How to Verify if a Lending Company Is Legit in the Philippines

Introduction

Borrowing money has become easier in the Philippines because of online lending platforms, mobile apps, social media advertisements, and instant loan offers. However, this convenience has also created opportunities for illegal lenders, abusive collectors, identity thieves, and scam operators. Many borrowers discover too late that the “lending company” they dealt with is not registered, is using another company’s name, charges unlawful or excessive fees, or engages in public shaming and harassment.

In the Philippine context, verifying whether a lending company is legitimate requires more than checking whether it has a Facebook page, a mobile app, a business permit, or a nice-looking website. A legitimate lending company must comply with laws administered mainly by the Securities and Exchange Commission, commonly called the SEC, and must observe rules on lending operations, disclosure, interest and charges, debt collection, data privacy, and consumer protection.

This article explains how to verify whether a lending company is legitimate in the Philippines, what laws apply, what warning signs to watch for, and what remedies are available if a borrower has dealt with an illegal or abusive lender.


I. What Is a Lending Company Under Philippine Law?

A lending company is generally a corporation that grants loans from its own capital funds or from funds sourced in accordance with law. In the Philippines, lending companies are governed primarily by the Lending Company Regulation Act of 2007, also known as Republic Act No. 9474.

Under Philippine law, lending is not an ordinary business that anyone can freely conduct without regulation. A person or entity that regularly grants loans to the public for profit must be properly organized, registered, and authorized. This is especially important because lending involves public interest, consumer protection, financial transparency, and prevention of predatory practices.

A lending company must generally be organized as a corporation and must be registered with the SEC. It must also have the necessary authority to operate as a lending company. Merely having a business name registration, mayor’s permit, Barangay clearance, DTI certificate, or social media presence does not by itself make a lender legitimate.


II. The Main Government Agency to Check: The SEC

The most important agency to check when verifying a lending company in the Philippines is the Securities and Exchange Commission.

The SEC regulates lending companies and financing companies. It maintains records of entities registered with it and has authority to issue, suspend, revoke, or cancel certificates of authority of lending companies. It also issues advisories against unauthorized lenders, illegal online lending apps, and entities that are misusing the names of legitimate corporations.

A legitimate lending company should generally have:

  1. SEC registration as a corporation; and
  2. A Certificate of Authority to Operate as a Lending Company, issued by the SEC.

These are not the same thing.

A corporation may be registered with the SEC but still not authorized to lend. SEC incorporation means the entity exists as a corporation. It does not automatically mean the corporation is allowed to operate as a lending company.

The crucial document is the Certificate of Authority.


III. SEC Registration vs. Certificate of Authority

One of the most common mistakes borrowers make is assuming that an SEC registration number proves that a lender is legitimate.

It does not.

1. SEC Certificate of Incorporation

An SEC Certificate of Incorporation means that the corporation is registered as a juridical entity. It confirms that the company exists as a corporation. However, many corporations are registered with the SEC for purposes other than lending.

A scammer may show an SEC registration number, a screenshot of a corporate profile, or a certificate of incorporation to create trust. This is not enough.

2. SEC Certificate of Authority

A Certificate of Authority is the specific authorization allowing the company to operate as a lending company. For lending companies, this authority is required under Philippine law.

A borrower should therefore ask:

Does the company have a valid SEC Certificate of Authority to Operate as a Lending Company?

If the answer is no, unclear, or evasive, that is a serious warning sign.


IV. How to Verify a Lending Company’s Legitimacy

A borrower should verify the lender through several layers of checking. No single item is always conclusive. The safer approach is to verify the company’s legal identity, authority to lend, contact details, ownership of its app or website, loan terms, and collection practices.


V. Step 1: Get the Complete Legal Name of the Lending Company

The first step is to identify the lender’s complete registered corporate name.

Legitimate companies should be able to provide their full legal name, not just a trade name, app name, Facebook page name, or brand name.

For example, an app may be called “Quick Peso,” “Cash Now,” or “Easy Loan,” but the legally registered company behind it may have a different corporate name. The borrower must verify the actual corporation, not merely the brand.

Ask for the following:

  • Full corporate name;
  • SEC registration number;
  • Certificate of Authority number;
  • Principal office address;
  • Official telephone number;
  • Official email address;
  • Name of authorized representative;
  • Official website or app name;
  • Privacy policy;
  • Loan disclosure statement;
  • Collection policy.

A legitimate lender should not refuse to provide these basic details.


VI. Step 2: Check Whether the Company Is Registered With the SEC

After obtaining the company’s legal name, check whether it appears in SEC records as a registered corporation.

A company that is not registered with the SEC should not be trusted as a corporate lending company. However, even if it is registered, that is only the first step. You must still verify whether it is authorized to lend.

Scammers may use several tricks:

  • They may use a name that is almost identical to a legitimate company;
  • They may present an old or revoked registration;
  • They may use another company’s SEC registration number;
  • They may show edited screenshots or fake certificates;
  • They may claim that DTI or barangay registration is enough;
  • They may operate under an app name different from the SEC-registered entity.

