A loan app can look professional on Google Play, Apple App Store, Facebook, TikTok, or through SMS, but that does not automatically mean it is legal to lend money in the Philippines. To verify if an online lending app is SEC registered, you need to check three things: the company behind the app, its Certificate of Authority to operate as a lending or financing company, and whether the specific online lending platform or app is properly recorded or approved by the Securities and Exchange Commission.
This matters because many abusive or fake lending apps use confusing names, screenshots of old SEC documents, or generic claims like “SEC registered” to make borrowers feel safe. The safer approach is to verify the exact corporate name, license, app name, and SEC status before borrowing, paying, or giving access to your phone contacts.
What “SEC Registered” Really Means for an Online Lending App
In ordinary conversation, people say “SEC registered” to mean a lender is legitimate. Legally, that phrase can be misleading.
There are three different levels you should understand:
| What the lender claims | What it actually means | Is it enough? |
|---|---|---|
| “Registered with SEC” | The corporation may exist as a registered company | No |
| “Has Certificate of Authority” or “CA” | The SEC has authorized it to operate as a lending or financing company | Usually necessary |
| “Recorded/approved online lending platform” | The particular app, website, or digital lending channel is connected to an authorized company | Needed for online lending apps |
A regular SEC Certificate of Incorporation only means the company has legal personality as a corporation. It does not automatically allow the company to lend money to the public.
For online lending, the key question is not only “Is this company registered?” but also:
- What is the exact corporate name behind the app?
- Does it have a valid Certificate of Authority from the SEC?
- Is the specific app, website, or online lending platform listed, recorded, approved, or otherwise recognized by the SEC?
- Has the company been suspended, revoked, fined, warned, or included in an SEC advisory?
Legal Basis: Why Online Lending Apps Need SEC Authority
Lending companies are regulated under RA 9474
The main law for lending companies is Republic Act No. 9474, or the Lending Company Regulation Act of 2007. Under this law, a lending company is generally a corporation engaged in granting loans from its own capital funds or funds sourced from not more than 19 persons, and it is regulated by the SEC. The law’s policy is to regulate lending companies, place their operations on a sound and stable basis, and prevent practices prejudicial to public interest. (Lawphil)
The practical point for borrowers is simple: a business cannot just create a mobile app, advertise “instant cash,” collect IDs, and lend to the public without SEC authority.
Financing companies are regulated under RA 8556
Some online lenders operate as financing companies rather than lending companies. Financing companies are governed by Republic Act No. 8556, the Financing Company Act of 1998, which amended the earlier Financing Company Act. Financing companies are also regulated by the SEC and must comply with specific corporate, capitalization, and licensing requirements. (Lawphil)
For ordinary borrowers, the distinction between a lending company and a financing company is less important than this rule: the company must have the proper SEC authority for the type of credit business it is doing.
Borrowers must be told the true cost of credit under RA 3765
Republic Act No. 3765, the Truth in Lending Act, requires disclosure of finance charges in credit transactions. Its policy is to protect citizens from lack of awareness of the true cost of credit by requiring full disclosure of that cost. (Lawphil)
This is why a legitimate lender should clearly show:
- principal loan amount;
- interest rate;
- processing or service fees;
- penalty charges;
- total amount to be received by the borrower;
- total amount to be repaid;
- payment schedule; and
- consequences of late or missed payment.
If the app only shows “approved amount” but hides deductions until after release, that is a serious warning sign.
Interest and fee caps apply to certain small online loans
For covered loans, BSP Circular No. 1133, Series of 2021, implemented through SEC rules, set ceilings on interest rates and other charges for unsecured, general-purpose loans offered by lending companies, financing companies, and their online lending platforms where the loan amount does not exceed ₱10,000 and the tenor is up to four months. The ceilings include 6% nominal interest per month, 15% effective interest per month including applicable fees and charges, a 5% monthly cap on late-payment penalties, and a 100% total cost cap.
This does not mean every high-cost loan is automatically illegal, because coverage depends on the loan type, amount, and tenor. But for small short-term online loans, these caps are a useful benchmark when checking whether charges are excessive.
