Verifying an online lending company in the Philippines is not just about checking whether its app looks professional or whether it has many downloads. A legitimate online lender must be a properly registered corporation, must have authority from the Securities and Exchange Commission (SEC) to operate as a lending or financing company, and must have its online lending platform properly disclosed or recorded with the SEC. This matters because many borrowers only discover a problem after they have already uploaded IDs, granted phone permissions, received a small loan, and started getting threatening messages.
Why online lending legitimacy matters in the Philippines
Online lending is legal in the Philippines, but it is a regulated business.
A company cannot simply create a mobile app, advertise “instant cash,” collect IDs, and lend money to the public without government authority. Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be a corporation and cannot conduct lending business unless it has been granted authority to operate by the SEC. (Supreme Court E-Library)
This is different from merely having a business name, Facebook page, app store listing, or mayor’s permit. Those may show that a business exists, but they do not prove that it is authorized to operate as a lending company.
For financing companies, Republic Act No. 8556, or the Financing Company Act of 1998, likewise requires authority from the SEC before a company may hold itself out as a financing company. (Lawphil)
In practice, this means you should check three things:
- Is the company registered with the SEC as a corporation?
- Does it have a Certificate of Authority to operate as a lending or financing company?
- Is the specific online lending app, website, or platform recorded or disclosed with the SEC?
A lender may be risky if it satisfies only the first item. SEC company registration alone is not enough.
What makes an online lending company legitimate?
A legitimate online lending company in the Philippines usually has the following:
| What to check | Why it matters |
|---|---|
| SEC corporate registration number | Shows that the company exists as a corporation |
| Certificate of Authority number | Shows that the company is authorized to operate as a lending or financing company |
| Recorded online lending platform | Shows that the app, website, or platform was reported to the SEC |
| Clear loan disclosure | Shows the true cost of borrowing before you accept |
| Official company name matching SEC records | Helps detect fake apps using similar names |
| No abusive data permissions or collection threats | Helps protect your privacy and contacts |
The SEC has warned that lending and financing companies must report their online lending platforms, display their corporate name, SEC registration number, and Certificate of Authority number, and disclose interest rates and other charges before the loan transaction is completed. (Philippine News Agency)
Step-by-step guide: how to verify if an online lending company is legitimate
1. Get the exact legal name of the lender
Do not rely only on the app name.
Many online lending apps use brand names that are different from the corporation’s legal name. For example, an app may be called “Fast Peso Loan,” but the actual corporation may have a completely different SEC-registered name.
Before borrowing, look for:
- The company’s full corporate name
- SEC registration number
- Certificate of Authority number
- Office address
- Customer service email and phone number
- Name of the online lending platform or app
These should appear in the app, website, loan agreement, disclosure statement, privacy notice, or terms and conditions.
A red flag is when the app shows only a brand name, a Gmail/Yahoo email address, a Telegram account, or a mobile number with no legal company details.
2. Check the SEC list of recorded online lending platforms
The safest practical step is to check whether the app or website appears in the SEC’s list of recorded online lending platforms.
The SEC requires lending and financing companies operating online to report their online lending platforms. Existing platforms had to be reported, and new platforms must be reported before they begin operations. (Philippine News Agency)
When checking the SEC list, compare:
- The app name
- The corporate name
- The SEC registration number
- The Certificate of Authority number
- The website or platform name, if available
Do not stop at “the company name sounds familiar.” Scammers sometimes imitate legitimate companies by using nearly identical app names, logos, or social media pages.
3. Verify that the company has a Certificate of Authority
Under RA 9474, no lending company may conduct business unless it has authority to operate from the SEC. (Supreme Court E-Library)
This is important because some companies are registered with the SEC as ordinary corporations but are not authorized lenders. A regular corporation can exist legally but still be unauthorized to lend money to the public as a business.
Ask yourself:
- Does the company show a Certificate of Authority number?
- Does the CA number match the company name?
- Is the CA still valid and not revoked?
- Is the app actually connected to that company?
If there is no CA number, treat the lender as high risk.
4. Use SEC channels to confirm if you are unsure
If the lender’s information is unclear, submit an inquiry or complaint through the SEC’s official channels. The SEC’s iMessage portal allows the public to open a ticket and check ticket status. (Securities and Exchange Commission)
When messaging the SEC, include:
- Screenshot of the app profile
- App store link
- Website link
- Name used in ads or messages
- Corporate name claimed by the lender
- SEC registration number and CA number shown, if any
- Screenshots of loan terms or collection messages
This helps the SEC check whether the platform is recorded, suspended, revoked, or unauthorized.
5. Read the loan disclosure before accepting
A legitimate lender should show the true cost of the loan before you accept it.
Under Republic Act No. 3765, or the Truth in Lending Act, a creditor must give the borrower a clear written statement before the transaction is completed, including the finance charge in pesos and the percentage rate. (Lawphil)
For online loans, look for:
- Principal amount
- Net proceeds you will actually receive
- Interest rate
- Effective interest rate
- Processing fee
- Service fee
- Verification fee
- Late payment penalty
- Total repayment amount
- Due date
- Consequences of non-payment
A common trap is when an app advertises “0% interest” but deducts large “processing,” “service,” or “platform” fees before releasing the loan. What matters is the total cost, not just the label used.
