A lending app can look polished, appear on Google Play or the App Store, and still be risky. In the Philippines, the safer question is not just “Is this app SEC-registered?” but “Is the company behind this app authorized by the SEC to lend, and is this specific online lending platform recorded with the SEC?” This article explains how to check that properly, what legal documents to look for, what red flags usually mean trouble, and what to prepare if the app is unregistered, abusive, or using your contacts for harassment.

Why SEC registration matters for lending apps in the Philippines

In everyday speech, people say “SEC-registered lending app.” Legally, that phrase can be misleading.

The Securities and Exchange Commission (SEC) registers corporations, but ordinary corporate registration is not enough to legally operate as a lending or financing company. A company that lends money to the public must usually have:

SEC corporate registration — proof that the corporation legally exists;
Certificate of Authority to Operate as a Lending Company or Financing Company — the SEC’s authority for that company to engage in lending or financing; and
Recorded Online Lending Platform (OLP) — if the loan is offered through a mobile app, website, or other fintech-enabled system.

For borrowers, this distinction is critical. A company may be a registered corporation but still be unauthorized to lend. An app may also be connected to a real company but not be included in the company’s SEC-recorded online lending platforms.

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be a corporation, and no lending company may conduct business unless granted authority to operate by the SEC. Financing companies are separately governed by Republic Act No. 8556, or the Financing Company Act of 1998.

Legal basis: what laws regulate lending apps in the Philippines?

Several Philippine laws and SEC rules work together.

Law or rule	What it does for borrowers
RA 9474, Lending Company Regulation Act of 2007	Requires lending companies to be corporations and to have SEC authority to operate.
RA 8556, Financing Company Act of 1998	Regulates financing companies, including those extending credit facilities.
RA 3765, Truth in Lending Act	Requires clear written disclosure of finance charges, amount financed, and interest rate before the credit transaction is completed.
SEC Memorandum Circular No. 19, Series of 2019	Requires financing and lending companies to disclose key information in advertisements and report online lending platforms to the SEC.
SEC Memorandum Circular No. 18, Series of 2019	Prohibits unfair debt collection practices such as threats, shaming, false representations, and improper contact with third persons.
SEC Memorandum Circular No. 10, Series of 2021	Imposed a moratorium on new online lending platforms, subject to SEC rules and monitoring.
SEC Memorandum Circular No. 3, Series of 2022 and BSP Circular No. 1133	Set ceilings on interest, fees, penalties, and total cost for certain small, short-term unsecured loans.
RA 10173, Data Privacy Act of 2012	Protects personal data, including contact lists, photos, IDs, and other information collected by lending apps.
RA 11765, Financial Products and Services Consumer Protection Act	Strengthens consumer protection for financial products and services, including fair treatment, transparency, and complaint handling.

A legitimate lending app should not hide behind vague trade names such as “Fast Cash,” “Peso Loan,” or “Quick Money” without clearly identifying the SEC-authorized company behind it.

Step-by-step guide: how to verify if a lending app is SEC-registered

1. Get the exact legal name behind the app

Before searching SEC records, collect the app’s identifying details. Do not rely only on the app name because many apps use similar names.

Look for the following:

App name as shown in Google Play, App Store, APK page, website, Facebook ad, or SMS
Developer name
Company name in the privacy policy, terms and conditions, loan agreement, or disclosure statement
SEC registration number
Certificate of Authority number, often written as CA No.
Business address
Customer service hotline or email
Name of collection agency, if already collecting from you

A legitimate lender should be able to show both the company name and the authority to operate. If the app only shows a brand name and no legal company name, treat that as a warning sign.

2. Check the SEC list of recorded online lending platforms

For mobile lending apps, the most important list is the SEC’s List of Recorded Online Lending Platforms.

When checking the list:

Search for the app name.
Search for the developer name.
Search for the corporate name behind the app.
Confirm that the app is listed under the same company claiming to operate it.
Check whether the company has an SEC registration number and CA number.

A common mistake is stopping after seeing the company name on the SEC list of corporations. For an online lending app, you must also check whether the specific app or platform is recorded with the SEC.

3. Check the SEC list of lending and financing companies

Next, check whether the company appears in the SEC’s lending or financing company lists:

The SEC list of lending companies notes that the list is subject to amendments and updates, so it is best used together with SEC’s online verification tools or a direct inquiry when the transaction is important.

