A lending app may look professional, have thousands of downloads, and still be illegal or unrecorded. In the Philippines, the safe way to check is not to rely on the app’s logo, ads, “SEC registered” badge, Facebook page, or screenshots of certificates. You need to verify three things: the company’s SEC registration, its Certificate of Authority to operate as a lending or financing company, and whether the specific online lending app, website, or platform is recorded with the SEC.

Why SEC Registration Alone Is Not Enough

Many borrowers search “SEC registered lending apps Philippines” and stop once they see a company name in an SEC search result. That is risky.

In Philippine practice, there are different layers of authority:

What you are checking	What it means	Why it matters
SEC company registration	The entity exists as a corporation or partnership registered with the SEC	This does not automatically authorize it to lend to the public
Certificate of Authority (CA)	The SEC has authorized the company to operate as a lending company or financing company	This is the key secondary license for regulated lending/financing
Recorded Online Lending Platform (OLP)	The specific app, website, or digital platform has been reported/recorded with the SEC	The app name must match the SEC record, not just the corporate name
SEC advisories/orders	The SEC may have warned against, suspended, revoked, or penalized the company or app	A previously registered entity may later be sanctioned

Under Republic Act No. 9474, the Lending Company Regulation Act of 2007, a lending company must be a corporation, and it cannot conduct lending business unless it has authority to operate from the SEC. The law also allows the SEC to suspend or revoke authority and impose administrative sanctions. (Supreme Court E-Library)

For financing companies, Republic Act No. 8556, the Financing Company Act of 1998, gives the SEC authority to regulate financing companies, and prohibits persons or entities from holding themselves out as financing companies unless authorized under the law. (Lawphil)

In simple terms: a legitimate online lending app should be connected to a real SEC-registered corporation, with a valid CA, and the app itself should appear in the SEC’s recorded online lending platform list.

The Legal Basis for Checking Online Lending Apps

Lending companies: RA 9474

A lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. RA 9474 excludes banks, investment houses, financing companies, pawnshops, cooperatives, insurance companies, and other credit institutions separately regulated by law. (Supreme Court E-Library)

Important points under RA 9474:

A lending company must be a corporation.
It needs an SEC authority to operate.
At least a majority of its voting capital stock must generally be Filipino-owned, subject to reciprocity rules for foreign ownership.
It must comply with the Truth in Lending Act and Consumer Act when imposing loan charges.
Operating without a valid SEC authority may expose the responsible persons to fines, imprisonment, or both. (Supreme Court E-Library)

Financing companies: RA 8556

A financing company is generally a corporation, other than banks and certain other financial institutions, organized primarily to extend credit facilities by direct lending, factoring, discounting receivables, buying contracts, financial leasing, and similar transactions. (Lawphil)

Important points under RA 8556:

Financing companies must be organized as stock corporations.
They are subject to capital and ownership requirements.
The SEC enforces the law, except where the Bangko Sentral ng Pilipinas has supervisory authority over quasi-banking functions.
A company cannot use names or representations suggesting it is a financing company unless authorized. (Lawphil)

Online lending platform rules

The SEC treats online lending apps, websites, and other financial technology systems as Online Lending Platforms or OLPs when they make the services of lending or financing companies available through digital channels. The 2026 DICT-NPC-SEC public advisory describes OLPs as mobile lending applications, websites, and other FinTech-enabled programs or systems where the services and products of lending and financing companies are made available.

SEC rules also require lending and financing companies to report or record their online platforms and to comply with disclosure requirements for advertisements. The SEC’s own public materials direct borrowers to check the official lists of registered lending companies, registered financing companies, and recorded online lending platforms. (www.foi.gov.ph)

Step-by-Step: How to Verify an Online Lending App with the SEC

1. Get the exact names first

Before searching, collect the exact information shown in the app, website, loan agreement, disclosure statement, and app store listing.

Look for:

App name
Developer name in Google Play or Apple App Store
Corporate name of the operator
SEC registration number
Certificate of Authority number
Registered business name or “doing business as” name
Website URL
Email address and office address
Privacy policy and loan terms
Name appearing on receipts, GCash/Maya/bank payments, or collection notices

This matters because online lending apps often use brand names that are different from their corporate names. For example, the app name may be “FastCash PH,” but the operator may be “ABC Lending Corporation doing business under the name FastCash PH.” If you search only the app name, you may miss the correct SEC record.

