterprise.

Important limitation: DTI’s Business Name Search is limited to exact name search. Random searches are not allowed. If the seller gives you “Maria’s Online Shop,” search that exact name and ask for the DTI certificate showing the owner’s true name.

A DTI certificate does not create a corporation. It does not separate the business from the owner. It also does not replace a mayor’s permit, BIR registration, FDA license, DMW license, SEC secondary license, or other permits.

BIR: Tax Registration

The Bureau of Internal Revenue (BIR) issues a Certificate of Registration, commonly called BIR Form 2303 or simply the BIR COR. For corporations and partnerships, the BIR uses BIR Form No. 1903 for registration.

For non-individual taxpayers, BIR documentary requirements commonly include:

SEC Certificate of Incorporation, Certificate of Recording for partnerships, License to Do Business for foreign corporations, CDA registration for cooperatives, or other proof of registration
Articles of Incorporation, Articles of Partnership, Articles of Cooperation, or similar organizational documents
Invoice-related documents, such as BIR Printed Invoices or authority to print own invoices
₱30 documentary stamp tax for the Certificate of Registration, if applicable
Board resolution, secretary’s certificate, or written authority if a representative is transacting

A BIR COR is important because a legitimate business should be able to issue official invoices or receipts. But BIR registration alone does not prove that the business is licensed for regulated activities.

LGU or City/Municipal Hall: Mayor’s Permit

A business operating in a city or municipality generally needs a business permit or mayor’s permit from the local government unit (LGU), usually through the Business Permits and Licensing Office (BPLO).

This is based on the regulatory powers of LGUs under the Local Government Code, Republic Act No. 7160, and the business-permit streamlining policies under Republic Act No. 11032, the Ease of Doing Business and Efficient Government Service Delivery Act of 2018.

A mayor’s permit usually shows:

Registered business name
Owner or company name
Business address
Line of business
Permit number
Year of validity
Barangay clearance or integrated local clearances, depending on the LGU
Sanitary, fire, zoning, or other clearances when applicable

A mayor’s permit is usually renewed yearly. Many LGUs set renewal deadlines in January, but exact dates and penalties vary by city or municipality.

Step-by-Step Guide to Verify If a Company Is Legitimate

1. Get the Exact Legal Name First

Before searching any database, ask for the exact legal name.

Do not rely only on:

Facebook page name
Website name
App name
Brand name
Storefront name
Shopee, Lazada, TikTok, or Instagram username
Screenshot of a certificate

Ask directly:

“What is your SEC or DTI registered name?”
“Are you a corporation, partnership, or sole proprietorship?”
“What is your SEC registration number or DTI business name number?”
“What is the registered business address?”
“Can you send a copy of your BIR Certificate of Registration and current mayor’s permit?”
“If this is an investment, lending, insurance, recruitment, or real estate offer, what is your secondary license number?”

Be careful when the name on the advertisement is different from the name on the certificate. A mismatch is not automatically illegal, but it needs explanation.

For example:

“BrightLife PH” may be only a brand name.
The SEC-registered company may be “BrightLife Marketing Corporation.”
The bank account may be under a different person, which is a red flag if not properly explained.

2. Check the SEC or DTI Registry

If it is a corporation or partnership, search SEC records and request documents when the transaction is important.

For a corporation, the minimum documents to check are:

SEC Certificate of Incorporation
Articles of Incorporation
By-Laws
Latest General Information Sheet (GIS)
Latest Audited Financial Statement (AFS), when available
Secretary’s Certificate or board authority if someone claims to represent the company

The GIS is especially useful because it shows current directors, officers, stockholders, principal office, and corporate information. If the person negotiating with you is not listed as an officer or authorized representative, ask for a secretary’s certificate or board resolution.

If it is a sole proprietorship, use the DTI BNRS system. DTI business name registration fees depend on territorial scope:

DTI territorial scope	Registration fee	Documentary stamp tax
Barangay	₱200	₱30
City/Municipality	₱500	₱30
Regional	₱1,000	₱30
National	₱2,000	₱30

A DTI business name registration is valid for five years from the date of registration. Payment for a pending DTI registration must generally be made within seven calendar days, otherwise the application may be deemed abandoned.

3. Confirm the Business Address

A registered address matters because it tells you where the company can be reached and sued, served notices, or inspected.

Check whether the address appears consistently in:

SEC documents or DTI certificate
BIR Certificate of Registration
Mayor’s permit
Official invoices
Contract
Website privacy policy or terms
Google Maps listing
Delivery documents
Bank account documentation, if available

Red flags include:

No physical address at all
Only a vague address such as “Metro Manila”
Address is a virtual office but the business claims to operate a warehouse or clinic
Address belongs to a different company
Address on the mayor’s permit differs from the pickup, warehouse, or office location
Company refuses to identify where it operates

Virtual offices are not automatically suspicious. Many legitimate companies use them for official correspondence. The problem is when the company uses a virtual address to hide where actual operations, goods, or personnel are located.