Data privacy rules apply to online lending apps
Online lending apps often ask for phone permissions. Some request access to contacts, gallery, SMS, location, or social media information. Under Philippine data privacy rules, unnecessary or excessive processing of personal data for loan-related transactions is prohibited.
A 2026 public advisory by the DICT, National Privacy Commission, and SEC specifically warned that unnecessary app permissions, excessive access to contact lists, harassment, and contacting persons in the borrower’s contacts other than proper guarantors are prohibited. It also states that for debt collection, lending or financing companies may contact only a guarantor, and a person is a guarantor only if that person expressly consented to assume responsibility for the loan in case of default.
This is important because many borrowers think, “I allowed the app to access my contacts, so maybe they can call everyone.” That is not correct. App permission is not a free pass to shame, threaten, or harass your family, officemates, Facebook friends, or phone contacts.
New online lending registration rules in 2026
As of July 8, 2026, the major current development is SEC Memorandum Circular No. 20, Series of 2026, which was reported as lifting the moratorium on new online lending platforms starting August 1, 2026. The moratorium had been in place since November 5, 2021 under SEC Memorandum Circular No. 10, Series of 2021. The reported 2026 rules emphasize that new online lending platforms are not automatically approved; they must satisfy licensing, capitalization, operational, disclosure, data privacy, and consumer protection requirements. (GMA Network)
The new rules also reportedly require online lenders to disclose official websites, mobile applications, and customer service channels, and prohibit automatic loan release or auto-renewal without the borrower’s informed consent. (Daily Tribune)
Step-by-Step Guide: How to Verify If an Online Lending App Is SEC Registered
1. Get the exact legal name of the company behind the app
Do not rely on the app name alone.
Many lending apps use short, generic, or brand-style names such as “Fast Cash,” “Peso Loan,” “Quick Peso,” “Easy Pera,” or “Cash Now.” These may not be the actual corporate names registered with the SEC.
Look inside the app, website, privacy policy, loan agreement, disclosure statement, app store listing, or email/SMS messages for:
- complete corporate name;
- SEC Registration Number;
- Certificate of Authority Number;
- business or trade name;
- app name or platform name;
- registered office address;
- customer service email;
- official website;
- name of the developer shown in the app store.
If the lender refuses to give its complete corporate name, treat that as a major red flag.
2. Check the SEC list of lending companies and financing companies
The SEC has identified public links for checking registered lending companies, registered financing companies, and recorded online lending platforms. In an SEC response on the government FOI portal, the SEC specifically directed the public to verify lending companies, financing companies, and online lending platforms through its official lists, including the list of recorded online lending platforms. (www.foi.gov.ph)
When checking, compare details carefully. Do not stop at a partial match.
| Detail to compare | Why it matters |
|---|---|
| Corporate name | App names and company names are often different |
| SEC Registration Number | Confirms corporate registration |
| Certificate of Authority Number | Confirms authority to operate as lender/financing company |
| App or platform name | Confirms the specific online lending app is connected to the company |
| Business/trade name | Some companies operate under approved trade names |
| Status | Revoked, suspended, or penalized entities may appear in advisories |
If the app is not on the relevant SEC list, the safest assumption is not that it is legitimate but “just new.” Verify directly with the SEC before transacting.
3. Check whether the specific app is recorded or approved
A company may be authorized as a lending or financing company but still use an app name that is not properly recorded, disclosed, or approved.
