Before you send an ID, pay a “processing fee,” or sign a loan agreement, verify two separate things: the lender must exist as an SEC-registered corporation, and it must have a valid SEC Certificate of Authority to operate as a lending or financing company. These are not the same. A business may be incorporated with the Securities and Exchange Commission but still have no legal authority to offer loans to the public.

The safest approach is to check the lender’s exact corporate identity, confirm its authority through the SEC’s official systems, match that information against the loan documents and payment instructions, and examine whether the lender follows disclosure, privacy, and fair-collection rules.

What Does “SEC-Registered Lending Corporation” Mean?

Under the Lending Company Regulation Act of 2007, or Republic Act No. 9474, a lending company generally refers to a corporation that grants loans from its own funds or from funds sourced from not more than 19 persons. Banks, financing companies, pawnshops, cooperatives, insurance companies, investment houses, and certain other regulated institutions fall under separate laws and regulatory systems. (Supreme Court E-Library)

RA 9474 requires a lending company to be organized as a corporation. More importantly, it provides that the company cannot legally conduct lending operations unless the SEC has granted it authority to operate. (Supreme Court E-Library)

This creates two separate levels of verification:

What to verify	Document or SEC record	What it proves
Corporate existence	Certificate of Incorporation or SEC registration record	The corporation was legally formed and registered
Authority to lend	Certificate of Authority, commonly called a “CA”	The SEC authorized the corporation to operate as a lending company
Authority to finance	Certificate of Authority as a financing company	The corporation may conduct financing activities under RA 8556
Current status	SEC status, suspension, revocation, or cancellation records	The registration and authority have not been suspended or revoked

A Certificate of Incorporation alone is therefore not enough. The lender must also have the appropriate secondary license or Certificate of Authority.

Lending Company Versus Financing Company

Some businesses offering consumer, vehicle, appliance, business, or salary loans are registered as financing companies rather than lending companies.

Under the Financing Company Act of 1998, or Republic Act No. 8556, financing companies provide credit facilities through activities such as direct lending, installment financing, discounting, factoring, and financial leasing. A financing company must also be registered with and authorized by the SEC before it may represent itself as a financing company. (Lawphil)

For an ordinary borrower, the practical rule is simple:

A lending company should have an SEC Certificate of Authority as a lending company.
A financing company should have an SEC Certificate of Authority as a financing company.
A DTI business-name certificate, BIR registration, barangay clearance, or mayor’s permit does not replace the required SEC authority.
An individual making an occasional private loan is different from a business publicly operating as a lending company.

How to Check If a Lending Company Is Legitimate

1. Obtain the lender’s exact corporate name

Do not search only the name of the mobile app, Facebook page, website, or loan product. These may be brand names that differ from the corporation’s registered name.

Look for the legal operator’s name in:

The loan agreement
Promissory note
Disclosure statement
Privacy policy
Terms and conditions
App-store listing
Website footer or “About Us” page
Payment instructions
Text messages or emails
Advertisements
Copies of SEC documents provided by the lender

You should ideally obtain:

Complete corporate name
SEC registration number
Certificate of Authority number
Registered office address
Official telephone number and email address
Name of the online lending platform or app operated by the company

A lender that refuses to disclose its legal corporate name is a major warning sign.

2. Search the SEC’s official verification portal

Go to the SEC Check with SEC portal. The system allows the public to check whether a corporation or partnership is registered and whether it has the secondary license required to conduct lending or financing activities. (Check With SEC)

Search using:

The lender’s exact corporate name.
Its SEC registration number, when available.
Variations of the corporate name, such as removing “Inc.,” “Corporation,” or punctuation.
A former corporate name, when the loan documents show that the business changed names.

The portal may display only a limited number of results, so specific search terms are more reliable than broad words such as “loan,” “credit,” or “finance.” (Check With SEC)

3. Confirm the primary SEC registration

Check whether the corporate name shown in the SEC record exactly matches the name appearing in the lender’s documents.

Pay attention to small differences. Scammers sometimes copy the name of a real company but change one word, letter, address, or registration number.

Examples of suspicious mismatches include:

“ABC Lending Corporation” in the SEC record but “ABC Lending Philippines Inc.” in the app
A certificate issued to one company while payments are requested for an unrelated company
A legitimate company’s SEC number used on a different website
A company claiming to be a branch or affiliate without proof of the relationship

Primary registration confirms that a corporation exists. It does not, by itself, prove that the corporation is authorized to lend.

4. Look for a valid Certificate of Authority

The most important entry is the lender’s secondary license or Certificate of Authority to operate as a lending or financing company.

