A Legal Article in the Philippine Context

Online lending has become common in the Philippines, especially through mobile applications, websites, and social media advertisements. While legitimate lending companies may lawfully operate online, many illegal operators use digital platforms to collect excessive interest, impose hidden charges, harass borrowers, misuse personal data, or falsely claim government approval.

For borrowers, investors, business partners, and compliance officers, one of the most important first steps is verifying whether an online lending company is registered with the Securities and Exchange Commission, commonly known as the SEC. In the Philippines, SEC registration is central because corporations and lending companies generally fall under SEC supervision, and lending companies are specifically regulated under laws administered by the SEC.

This article explains the legal framework, the distinction between corporate registration and authority to lend, the practical steps for verification, the warning signs of illegal lenders, and the legal consequences of dealing with or operating an unregistered online lending business.

I. Why SEC Registration Matters

SEC registration matters because a lending company in the Philippines is not merely an ordinary online business. Lending money to the public, collecting interest, and operating as a lending company are regulated activities.

A company may have a website, a mobile app, a business name, a tax registration, or a mayor’s permit, but those alone do not necessarily mean it is legally authorized to engage in lending.

For online lenders, the key legal question is not simply:

“Does this company exist?”

The better question is:

“Is this company registered with the SEC and authorized to operate as a lending or financing company?”

This distinction is crucial. A company may be incorporated with the SEC but still not have the required authority to lend to the public. Conversely, a business may claim to be “registered” while referring only to a trade name, domain name, app store listing, or local permit.

II. Legal Framework Governing Online Lending Companies in the Philippines

1. The Lending Company Regulation Act

The principal law governing lending companies in the Philippines is the Lending Company Regulation Act of 2007, also known as Republic Act No. 9474.

Under this law, a lending company is generally understood as a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than a limited number of persons, subject to statutory and regulatory requirements.

A lending company must be organized as a corporation and must comply with SEC requirements before engaging in lending operations.

2. SEC Supervision

The SEC supervises and regulates lending companies. It issues certificates of authority, rules, circulars, advisories, and orders concerning lending companies, financing companies, and online lending platforms.

The SEC may suspend, revoke, or cancel the authority of a lending company that violates the law, SEC rules, or consumer protection standards.

3. Financing Companies

Some online loan providers may be financing companies rather than lending companies. Financing companies are generally governed by the Financing Company Act, as amended.

Like lending companies, financing companies are also subject to SEC regulation and require proper authority.

4. Consumer Protection Laws

Online lending also implicates consumer protection rules, including requirements relating to transparency of loan terms, fair collection practices, disclosure of interest and charges, and responsible handling of consumer information.

Depending on the specific conduct involved, other laws may also apply, including:

Data Privacy Act of 2012
Cybercrime Prevention Act of 2012
Consumer Act of the Philippines
Financial Products and Services Consumer Protection Act
Civil Code principles on obligations, contracts, damages, and abusive conduct
Revised Penal Code provisions, where threats, coercion, libel, unjust vexation, or harassment are involved

III. SEC Registration vs. SEC Authority to Operate

One of the most common sources of confusion is the difference between SEC incorporation and SEC authority to lend.

A. SEC Certificate of Incorporation

A Certificate of Incorporation proves that a corporation exists as a juridical entity. It means the company has been registered as a corporation with the SEC.

However, incorporation alone does not automatically authorize the company to lend money to the public as a regulated lending company.

B. Certificate of Authority

A lending company or financing company must generally have a Certificate of Authority from the SEC to lawfully operate as such.

This is the more important document when verifying whether an online lender is legally allowed to conduct lending operations.

A legitimate online lending company should therefore be able to show both:

Its SEC corporate registration; and
Its Certificate of Authority to operate as a lending or financing company.

C. Registered Name vs. App Name

Online lenders often operate under mobile app names or brand names that differ from their corporate names.

For example, the app may be called “Fast Cash PH,” while the SEC-registered company may have an entirely different corporate name. This does not automatically make the app illegal, but the relationship between the app name and the registered company must be verifiable.