A borrower should compare the exact spelling of the corporate name, address, registration number, and authority number. Small differences may matter.


VII. Step 3: Check Whether the Company Has a Certificate of Authority to Operate as a Lending Company

This is one of the most important steps.

Under the Lending Company Regulation Act, a lending company must have authority from the SEC before engaging in lending operations. The Certificate of Authority shows that the company is allowed to conduct lending business.

When reviewing a Certificate of Authority, check:

  • The name of the company;
  • The SEC registration number;
  • The authority number;
  • The date of issuance;
  • Whether the certificate is still valid;
  • Whether the authority has been suspended, revoked, or cancelled;
  • Whether the company name matches the lender contacting you;
  • Whether the address matches the lender’s disclosed address.

A fake lender may present a certificate that belongs to another company. Others may show a legitimate company’s details but use different payment accounts, collection agents, or contact numbers. This is why borrowers should verify both the legal authorization and the actual operating identity of the lender.


VIII. Step 4: Check the SEC List of Registered Lending and Financing Companies

The SEC has issued lists of registered lending and financing companies, as well as advisories against unauthorized entities. A borrower should check whether the lender appears in the appropriate SEC list.

When checking a list, look carefully at:

  • Exact corporate name;
  • Trade name;
  • App name;
  • Certificate of Authority number;
  • Status of registration;
  • Remarks on suspension or revocation;
  • Related SEC advisories.

A lender that is not on the SEC list, or one that appears in an SEC advisory, should be treated with extreme caution.

However, being listed does not automatically mean every act of the lender is lawful. A registered lender can still violate rules on disclosure, collection, interest charges, privacy, and consumer protection.


IX. Step 5: Check Whether the Lending App Is Registered or Recognized

Many lending scams operate through mobile applications. In the Philippines, online lending apps have been subject to SEC monitoring because of complaints involving hidden charges, short loan terms, unauthorized use of contacts, public shaming, harassment, and threats.

When dealing with an online lending app, verify:

  • The name of the app;
  • The company operating the app;
  • Whether the operator has a Certificate of Authority;
  • Whether the app appears in SEC records;
  • Whether the app name matches the authorized company;
  • Whether the app uses abusive permission requests;
  • Whether the app has a clear privacy policy;
  • Whether the app discloses interest, fees, penalties, and loan terms before release.

Do not rely only on app store availability. The presence of an app in an app store does not necessarily mean it is licensed in the Philippines. App stores are not Philippine financial regulators.


X. Step 6: Verify the Business Address and Contact Details

A legitimate lender should have a physical office address and official contact channels. Be cautious if the lender only communicates through:

  • Personal Facebook accounts;
  • Viber, Telegram, Messenger, WhatsApp, or random mobile numbers;
  • No official email;
  • No landline or office address;
  • Generic Gmail, Yahoo, or Outlook addresses;
  • No verifiable business location;
  • Constantly changing contact numbers.

A company may use mobile numbers for customer service, but legitimate lenders normally have formal contact information and written documentation.

A borrower should compare the address and contact details in the loan documents with those in SEC records, company disclosures, and official websites. If the details do not match, the borrower should investigate further.


XI. Step 7: Review the Loan Agreement Before Accepting Money

A legitimate lending company should provide a clear written agreement before or at the time of loan release. This agreement may be physical or electronic.

The borrower should review:

  • Principal loan amount;
  • Interest rate;
  • Service fee;
  • Processing fee;
  • Documentary stamp tax, if applicable;
  • Other charges;
  • Penalty rate;
  • Maturity date;
  • Payment schedule;
  • Total amount due;
  • Effective interest rate, where applicable;
  • Collection procedure;
  • Default consequences;
  • Data privacy consent;
  • Dispute resolution process.

A lender that releases money first and explains charges later is risky. A borrower should not rely on verbal promises or chat messages alone.


XII. Step 8: Look for the Disclosure Statement

Philippine lending regulation emphasizes disclosure. Borrowers should be informed of the true cost of borrowing. The lender should disclose interest, charges, penalties, and other financial terms.

A legitimate lender should not hide the real cost of the loan through vague terms such as:

  • “Platform fee”;
  • “Fast release fee”;
  • “Membership fee”;
  • “Advance interest”;
  • “System fee”;
  • “Verification fee”;
  • “Wallet activation fee”;
  • “Guarantee deposit”;
  • “Anti-scam clearance fee.”

Some fees may be lawful if properly disclosed and reasonable, but hidden or deceptive charges are red flags.

A borrower should be cautious when the amount received is far lower than the principal stated in the loan agreement. For example, if the loan says ₱10,000 but only ₱6,500 is released, and the borrower must repay ₱10,000 in seven days, the true cost may be extremely high.


XIII. Step 9: Be Careful With “Advance Fees”

One of the clearest warning signs of a scam is a demand for payment before loan release.

