Many people searching for quick cash turn to online lending apps, but not every app you see advertised on social media or in app stores is legally allowed to operate in the Philippines. Using an unregistered or unauthorized platform exposes you to risks like hidden high costs, aggressive collection tactics that violate the law, and limited recourse if something goes wrong. This guide walks you through exactly how to check whether an online lending app is properly registered with the Securities and Exchange Commission (SEC) and legally operating, using official sources and practical steps that anyone can follow in minutes.

The Legal Framework for Online Lending Apps

Online lending apps fall under the regulation of lending companies and financing companies. The primary law is Republic Act No. 9474, the Lending Company Regulation Act of 2007. This law declares it state policy to regulate lending companies so they operate soundly and to prevent practices harmful to the public. Under RA 9474, no one may engage in the business of lending — including through mobile apps, websites, or other digital platforms — unless the entity is organized as a corporation, registered with the SEC, and granted a Certificate of Authority (CA) to operate as a lending company.

A parallel law, Republic Act No. 8556 (the Financing Company Act of 1998), covers financing companies that also extend credit. Many online platforms operate through one of these two types of SEC-supervised entities.

The SEC has issued specific rules for digital operations. SEC Memorandum Circular No. 10, Series of 2021, imposed a moratorium on the registration of new online lending platforms (OLPs). Only platforms that were properly recorded with the SEC before the moratorium took effect are generally allowed to continue operating. As of June 2026, the SEC has circulated draft guidelines proposing to lift this moratorium while adding stricter requirements on capital, governance, consumer protection, disclosure, and technology risk management for financing and lending companies operating digitally. Until those rules are finalized and implemented, any new or unrecorded app is operating outside the authorized framework.

Additional protections come from SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices (such as contacting your employer, family, or friends without consent, public shaming on social media, or using threats and profane language). SEC Memorandum Circular No. 19, Series of 2019 requires proper disclosure and reporting of online lending platforms. The Data Privacy Act of 2012 (RA 10173) further requires lawful processing of your personal data, including strict rules on accessing your phone contacts or other information.

These rules exist because unregistered apps have repeatedly been linked to predatory practices. Registered entities must meet minimum capitalization, fit-and-proper requirements for officers, proper record-keeping, and fair treatment standards. Operating without the required CA can result in fines, imprisonment, cease-and-desist orders, and revocation of authority.

What Makes an Online Lending App Legal?

An app is legal only if the company behind it meets all these conditions:

It is a corporation duly registered with the SEC.
It holds a valid, current Certificate of Authority to operate specifically as a lending company or financing company.
If it uses a mobile app or website as its main channel, that online lending platform must be properly recorded or authorized by the SEC under the applicable rules (currently limited by the moratorium framework).
It clearly discloses its SEC registration number, CA number, and key loan terms (interest rates, fees, total cost of credit) in the app, website, and loan documents.
It complies with fair collection rules and data privacy requirements.

Displaying a generic “SEC Registered” badge without verifiable numbers is not enough. The corporate name, registration number, and CA number must match official SEC records.

Step-by-Step Guide to Verify an App Yourself

You can complete this check in under 15 minutes using only your phone or computer. No fees are required for public verification.

Find the exact corporate (legal) name behind the app.
Brand or marketing names (for example, a catchy app title) are almost never the same as the registered corporate name. Open the app and go to the “About,” “Legal,” “Terms of Service,” or “Privacy Policy” sections. These documents almost always state the full corporate name, SEC registration number, and CA number.
Also check the Google Play Store or Apple App Store listing for the publisher or developer name and any linked website. Download or open any PDF terms if available and search for “SEC,” “Certificate of Authority,” or “lending company.”
Write down or screenshot the exact corporate name and any numbers shown.
Go to the official SEC website.
Visit www.sec.gov.ph (confirm the padlock and correct address to avoid fake sites). Look for the section on Lending Companies and Financing Companies (often under Public Information, Registries, or a dedicated menu). This section contains or links to the current lists of registered entities.
Check the official lists of registered lending and financing companies.
Locate the most recent “List of Lending Companies with Certificate of Authority” and the corresponding list for Financing Companies. These are usually available as downloadable PDFs or Excel files that the SEC updates periodically.
Search or scroll for the exact corporate name you found in step 1. Confirm that the company appears on the list, that it has a valid CA number, and that its status is active (not revoked, suspended, or expired).
Some lists or related pages also reference recorded online lending platforms. Match any platform name or details shown in the app against these records.
Cross-check the details.
Compare the CA number, registration date, and corporate name in the SEC list with what appears inside the app or on its website. They must match exactly. If the app shows a CA number that does not appear in the official list, or if the company name is slightly different, treat it as a red flag.
Perform additional quick checks.
Confirm the app is available only through the official Google Play Store or Apple App Store. Avoid any app that pushes you to download an APK file from a website, Telegram channel, or third-party source — this is a common tactic of unauthorized operators.
Search the SEC website or recent news for any advisory, cease-and-desist order, or warning mentioning the company or app name.
Review the loan terms shown in the app for clear disclosure of the effective interest rate, all fees, and total repayment amount (required under the Truth in Lending Act).
If the information is hard to find or does not match.
Do not proceed with the app. Many legitimate companies proudly display their SEC details in the app footer, loan summary screen, or a dedicated “About Us” or “Legal” page precisely so borrowers can verify them easily.
Document everything.
Take screenshots of the app’s legal information, the SEC list entry, and any communications. This creates a record you can use if you later need to file a complaint.