For example:
| Situation | Risk |
|---|---|
| Company is licensed, but app name is not listed | The app may be unauthorized, a clone, or newly unverified |
| App shows an SEC number but no CA number | Corporation may exist, but lending authority is unclear |
| App uses the name of a real licensed company | Possible impersonation or fake app |
| App store developer name differs from the lender | Possible third-party operator or clone app |
| App has many similar versions | Possible attempt to evade complaints or takedowns |
The SEC has warned the public about unrecorded online lending platforms and has advised people to check the official list of authorized or recorded OLPs. A February 2026 public advisory stated that listed OLPs, mobile applications, and websites were not authorized to offer, process, or provide loan products through app stores or websites. (Bulacan Government)
4. Use SEC online tools and public assistance channels
The SEC’s online services include eSEARCH and Check with SEC, and its public ticketing system is iMessage, which is described as the SEC’s official web-based platform for public inquiries, complaints, incidents, and requests. The iMessage system generates an electronic ticket and allows users to track status. (Securities and Exchange Commission) (Securities and Exchange Commission)
Use these channels when:
- the company name appears on a list but the app name does not;
- the lender shows a suspicious SEC certificate;
- the app claims it is “under a partner license”;
- the app name is similar to a real lender but not exactly the same;
- the app has been harassing borrowers or contacts;
- you need written confirmation for a complaint.
5. Search SEC advisories, not just registration lists
A lender may have been registered before but later became the subject of:
- an SEC advisory;
- suspension;
- revocation;
- cease-and-desist order;
- administrative fine;
- complaint notice;
- warning for unrecorded OLP activity.
Search the SEC website and official SEC advisories using:
- the app name;
- the company name;
- the developer name;
- the website domain;
- the collection agency name;
- the phone number or email used by collectors.
This is especially important because illegal operators often disappear, rebrand, or launch another app under a slightly different name.
6. Check the app permissions before installing or borrowing
Before you borrow, look at the permissions requested by the app.
Be cautious if the app asks for access to:
- all contacts;
- gallery or photos;
- SMS;
- call logs;
- social media accounts;
- location when not needed;
- microphone or camera beyond identity verification;
- device storage beyond what is necessary.
The 2026 DICT-NPC-SEC advisory specifically warns users to download OLPs from official or verified sources only, ensure they are operated by duly registered and licensed entities, read privacy notices carefully, and review app permissions because unnecessary permissions are prohibited.
What Information a Legitimate Online Lending App Should Show
A legitimate online lender should not make you guess who you are borrowing from.
Before you accept the loan, the app should clearly disclose:
| Information | What to look for |
|---|---|
| Corporate name | Full SEC-registered company name |
| SEC Registration Number | Company registration details |
| Certificate of Authority Number | Authority to operate as lending/financing company |
| App/platform name | Same name as listed or recorded with the SEC |
| Loan amount | Gross amount and net amount released |
| Fees and deductions | Processing fee, service fee, verification fee, other charges |
| Interest rate | Nominal and effective cost where applicable |
| Payment schedule | Due date, installments, total repayment |
| Penalties | Late fees and how computed |
| Privacy policy | What data is collected and why |
| Complaint channel | Official email, hotline, or customer service address |
If the app releases a loan without letting you review the final terms, automatically renews your loan, or deducts unexplained fees, document everything.
Red Flags That an Online Lending App May Not Be Legitimate
Be careful if you see any of these:
- The app only says “SEC registered” but does not show a Certificate of Authority number.
- The company name in the app does not match the app store developer name.
- The lender refuses to give its complete corporate name.
- The app claims its license is “processing.”
- The app says it is registered abroad, so Philippine SEC authority is unnecessary.
- The lender asks you to pay through a personal GCash, Maya, or bank account not under the company name.
- The app requires full contact-list access before showing loan terms.
- The app automatically releases money without clear consent.
- The lender threatens to post your photo, contact your employer, message your relatives, or shame you online.
- Collectors use insults, threats, fake subpoenas, fake barangay notices, or fake police/NBI messages.
- The app has no verifiable office, website, customer service channel, or privacy notice.
- The same company operates many nearly identical apps with different names.
One red flag may be explainable. Several red flags together usually mean you should stop, document, and verify directly with the SEC.
What to Do If You Already Borrowed from a Suspicious Lending App
If you already borrowed money, separate two issues: the debt and the lender’s conduct.
A borrower may still have a civil obligation to pay a valid loan, but a lender cannot use illegal or abusive methods to collect. Debt collection must be lawful, professional, and based on the actual loan agreement.