6. Check whether the interest and fees are within current caps for covered small loans
For covered short-term, small-value loans, regulators have imposed ceilings on interest, penalties, and total cost.
BSP Circular No. 1133 covered unsecured, general-purpose loans offered by lending companies, financing companies, and their online lending platforms where the amount does not exceed ₱10,000 and the tenor is up to four months. It set ceilings of 6% monthly nominal interest, 15% monthly effective interest, 5% monthly late payment penalty on the outstanding scheduled amount due, and a total cost cap of 100% of the amount borrowed.
As of the 2026 update, SEC Memorandum Circular No. 14, Series of 2025 reportedly recalibrated the effective interest rate cap for covered loans to 12% per month, while keeping the 6% monthly nominal interest ceiling, 5% monthly late payment penalty cap, and 100% total cost cap for loans not exceeding ₱10,000 with terms of up to four months. (GMA Network)
This means a borrower should be cautious if a small short-term loan results in repayment amounts that quickly double or triple the principal.
7. Inspect the app permissions before installing
A legitimate online lender should not need unlimited access to your private life.
The National Privacy Commission has said online lenders are prohibited from harvesting phone and social media contact lists for harassment of delinquent borrowers. (National Privacy Commission)
Be careful if the app asks for access to:
- All contacts
- SMS messages
- Photo gallery
- Social media accounts
- Call logs
- Microphone
- Location when not necessary
- Files unrelated to the loan application
A lender may ask for identity documents, income information, and repayment details, but it should not use your private contacts for public shaming, threats, or pressure.
Legal basis: your rights as a borrower
Lending companies must be SEC-authorized
RA 9474 requires lending companies to be corporations and prohibits them from conducting lending business without SEC authority. It also authorizes the SEC to supervise lending companies, require reports, inspect records, and impose sanctions such as suspension, revocation, and fines. (Supreme Court E-Library)
Financing companies must also be authorized
RA 8556 gives the SEC authority over financing companies and prohibits a person or entity from holding itself out as a financing company without authority. (Lawphil)
Borrowers have a right to disclosure
RA 3765 protects borrowers from lack of awareness of the true cost of credit. It requires disclosure of charges, finance charge, total amount financed, and the percentage rate before the credit transaction is completed. (Lawphil)
Financial consumers are protected under RA 11765
Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, applies to financial products and services, including credit and digital financial products. It gives regulators such as the SEC authority to issue rules, monitor market conduct, and determine the reasonableness of interest charges and fees. (Supreme Court E-Library)
Excessive interest may be reduced by courts
Even if a borrower agreed to a loan, an unconscionable interest rate may be struck down. The Supreme Court has held that willingness to assume an unconscionable interest rate is not enough to make it valid, and in Manila Credit Corporation v. Viroomal, the Court nullified excessive interest and penalties while keeping the principal obligation separate. (Supreme Court of the Philippines)
Warning signs of an illegal or risky online lending app
Be cautious if you see any of these:
- No SEC registration number
- No Certificate of Authority number
- App name does not match the corporate name
- No clear physical office address
- Only mobile numbers or messaging apps for support
- Loan terms shown only after you upload IDs
- Fees deducted before release are unclear
- Very short repayment period, such as 7 days, with large deductions
- Threats to contact your family, employer, or friends
- Threats of arrest for non-payment of ordinary debt
- Fake legal documents, fake subpoenas, or fake police threats
- Harassment through edited photos or social media posts
- App asks for unnecessary access to contacts, gallery, or messages
One important point: non-payment of a loan is generally a civil obligation, not automatic imprisonment. A lender may pursue lawful collection, demand payment, report to proper credit systems if allowed, or sue in court if there is a valid claim. But threats of immediate arrest, public shaming, or contacting unrelated people are serious warning signs.
What to do if you already borrowed from a suspicious online lender
1. Save evidence immediately
Take screenshots of:
- App profile
- Loan offer
- Disclosure statement
- Amount received
- Repayment schedule
- Fees deducted
- Collection messages
- Threats
- Calls or texts to your contacts
- Proof of payment
- Bank, e-wallet, or remittance receipts
Do this before the app disappears, changes its name, or removes your account access.
2. Do not delete the app until you have secured records
Many borrowers uninstall the app out of fear. That is understandable, but first save all records that show the loan terms and lender identity.
3. Revoke unnecessary app permissions
On your phone settings, review the app permissions. Remove access to contacts, photos, location, SMS, microphone, or files if they are not necessary.
4. File with the proper government office
| Problem | Where to go |
|---|---|
| Unauthorized lending company or unrecorded online lending platform | SEC |
| Excessive charges by lending or financing company | SEC |
| Harassment, threats, or abusive collection by lending/financing company | SEC, and possibly law enforcement depending on the act |
| Unauthorized use of contacts, photos, or personal data | National Privacy Commission |
| Hacking, fake accounts, identity misuse, online threats | PNP Anti-Cybercrime Group or NBI Cybercrime Division |
| Civil dispute over amount due | Courts, usually small claims if within covered money claim rules |
For privacy complaints, the NPC requires a formal complaint in a specific format, printed and filled out, notarized, and submitted in person, by courier, or by scanned email submission. (National Privacy Commission)
5. Continue paying only what you can verify as legally due
If you owe a valid principal loan, the obligation does not automatically disappear just because the lender behaved badly. But you should not blindly pay inflated, unexplained, or unlawful charges.