When reviewing these lists, look for:

Exact corporate name, not just a similar name
SEC registration number
Certificate of Authority number
Whether the company is classified as lending or financing
Whether the name appears active, not suspended or revoked

Spelling matters. “ABC Lending Corp.” is not automatically the same as “ABC Cash Loan App” or “ABC Financing Inc.”

4. Check if the company is revoked, suspended, or subject to an SEC advisory

A company may have been authorized before but later penalized, suspended, revoked, or ordered to stop certain activities. Check the SEC pages for:

If the company appears in an SEC advisory, do not assume it is safe just because it once had a registration number.

5. Use SEC online verification tools

The SEC also provides general company verification and document access tools:

SEC eSEARCH — useful for searching and downloading corporate records submitted to the SEC.
SEC Express System — useful for requesting SEC documents online.
SEC iMessage Portal — useful for submitting inquiries, complaints, or requests for assistance.
“Check with SEC” and the SEC Check App — useful for first-level corporate verification when available.

For high-risk situations, such as large loans, business financing, repeated harassment, or suspected identity theft, do not rely only on screenshots from the app. Request official confirmation or file an inquiry through SEC channels.

6. Match the app’s disclosures with SEC records

A legitimate lending app should disclose its legal identity clearly. Under SEC rules on advertisements and online lending platforms, financing and lending companies are expected to disclose identifying information such as the corporate name, SEC registration number, and Certificate of Authority number in their advertisements and platforms.

Compare what appears in the app against the SEC records:

App disclosure	What to check
App name	Is this exact app listed as an online lending platform?
Corporate name	Does it match the SEC-registered lending or financing company?
SEC registration number	Does it belong to the same company?
CA number	Does the company have authority to operate as lending or financing company?
Address and contact details	Are they consistent across app, privacy policy, loan agreement, and SEC records?
Loan charges	Are interest, fees, penalties, and total repayment clearly disclosed?

If the app uses one name in the app store, another name in the privacy policy, and a different company in the loan agreement, be cautious. That kind of mismatch often makes complaints and enforcement harder.

What “recorded online lending platform” means

An Online Lending Platform (OLP) generally refers to a mobile lending app, website, or fintech-enabled system where the products and services of lending or financing companies are made available.

In practice, this means the SEC looks not only at the corporation but also at the digital channel used to offer loans. This matters because illegal or abusive operators sometimes use multiple apps, change app names, or relaunch under a new brand after complaints.

A safe verification process asks three separate questions:

Does the corporation legally exist?
Does it have SEC authority to operate as a lending or financing company?
Is this specific app, website, or platform recorded with the SEC?

A “yes” to only the first question is not enough.

Red flags that a lending app may not be properly authorized

Be careful if you see any of these signs:

The app does not show a corporate name.
The app gives only a Facebook page, Gmail address, Telegram account, or mobile number.
The app claims “SEC-registered” but cannot provide a Certificate of Authority number.
The company name in the app is different from the company name in the loan contract.
The app is not in the SEC list of recorded online lending platforms.
The app forces access to your full contact list before showing loan terms.
It threatens to message your family, employer, barangay, or Facebook friends.
It uses shaming language such as “scammer,” “magnanakaw,” or “fraudster” before any court judgment.
It hides the true cost of the loan until after disbursement.
It deducts large “processing fees” upfront, then collects interest on the full face amount.
It says nonpayment will automatically lead to jail.

Nonpayment of an ordinary loan is generally a civil matter, not automatically a criminal case. However, separate acts such as fraud, identity theft, falsification, threats, cyberlibel, or grave coercion may create criminal exposure depending on the facts.

Interest, fees, and loan cost: what should be disclosed?

The Truth in Lending Act requires creditors to give borrowers a clear written statement of the true cost of credit before the transaction is completed.

For covered small-value, short-term unsecured loans, SEC Memorandum Circular No. 3, Series of 2022, implementing BSP Circular No. 1133, sets important caps:

Item	Cap for covered loans
Covered loan type	Unsecured, general-purpose loans not exceeding ₱10,000 with tenor up to 4 months
Nominal interest rate	6% per month, or about 0.2% per day
Effective interest rate	15% per month, or about 0.5% per day, including other fees and charges except late payment penalties
Late payment or nonpayment penalty	5% per month on the outstanding scheduled amount due
Total cost cap	100% of the total amount borrowed, covering interest, fees, charges, and penalties

This does not mean every larger or longer loan has the same cap. It means that for the covered category, these ceilings are a key benchmark. Even when a loan is outside the cap, the lender must still follow disclosure, consumer protection, and fair collection rules.