1. Preserve evidence immediately
Take screenshots or screen recordings of:
- app name and app store listing;
- developer name;
- loan agreement;
- disclosure statement;
- amount approved;
- amount actually received;
- deductions and fees;
- payment instructions;
- collector messages;
- threats or shaming posts;
- calls or messages sent to your contacts;
- proof of payment;
- SEC registration or CA claims shown by the lender.
Save the date, time, phone number, email address, username, and links. If messages disappear inside the app, screenshot them before logging out.
2. Ask for a statement of account
Request a written statement showing:
- principal amount;
- amount released;
- interest;
- fees;
- penalties;
- payments made;
- remaining balance;
- official payment channel;
- full corporate name of the lender.
Do not rely only on verbal statements from collectors.
3. Pay only through official channels
If you decide to pay, avoid sending money to personal accounts unless the company can clearly prove that the account is an official payment channel.
Keep receipts. In online lending disputes, borrowers often lose leverage because they paid collectors through informal channels and cannot later prove the payment was credited.
4. Revoke unnecessary app permissions
On your phone, review the app permissions and revoke access to contacts, photos, SMS, location, or storage where not necessary. Consider uninstalling the app after preserving evidence, especially if it continues to access data or send threatening messages.
5. Report to the proper agency
For unfair collection practices, unrecorded lending activity, or unauthorized online lending, report to the SEC Financing and Lending Companies Department through official SEC channels, including iMessage. The 2026 public advisory identifies SEC iMessage as a complaint channel for unfair debt collection practices involving financing and lending companies.
For privacy violations, such as unlawful use of contact lists, report to the National Privacy Commission.
For threats, extortion, identity misuse, hacking, fake police documents, fake subpoenas, or cyber harassment, consider reporting to the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. If threats involve immediate danger, local police assistance may also be necessary.
Documents and Evidence Usually Needed for an SEC or Privacy Complaint
Prepare your complaint in an organized way. A clear timeline helps agencies understand what happened.
| Document or evidence | Why it helps |
|---|---|
| Valid ID of complainant | Establishes identity |
| App name and screenshots | Identifies the platform |
| Corporate name, if available | Identifies respondent company |
| SEC/CA claims shown by lender | Helps verify legitimacy |
| Loan agreement or disclosure statement | Shows terms and charges |
| Proof of amount received | Shows actual net proceeds |
| Proof of payment | Shows what you already paid |
| Collection messages | Shows harassment, threats, or unfair practices |
| Screenshots from contacted relatives/friends | Shows third-party contact or public shaming |
| App permissions screenshot | Supports privacy complaint |
| Timeline of events | Helps investigators follow the facts |
For messages from relatives or officemates, ask them to send screenshots showing the sender, date, time, and content. Do not edit screenshots except to blur unrelated private information.
Practical Timelines and Bottlenecks
Verification can be quick if the company and app appear clearly on SEC lists. It becomes slower when the app uses a brand name, foreign developer name, trade name, or possible clone identity.
| Task | Usual practical timing |
|---|---|
| Checking app store listing and privacy policy | Same day |
| Searching SEC public lists and advisories | Same day |
| Filing an SEC iMessage ticket | Same day submission; response time varies |
| FOI-style verification request | Can take days or weeks depending on complexity |
| Formal complaint review | Varies depending on evidence and agency workload |
| NPC privacy complaint | Often longer if formal investigation is needed |
| Cybercrime complaint | Depends on evidence, urgency, and law enforcement assessment |
Common bottlenecks include incomplete corporate names, deleted app listings, collectors using prepaid numbers, payment through personal wallets, and borrowers losing access to in-app loan records.
Special Notes for OFWs, Foreigners, and Borrowers Outside the Philippines
If you are an OFW or foreigner dealing with a Philippine online lending app, you can still verify using the SEC website and online complaint channels.
Important points:
- A lender targeting Philippine borrowers generally cannot avoid Philippine rules simply by claiming to be “foreign.”