A proper verification should identify:

The app name or platform name;
The corporate name behind the app;
The SEC registration number;
The Certificate of Authority number;
The business address;
Contact details;
Whether the app is listed, disclosed, or associated with the SEC-registered lending or financing company.

IV. Practical Steps to Verify if an Online Lending Company Is SEC Registered

Step 1: Identify the Exact Name of the Lender

Before checking SEC records, obtain the exact name of the company.

Do not rely only on the app name, Facebook page name, text message sender name, or logo. Look for the legal entity behind the platform.

Check the following:

App description page;
Website footer;
Terms and Conditions;
Privacy Policy;
Loan agreement;
Disclosure statement;
Promissory note;
Collection notices;
Email sender information;
SMS notices;
Customer service page;
SEC registration claim;
Certificate of Authority claim.

The company should clearly disclose its corporate name. If it does not disclose the company behind the app, that is a serious warning sign.

Step 2: Check for SEC Corporate Registration

The next step is to verify whether the company is registered with the SEC as a corporation.

A legitimate company should have a corporate name and SEC registration number. However, a number printed on a website or app is not enough. Numbers can be copied, fabricated, or misused.

When checking corporate registration, compare:

Exact corporate name;
SEC registration number;
Date of registration;
Registered office address;
Primary purpose;
Status of the corporation.

A mismatch in any of these details may indicate that the online lender is using another company’s registration or presenting misleading information.

Step 3: Check for a Certificate of Authority to Operate as a Lending or Financing Company

This is the most important verification step.

Ask whether the company has a valid Certificate of Authority issued by the SEC allowing it to operate as a lending company or financing company.

The Certificate of Authority should generally identify:

Name of the corporation;
Authority number;
Type of authority, such as lending company or financing company;
Date of issuance;
SEC office or regulatory unit involved;
Conditions, if any.

A company that is incorporated but has no Certificate of Authority should not present itself as a lawful lending company.

Step 4: Check SEC Lists, Advisories, and Orders

The SEC has historically published lists, advisories, and enforcement actions concerning lending and financing companies. These materials may include:

Registered lending companies;
Registered financing companies;
Online lending platforms associated with registered entities;
Companies with revoked or suspended certificates;
Entities operating without authority;
Public advisories against illegal lending apps;
Cease-and-desist orders;
Revocation orders;
Warnings concerning abusive debt collection or data privacy violations.

A borrower should not stop at checking whether a company was once registered. It is also important to check whether the company’s authority has been suspended, revoked, cancelled, or otherwise affected by enforcement action.

Step 5: Compare the App Name With the SEC-Registered Company

Many online lenders use multiple app names. A legitimate operator should be able to connect each app or platform to the registered company.

Check whether:

The app name appears in SEC disclosures or lists;
The corporate name appears in the app’s terms and conditions;
The loan agreement identifies the same company;
The payment account belongs to the same company;
The privacy policy identifies the same controller or operator;
The collection notices refer to the same company.

A suspicious pattern exists when the app uses one name, the loan agreement uses another name, the payment account is under an individual, and the collection agent refuses to identify the SEC-registered lender.

Step 6: Review the Loan Documents

A legitimate lending company should provide written or electronic loan documents that disclose the essential terms of the loan.

The borrower should examine whether the documents include:

Full name of the lender;
SEC registration information;
Certificate of Authority information;
Principal loan amount;
Interest rate;
Effective interest rate, where applicable;
Processing fees;
Service charges;
Penalties;
Payment schedule;
Total amount due;
Collection policy;
Borrower’s consent to data processing;
Complaints or customer service channel.

If the lender refuses to provide loan documents or gives only vague app screenshots, the borrower should treat the transaction as high-risk.

Step 7: Verify the Business Address and Contact Information

A legitimate lending company should have verifiable business contact information.

Check whether:

The business address is complete and real;
The address matches SEC records;
The company has official phone numbers and email addresses;
The customer service channels are professional and consistent;
Communications use company domains rather than random personal accounts;
Payment channels are under the company name, not unrelated individuals.

A lender operating only through anonymous text messages, social media accounts, or messaging apps is highly suspicious.

Step 8: Check Whether the Company Uses Fair and Lawful Collection Practices

Registration alone does not excuse unlawful conduct. Even a registered company may violate laws or regulations through abusive collection practices.