The SEC’s verification system specifically explains that a lending or financing company must first register as a corporation and then secure the necessary Certificate of Authority before offering loans to the public. Members of the public may also request copies of the company’s Certificate of Incorporation and Certificate of Authority. (Check With SEC)

Check that the authority:

Was issued to the same corporation
Covers lending or financing activities
Has not been suspended, revoked, or cancelled
Is not being used by another business or app
Matches the company identified in the loan agreement

A screenshot or photocopy sent by an agent is not conclusive. Certificates can be altered, copied from another company, or used after an authority has been revoked.

5. Check for suspensions, revocations, and SEC orders

A company may have been properly registered in the past but later had its registration or Certificate of Authority suspended or revoked.

Search the SEC website and verification portal for:

Suspended corporations
Revoked primary registrations
Revoked or cancelled secondary licenses
Cease-and-desist orders
Advisories against unauthorized lending activities
Orders lifting a previous suspension or revocation

Check the date of every order. A company may show an old cancellation notice but later obtain a lifting order, or it may show an old certificate even though its authority has since been revoked.

Save a screenshot or PDF of the result and note the date you checked. Regulatory status can change.

6. Match the SEC record with the lender’s actual operations

Even when the corporation and Certificate of Authority are real, verify that you are dealing with the same entity.

Compare the SEC information with the following:

Item	What should match
Loan agreement	Full registered corporate name
Disclosure statement	Same lender and business address
Website or app	Clear identification of the corporate operator
Payment account	Corporate account or an account independently confirmed by the company
Email address	Preferably an official company domain
Office address	Consistent with official records or confirmed company information
SEC and CA numbers	Same numbers shown in independently verified records

Be particularly careful when instructed to transfer money to a personal bank account or e-wallet. A legitimate lender may use accredited collection partners, but it should be able to explain the arrangement in writing. Verify the instruction through an independently obtained official number—not merely the number of the agent who contacted you.

7. Verify an online lending app separately

An online lending app may be only a platform or brand. The legal lender is the corporation operating behind it.

Under SEC Memorandum Circular No. 19, Series of 2019, financing and lending companies are subject to disclosure requirements in advertisements, and online lending platforms are subject to reporting requirements. The key legal authority remains the Certificate of Authority of the corporation operating the platform. (SEC Appointment System)

Before using an app, identify:

The corporation operating the app
The app’s official name
The corporation’s SEC registration and CA numbers
Its official website and privacy policy
Its customer-service channels
The permissions requested by the app
The account into which repayments will be made

Do not assume an app is legitimate merely because it appears in an app store. App-store availability is not equivalent to SEC authorization.

8. Request formal confirmation from the SEC when necessary

When the online result is missing, unclear, inconsistent, or apparently outdated, submit an inquiry through SEC iMessage.

Choose the Financing and Lending Companies Department and request a Certification of Status on Certificate of Authority. The same SEC channel also accepts complaints involving financing and lending companies. (Securities and Exchange Commission)

Include as much information as possible:

Exact corporate name
SEC registration number
CA number
Name of the app or website
Office address
Website link
Screenshots of advertisements
Copy of the proposed loan agreement
Names and numbers used by agents

Processing time depends on the completeness of the request and the SEC’s workload. A vague inquiry using only an app nickname may take longer or may not identify the correct corporation.

Documents You Can Request

For a routine small loan, an official online verification may be sufficient. For a large loan, business transaction, property-backed loan, or arrangement involving substantial advance payments, consider obtaining supporting corporate records.

Document	Why it matters
Certificate of Incorporation	Confirms corporate registration
Certificate of Authority	Confirms authority to operate as a lender or financing company
Articles of Incorporation	Shows the corporation’s stated purposes
Latest General Information Sheet	Identifies current directors, officers, stockholders, and principal office
Latest audited financial statements	Provides information on the company’s reported financial position
Loan disclosure statement	Shows the actual cost of credit
Loan agreement and promissory note	Contains the enforceable terms
Privacy policy and consent form	Explains how personal data will be collected and used

Copies of corporate documents may be ordered through SEC Express. Available records may include Articles of Incorporation, bylaws, General Information Sheets, audited financial statements, registration data sheets, and other company documents. Searches may be made using the registered corporate name or SEC registration number. (secexpress.ph)

For document delivery, SEC Express states that delivery generally takes around three to five working days within Metro Manila and up to seven working days for provincial addresses, counted from the SEC’s release of the documents. Fees and processing arrangements can change, so check the current service information before ordering. (secexpress.ph)

Check the Loan Terms, Not Just the Registration

A real SEC registration does not automatically mean that every loan term, fee, or collection practice is lawful.