Scammers often ask for:

  • Processing fee;
  • Verification fee;
  • Insurance fee;
  • Attorney’s fee;
  • Anti-fraud fee;
  • Bank correction fee;
  • Account unlocking fee;
  • Documentary fee;
  • Tax clearance;
  • Collateral registration fee.

After the borrower pays, the scammer may invent another issue and demand another payment. This can continue until the borrower stops paying.

A legitimate lender may charge lawful fees, but these should be clearly disclosed and usually deducted or handled according to the loan agreement. A lender that demands repeated advance payments through personal e-wallets or personal bank accounts before releasing a loan is highly suspicious.


XIV. Step 10: Check the Payment Account

Borrowers should verify where payments are being made.

A legitimate lending company should normally have payment channels under its corporate name or official payment partners. Be cautious if the borrower is instructed to pay to:

  • A personal GCash account;
  • A personal Maya account;
  • A random bank account of an individual;
  • A changing list of account names;
  • Cryptocurrency wallets;
  • Informal remittance accounts;
  • Accounts not named in the loan agreement.

There may be cases where third-party payment processors are used, but the lender should clearly explain and document this. Payments to unknown personal accounts create serious risk of fraud and later disputes.


XV. Step 11: Check Whether the Company Uses Abusive Collection Practices

A company may be registered but still act unlawfully in collecting debts. Legitimacy is not only about registration. It is also about lawful conduct.

Common abusive collection practices include:

  • Threatening violence;
  • Threatening arrest for non-payment of ordinary debt;
  • Contacting the borrower’s employer without lawful basis;
  • Publicly shaming the borrower;
  • Posting the borrower’s photo online;
  • Sending defamatory messages to contacts;
  • Using obscene, insulting, or humiliating language;
  • Pretending to be police, lawyers, court officers, or government officials;
  • Threatening criminal charges without basis;
  • Disclosing the borrower’s debt to unrelated third persons;
  • Accessing the borrower’s phone contacts and messaging them;
  • Calling repeatedly at unreasonable hours;
  • Creating fake legal documents;
  • Sending fake subpoenas, warrants, or court orders.

Debt collection must be done within the bounds of law. A borrower’s failure to pay a loan does not give the lender the right to harass, threaten, shame, or violate privacy rights.


XVI. Can a Borrower Be Arrested for Not Paying a Loan?

As a general rule, a person cannot be imprisoned merely for non-payment of debt. The Philippine Constitution prohibits imprisonment for debt.

However, this does not mean that all loan-related cases are purely civil. Criminal liability may arise in certain situations, such as fraud, falsification, issuance of bouncing checks, identity fraud, or other acts punished by law. But simple inability to pay a loan, without more, is generally a civil matter.

Therefore, a lender or collector who says, “You will be arrested today if you do not pay,” is often using intimidation. Borrowers should be especially careful when collectors send fake police blotters, fake warrants, fake subpoenas, or fake court notices.

Only courts issue warrants of arrest. Police officers do not arrest people merely because a private lending company says a borrower failed to pay.


XVII. Important Laws Relevant to Lending Legitimacy

Several Philippine laws and regulations may apply when verifying or dealing with a lending company.

1. Republic Act No. 9474 — Lending Company Regulation Act of 2007

This law regulates lending companies. It requires lending companies to be properly organized and authorized. It also gives the SEC regulatory authority over lending companies.

A company engaged in lending without proper authority may be subject to penalties and enforcement action.

2. Republic Act No. 3765 — Truth in Lending Act

The Truth in Lending Act requires creditors to disclose finance charges and loan terms so that borrowers can understand the cost of credit. This protects borrowers from hidden or misleading charges.

3. Republic Act No. 10173 — Data Privacy Act of 2012

The Data Privacy Act protects personal information. Online lenders that collect phone contacts, IDs, photos, location data, employment details, or other personal data must comply with data privacy principles.

Unauthorized use, excessive collection, disclosure to third persons, public shaming, or misuse of personal data may give rise to complaints before the National Privacy Commission and possible liability.

4. Republic Act No. 7394 — Consumer Act of the Philippines

The Consumer Act provides general protections against deceptive, unfair, or unconscionable sales acts and practices. While lending is subject to more specific rules, consumer protection principles may still be relevant.

5. Financial Products and Services Consumer Protection Act

This law strengthens consumer protection in financial products and services. It recognizes duties of financial service providers, including disclosure, fair treatment, protection of consumer data, and proper handling of complaints.

6. Revised Penal Code

Certain abusive conduct may fall under criminal laws, depending on the facts. Possible issues may include grave threats, unjust vexation, slander, libel, estafa, falsification, usurpation of authority, or other offenses.

7. Cybercrime Prevention Act

If harassment, threats, identity misuse, public shaming, or defamatory statements are done online, cybercrime laws may become relevant. Online libel, computer-related fraud, identity-related offenses, or other cyber offenses may apply depending on the facts.