Red flags include:

Threatening arrest for nonpayment of a civil debt;
Contacting the borrower’s entire phonebook;
Shaming the borrower on social media;
Sending defamatory messages to friends, relatives, employers, or co-workers;
Threatening physical harm;
Pretending to be police officers, lawyers, prosecutors, or court personnel;
Using fake warrants, subpoenas, or criminal complaints;
Publishing personal information;
Harassing borrowers at unreasonable hours;
Using profane, abusive, or humiliating language;
Charging undisclosed fees or penalties;
Automatically accessing contacts, photos, or files beyond what is necessary.

Such conduct may trigger administrative, civil, criminal, and data privacy consequences.

V. Common Red Flags of Illegal or Suspicious Online Lenders

A borrower should be cautious when any of the following signs appear:

1. No SEC Certificate of Authority

The lender cannot show a Certificate of Authority to operate as a lending or financing company.

2. Only a Business Permit Is Shown

A mayor’s permit, barangay clearance, BIR registration, or DTI business name is not the same as SEC authority to operate as a lending company.

3. The Lender Uses a Different Corporate Name

The app name, loan contract, payment account, and collection notices all use different names without explanation.

4. Payment Is Made to Personal Accounts

The borrower is instructed to pay to an individual’s e-wallet, bank account, or remittance name unrelated to the company.

5. No Written Loan Agreement

The loan terms are not properly disclosed, or the borrower is forced to accept hidden charges after disbursement.

6. Excessive Deductions Before Release

The app advertises a certain loan amount but releases much less after deducting unexplained fees.

7. Very Short Loan Terms With High Charges

Some illegal lenders offer seven-day or fourteen-day loans with very high fees disguised as processing charges.

8. Threatening or Shame-Based Collection

The lender threatens public humiliation, criminal charges, barangay blotter, employer reporting, or social media exposure.

9. Unauthorized Access to Contacts

The app asks for broad access to contacts, files, photos, location, or social media accounts without a legitimate purpose.

10. False Government Claims

The app claims to be “approved by the government,” “approved by BSP,” “authorized by NBI,” or “connected to police” without lawful basis.

VI. Is SEC Registration Enough to Prove the Lender Is Legitimate?

No.

SEC registration is necessary but not always sufficient. A proper legitimacy check should include several layers:

Is the company incorporated with the SEC?
Does it have a Certificate of Authority to operate as a lending or financing company?
Is its authority still valid and not revoked or suspended?
Is the app or platform connected to the registered company?
Are loan terms transparent and lawful?
Are collection practices fair and legal?
Does the company comply with data privacy obligations?
Are payment channels under the company’s name?
Are there SEC advisories, complaints, or enforcement actions against it?

A registered company can still commit violations. Registration does not legalize harassment, deception, unfair charges, or misuse of personal data.

VII. What Borrowers Should Ask an Online Lender

Before borrowing, a consumer may ask the lender to provide:

Full corporate name;
SEC registration number;
Certificate of Authority number;
Registered office address;
Official website;
Official email address;
List of online lending platforms operated by the company;
Copy or details of the loan agreement;
Disclosure of all fees and charges;
Privacy policy;
Collection policy;
Complaints channel.

A legitimate company should not refuse reasonable verification requests.

VIII. What Documents Should a Legitimate Online Lending Company Have?

A legitimate online lending company in the Philippines should generally have the following:

1. SEC Certificate of Incorporation

This proves corporate existence.

2. Articles of Incorporation and By-Laws

These show the corporation’s purposes, structure, and governance rules.

3. Certificate of Authority

This proves authority to operate as a lending or financing company.

4. General Information Sheet

This identifies directors, officers, stockholders, and corporate information.

5. Business Permit

This is issued by the local government where the company operates.

6. BIR Registration

This relates to tax registration and official receipts or invoices.

7. Privacy Policy

This is especially important for app-based lending because personal data is collected and processed.

8. Loan Agreement and Disclosure Statement

These documents must clearly explain loan terms.

9. Collection Policy

This should describe lawful methods of collection and complaint handling.