Data privacy: why contact-list access is a serious warning sign

Online lending complaints in the Philippines often involve harassment of contacts: employers, family members, friends, co-workers, classmates, or even people who never agreed to be involved.

The DICT-NPC-SEC public advisory on online lending platforms reminds the public that unnecessary, excessive, or disproportionate processing of personal data is prohibited. Contacting people in the borrower’s contact list other than those named as guarantors is also prohibited for debt collection purposes.

A character reference is not automatically a guarantor. A guarantor is someone who separately and expressly agrees to answer for the borrower’s obligation if the borrower defaults. Being listed as a contact person does not, by itself, make someone legally liable for the loan.

Before installing or using a lending app, review its permissions:

Does it require full contact-list access?
Does it require access to photos, videos, microphone, location, or SMS without a clear purpose?
Can you deny permissions and still review loan terms?
Does the privacy notice say who receives your data?
Does it explain how to withdraw consent or request deletion?

Excessive permissions are not proof by themselves that an app is illegal, but they are a strong reason to slow down and verify further.

What to do if the lending app is not on the SEC list

If the app does not appear in the SEC list of recorded online lending platforms, take screenshots before the app disappears or changes its details.

Prepare the following:

Evidence	Why it matters
Screenshot of app store page	Shows app name, developer, download source, and date.
Screenshot of privacy policy and terms	Shows claimed company name and data practices.
Loan agreement or disclosure statement	Shows loan amount, fees, due date, and lender identity.
Proof of disbursement	Shows whether money was actually released and how much.
Payment records	Shows repayments, deductions, and charges.
Collection messages or calls	Shows threats, shaming, or contact with third persons.
Screenshots from relatives or employers	Shows improper contact with non-guarantors.
Valid ID and contact details	Usually needed for a formal complaint or verification request.

Complaints or inquiries may be filed through the SEC iMessage Portal. For data privacy issues, the National Privacy Commission may also be relevant. For threats, extortion, cyber harassment, identity misuse, or scams, the NBI Cybercrime Division or PNP Anti-Cybercrime Group may be involved depending on the facts.

If a sworn complaint-affidavit is required, it is usually notarized if signed in the Philippines. If signed abroad, Philippine agencies may require consular acknowledgment or an apostille, depending on the document and where it will be submitted.

Practical timeline: how long verification usually takes

A basic check can be done quickly if the SEC website is accessible and you already have the exact company name. A more reliable verification may take longer.

Task	Typical practical timeline
Checking app name and company name in public SEC lists	Same day, often within minutes
Checking corporate records through SEC eSEARCH or SEC Express	Same day to several days, depending on access, payment, and document availability
Filing an SEC inquiry through iMessage	You should receive a ticket or acknowledgment; substantive action depends on the issue and workload
Formal investigation or enforcement action	Can take weeks or months, especially if multiple apps, collection agents, or foreign-hosted platforms are involved
App store takedown or platform removal	Not automatic; may depend on SEC findings, platform policies, and supporting evidence

In urgent harassment situations, preserve evidence immediately. Apps, pages, and phone numbers can disappear quickly.

Special notes for OFWs, foreigners, and Filipinos abroad

The verification steps are the same whether the borrower is in Manila, Cebu, Dubai, Singapore, Canada, or elsewhere. The key is still the identity and authority of the Philippine lender.

For Filipinos abroad and foreign borrowers:

Check whether the lender has a Philippine SEC-registered company and CA number.
Be careful with apps that target Filipinos abroad but do not disclose a Philippine office or legal entity.
If signing a complaint-affidavit abroad, ask whether the receiving agency requires apostille or consular notarization.
If your foreign employer, foreign contacts, or family abroad are being harassed, keep screenshots showing country codes, phone numbers, timestamps, and the message content.
If a foreign-based app lends to Philippine residents and collects in the Philippines, Philippine regulators may still be relevant, especially if the app uses a Philippine company, Philippine collection agents, or Philippine advertising.