XVIII. Warning Signs of an Illegal or Suspicious Lending Company

A borrower should be cautious when any of the following warning signs appear:

1. No SEC Certificate of Authority

The lender cannot show a valid SEC Certificate of Authority to operate as a lending company.

2. SEC Registration Only

The lender shows only a Certificate of Incorporation but no lending authority.

3. Name Mismatch

The app, Facebook page, website, bank account, and SEC-registered company name do not match.

4. Advance Fee Before Loan Release

The lender demands payment before releasing the loan.

5. Personal Payment Accounts

Payments are directed to random individuals rather than official corporate accounts.

6. No Written Agreement

The lender refuses to provide a written loan agreement or disclosure statement.

7. Hidden Charges

The borrower receives much less than the stated loan amount because of unexplained deductions.

8. Extremely Short Loan Period

The loan must be repaid in a few days with very high charges.

9. Access to Contacts

The app demands access to phone contacts, gallery, messages, or other unnecessary data.

10. Harassment

Collectors threaten, insult, shame, or contact relatives and coworkers.

11. Fake Legal Threats

The lender sends fake warrants, fake subpoenas, fake court orders, or fake police notices.

12. No Official Office

The lender has no verifiable address, official email, or company contact number.

13. Social Media-Only Operation

The lender operates only through Facebook, Messenger, Telegram, WhatsApp, or Viber.

14. Too-Good-To-Be-True Offers

The lender promises guaranteed approval, no verification, huge loan amounts, and instant release but later asks for fees.

15. Pressure Tactics

The lender pressures the borrower to sign immediately, pay immediately, or provide personal data immediately.


XIX. Online Lending Apps: Special Risks

Online lending apps are convenient but often risky. The most common complaints involve privacy invasion and abusive collection.

Before using an online lending app, a borrower should check:

  • Who owns and operates the app;
  • Whether the operator is SEC-authorized;
  • Whether the app name appears in SEC records;
  • Whether the app has been the subject of an SEC advisory;
  • Whether the app requests unnecessary permissions;
  • Whether it accesses contacts, camera, gallery, SMS, or location without clear necessity;
  • Whether the privacy policy is specific and understandable;
  • Whether loan terms are shown before acceptance;
  • Whether the app provides customer support and dispute handling.

A borrower should avoid apps that force access to contacts as a condition for borrowing. Collection through contact harassment is a major warning sign.


XX. Business Permit, DTI Registration, and Barangay Clearance Are Not Enough

Some lenders claim they are legitimate because they have a mayor’s permit, barangay permit, or DTI registration.

These documents are not enough to prove authority to operate as a lending company.

DTI Registration

A DTI registration usually applies to a business name of a sole proprietorship. It does not authorize a person to operate as a lending company under the Lending Company Regulation Act.

Mayor’s Permit

A mayor’s permit allows a business to operate locally, subject to local government requirements. It does not replace SEC authority.

Barangay Clearance

A barangay clearance is a local prerequisite for certain permits. It is not a license to lend.

For lending companies, the central verification point remains the SEC registration and the SEC Certificate of Authority.


XXI. Can Individuals Lend Money?

Individuals may lend money in private transactions, such as personal loans between friends, relatives, or acquaintances. However, regularly engaging in lending as a business to the public may trigger regulatory requirements.

An individual who operates like a lending business, advertises loans to the public, charges interest, uses collectors, and repeatedly lends for profit may face legal issues if not properly authorized.

Borrowers should distinguish between:

  • A private personal loan from an individual; and
  • A lending business operating without authority.

A private loan may still be valid between parties, but it does not mean the lender may use harassment, threats, excessive charges, or unlawful collection practices.


XXII. Can a Loan From an Unregistered Lender Still Be Enforced?

This is a complicated legal question.

A borrower should not assume that borrowing from an unregistered or unauthorized lender automatically erases the debt. Depending on the facts, courts may still consider whether money was actually received and whether there is an obligation to return the principal or lawful amount due.

However, an unauthorized lender may face regulatory penalties, and unlawful charges, abusive collection practices, or illegal terms may be challenged. Borrowers may have defenses or claims depending on the circumstances.

The safest approach is not to ignore the issue but to document everything, verify the lender, compute the actual amount received and paid, and seek proper legal advice or government assistance when necessary.


XXIII. Interest Rates and Charges

Philippine law allows parties to agree on interest, but interest and charges must not be unconscionable, deceptive, or contrary to law or regulation.

A borrower should look not only at the nominal interest rate but also at the total cost of borrowing. Some lenders advertise low interest but impose large processing fees, service fees, penalties, and deductions.

For example:

  • Advertised loan: ₱10,000
  • Amount actually received: ₱7,000
  • Amount due after 7 days: ₱10,000

Even if the lender says the interest is low, the effective cost is very high because the borrower only received ₱7,000 but must repay ₱10,000 within a short period.

Borrowers should ask for a complete breakdown of:

  • Amount borrowed;
  • Amount released;
  • Interest;
  • Fees;
  • Penalties;
  • Total repayment;
  • Due date;
  • Annualized or effective rate, where applicable.