Common Pitfalls and Real-Life Scenarios

The biggest practical challenge is that many apps deliberately make the corporate name difficult to locate — burying it in long PDF terms or using a slightly different spelling. Always take the time to read the legal sections rather than relying on the colorful homepage or social media ads.

Another frequent issue is rebranding or sudden name changes. An app that was once recorded may have been sold or restructured; the new operator may not have obtained the necessary authority.

Real-life situations many ordinary Filipinos and OFWs encounter include:

Seeing aggressive ads promising “instant approval, no documents needed” — legitimate registered lenders still perform proper assessment and disclosure.
Borrowing for an emergency (medical bill, tuition, or family support) and later facing collection calls to employers, relatives, or posted on social media — these practices violate SEC MC 18, s. 2019 even if you owe money.
Downloading an app that later demands access to your entire contact list and photos as a condition for disbursement or “faster processing.”
Receiving pressure to pay through unofficial channels or to install additional apps.

For foreigners or OFWs, the verification steps are exactly the same. However, some apps require a Philippine mobile number or local ID for onboarding, and cross-border collection or dispute resolution can be more complicated. Always verify the lender first.

Other Protections and What to Look For

Legitimate apps must give you a clear statement of the total cost of credit, including all interest, fees, and penalties, before you sign. They must also provide copies of the loan agreement and regular statements of account.

If you already borrowed from an app and are facing problems, document every call, message, or post. Report unfair collection practices directly to the SEC through its public assistance channels or ticketing system. You can also report data privacy violations to the National Privacy Commission. In serious cases involving threats or harassment, local police or the NBI may be appropriate.

Frequently Asked Questions

How do I check if a loan app is registered with the SEC in the Philippines?
Follow the steps above: identify the exact corporate name from the app’s legal sections, then check the official lists of lending companies and financing companies with Certificates of Authority on www.sec.gov.ph. Confirm the CA number matches and is active.

What is a Certificate of Authority from the SEC?
It is the specific license the SEC issues to a registered corporation authorizing it to engage in the lending or financing business. Without a valid CA, the entity cannot legally grant loans or operate a lending platform.

Is it safe to borrow from an online lending app that is not on the SEC list?
No. Unregistered or unrecorded platforms operate outside the law. They often use illegal collection methods and provide little to no real consumer protection. The risk of harassment and unfair terms is significantly higher.

Can an unregistered lending app still collect payments from me?
If you received the money, you may still have a civil obligation to repay the principal plus lawful interest. However, the lender cannot use illegal collection practices prohibited by SEC rules. Any harassment or privacy violations can and should be reported.

How do I find the real company name behind a loan app?
Check the “About,” “Terms of Service,” “Privacy Policy,” or “Legal” sections inside the app or on its website. Also review the publisher information on the Google Play or Apple App Store page. The corporate name is usually stated clearly in these documents along with SEC numbers.

What should I do if an online lender is harassing me or contacting my family and friends?
Document everything with screenshots and call logs. Report the incidents immediately to the SEC (Financing and Lending Companies monitoring) because such actions violate SEC Memorandum Circular No. 18, Series of 2019. You may also report to the National Privacy Commission if your personal data was misused.

Are there interest rate limits for SEC-registered online loans?
Yes. The SEC and Bangko Sentral ng Pilipinas prescribe guidelines on maximum interest rates and other charges that registered lending and financing companies may impose. Legitimate apps must disclose the effective rate and all costs clearly before you agree to the loan.

Does the SEC moratorium on new online lending apps mean there are no new legitimate apps?
It means that, as of mid-2026, only platforms that were properly recorded before the 2021 moratorium (or otherwise authorized) may legally operate. Proposed new guidelines to lift the moratorium with stricter standards are still under development. Always verify current authorization through the SEC lists.

Can I verify a lending app using only the brand or app name?
Usually not reliably. Brand names rarely match the legal corporate name. You must find and verify the exact corporate name and CA number against official SEC records.

Where can I report an illegal or abusive online lending app?
Report to the SEC through its website or public assistance channels, citing violations of RA 9474 or relevant memorandum circulars. For data privacy issues, contact the National Privacy Commission. Serious criminal acts can also be reported to law enforcement.

Key Takeaways

Every legitimate online lending app in the Philippines must operate through a corporation that holds a valid SEC Certificate of Authority as a lending company or financing company, and its online platform must be properly authorized.
Always locate the exact corporate name and CA number inside the app or its legal documents, then cross-check them against the official lists on www.sec.gov.ph.
Avoid any app that is not available on official app stores, pushes APK downloads, hides its corporate details, or cannot be found in the SEC records.
Registered lenders must follow clear disclosure rules and fair collection practices; violations are reportable to the SEC.
Taking a few minutes to verify before borrowing protects you from abusive practices and gives you stronger grounds for recourse if problems arise.
Regulatory rules continue to evolve — the current moratorium framework and proposed new guidelines mean you should always confirm the latest authorized status directly from SEC sources.

Verifying an app takes very little time and can save you significant stress, money, and privacy issues later. Use the official SEC resources every time, and treat any pressure to skip verification as a warning sign.