4. Ask for the BIR Certificate and Official Receipt or Invoice

A legitimate operating business should normally be able to issue an official invoice or receipt.

Check the BIR COR for:

Registered name
TIN
Registered address
Tax types
Line of business
RDO code
Date of registration

For payments, check whether the invoice or receipt matches the entity you are dealing with. If you pay “ABC Trading Corporation,” the invoice should not come from an unrelated individual unless there is a clear agency, franchise, marketplace, or payment-processor arrangement.

Be extra careful when the seller says:

“No receipt, but cheaper.”
“Pay to my personal GCash only.”
“We cannot issue invoice because we are newly registered.”
“The company is registered but the bank account is under my cousin.”
“We only send receipts after full payment.”

For high-value transactions, the name on the bank account should ideally match the registered business or authorized collecting entity.

5. Check the Mayor’s Permit With the LGU

A mayor’s permit confirms that the business is allowed to operate locally in that city or municipality for the stated activity.

Ask for a clear copy showing:

Business name
Registered owner or company
Business address
Type of business
Permit number
Year of validity
Official seal or QR code, if the LGU uses one

You can verify with the city or municipal BPLO. Some LGUs have online permit verification; others require email, phone, or personal verification at city hall.

A business may have SEC or DTI registration but still lack a valid mayor’s permit for the location where it actually operates. This is common with online sellers, warehouses, clinics, food businesses, tutorial centers, and small service providers.

6. Check If the Business Needs a Special License

Many scams hide behind a real SEC or DTI registration. The key question is: Is the company licensed for the activity it is offering?

Business activity	Agency to check	What to ask for
Investment offers, securities, pooled funds, high-return schemes	SEC	Registration statement, secondary license, permit to sell securities, or SEC confirmation
Lending or financing	SEC	Lending company or financing company certificate of authority
Banks, e-money, remittance, money service businesses	BSP	BSP-supervised financial institution listing or authority
Insurance, pre-need, HMOs	Insurance Commission or SEC, depending on product	Certificate of Authority or license
Overseas recruitment	DMW	DMW-licensed recruitment agency status and approved job order
Real estate subdivision or condominium sales	DHSUD	Certificate of Registration and License to Sell for the project
Cooperatives	CDA	Certificate of Registration and status
Food, drugs, cosmetics, medical devices	FDA	License to Operate and product registration/notification
Schools or training centers	DepEd, CHED, TESDA, or LGU depending on activity	Permit, recognition, accreditation, or registration

For overseas recruitment, use the DMW Licensed Recruitment Agencies directory and check the approved job order, not just the agency’s Facebook page.

For banks and financial institutions, use the BSP Directory of Banks and Non-Bank Financial Institutions.

For insurance companies, check the Insurance Commission for companies with valid authority.

7. Be Careful With Investment Offers

This is where many Filipinos and OFWs lose money.

Under the Securities Regulation Code, Republic Act No. 8799, securities generally cannot be sold or offered to the public in the Philippines without proper registration with the SEC, unless exempt.

The Supreme Court has recognized that an “investment contract” may exist when a person invests money in a common enterprise and expects profits mainly from the efforts of others. In Power Homes Unlimited Corporation v. SEC, the Court discussed the Howey Test for investment contracts. In SEC v. Prosperity.Com, Inc., the Court again explained that investment contracts are securities that must be registered before they are distributed and sold. In SEC v. Oudine Santos, the Court dealt with liability connected to unregistered securities sales.

Be suspicious of any company that says:

“SEC registered kami” but cannot show a license to solicit investments
Guaranteed returns, especially very high returns
“No risk”
“Limited slots”
“You earn even if you do nothing”
Referral commissions are emphasized more than the product
Returns are paid from new members’ money
Investors are told not to report to SEC or BIR
The company uses crypto, forex, casino, AI trading, tasking, or e-commerce language to avoid calling it an investment

An SEC Certificate of Incorporation only proves the corporation exists. It does not automatically authorize the company to solicit investments from the public.

8. Verify the People Claiming to Represent the Company

Even if the company is real, the person messaging you may not be authorized.

Ask for:

Company email, not only Gmail or personal email
Company ID, but do not rely on ID alone
Secretary’s certificate or board resolution for major transactions
Official invoice or payment instruction under the company name
Signed contract showing the company as party
Proof that the signatory is an officer, director, partner, proprietor, or authorized representative

For corporations, the latest GIS can help you identify directors and officers. If the person is not listed, he or she may still be authorized, but there should be a document proving authority.