Under the Truth in Lending Act, or Republic Act No. 3765, a creditor must provide a clear written disclosure of the cost of credit before the transaction is completed. The required information includes the amount financed, itemized charges, total finance charge expressed in pesos, and the applicable simple annual rate. “Finance charge” can include interest, service charges, fees, discounts, and similar costs imposed as an incident of the loan. (Lawphil)

Before accepting the loan, ask for a written breakdown showing:

Principal amount
Amount actually released to you
Interest rate
Effective annual interest rate
Processing, service, membership, insurance, or platform fees
Due dates
Late-payment charges
Total amount payable
Consequences of default
Collection and data-privacy terms

For example, an advertisement may describe a loan as “₱10,000 at 5% interest,” but the borrower may receive only ₱8,000 after deductions and still be required to repay more than ₱10,000. The true cost cannot be understood from the advertised interest figure alone.

Do not sign a blank disclosure statement, promissory note, authority to debit, deed of assignment, or postdated check arrangement.

Common Red Flags of a Fake or Unauthorized Lender

Treat the following as warning signs, especially when several appear together:

The lender claims it is “DTI registered” but cannot show SEC registration and a Certificate of Authority.
The agent refuses to provide the complete corporate name.
The SEC certificate belongs to a different company.
The website or app does not identify its legal operator.
The lender guarantees approval without evaluating your application.
You must pay a “release fee,” “insurance,” “tax,” “verification fee,” or “security deposit” before receiving the loan.
Advance payments must be sent to a personal e-wallet or bank account.
The lender asks for your OTP, PIN, CVV, banking password, or screen-sharing access.
The agent pressures you to pay immediately because the offer will “expire.”
The loan terms are given only through chat messages.
The lender will not provide a written disclosure statement.
The app demands unnecessary access to contacts, photos, messages, microphone, or social-media accounts.
The lender threatens public shaming, contact-list messaging, arrest, or immediate imprisonment for ordinary nonpayment.
The company’s address, telephone number, corporate name, and payment account do not match.

An upfront fee is not automatically unlawful in every legitimate transaction, but a demand for payment before release—particularly to a personal account and without a clear written contract—is a common loan-scam pattern.

A Registered Lender Can Still Commit Violations

SEC registration does not excuse harassment, misleading disclosures, misuse of personal data, or abusive collection methods.

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt-collection practices by financing and lending companies. A borrower’s failure to pay does not authorize collectors to threaten violence, falsely claim that an arrest warrant has been issued, publicly shame the borrower, or harass unrelated contacts. (SEC Appointment System)

Nonpayment of an ordinary loan is generally a civil matter. It may result in collection proceedings, enforcement of security, damages, or other lawful remedies. It does not automatically result in imprisonment. Criminal liability may arise only when separate criminal conduct is present, such as fraud established through legally sufficient evidence or the issuance of a bouncing check under applicable law.

What to Do If the Lender Cannot Be Verified

If the SEC record is missing or inconsistent:

Stop the transaction temporarily. Do not upload more identification documents, sign additional forms, or pay advance charges.
Ask for the exact corporate name and CA number. Request readable copies of the Certificate of Incorporation and Certificate of Authority.
Verify independently. Do not rely on links or telephone numbers supplied solely by the agent.
Submit an SEC iMessage inquiry. Ask the Financing and Lending Companies Department to confirm the CA’s status.
Preserve evidence. Save advertisements, app pages, contracts, text messages, phone numbers, receipts, payment accounts, URLs, and screenshots.
Contact your bank or e-wallet immediately if you already paid. Ask whether the transfer can be flagged, frozen, or traced.
Change compromised passwords. If you disclosed an OTP, banking password, email password, or remote-access code, secure the affected accounts immediately.
Report suspected violations to the appropriate agency.

Operating a lending company without a validly subsisting SEC authority may result in fines and imprisonment under RA 9474. The SEC may also investigate, inspect records, impose administrative sanctions, and suspend or revoke authority. (Supreme Court E-Library)

Where to Report a Suspicious or Abusive Lender

Problem	Where to report	Useful evidence
No SEC authority, false SEC documents, or unauthorized lending	SEC Financing and Lending Companies Department through iMessage	Corporate name, app name, certificate copies, advertisements, loan documents
Harassment or unfair collection	SEC	Messages, recordings lawfully obtained, call logs, social-media posts, witness accounts
Misuse of contacts, photos, or personal information	National Privacy Commission	Privacy policy, consent screens, app permissions, screenshots, messages sent to contacts
Phishing, identity theft, account takeover, extortion, or online fraud	NBI Cybercrime Division or local law enforcement	URLs, account numbers, receipts, device details, messages, phone numbers
Unauthorized bank or e-wallet transaction	Bank or e-wallet provider, followed by law enforcement when appropriate	Transaction reference, account details, time, amount, screenshots
Immediate threat of physical harm	Philippine National Police or local emergency services	Threatening messages, caller details, location information