- A foreign app-store listing does not replace SEC authority.
- If documents are executed abroad for formal legal use in the Philippines, notarization, consular acknowledgment, or apostille issues may arise depending on the document and country.
- For complaints, screenshots, transaction receipts, app store links, phone numbers, and emails are often more immediately useful than notarized statements at the first verification stage.
- If the lender claims to be licensed in another country, ask for the Philippine company name and Philippine SEC authority. Foreign licensing does not automatically authorize public lending in the Philippines.
Frequently Asked Questions
How do I know if an online lending app is SEC registered in the Philippines?
Check the SEC’s official lists for the exact corporate name, Certificate of Authority number, and recorded or approved online lending platform. Verify both the company and the specific app. Do not rely only on screenshots sent by the lender.
Is an SEC registration number enough for a loan app?
No. A regular SEC registration number only shows that a corporation may exist. A lending or financing company also needs the proper SEC authority to operate, and an online lending app should be properly recorded, approved, or disclosed as a platform of that authorized company.
What is a Certificate of Authority from the SEC?
A Certificate of Authority, often called a CA, is the SEC authorization that allows a lending company or financing company to operate in that regulated business. Without it, a corporation may be registered but still not authorized to lend to the public.
What if the company is SEC registered but the app is not listed?
Be cautious. The company may be legitimate, but the app may be unrecorded, unauthorized, newly pending approval, or even a clone using the name of a real company. Verify directly through SEC channels before borrowing or paying.
Can an online lending app access my contacts?
An app should not require unnecessary or excessive permissions. Philippine privacy regulators have warned that unauthorized or disproportionate processing of contact lists is prohibited, and lenders may contact only proper guarantors for debt collection purposes. A character reference is not automatically a guarantor.
Can a lender contact my relatives, employer, or Facebook friends?
A lender cannot freely contact people in your phonebook to shame, pressure, or harass you. Contacting third parties outside proper guarantors may raise data privacy and unfair collection issues, especially if the messages include threats, insults, false accusations, or disclosure of your debt.
Are online lending apps allowed to charge high interest?
They may charge interest and fees if properly disclosed and legally allowed, but certain small short-term loans are subject to BSP and SEC ceilings. For covered loans not exceeding ₱10,000 with a tenor of up to four months, the rules include caps on nominal interest, effective interest, late-payment penalties, and total cost.
What should I do if a loan app threatens to post my photo or message all my contacts?
Save evidence immediately. Screenshot the threat, sender details, app name, loan record, and any messages sent to contacts. Report unfair collection to the SEC, privacy violations to the NPC, and threats, extortion, or cyber harassment to the proper cybercrime authorities.
Can a foreign online lender operate in the Philippines without SEC registration?
A foreign company does not automatically have authority to lend to Philippine borrowers. If it is offering loan products to the Philippine public through an app, website, agents, or local payment channels, check whether there is a Philippine SEC-authorized lending or financing company behind it.
Does being listed in an app store mean the lender is legal?
No. Google Play or Apple App Store availability is not the same as Philippine SEC authority. App stores may remove reported apps, but borrowers should still verify the company, Certificate of Authority, app name, and SEC status through official Philippine sources.
Key Takeaways
- SEC registration alone is not enough. Verify the lender’s Certificate of Authority and the specific online lending app or platform.
- Check the exact corporate name, app name, SEC Registration Number, CA number, and official SEC lists before borrowing.
- A legitimate online lender should clearly disclose the true cost of credit, including interest, fees, penalties, net proceeds, and repayment schedule.
- Online lending apps cannot use phone permissions as a license to harass your contacts or publicly shame you.
- For covered small short-term online loans, Philippine rules impose caps on interest, penalties, and total borrowing cost.
- If you already borrowed from a suspicious app, preserve evidence, ask for a statement of account, pay only through official channels, revoke unnecessary permissions, and report abusive conduct to the proper agency.
- For OFWs and foreigners, foreign registration or app-store availability does not replace Philippine SEC authority when the lender is targeting borrowers in the Philippines.