IX. The Role of the SEC in Online Lending

The SEC plays a central role in regulating online lending companies. Its functions may include:

Registering corporations;
Issuing Certificates of Authority;
Monitoring lending and financing companies;
Requiring reports and disclosures;
Issuing advisories;
Investigating complaints;
Suspending or revoking authority;
Issuing cease-and-desist orders;
Coordinating with other government agencies;
Promoting investor and consumer protection.

The SEC’s involvement is especially important because illegal online lending can harm not only borrowers but also the integrity of the financial market.

X. The Role of the National Privacy Commission

The National Privacy Commission, or NPC, becomes relevant when an online lender misuses personal data.

Online lending apps often collect sensitive personal information, including names, addresses, employment details, phone numbers, identification documents, selfies, contacts, device information, and transaction data.

Potential data privacy violations may arise when lenders:

Access phone contacts without valid consent or legitimate purpose;
Send debt notices to third parties;
Publicly disclose a borrower’s debt;
Use personal data for harassment;
Collect excessive information;
Fail to provide a proper privacy notice;
Continue processing data after withdrawal of consent where no lawful basis remains;
Fail to secure borrower data;
Share data with unauthorized collectors or third parties.

A lender’s SEC registration does not exempt it from data privacy laws.

XI. The Role of the Bangko Sentral ng Pilipinas

The Bangko Sentral ng Pilipinas, or BSP, regulates banks, certain financial institutions, payment systems, and other entities under its jurisdiction.

However, not every lending company is BSP-regulated. Many lending and financing companies are primarily under SEC supervision.

Borrowers should be careful when an online lender claims to be “BSP approved.” The correct regulator depends on the nature of the entity and activity. A lending company regulated by the SEC should not mislead borrowers by implying BSP supervision if it is not applicable.

XII. The Role of the Department of Trade and Industry

The Department of Trade and Industry, or DTI, handles business name registration for sole proprietorships and consumer protection matters in certain contexts.

However, DTI business name registration does not authorize a business to operate as a lending company. A person cannot rely on a DTI certificate alone to conduct regulated lending company operations.

If an online lender shows only a DTI certificate, that is not enough to prove lawful authority to lend as a company.

XIII. The Role of Local Government Permits

A mayor’s permit or local business permit authorizes a business to operate in a locality, subject to local rules. It does not replace SEC registration or a Certificate of Authority.

A lending company should not argue that a city business permit alone makes its lending operations lawful. Local permits and national regulatory authority serve different purposes.

XIV. What If the Company Is SEC Registered but Not Listed as an Online Lending Platform?

This situation requires caution.

The company may be registered as a lending company, but the specific online app may not be properly disclosed, associated, or authorized. The borrower should verify whether the app is officially operated by the registered company.

Questions to ask include:

Is the app named in the company’s official disclosures?
Does the app’s privacy policy identify the registered company?
Does the loan agreement name the registered company?
Are payments made to the registered company?
Does customer service use official company channels?
Is the app listed in SEC records or public materials associated with the company?

If the app cannot be tied to the registered company, the app may be using the company’s name without authority or operating under an undisclosed structure.

XV. What If the Company Uses a Third-Party Collection Agency?

Some registered lenders use third-party collection agencies. This is not automatically illegal, but the lender remains responsible for ensuring lawful collection practices.

A third-party collector should not:

Threaten criminal prosecution where none is proper;
Pretend to be from a court, police office, law firm, or government agency;
Shame or harass the borrower;
Contact unrelated third parties without lawful basis;
Disclose personal debt information improperly;
Use violence, intimidation, or obscene language.

The lender may still face liability for the actions of its collection agents, especially where it authorized, tolerated, or failed to prevent abusive conduct.

XVI. Can an Unregistered Online Lender Collect Payment?

This is a nuanced issue.

A borrower’s receipt of money may create a civil obligation to return what was borrowed, depending on the facts. However, an unregistered lender may face legal and regulatory consequences for operating without authority. Illegal lending operations may also be subject to SEC enforcement.

Even where a debt exists, the lender cannot use unlawful methods to collect. A borrower’s default does not justify harassment, threats, data privacy violations, or public shaming.

The legality of the loan terms, interest, penalties, and charges may also be challenged depending on the circumstances.