Ask for:
- Updated statement of account
- Breakdown of principal, interest, fees, and penalties
- Official receipt or proof of payment
- Written confirmation of full settlement
Avoid paying to personal bank accounts or e-wallets unless the lender can prove that the account is officially authorized.
Practical verification checklist before you borrow
Use this quick checklist before installing or accepting any online loan:
| Question | Safe answer |
|---|---|
| Is the company name clearly shown? | Yes |
| Is there an SEC registration number? | Yes |
| Is there a Certificate of Authority number? | Yes |
| Is the app/platform recorded with the SEC? | Yes |
| Are the fees shown before acceptance? | Yes |
| Is the total repayment amount clear? | Yes |
| Are app permissions limited and reasonable? | Yes |
| Is there a real complaint channel? | Yes |
| Are collection practices professional? | Yes |
| Are threats, shaming, or contact harvesting absent? | Yes |
If you cannot answer “yes” to most of these, pause before borrowing.
Special notes for OFWs and foreigners in the Philippines
OFWs and foreigners often use online lending apps because they need fast cash, have irregular documentation, or cannot easily visit a bank branch. That makes verification even more important.
For OFWs:
- Use a Philippine mobile number and email you can still access abroad.
- Keep screenshots because some apps become inaccessible outside the Philippines.
- Avoid lenders that require access to relatives’ contacts.
- Keep payment receipts in both your e-wallet and cloud storage.
For foreigners:
- A legitimate lender may ask for passport, visa, Alien Certificate of Registration, local address, employment details, or proof of income.
- Do not send your original passport or immigration documents to unknown individuals.
- A foreign-owned or foreign-branded lender is not automatically illegal; the key issue is whether it is properly registered and authorized in the Philippines.
- If documents from abroad are needed for a formal dispute, Philippine agencies or courts may require proper authentication, such as apostille, depending on the document and country of origin.
Frequently Asked Questions
How do I know if an online lending app is SEC registered?
Check whether the app’s corporate owner appears in SEC records and whether the specific online lending platform is recorded with the SEC. Do not rely only on the app name. Look for the corporate name, SEC registration number, and Certificate of Authority number.
Is SEC registration enough to prove an online lender is legit?
No. SEC corporate registration only proves that a corporation exists. A lending company must also have a valid Certificate of Authority to operate as a lending company, and its online lending platform should be properly reported or recorded with the SEC.
Can an online lending app contact my friends or employer?
A lender should not harvest your contact list or use your contacts to shame, threaten, or pressure you. The National Privacy Commission has specifically warned against online lenders harvesting phone and social media contact lists for harassment. (National Privacy Commission)
Can I be arrested for not paying an online loan?
Non-payment of an ordinary loan is generally a civil matter. A lender may use lawful collection methods or file a court case, but threats of immediate arrest are often used to scare borrowers. Separate criminal issues may arise only if there are facts showing fraud, falsification, or another criminal act.
What if the app is not on the SEC list?
Treat it as high risk. Save screenshots and ask the SEC to verify. A lender may be unauthorized, unrecorded, newly created, using a different name, or pretending to be connected to a legitimate company.
Are very high online loan interest rates legal?
Not always. For covered small short-term loans, interest, fees, penalties, and total cost are subject to regulatory caps. Courts may also reduce or nullify unconscionable interest and penalty charges depending on the facts.
Where do I complain about online lending harassment?
For lending or financing company violations, complain to the SEC. For misuse of personal data, contact the National Privacy Commission. For online threats, identity misuse, hacking, or fake posts, consider reporting to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
Should I still pay if the lender is abusive?
If you received money under a valid loan, the principal obligation may still exist. But you should demand a proper statement of account and avoid paying inflated, unexplained, or unlawful charges. Keep proof of all payments.
What documents should I prepare for a complaint?
Prepare screenshots, the loan agreement, disclosure statement, proof of amount received, proof of payments, messages, call logs, app details, company name, SEC or CA numbers shown, IDs, and a clear timeline of events.
Key Takeaways
- A legitimate online lending company in the Philippines must be more than a nice-looking app.
- Check the corporate name, SEC registration number, Certificate of Authority number, and whether the specific app or platform is recorded with the SEC.
- SEC registration alone does not prove authority to lend.
- A lender must clearly disclose interest, fees, penalties, and total repayment before you accept the loan.
- For covered small short-term loans, interest and fees are subject to regulatory caps.
- Online lenders should not harvest your contacts, shame you publicly, threaten arrest, or misuse your personal data.
- Save evidence early if you suspect the lender is illegal or abusive.
- File complaints with the SEC for unauthorized lending or abusive lending practices, and with the NPC for data privacy violations.