Foreigners who invest in or own lending companies should note that Philippine law has ownership and reciprocity rules for lending and financing companies. For ordinary borrowers, however, the main concern is whether the lender is authorized and whether the app follows Philippine consumer protection, lending, and privacy rules.

Common scenarios

The company is SEC-registered, but the app is not listed

This is not enough. Ask whether the app is a recorded online lending platform of that company. If not, the app may be operating outside the authority reported to the SEC.

The app is listed, but collectors are harassing your contacts

SEC registration does not give a lender the right to shame, threaten, or harass. SEC Memorandum Circular No. 18, Series of 2019, prohibits unfair debt collection practices. The Data Privacy Act and NPC rules may also apply if the app misuses your contact list.

The app says you will go to jail if you do not pay

Ordinary nonpayment of a loan is generally not imprisonment by itself. A lender may pursue lawful collection, civil remedies, or reporting to credit bureaus where allowed, but threats of automatic imprisonment are a red flag. Separate criminal issues may arise only if there are facts such as fraud, falsified documents, threats, identity theft, or similar acts.

The app deducted fees before releasing the loan

This is common in lending apps, but the fees must be clearly disclosed. For covered small loans, the effective interest rate and total cost caps matter. Compare the amount you actually received against the total amount demanded.

The app contacted your employer or relatives

If they are not guarantors and did not consent to be contacted for collection, this may raise issues under SEC debt collection rules and data privacy rules. Save the messages and identify who received them.

Frequently Asked Questions

How do I know if a lending app is legit in the Philippines?

Check three things: the company must be SEC-registered, it must have a Certificate of Authority to operate as a lending or financing company, and the specific app or platform should appear in the SEC list of recorded online lending platforms.

Is SEC registration alone enough for a lending app?

No. SEC corporate registration only proves that a corporation exists. A lending company also needs SEC authority to operate, and an app-based lender should have its online lending platform recorded with the SEC.

Where can I check SEC-registered online lending apps?

Use the SEC’s List of Recorded Online Lending Platforms, plus the SEC lists of lending and financing companies. You can also use SEC eSEARCH, SEC Express, SEC Check tools, or the SEC iMessage portal for verification.

What is a Certificate of Authority number?

A Certificate of Authority number, or CA number, is an important indicator that the SEC authorized the company to operate as a lending or financing company. A company claiming to lend money to the public should be able to identify its CA number.

Can a lending app access my contacts?

Only limited and necessary access may be allowed for legitimate purposes, such as allowing you to choose character references or guarantors. Unnecessary, excessive, or disproportionate access to your contact list is prohibited. Contacting people in your contact list for debt collection, other than actual guarantors, is also prohibited.

Can an online lending app shame me on Facebook or message my relatives?

No. Public shaming, threats, insults, false claims, and improper disclosure of borrower information may violate SEC rules on unfair debt collection practices and data privacy rules.

What if the app is on Google Play or the App Store?

Being available in an app store does not automatically mean the lender is SEC-authorized in the Philippines. Always check SEC records separately.

Can I refuse to pay an unregistered lending app?

Even if a lender is unregistered or abusive, the legal consequences of the loan depend on the facts, including whether money was actually received, what was agreed, and whether unlawful charges were imposed. The safer practical step is to document the transaction, verify the lender, question unlawful charges, and report unauthorized or abusive conduct to the proper agency.

Which agency handles lending app complaints?

For lending or financing company issues, the main regulator is the SEC. For misuse of personal data, the National Privacy Commission may be relevant. For threats, scams, hacking, identity misuse, or cyber harassment, the NBI Cybercrime Division or PNP Anti-Cybercrime Group may also be involved.

Key Takeaways

SEC registration alone is not enough. The company must also have authority to operate as a lending or financing company.
For app-based loans, check whether the specific lending app is in the SEC list of recorded online lending platforms.
Match the app name, developer, company name, SEC registration number, and CA number carefully.
A legitimate lender must disclose loan costs clearly under the Truth in Lending Act and related SEC rules.
SEC registration does not allow harassment, public shaming, threats, or misuse of contact lists.
Save screenshots, loan documents, payment records, and collection messages before filing an inquiry or complaint.
Use official SEC channels first: SEC recorded OLP list, lending/financing company lists, eSEARCH, SEC Express, and the SEC iMessage portal.