XVII. Are Online Loans Criminal Cases?

Generally, nonpayment of a loan is a civil matter, not automatically a criminal case. A person is not ordinarily imprisoned merely for failing to pay a debt.

However, criminal issues may arise in special circumstances, such as fraud, falsification, use of fake identities, bouncing checks, cybercrime, threats, libel, coercion, or other acts defined by law.

Illegal collectors often mislead borrowers by threatening immediate arrest, police action, or imprisonment. Such threats should be carefully examined. A legitimate lender must use lawful collection remedies.

XVIII. False Claims Commonly Used by Illegal Lenders

Illegal online lenders may use intimidating statements such as:

“You will be arrested today.”
“We have filed a criminal case against you.”
“Police are on the way.”
“Your employer will be informed.”
“Your contacts will know you are a scammer.”
“We will post your face online.”
“You are blacklisted by the government.”
“You cannot leave the country.”
“A warrant has been issued.”
“You will be jailed for estafa.”

Such claims are often exaggerated, false, or legally misleading. A warrant of arrest is not issued by a lender. Criminal prosecution follows legal procedures. Debt collection does not authorize humiliation or threats.

XIX. Data Privacy Issues in Online Lending Verification

When verifying an online lender, borrowers should also examine the app’s privacy practices.

A lawful online lender should have a clear privacy policy explaining:

What personal data is collected;
Why it is collected;
How it is used;
Whether it is shared;
With whom it is shared;
How long it is retained;
How the borrower may exercise data privacy rights;
Contact details of the data protection officer or responsible office.

Excessive permissions are a warning sign. A lending app should not demand access to unrelated files, photos, messages, or contacts beyond what is necessary and lawful.

XX. What to Do If an Online Lender Is Not SEC Registered

If verification suggests that an online lender is not SEC registered or has no authority to operate, a borrower may take the following steps:

1. Preserve Evidence

Save copies of:

App screenshots;
Loan agreement;
Disclosure statement;
Payment receipts;
Chat messages;
SMS messages;
Emails;
Call logs;
Collection threats;
Social media posts;
Proof of app permissions;
Privacy policy;
Website pages;
SEC registration claims.

Evidence is essential when filing complaints.

2. Stop Sharing Additional Personal Data

Avoid giving more documents, selfies, contact lists, passwords, or identification cards unless legally necessary and verified.

3. Avoid Paying to Personal Accounts Without Verification

Payments should be made only through legitimate and traceable channels. Paying unknown individuals may create disputes later.

4. File a Complaint With the SEC

Complaints involving unregistered lending, unauthorized lending operations, or violations by lending or financing companies may be brought to the SEC.

5. File a Complaint With the National Privacy Commission

If the lender misused personal data, accessed contacts, shamed the borrower, or disclosed debt information to third parties, the borrower may consider filing a complaint with the NPC.

6. Seek Assistance From Law Enforcement for Threats or Harassment

If the lender makes threats, uses extortionate tactics, posts defamatory content, or engages in cyber harassment, law enforcement or cybercrime authorities may be relevant.

7. Consult a Lawyer for Serious Cases

Where there are lawsuits, threats, large sums, identity theft, or public defamation, legal advice is important.

XXI. What to Do If the Company Is Registered but Engages in Abuse

Even if the company is registered, abusive conduct may still be reported.

Possible grounds for complaint include:

Unfair debt collection;
Misrepresentation;
Hidden charges;
Unauthorized data processing;
Disclosure of debt to third parties;
Threats and intimidation;
Excessive penalties;
Misleading advertising;
Failure to provide loan disclosures;
Use of unauthorized online platforms;
Operating despite suspension or revocation.

Registration is not a license to violate borrower rights.

XXII. Borrower’s Verification Checklist

Before borrowing from an online lender, check the following:

Question	Why It Matters
What is the exact corporate name?	App names may differ from legal names.
Is the corporation registered with the SEC?	Confirms juridical existence.
Does it have a Certificate of Authority?	Confirms authority to operate as a lending or financing company.
Is the authority valid and active?	Some companies may be suspended or revoked.
Is the app connected to the company?	Prevents misuse of another company’s registration.
Are loan terms disclosed?	Prevents hidden charges.
Are fees, penalties, and interest clear?	Protects against abusive pricing.
Is there a privacy policy?	Required for responsible data handling.
Are app permissions reasonable?	Prevents unauthorized data access.
Are collection practices lawful?	Protects against harassment.
Are payment accounts under the company name?	Prevents fraud and misdirection.
Are there SEC advisories against the company?	Identifies regulatory risk.