A legitimate lender should be transparent about these matters.


XXIV. Data Privacy Issues in Lending

Data privacy is one of the most serious issues in online lending.

Lenders often collect:

  • Full name;
  • Address;
  • Mobile number;
  • Government ID;
  • Selfie;
  • Employment information;
  • Bank or e-wallet details;
  • Emergency contact;
  • Phone contacts;
  • Location data;
  • Device information.

The Data Privacy Act requires personal data processing to be lawful, fair, transparent, relevant, necessary, and proportionate. A lender should not collect more information than necessary. It should also not use personal data for harassment, public shaming, or disclosure to unrelated third persons.

Common data privacy violations may include:

  • Accessing the borrower’s contact list without valid consent;
  • Sending debt messages to all contacts;
  • Posting the borrower’s photo online;
  • Calling the borrower’s employer to shame the borrower;
  • Sharing loan details with relatives or coworkers;
  • Using the borrower’s ID for threats or humiliation;
  • Refusing to delete data after closure where deletion is legally appropriate;
  • Misleading borrowers about how their data will be used.

Consent must also be meaningful. A lender cannot simply hide abusive data practices in vague terms and conditions.


XXV. Debt Collection Rules and Borrower Rights

Debt collection must be lawful, fair, and respectful. A lender may remind a borrower to pay, send demand letters, negotiate restructuring, endorse the account to a lawful collection agency, or file a proper civil case. But the lender may not use unlawful intimidation.

Borrowers have the right to:

  • Be treated fairly;
  • Receive accurate information about the debt;
  • Ask for a statement of account;
  • Know the name of the lending company;
  • Know the name of the collection agency, if any;
  • Dispute incorrect charges;
  • Refuse abusive calls or threats;
  • Protect their privacy;
  • File complaints with proper authorities.

Collectors should not pretend to be lawyers, police officers, prosecutors, sheriffs, or court personnel. They should not threaten arrest when there is no lawful basis.


XXVI. How to Verify a Collector

Sometimes the lending company is legitimate, but the collector is not. A borrower should verify whether the collector is authorized.

Ask the collector to provide:

  • Full name;
  • Company or collection agency name;
  • Authority to collect;
  • Account reference number;
  • Statement of account;
  • Official payment channels;
  • Official email or contact details.

Never pay a collector who refuses to identify himself or herself. Never send payment to a personal account unless properly verified and documented.

A borrower should also ask for an official receipt or written confirmation after payment.


XXVII. Documents a Legitimate Lending Company Should Provide

A legitimate lender should be able to provide or make available the following:

  • Corporate name;
  • SEC registration details;
  • Certificate of Authority;
  • Loan agreement;
  • Disclosure statement;
  • Payment schedule;
  • Statement of account;
  • Official receipt or acknowledgment;
  • Privacy policy;
  • Terms and conditions;
  • Complaint handling procedure;
  • Contact information;
  • Collection policy.

Failure to provide basic documentation is a red flag.


XXVIII. Checklist Before Borrowing

Before accepting a loan, a borrower should go through this checklist:

  1. Is the lender’s full legal name clear?
  2. Is the company registered with the SEC?
  3. Does it have a Certificate of Authority to operate as a lending company?
  4. Does the company name match the app, website, or Facebook page?
  5. Is the lender absent from SEC advisories against illegal lenders?
  6. Are the loan terms written and understandable?
  7. Are all fees disclosed before release?
  8. Is the amount to be released clearly stated?
  9. Is the due date clear?
  10. Are penalties clearly stated?
  11. Are payment channels official?
  12. Does the app avoid unnecessary access to contacts and files?
  13. Is there a privacy policy?
  14. Is there an official customer service channel?
  15. Are collection practices lawful and professional?
  16. Are there no advance fees?
  17. Is the offer realistic?
  18. Are there no threats or pressure tactics?
  19. Are receipts issued?
  20. Is the borrower comfortable with the total cost?

If several answers are negative, the borrower should avoid the loan.


XXIX. What to Do If You Already Borrowed From a Suspicious Lender

If a borrower has already borrowed from a suspicious or abusive lender, the borrower should avoid panic and start documenting everything.

Important steps include:

1. Save All Evidence

Keep copies of:

  • Loan agreement;
  • Screenshots of app pages;
  • Chat messages;
  • Text messages;
  • Call logs;
  • Emails;
  • Payment receipts;
  • Bank or e-wallet confirmations;
  • Threats;
  • Harassing posts;
  • Messages sent to contacts;
  • Fake legal notices;
  • Screenshots of app permissions;
  • Company details.

Evidence is essential for complaints.

2. Compute the Actual Loan

Prepare a simple record:

  • Amount applied for;
  • Amount actually received;
  • Fees deducted;
  • Amount already paid;
  • Remaining amount claimed;
  • Interest and penalties charged.

This helps determine whether the lender is imposing excessive or unauthorized charges.