2. Check the SEC’s official lending and financing company lists

Use the SEC’s official website and go to the section for lending and financing companies. The SEC maintains public resources for lending companies, financing companies, relevant laws, procedures, advisories, and the List of Recorded Online Lending Platforms. (Securities and Exchange Commission)

Check these categories separately:

SEC list to check	What to search
List of Lending Companies	Corporate name and CA number
List of Financing Companies	Corporate name and CA number
List of Recorded Online Lending Platforms	App name, platform name, website, and operator
SEC Advisories and Notices	App name, corporate name, fake name, website, developer, or collection brand
Orders of suspension/revocation/cease and desist	Corporate name and known aliases

A proper match should show that the corporate operator is authorized and that the platform or app name is recorded. If the company appears in the lending company list but the app does not appear in the recorded OLP list, treat that as a warning sign until the SEC confirms the status.

3. Use SEC Check App or other official SEC channels

The SEC Check App is described as the official mobile application of the Philippine SEC and provides access to SEC announcements, alerts, and information for the public. (Google Play)

Use it to cross-check the corporate name or registration number. However, remember the limitation: finding a company record only tells you the entity exists. It does not automatically prove that the company has a valid CA or that the specific lending app is recorded.

For company documents, the SEC Express System allows online requests for SEC documents such as Articles of Incorporation, By-Laws, General Information Sheet, Audited Financial Statements, and other company-related documents. SEC Express states that documents are delivered within 3 to 5 working days within Metro Manila and up to 7 working days for provincial deliveries from release by the SEC. (SEC Express System)

4. Verify the Certificate of Authority

The most important document is usually the Certificate of Authority.

For lending and financing companies, the CA is the secondary license that allows the company to operate in that regulated business. Without it, a company may be incorporated but still unauthorized to lend or finance.

Ask these questions:

Does the company disclose its CA number?
Does the CA number match the company name?
Is the CA still valid and not revoked?
Does the CA belong to the actual operator, not another company?
Does the app use the same corporate name, trade name, or platform name listed with the SEC?

If the app only says “SEC Registration No.” but does not show a CA number, that is not enough.

5. Check whether the app itself is a recorded OLP

This is where many people make mistakes.

A corporation may be legitimate, but a particular app using its name may be:

unrecorded;
operated by a different entity;
a clone app;
a fake app impersonating a real lender;
a renamed app not reflected in SEC records;
a third-party collection or lead-generation app with unclear authority.

Look for the exact app/platform name in the SEC’s recorded OLP list. Also check spelling variations, punctuation, old names, and “doing business as” names.

6. Search SEC advisories using all possible names

Do not search only one keyword. Search using:

app name;
corporate name;
developer name;
website domain;
Facebook page name;
collection agency name;
GCash/Maya account name used for repayment;
phone numbers used by collectors;
names shown in SMS or email notices.

SEC advisories often involve apps using confusingly similar names or impersonating legitimate companies. An app may borrow the name of a real financing company to look credible.

7. Compare the loan disclosure with the app’s claims

Under Republic Act No. 3765, the Truth in Lending Act, creditors must disclose finance charges in connection with extensions of credit so borrowers understand the true cost of credit. (Lawphil)

Before accepting a loan, check if the lender gives a clear disclosure showing:

principal amount;
amount actually released;
interest rate;
processing fee;
service fee;
notarial or verification fee, if any;
penalty charges;
due date;
total amount payable;
effective interest rate or true cost of credit;
consequences of late payment.

If the app advertises “0% interest” but deducts large processing fees before release, compare the actual amount received against the amount payable. A loan that releases ₱2,500 but requires ₱4,000 within days is not “low interest” just because the app labels the charge as a fee.

Quick Verification Checklist

Checkpoint	Good sign	Red flag
Corporate name	Exact company name appears in SEC records	Only app nickname appears
SEC registration	Registration number matches company name	Screenshot is blurry, cropped, or belongs to another company
Certificate of Authority	CA number is disclosed and verifiable	“SEC registered” only, no CA
Recorded OLP	Exact app/platform appears in SEC list	App name absent from OLP list
Disclosures	Fees, interest, penalties, and total payable are clear before acceptance	Charges appear only after approval
Data privacy	Permissions are limited and explained	App demands full contact list access
Collection practices	Professional notices, no public shaming	Threats, insults, contact-list harassment
Payment channels	Corporate bank/payment account	Personal GCash/Maya number only
Complaints history	No SEC advisory or sanction found	SEC warning, revocation, or impersonation advisory

Common Scenarios and What They Mean

“The app says it is SEC registered. Is that enough?”

No. Ask: registered as what?

A company may be registered as a corporation but not licensed as a lending or financing company. For online lending, you also need to check if the app or platform is recorded with the SEC.

“The app is on Google Play. Does that mean it is legal?”

Not necessarily. App store availability is not the same as SEC authority. Some apps appear, disappear, rebrand, or use developer names that do not clearly match the licensed operator.