XXIII. For Lending Companies: Compliance Considerations

Online lenders operating in the Philippines should ensure compliance before offering loans to the public.

Important compliance measures include:

1. Proper Incorporation

The entity should be properly incorporated with the SEC and have appropriate corporate purposes.

2. Certificate of Authority

The company must secure the required authority to operate as a lending or financing company.

3. Disclosure of Online Platforms

Apps, websites, and digital channels should be properly disclosed and associated with the authorized entity.

4. Transparent Loan Terms

Borrowers must receive clear information about principal, interest, charges, penalties, due dates, and total repayment obligations.

5. Lawful Collection Practices

Collection personnel and third-party agencies must be trained and monitored.

6. Data Privacy Compliance

The company should comply with the Data Privacy Act, including privacy notices, lawful processing, data minimization, security measures, and borrower rights.

7. Advertising Compliance

Advertisements should not mislead consumers about approval, interest rates, government affiliation, or loan costs.

8. Recordkeeping

The company should maintain proper records of loans, disclosures, payments, complaints, and collection activities.

9. Complaint Handling

A legitimate lender should provide an accessible complaints mechanism.

10. Ongoing SEC Compliance

Registration and authority are not one-time matters. Companies must comply with continuing reportorial and regulatory obligations.

XXIV. Misleading Use of “SEC Registered”

The phrase “SEC registered” is often used loosely. It may mean different things:

The corporation is incorporated with the SEC;
The company has a Certificate of Authority to lend;
The app is associated with a registered lending company;
The company merely claims registration without proof.

Borrowers should not accept the phrase at face value. They should ask:

“Registered as what?”

A company registered as a corporation is not necessarily authorized to operate as a lending company. A lawful lender should be able to show both corporate registration and authority to conduct lending operations.

XXV. Online Lending Apps and App Store Availability

The fact that an app appears in an app store does not prove that it is legally authorized by the SEC. App stores are distribution platforms, not Philippine financial regulators.

Similarly, high ratings, many downloads, advertisements, influencer promotions, or professional-looking websites do not prove legal compliance.

Legal verification should always go back to the company’s SEC registration and authority.

XXVI. Online Lending Through Facebook, Messenger, Viber, Telegram, or SMS

Some lenders operate entirely through social media or messaging platforms. This is risky.

A legitimate lending company may use digital communication, but it should still disclose its corporate identity, authority, loan terms, privacy policy, and official channels.

A lender that refuses to identify its corporate name or sends only personal account details is highly suspicious.

XXVII. Employer and Third-Party Contact

Illegal lenders often pressure borrowers by contacting employers, relatives, friends, or phone contacts.

Debt information is personal. Disclosing it to unrelated third parties may raise privacy, defamation, harassment, and unfair collection issues.

A borrower’s emergency contact is not automatically a co-maker, guarantor, or debtor. Unless a person signed as guarantor, surety, co-borrower, or similar obligor, that person generally should not be treated as responsible for the debt.

XXVIII. Interest, Penalties, and Hidden Charges

The law generally allows parties to agree on interest, subject to legal limitations and judicial review in appropriate cases. However, hidden, unconscionable, or misleading charges may be challenged.

Online lenders should clearly disclose:

Nominal interest;
Effective interest;
Processing fees;
Platform fees;
Disbursement fees;
Late payment penalties;
Collection charges;
Total repayment amount.

A borrower should compare the amount advertised, the amount actually received, and the amount required to be repaid. A large unexplained deduction before release is a warning sign.

XXIX. Can a Borrower Report a Registered Company?

Yes. A borrower may report a registered lending company if it violates applicable rules or laws.