3. Ask for a Statement of Account

A borrower may request a statement showing how the lender computed the balance. A legitimate lender should be able to explain the debt clearly.

4. Pay Only Through Verified Channels

Avoid paying through random accounts. Ask for official payment instructions and receipts.

5. Do Not Give More Personal Data

Do not send additional IDs, selfies, passwords, OTPs, bank details, or contact lists unless legally necessary and verified.

6. Report Harassment

If the lender or collector threatens, shames, or harasses the borrower, the borrower may file complaints with the appropriate authorities.


XXX. Where to File Complaints

Depending on the issue, a borrower may consider filing complaints with the following agencies or offices.

1. Securities and Exchange Commission

The SEC is the main agency for complaints involving unauthorized lending companies, lending companies without certificates of authority, abusive financing or lending practices, and online lending operators.

Complaints may involve:

  • Unauthorized lending;
  • Misrepresentation of authority;
  • Abusive collection;
  • Violation of SEC lending rules;
  • Use of an unregistered online lending app;
  • Operation despite revocation or suspension.

2. National Privacy Commission

The National Privacy Commission handles complaints involving violations of the Data Privacy Act.

Complaints may involve:

  • Unauthorized access to contacts;
  • Disclosure of debt to third persons;
  • Public shaming;
  • Posting personal data online;
  • Misuse of IDs or photos;
  • Excessive data collection;
  • Failure to protect personal information.

3. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group may be approached for cyber-related harassment, online threats, identity misuse, cyber libel, or online fraud.

4. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division may handle online scams, cyber harassment, identity theft, and other cyber-related offenses.

5. Bangko Sentral ng Pilipinas

The BSP generally regulates banks, quasi-banks, certain financial institutions, and payment systems. If the complaint involves a BSP-supervised financial institution, e-wallet, bank account, or payment channel, BSP consumer assistance may be relevant.

However, ordinary lending companies are generally under SEC supervision, not BSP supervision.

6. Local Police or Prosecutor’s Office

For threats, coercion, harassment, falsification, estafa, or other possible crimes, the borrower may consult law enforcement or the prosecutor’s office.

7. Small Claims Court

If the issue involves collection of money, a case may be filed in the proper court depending on the facts. Borrowers may also be sued by lenders. Borrowers should respond to actual court papers and should not ignore legitimate notices.


XXXI. Difference Between SEC-Regulated Lenders and BSP-Supervised Institutions

Borrowers often confuse lending companies with banks.

In general:

  • Banks are regulated by the Bangko Sentral ng Pilipinas.
  • Lending companies and financing companies are generally regulated by the SEC.
  • Cooperatives may be regulated by the Cooperative Development Authority.
  • Pawnshops, remittance agents, and certain financial service providers may be subject to BSP rules depending on their activities.
  • Informal lenders may fall outside lawful authorization if they operate lending businesses without registration.

Knowing which agency regulates the lender helps determine where to verify and where to complain.


XXXII. Common Scams Involving Fake Lending Companies

1. Advance Fee Loan Scam

The scammer promises a loan but asks for a processing fee first. After payment, another fee is demanded. The loan is never released.

2. Identity Theft Loan Scam

The scammer asks for IDs, selfies, signatures, and personal information, then uses them for fraudulent transactions.

3. Fake App Loan Scam

The borrower downloads an app that collects personal data but either never releases the loan or later uses the data for harassment.

4. Name-Cloning Scam

The scammer uses the name, logo, registration number, or certificate of a legitimate lending company to deceive borrowers.

5. Fake Government-Approved Loan

The scammer claims to be accredited by a government agency but cannot show valid proof.

6. Fake Legal Collection Scam

The collector sends fake warrants, fake court orders, or fake lawyer letters to force payment.

7. Overpayment Scam

The scammer tells the borrower that an account error occurred and demands payment to unlock or correct the loan release.

8. Social Media Lending Scam

The lender operates only through Facebook pages or Messenger and asks for fees through personal e-wallet accounts.


XXXIII. How to Spot Fake SEC Documents

Fake lenders often send edited certificates. Borrowers should watch for:

  • Wrong corporate name;
  • Blurry or altered text;
  • Inconsistent fonts;
  • Cropped screenshots;
  • No Certificate of Authority;
  • Only a Certificate of Incorporation;
  • Name does not match the app or page;
  • Address does not match;
  • Certificate belongs to another company;
  • No official verification possible;
  • Suspicious file names or watermarks;
  • Refusal to provide a full copy.

Even a genuine-looking document should be independently verified.


XXXIV. What Legitimate Loan Advertising Should Look Like

A legitimate lender’s advertisement should not be misleading. It should not falsely claim guaranteed approval, no requirements, or government backing. It should not hide fees or misrepresent the cost of borrowing.

Responsible lending advertisements should provide enough information for borrowers to understand:

  • Who the lender is;
  • What product is being offered;
  • Basic loan terms;
  • Eligibility requirements;
  • Fees and charges;
  • Risks of late payment;
  • Contact details;
  • Where to find full terms.