Use the app store only as a source of names and details. The actual verification should still be through SEC records and advisories.

“The lender sent me a certificate. Can I rely on it?”

Treat certificates sent by the lender as supporting information only. They can be outdated, altered, cropped, or copied from another company. Verify independently using SEC lists, SEC Check App, SEC Express documents, or an SEC inquiry.

“The app is not in the SEC list, but the company says registration is pending.”

For borrowers, “pending” should be treated as not yet authorized unless the SEC confirms otherwise. A regulated lender should be able to point to a valid CA and recorded platform status before offering online loans to the public.

“The lender is foreign-owned. Is that allowed?”

Foreign participation is not automatically illegal, but it must comply with Philippine law. RA 9474 imposes nationality and reciprocity rules for lending companies, while RA 8556 has its own ownership and capital rules for financing companies. (Supreme Court E-Library)

For ordinary borrowers, the practical question is still the same: is the Philippine entity properly registered, licensed, and recorded for the app it operates?

Data Privacy Warning: Be Careful with Contact List Access

Many abusive online lending complaints involve access to borrowers’ phone contacts. The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information in government and private information systems. (National Privacy Commission)

The DICT, NPC, and SEC have publicly warned that unnecessary processing of personal data through mobile applications, including unnecessary permissions, is prohibited. They also stated that excessive or disproportionate access to borrowers’ contact lists is prohibited, and that contacting people in the borrower’s contact list other than named guarantors is prohibited for debt collection.

Before installing or using an app, check:

Does it ask for your full contact list?
Does it require camera, photos, microphone, or location access beyond what is needed for identity verification?
Does it let you revoke permissions after verification?
Does it clearly distinguish between a character reference and a guarantor?
Does it have a privacy notice explaining what data is collected and why?

A character reference is not automatically a guarantor. A guarantor must separately consent to be bound for the debt. The 2026 DICT-NPC-SEC advisory specifically emphasized that OLPs must distinguish character references from guarantors, and a guarantor must have given consent to be a guarantor.

Debt Collection Rules Still Apply Even If You Owe Money

Owing a loan does not give a lender the right to harass, shame, threaten, or expose your private information.

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing companies, lending companies, and third-party service providers. Prohibited conduct includes threats of violence or criminal means, threats to take action that cannot legally be taken, insults or profane language, publication of borrower information for refusal to pay debts, false representations, inconvenient contact hours, and contacting people in the borrower’s contact list other than guarantors or co-makers.

The Civil Code also matters. Contracts generally bind the parties, but contractual freedom is not absolute. Philippine courts may refuse to enforce terms contrary to law, morals, public order, or public policy. The Supreme Court has repeatedly held that iniquitous or unconscionable interest may be struck down or reduced; for example, in Medel v. Court of Appeals, the Court nullified extremely high monthly interest as excessive, iniquitous, unconscionable, and exorbitant. (Supreme Court E-Library)

What Documents to Save Before Filing a Complaint or Inquiry

If you suspect an online lending app is not properly registered, save evidence immediately. Apps and pages often disappear after complaints.

Evidence	Why it helps
Screenshots of app store listing	Shows app name, developer, download source, and description
Screenshots of app interface	Shows loan terms, disclosures, permissions, and collection messages
Loan agreement or disclosure statement	Shows principal, fees, interest, penalties, and operator
Payment receipts	Shows where money was sent or received
SMS, email, chat, and call logs	Shows harassment, threats, or misrepresentation
Privacy permission screenshots	Shows contact list, camera, storage, or location access
SEC search results	Shows whether the app/company appears or does not appear
Government ID used in app	Helps identify what sensitive information may be at risk
Names and numbers of collectors	Helps connect collection conduct to the lender or agent

Organize evidence chronologically. A simple timeline is often more useful than a random folder of screenshots.

Where to Verify or Report

Purpose	Office/platform	Practical use
Check registered lending/financing companies and recorded OLPs	SEC lending and financing company pages	First-level verification
Check company existence and records	SEC Check App / SEC Express	Confirm corporate name, documents, GIS, articles
Request SEC documents	SEC Express System	Obtain company documents online
File complaint or inquiry	SEC iMessage Portal	Submit complaint, attach evidence, track ticket
Data privacy complaint	National Privacy Commission	Contact-list misuse, unauthorized processing, data exposure
Threats, blackmail, identity theft, cyber harassment	NBI Cybercrime Division or PNP Anti-Cybercrime Group	Criminal or cybercrime aspects