A formal complaint before the National Privacy Commission generally requires the prescribed complaint form or a verified complaint, supporting evidence, and notarization. Submission may be made through the authorized channels indicated by the NPC, including personal filing, registered mail, courier, or approved electronic submission. (National Privacy Commission)

Suspected online fraud, identity theft, phishing, or cyber-enabled extortion may also be reported through the NBI online complaint facility or the appropriate NBI investigative office. (National Bureau of Investigation)

Practical Notes for Borrowers Outside the Philippines

Filipinos abroad and foreign borrowers can use the same SEC online verification systems. A lender operating as a Philippine lending or financing company should still be registered and authorized under Philippine law even when it communicates with the borrower entirely online.

Before sending passport copies, overseas employment documents, proof of remittance, or foreign bank statements:

Verify the Philippine corporate operator and its CA.
Confirm the lender’s official email domain.
Ask why each document is necessary.
Watermark copies where appropriate, such as “For loan verification with [company] only.”
Avoid sending complete bank credentials or authentication codes.
Keep copies of all consent forms and privacy notices.

If a borrower abroad appoints someone in the Philippines to file documents or act on their behalf, the receiving agency may require a notarized Special Power of Attorney and may require apostille or other authentication depending on where the document was executed and how it will be used. Confirm the agency’s current documentary requirements before preparing the document.

Frequently Asked Questions

Is an SEC registration number enough to prove that a lender is legitimate?

No. The SEC registration number may prove that the corporation exists, but a lending or financing company must also have a valid Certificate of Authority covering its regulated activity.

How can I check a lending company’s Certificate of Authority online?

Search the exact corporate name or SEC registration number through the SEC Check with SEC portal. Review both the primary registration and the listed secondary license. When the result is unclear, request confirmation through SEC iMessage.

What if the lending app’s name does not appear in the SEC search?

Find the corporation named in the app’s privacy policy, terms, loan agreement, website footer, or app-store listing. Search that corporate name. An app may use a brand name, but the operator must be identifiable. If no operator is disclosed, do not proceed.

Does a DTI certificate allow a business to operate as a lending company?

No. A DTI business-name registration does not replace SEC corporate registration or the SEC Certificate of Authority required for a lending or financing company.

Can a legitimate lending company ask for an advance fee?

Some lawful transactions may involve disclosed fees, but a demand to pay a release, insurance, tax, or verification fee before receiving the loan is a serious warning sign—particularly when payment goes to a personal account. Verify the company and obtain a written explanation before paying anything.

Is a lender legitimate because it has a physical office?

Not necessarily. A physical office, mayor’s permit, BIR certificate, or business signage does not substitute for SEC authority. Conversely, a properly authorized lender may operate largely online. Verify the SEC records in either case.

Can an SEC-registered lender contact everyone in my phone?

Registration does not give a lender unlimited authority to access or use your personal data. Collection and processing must comply with data-privacy requirements and the consent actually obtained. Public shaming or unnecessary disclosure of a debt to unrelated persons may support complaints before the SEC and National Privacy Commission.

Can I be arrested for failing to pay an online loan?

Ordinary nonpayment is generally a civil matter and does not automatically lead to arrest or imprisonment. A lender may pursue lawful collection remedies. Criminal proceedings require a separate legal basis and proper judicial process; a collector cannot create an arrest warrant through a text message.

What should I do if I already sent money to a fake lender?

Contact the bank or e-wallet provider immediately, preserve all transaction details, secure any compromised accounts, and report the matter to law enforcement. Also report false SEC claims or unauthorized lending to the SEC.

How often should I verify a lender?

Verify the lender shortly before entering the transaction. Check again if the corporate name, app, payment account, office address, or loan documents change. Save a dated copy or screenshot of the SEC result.

Key Takeaways

Confirm both the lender’s SEC corporate registration and its Certificate of Authority.
Search the exact legal corporation—not merely the app, website, or Facebook-page name.
Match the SEC record with the loan agreement, address, website, and payment instructions.
Check whether the registration or authority has been suspended, revoked, or cancelled.
Request a written Truth in Lending disclosure showing the actual cost of the loan.
Do not rely solely on certificate images sent by an agent.
Treat advance-payment demands, personal payment accounts, identity mismatches, and requests for OTPs as serious warning signs.
A registered lender can still be liable for misleading terms, privacy violations, or unfair debt collection.