Advertisements that rely on urgency, secrecy, unrealistic promises, or pressure tactics should be avoided.


XXXV. Red Flags in Loan Contracts

A borrower should carefully read the contract and watch out for clauses that:

  • Allow the lender to contact all phone contacts;
  • Permit public posting of borrower information;
  • Allow unlimited penalties;
  • Hide the actual interest rate;
  • Waive all borrower rights;
  • Allow unilateral changes in fees;
  • Allow the lender to disclose data to anyone;
  • Use vague descriptions of charges;
  • Provide no complaint mechanism;
  • Name an entity different from the one advertising the loan.

A borrower should not sign or accept digital terms without reading them. Clicking “I agree” may create legal obligations.


XXXVI. Emergency Contacts Are Not Co-Borrowers

Many lenders ask for emergency contacts. An emergency contact is not automatically a guarantor, surety, co-maker, or co-borrower.

A person becomes liable for another person’s loan only if there is a legal basis, such as signing as a co-maker, guarantor, surety, or co-borrower. Merely being listed as a contact does not automatically create liability.

Collectors who threaten emergency contacts and demand payment from them may be engaging in abusive or unlawful conduct.


XXXVII. Employers Should Not Be Harassed

Some collectors contact a borrower’s employer to shame or pressure the borrower. This may raise privacy, labor, and civil concerns.

A lender may have legitimate reasons to verify employment before granting a loan, if properly consented to and proportionate. But contacting an employer to shame a borrower, reveal debt, or threaten job loss is highly questionable and may be unlawful.

Borrowers should document employer-related harassment and include it in complaints.


XXXVIII. Fake Lawyers and Fake Court Notices

Some abusive collectors pretend to be lawyers or legal officers. Others send documents titled “Final Warning,” “Warrant,” “Subpoena,” “Cybercrime Case,” “Estafa Complaint,” or “Court Order.”

A borrower should distinguish between a genuine legal document and a scare tactic.

A real court document will generally come from a court, have proper case details, and follow formal procedures. A private collector cannot simply issue a warrant or subpoena. A lawyer may send a demand letter, but a demand letter is not the same as a court judgment.

If the notice appears fake, threatening, or misleading, keep a copy and consider reporting it.


XXXIX. Borrower Duties

Borrowers also have responsibilities. Verifying the lender does not excuse dishonest borrowing.

A borrower should:

  • Provide truthful information;
  • Read loan documents;
  • Borrow only what can be repaid;
  • Pay according to agreed terms;
  • Communicate if unable to pay;
  • Keep records;
  • Avoid issuing checks without sufficient funds;
  • Avoid using fake IDs or false employment details;
  • Avoid borrowing from multiple apps without repayment capacity.

Borrower protection does not mean borrowers may ignore valid debts. The law protects borrowers from illegal and abusive practices, but it also recognizes legitimate obligations.


XL. Practical Verification Template

Before borrowing, a borrower may send this message to the lender:

Please provide your complete registered corporate name, SEC registration number, Certificate of Authority number to operate as a lending company, principal office address, official email address, official payment channels, full loan disclosure statement, interest rate, fees, penalties, privacy policy, and collection policy.

A legitimate lender should be able to answer clearly. A suspicious lender may avoid the question, pressure the borrower, or send incomplete screenshots.


XLI. Practical Due Diligence Checklist

Use this checklist before accepting any loan:

Item to Check Why It Matters
Complete corporate name Identifies the real lender
SEC registration Shows corporate existence
Certificate of Authority Shows authority to lend
App or trade name Must match the authorized company
Office address Helps verify physical presence
Official email and phone Avoids fake agents
Loan agreement Establishes legal terms
Disclosure statement Shows total cost of credit
Privacy policy Explains data use
Payment account Prevents payment to scammers
Collection policy Helps identify abusive practices
SEC advisories Warns against illegal operators
Data permissions Prevents privacy abuse
Receipts Proves payment

XLII. Specific Questions Borrowers Should Ask

A careful borrower should ask:

  1. What is your SEC-registered corporate name?
  2. What is your SEC registration number?
  3. What is your Certificate of Authority number?
  4. Are you authorized to operate as a lending company?
  5. What is your official business address?
  6. What is the total amount I will receive?
  7. What is the total amount I must repay?
  8. What are all fees and deductions?
  9. What is the due date?
  10. What happens if payment is late?
  11. Will you access my phone contacts?
  12. Will you contact my employer or relatives?
  13. What are your official payment channels?
  14. Will I receive an official receipt?
  15. How can I file a complaint?

A lender that refuses to answer these questions should not be trusted.


XLIII. The Role of Reviews and Social Media Complaints

Reviews can help, but they are not conclusive.

Positive reviews may be fake. Negative reviews may be exaggerated or unrelated. A lender with many good reviews may still be unauthorized, and a registered lender may still have complaints.