Possible complaint issues include:

Harassment;
Threats;
Excessive or hidden charges;
Misleading advertisements;
Unauthorized app operations;
Data privacy violations;
Failure to disclose loan terms;
Use of abusive third-party collectors;
False claims of criminal liability;
Public shaming;
Unauthorized contact with third parties.

The fact that a company is SEC registered may make it easier to identify and hold accountable.

XXX. Legal Consequences for Unregistered or Abusive Online Lenders

Depending on the facts, an illegal or abusive online lender may face:

1. SEC Administrative Action

This may include warnings, fines, suspension, revocation of authority, cease-and-desist orders, or other regulatory sanctions.

2. Civil Liability

Borrowers or affected third parties may pursue damages where unlawful conduct caused injury.

3. Criminal Liability

Criminal liability may arise from threats, coercion, libel, identity misuse, cybercrime, falsification, or other punishable acts.

4. Data Privacy Penalties

Misuse of personal data may result in complaints, orders, penalties, or other consequences under privacy law.

5. App Takedowns and Platform Restrictions

Regulators and platforms may act against illegal apps or abusive operators.

XXXI. Best Practices for Borrowers

Borrowers should follow these best practices:

Verify the lender before installing the app or submitting information.
Do not rely on app store availability as proof of legality.
Confirm both SEC incorporation and Certificate of Authority.
Check whether the app name is connected to the registered company.
Read the loan agreement before accepting.
Screenshot all disclosures before confirming the loan.
Avoid lenders that demand excessive app permissions.
Do not send IDs or selfies to unidentified lenders.
Avoid payment to personal accounts.
Preserve all evidence of threats or harassment.
Report abusive or unauthorized lenders to the proper agency.
Seek legal help when threats, defamation, or large claims are involved.

XXXII. Best Practices for Companies

Companies operating online lending platforms should:

Secure proper SEC registration and authority.
Disclose their corporate identity clearly in apps and websites.
Register or disclose online platforms as required.
Maintain transparent loan documents.
Avoid hidden charges.
Implement lawful collection procedures.
Train employees and collection agents.
Avoid access to unnecessary personal data.
Comply with privacy and cybersecurity obligations.
Keep accurate borrower records.
Provide complaint channels.
Monitor third-party service providers.
Avoid misleading claims of government approval.
Keep regulatory filings current.

XXXIII. Sample Verification Questions for Borrowers

A borrower may send the following questions to a lender:

What is your full SEC-registered corporate name? What is your SEC registration number? What is your Certificate of Authority number? Are you registered as a lending company or financing company? Is this app officially operated by your SEC-registered company? What is your registered office address? Where can I review the full loan agreement before accepting the loan? What are all interest, fees, penalties, and charges? What is your privacy policy? What data will your app access? Do you contact third parties for collection? What is your official complaints channel?

A lender that refuses to answer these questions should be treated with caution.

XXXIV. Sample Warning Signs in Loan Documents

When reading loan documents, watch for:

Blank lender name;
No SEC registration details;
No Certificate of Authority details;
Unclear computation of interest;
Unexplained deductions;
Vague service fees;
Automatic consent to contact all phone contacts;
Waiver of all borrower rights;
Authorization to post borrower information online;
Confession of judgment clauses;
Broad penalty clauses;
Unidentified collection agents;
Governing terms hidden in links unavailable before loan acceptance.

Borrowers should not accept terms they cannot review, save, or understand.

XXXV. Conclusion

To verify whether an online lending company is SEC registered in the Philippines, it is not enough to check whether the company claims to be “registered.” A proper legal verification requires confirming the company’s exact corporate identity, SEC incorporation, Certificate of Authority to operate as a lending or financing company, connection between the app and the registered entity, current regulatory status, transparency of loan terms, and compliance with lawful collection and data privacy standards.

The most important distinction is this:

SEC incorporation proves that a corporation exists. A Certificate of Authority proves that it is authorized to operate as a lending or financing company.

Borrowers should be especially careful with lenders that hide their corporate identity, use personal payment accounts, impose undisclosed charges, demand excessive app permissions, or threaten public shame and arrest. Online lending may be lawful when properly registered and responsibly operated, but digital convenience does not excuse regulatory noncompliance, abusive collection, or misuse of personal data.