9. Check Complaints, Advisories, and Public Records

Search the company name together with terms like:

“SEC advisory”
“scam”
“complaint”
“estafa”
“refund”
“illegal recruitment”
“unauthorized lending”
“DHSUD license to sell”
“BSP advisory”
“DTI complaint”

For consumer issues, Republic Act No. 7394, the Consumer Act of the Philippines, protects consumers against deceptive, unfair, and unconscionable sales acts and practices.

For fraud, Article 315 of the Revised Penal Code penalizes estafa or swindling. Online fraud may also involve Republic Act No. 10175, the Cybercrime Prevention Act of 2012, especially when computer systems, online accounts, digital platforms, or electronic communications are used.

Common Red Flags That a Company May Not Be Legitimate

“Registered with SEC” But No Secondary License

This is the most common trick in investment scams.

A company may be incorporated for “general trading” or “marketing,” then use its SEC certificate to convince people to invest. Unless it has the proper SEC authority for securities or investment-taking, the SEC registration does not legalize the investment offer.

DTI Certificate Used Like a Corporate Certificate

A DTI business name is only a registered name of an individual proprietor. It does not mean there is a corporation. It does not give limited liability. It does not prove financial capacity.

If you are entering into a contract with a DTI-registered business, the real party is usually the individual owner doing business under that name.

Fake or Edited Certificates

Fake certificates are common. Watch for:

Blurry screenshots
Cropped documents
Wrong font or spacing
Missing registration number
No QR code where one is expected
Name mismatch
Certificate issued to a different entity
Refusal to send a full copy
“For viewing only” excuses
Certificate date inconsistent with the company’s claimed operating history

For important transactions, order documents directly from SEC Express or verify with the issuing agency.

Payment to Personal Accounts

Payment to a personal account is not always illegal, especially for sole proprietors. But it is risky when you are dealing with a corporation or a large transaction.

For corporations, ask why payment is being sent to an individual. If the answer is unclear, insist on a company bank account or documented authorized collection arrangement.

No Written Contract

Legitimate businesses should be able to put important terms in writing.

For large payments, the contract should state:

Full legal name of the seller or service provider
SEC or DTI registration details
Business address
Description of goods or services
Price and payment schedule
Delivery or completion date
Refund, cancellation, and warranty terms
Signatory name and authority
Official receipt or invoice arrangement
Dispute resolution or venue

A chat conversation can be evidence, but it is not a substitute for a proper contract in high-value transactions.

Special Notes for Foreigners Dealing With Philippine Companies

Foreigners often face additional risks because they may not know which Philippine document proves what.

Foreign Corporations Doing Business in the Philippines

A foreign corporation that is “doing business” in the Philippines generally needs a license from the SEC. A foreign company may also appoint a Philippine distributor, agent, branch, representative office, or subsidiary. Ask which structure applies.

For foreign documents signed abroad, Philippine agencies may require apostilled or authenticated documents, especially for corporate authority documents, board resolutions, powers of attorney, or foreign registration papers.

Foreign Ownership Restrictions

Some Philippine industries have foreign ownership restrictions under the 1987 Constitution, the Foreign Investments Act, and sector-specific laws. Examples include land ownership, certain public utilities, mass media, educational institutions, and other activities listed in foreign investment rules.

This matters because a company may be SEC-registered but still restricted from engaging in a specific activity if its foreign ownership exceeds the legal limit.

Real Estate Transactions

Foreigners generally cannot own private land in the Philippines, subject to narrow exceptions such as hereditary succession. They may own condominium units within the foreign ownership limits under Philippine condominium law.

If a company sells a subdivision lot, condominium unit, memorial lot, or similar project, check not only the company’s SEC registration but also the DHSUD project documents, especially the Certificate of Registration and License to Sell.

What Documents Should You Ask For?

For ordinary transactions, you may not need every document. For large purchases, investments, employment placement, loans, real estate, distributorships, or cross-border deals, ask for more.

Document	Best for	What to check
SEC Certificate of Incorporation or Registration	Corporations and partnerships	Exact name, registration number, date
Articles of Incorporation or Partnership	Corporate powers and business purpose	Primary purpose, incorporators, address
By-Laws	Corporations	Governance and officers
Latest General Information Sheet	Corporations	Directors, officers, stockholders, address
Audited Financial Statement	Larger or higher-value transactions	Financial capacity, going-concern issues
DTI Certificate of Business Name Registration	Sole proprietorships	Owner name, business name, territorial scope
BIR Certificate of Registration	Tax compliance	TIN, RDO, registered address, tax types
Mayor’s Permit	Local operation	Address, year, line of business
Sectoral license	Regulated businesses	License number, validity, scope
Secretary’s Certificate or Board Resolution	Corporate authority	Person authorized to sign, collect, sell, or represent
Official invoice or receipt	Payment proof	Name, TIN, address, invoice details