The SEC iMessage portal is the SEC’s online ticketing platform for inquiries and complaints. Its user materials list “Complaints on Financing and Lending Companies” under the Financing and Lending Companies Department, and the 2026 DICT-NPC-SEC advisory directs the public to submit complaints through the SEC iMessage portal and 1-4SEC hotline. (Securities and Exchange Commission)

For SEC documents, SEC Express publishes service fees for common corporate documents. For example, as of the cited SEC Express fee page, Articles of Incorporation, By-Laws, General Information Sheet, Registration Data Sheet, Secretary’s Certificate, and Board Resolution had listed totals for plain and authenticated copies, while audited financial statements and other documents are assessed depending on the request. (SEC Express System)

Practical Tips for Filipinos Abroad and Foreign Borrowers

If you are an OFW, foreigner, or Filipino abroad dealing with a Philippine online lending app, the verification process is generally the same:

Use the exact app and company names.
Check the SEC lists online.
Save screenshots with visible dates and URLs.
Use SEC iMessage for inquiries or complaints.
Keep proof of payments and loan releases.
Avoid sending passport scans or foreign IDs unless you are sure the app is legitimate and the privacy notice is clear.

If you need to submit a sworn statement or notarized document from abroad, the receiving Philippine agency may require consular notarization or an apostille, depending on the document and country. For most initial online complaints, however, clear screenshots, IDs, loan documents, and transaction proof are usually the practical starting point.

Frequently Asked Questions

How do I know if an online lending app is SEC registered in the Philippines?

Check the SEC’s official lists for three things: the corporate name, the Certificate of Authority, and the exact online lending platform or app name. Do not rely only on an app’s “SEC registered” claim.

Is SEC company registration the same as a lending license?

No. SEC company registration only means the entity exists as a registered corporation or similar entity. A lending or financing company also needs authority to operate, usually shown through a Certificate of Authority.

What is a Certificate of Authority for lending companies?

A Certificate of Authority is the SEC authorization allowing a lending or financing company to operate in that regulated business. For online lending, the platform should also be reported or recorded with the SEC.

What if the app name is different from the company name?

That is common. Search both names. The app may be a trade name or platform operated by a corporation. The important point is that the app name, trade name, or platform should be connected to a licensed company in SEC records.

Can a lending app contact my relatives or phone contacts?

Not freely. The 2026 DICT-NPC-SEC advisory states that contacting people in a borrower’s contact list other than named guarantors is prohibited for debt collection. Contact-list misuse may also raise data privacy issues.

What should I do if a lending app threatens to post my face or message my contacts?

Save screenshots, call logs, and account details immediately. Check whether the app is recorded with the SEC, then file with the SEC iMessage portal for unfair collection practices. If personal data was misused, also prepare a complaint for the National Privacy Commission. If there are threats, extortion, hacking, identity theft, or cyber harassment, preserve the evidence for NBI or PNP cybercrime reporting.

Is an online loan void if the app is not SEC recorded?

Not automatically in every situation. The debt issue and the regulatory violation are separate questions. However, operating without proper authority can expose the lender to SEC sanctions and other legal consequences. Unfair charges, lack of disclosure, harassment, and data misuse may also be challenged under applicable laws and regulations.

Can the barangay or police arrest me for unpaid online loans?

Non-payment of an ordinary loan is generally a civil matter, not automatic grounds for arrest. Be cautious when collectors threaten “barangay warrant,” “NBI warrant,” or immediate imprisonment. Real warrants and criminal proceedings follow legal processes; collectors cannot invent them to scare borrowers.

Are screenshots enough for SEC verification?

Screenshots are useful, but for stronger verification, combine them with SEC list searches, app store details, loan documents, payment receipts, and any SEC inquiry response. If you need formal company records, use SEC Express or the appropriate SEC channel.

How long does SEC verification take?

Basic online checking can be done in minutes if the SEC lists are accessible and you have the exact names. Requesting SEC documents through SEC Express depends on processing and delivery; SEC Express states delivery may take 3 to 5 working days within Metro Manila and up to 7 working days for provincial deliveries from release by the SEC. (SEC Express System)

Key Takeaways

Do not rely on “SEC registered” badges inside the app.
Check the company registration, Certificate of Authority, and recorded OLP status separately.
The app name may be different from the corporate name, so search all names and aliases.
A DTI registration, mayor’s permit, Facebook page, or app store listing is not a lending license.
Unrecorded apps, unclear operators, personal payment accounts, excessive phone permissions, and threats to contact your contacts are major red flags.
Save screenshots and documents before the app, page, or messages disappear.
Use SEC official lists, SEC Check App, SEC Express, and SEC iMessage for verification, records, and complaints.
Owing money does not remove your rights against harassment, public shaming, unlawful data use, or misleading loan charges.