Use reviews only as supporting information. The main verification should still be based on official registration, authority, documentation, and lawful conduct.


XLIV. What Not to Do

A borrower should avoid the following:

  • Do not send advance fees to unknown lenders;
  • Do not provide OTPs or passwords;
  • Do not send IDs to unverifiable pages;
  • Do not install suspicious APK files outside official app stores;
  • Do not allow unnecessary app permissions;
  • Do not rely only on screenshots of certificates;
  • Do not pay collectors without verification;
  • Do not ignore actual court papers;
  • Do not delete evidence of harassment;
  • Do not respond to threats with threats;
  • Do not post defamatory accusations without evidence;
  • Do not borrow repeatedly to pay other high-cost loans.

XLV. What Makes a Lending Company Legitimate?

A legitimate lending company in the Philippines generally has the following characteristics:

  • It is registered with the SEC as a corporation;
  • It has a valid Certificate of Authority to operate as a lending company;
  • Its corporate name, app name, website, and payment channels are consistent;
  • It provides clear loan documents;
  • It discloses interest, fees, penalties, and total repayment;
  • It protects borrower data;
  • It uses lawful collection methods;
  • It issues receipts;
  • It has official customer service channels;
  • It does not demand suspicious advance fees;
  • It does not harass borrowers or their contacts;
  • It complies with SEC rules, data privacy law, and consumer protection standards.

Legitimacy is therefore both a matter of authorization and conduct.


XLVI. Sample Legal Analysis

When assessing whether a lender is legitimate, the key issue is not merely whether the borrower received money. The legal analysis should consider:

  1. Whether the lender is properly organized;
  2. Whether the lender has authority to conduct lending business;
  3. Whether the loan terms were properly disclosed;
  4. Whether the borrower gave valid consent;
  5. Whether the lender collected only necessary personal data;
  6. Whether the lender used lawful collection methods;
  7. Whether the charges are fair, disclosed, and enforceable;
  8. Whether the lender misrepresented its authority;
  9. Whether any criminal, civil, administrative, or data privacy violations occurred.

A lender may be legitimate in registration but unlawful in practice. Conversely, a borrower may still have a repayment obligation even if the lender committed regulatory violations. Each case depends on the facts.


XLVII. Remedies Against Illegal or Abusive Lenders

Borrowers may have several remedies depending on the facts.

Administrative Remedies

Complaints may be filed with regulatory agencies such as the SEC or National Privacy Commission.

Civil Remedies

A borrower may raise defenses against unlawful charges, question unconscionable terms, seek damages for harassment or privacy violations, or respond to collection suits.

Criminal Remedies

If threats, fraud, identity theft, falsification, cyber harassment, or public defamation are involved, criminal complaints may be considered.

Practical Remedies

Borrowers may also negotiate payment of the actual principal or a reasonable settlement, especially where the debt is real but charges are disputed. Any settlement should be documented in writing.


XLVIII. Evidence Checklist for Complaints

A borrower preparing a complaint should organize:

  • Name of lender;
  • App name;
  • Website or Facebook page;
  • SEC registration details shown by lender;
  • Certificate of Authority, if any;
  • Loan agreement;
  • Amount received;
  • Payment records;
  • Collection messages;
  • Screenshots of threats;
  • Names or numbers of collectors;
  • Messages sent to contacts;
  • Proof of public posts;
  • App permissions;
  • Privacy policy;
  • Demand letters;
  • Fake legal notices;
  • Timeline of events.

A clear timeline is helpful. It should state dates, times, amounts, names, and screenshots.


XLIX. How to Protect Yourself Before Borrowing

The best protection is prevention.

Borrowers should:

  • Borrow only from verified lenders;
  • Compare loan offers;
  • Avoid emergency borrowing from unknown apps;
  • Read all terms;
  • Check the total repayment amount;
  • Avoid lenders that demand advance fees;
  • Avoid apps that access contacts;
  • Keep screenshots before clicking accept;
  • Use official payment channels;
  • Maintain receipts;
  • Report abusive lenders early;
  • Avoid borrowing more to pay high-cost loans.

Financial urgency makes borrowers vulnerable. Scammers often exploit desperation by promising instant approval and guaranteed release.


L. Conclusion

To verify whether a lending company is legitimate in the Philippines, a borrower must check more than advertisements, social media pages, app store listings, or business permits. The essential question is whether the lender is properly registered with the SEC and has a valid Certificate of Authority to operate as a lending company.

A legitimate lender should be transparent about its identity, authority, loan terms, fees, payment channels, privacy practices, and collection procedures. Borrowers should be cautious of lenders that demand advance fees, hide charges, use personal payment accounts, refuse to provide documents, access phone contacts, or threaten public shaming and arrest.

In the Philippines, lawful lending is regulated. Borrowers have obligations, but lenders also have duties. A borrower who verifies the lender before accepting a loan is far less likely to become a victim of scams, predatory lending, data privacy abuse, or unlawful debt collection.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.