Where to Report Problems

The correct office depends on the issue:

Problem	Possible office
Unauthorized investment solicitation	SEC Enforcement and Investor Protection through SEC iMessage
Fake or misleading business name	DTI
Consumer product or sales complaint	DTI, or sector regulator depending on product
No official receipt or tax issue	BIR
No mayor’s permit or local permit issue	City/Municipal BPLO
Illegal recruitment for overseas work	DMW
Bank, e-money, remittance, or money service issue	BSP
Insurance or HMO issue	Insurance Commission
Real estate project without license to sell	DHSUD
Online fraud, hacking, identity theft, or cyber-enabled scam	PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DOJ Office of Cybercrime
Estafa or swindling	Police, NBI, prosecutor’s office, or court process

Keep evidence before reporting:

Screenshots with dates and account names
URLs and profile links
Receipts, invoices, deposit slips, bank transfer confirmations
Contracts, order forms, quotations
Names and phone numbers of agents
Copies of certificates sent to you
Chat logs and emails
Delivery records
Any promises of income, refund, or guaranteed return

Frequently Asked Questions

How do I check if a company is SEC registered in the Philippines?

Get the exact registered name or SEC registration number, then check SEC online services such as SEC eSPARC, SEC eSEARCH, or SEC Express. For important transactions, order the company’s SEC documents directly instead of relying on screenshots.

How do I verify a DTI business name?

Use the DTI BNRS Business Name Search and enter the exact business name. DTI search is exact-match based, so spelling matters. A DTI registration means the business name is registered to an individual proprietor; it does not mean the business is a corporation.

Is SEC registration enough to prove a company is legitimate?

No. SEC registration only proves the corporation or partnership exists in the SEC registry. It does not automatically authorize the company to solicit investments, lend money, sell securities, recruit workers, sell real estate projects, or operate in a regulated industry.

Can a company be registered but still be a scam?

Yes. Some scams use real SEC or DTI registrations to look credible. The key is to check whether the company is licensed for the specific activity, whether the people are authorized, whether payments go to the correct account, and whether the promised transaction makes commercial sense.

How can I verify if an investment company is legitimate in the Philippines?

Check whether the company has SEC authority to offer securities or investments to the public. Ask for the registration statement, secondary license, or SEC permit covering the specific investment product. Be very careful with guaranteed profits, referral-heavy schemes, crypto trading promises, and “earn without doing anything” offers.

How do I know if an online seller is legally registered?

Ask whether the seller is a DTI-registered sole proprietor or an SEC-registered corporation. Then request the DTI certificate or SEC details, BIR Certificate of Registration, and official invoice or receipt. For food, cosmetics, supplements, medical devices, or regulated products, also check FDA-related permits.

Should I trust a company that sends a screenshot of its certificate?

Not automatically. Screenshots can be outdated, cropped, edited, or borrowed from another company. For higher-value transactions, verify through the issuing agency or order documents directly from SEC Express, SEC eSEARCH, DTI BNRS, or the relevant regulator.

What if the business name and bank account name are different?

Ask for a written explanation and supporting documents. For corporations, payment should usually go to a company account or an authorized collecting agent. For sole proprietorships, the owner’s personal name may appear, but it should match the DTI owner information. A completely unrelated personal account is a serious red flag.

How do foreigners verify a Philippine company?

Foreigners should ask for the SEC or DTI registration, BIR Certificate of Registration, mayor’s permit, sectoral license, and proof of authority of the person signing. If dealing with a foreign corporation operating in the Philippines, check whether it has an SEC license to do business or whether it acts through a properly documented Philippine entity.

What is the fastest way to check if a company is fake?

Start with four quick checks: exact SEC or DTI registration, BIR certificate, mayor’s permit, and sectoral license if the activity is regulated. Then check whether the name, address, officers, invoice, contract, and bank account are consistent. Most fake or risky businesses fail at least one of these checks.

Key Takeaways

Do not rely on one certificate. SEC, DTI, BIR, LGU, and sectoral licenses prove different things.
SEC registration is not authority to solicit investments. Investment offers usually need separate SEC compliance under the Securities Regulation Code.
DTI registration is for sole proprietorship business names. It does not create a corporation.
Ask for documents that match each other. Name, address, signatory, invoice, permit, and payment account should be consistent.
Check the correct regulator for the activity. BSP for banks and money services, DMW for overseas recruitment, DHSUD for real estate projects, FDA for regulated products, and Insurance Commission for insurance.
Be extra careful with guaranteed returns, personal payment accounts, rushed deadlines, and refusal to provide official documents.
For high-value transactions, order or verify documents directly from government sources instead of trusting screenshots.