Before trusting an online lending company with your identification documents, phone permissions, bank details, or money, verify more than its claim that it is “SEC-registered.” In the Philippines, a legitimate online lender should pass three separate checks: the corporation must exist in Securities and Exchange Commission records, it must have valid SEC authority to operate as a lending or financing company, and the specific loan app or website should genuinely belong to—or have been reported by—that licensed company.

What “SEC-Registered” Really Means for an Online Lender

“SEC-registered” can be misleading because it may refer only to the company’s basic incorporation.

A corporation may have a valid SEC registration number but still lack the Certificate of Authority required to engage in lending or financing. A scammer may also copy the name, registration number, or certificate of a legitimate company and use it for an unrelated loan app.

Use this three-layer test:

What to verify	What it proves	What it does not prove
SEC primary registration	The corporation was legally incorporated	That it may legally offer loans
Certificate of Authority	The SEC authorized the company to operate as a lending or financing company	That every app using its name is genuine
Connection between the company and the app or website	The online platform is actually operated or reported by the licensed company	That every loan term or collection practice is lawful

A DTI business-name registration, BIR registration, mayor’s permit, social-media page, or app-store listing is not a substitute for SEC authority to conduct a lending or financing business.

Philippine Laws Governing Online Lending Companies

Lending companies need SEC authority to operate

The Lending Company Regulation Act of 2007, or Republic Act No. 9474, requires a lending company to be organized as a corporation. More importantly, Section 4 states that no lending company may conduct business unless the SEC has granted it authority to operate.

Operating a lending business without a valid, subsisting SEC authority may expose the persons responsible to administrative and criminal penalties. The SEC may also investigate lending companies, require reports, impose fines, and suspend or revoke their authority. (Supreme Court E-Library)

Financing companies also require SEC authorization

Some online lenders are organized as financing companies rather than lending companies. Under the Financing Company Act of 1998, or Republic Act No. 8556, an entity may not hold itself out as a financing company unless it is properly registered and authorized by the SEC. (Lawphil)

This is why checking only whether a corporation “exists” is insufficient. You must look for a secondary license or Certificate of Authority showing that the company is legally permitted to provide loans or financing.

Online platforms and advertisements must identify the real company

SEC Memorandum Circular No. 19, Series of 2019 covers disclosure requirements for lending and financing advertisements and the reporting of online lending platforms.

Advertisements should conspicuously disclose identifying information such as:

The lender’s complete corporate name
Its SEC registration number
Its Certificate of Authority number
A reminder for borrowers to study the Disclosure Statement before proceeding with the loan

The circular also requires lending and financing companies to report their online lending platforms to the SEC. (SEC Appointment System)

An app showing only a catchy brand name—without identifying the corporation behind it—is therefore a serious warning sign.

How to Verify an Online Lending Company With the SEC

1. Identify the exact corporation behind the loan app

Do not begin by searching only the app’s brand name. An app called “Quick Peso,” for example, might legally be operated by a corporation with a completely different name.

Look for the corporate owner in the following places:

The app-store listing under “Developer,” “Offered by,” or “Seller”
The app’s privacy policy
The website footer and “About Us” page
The loan agreement
The Truth in Lending Disclosure Statement
Text messages or emails containing the loan offer
The lender’s payment instructions
The app’s terms and conditions

Write down, screenshot, or copy the following:

Full corporate name
SEC registration number
Certificate of Authority number
Office address
Official email address and telephone number
App developer or publisher name
Website domain
Privacy-policy owner

The names should be reasonably consistent. A spelling difference involving “Inc.” or “Corporation” may be harmless, but an entirely different company name requires further verification.

2. Search the official Check with SEC portal

Open the SEC’s Check with SEC portal, which is linked from the SEC’s official online-services page. The SEC provides this service so the public can check whether a company is registered and whether it has the secondary license needed for regulated activities. (Securities and Exchange Commission)

Search using the exact corporate name. When possible, also search using the SEC registration number shown by the lender.

Because company names may be recorded differently, try reasonable variations:

“ABC Lending Corp.” and “ABC Lending Corporation”
“XYZ Financing Inc.” and “XYZ Financing, Inc.”
The name without punctuation
The SEC registration number instead of the company name

Do not treat a similar name as a match. Scammers often use names that differ from legitimate companies by only one word, letter, or punctuation mark.

3. Confirm the company’s status and authority to lend

When you find the company, check the available information carefully.

You are looking for confirmation that:

The exact corporation exists.
Its registration has not been revoked or cancelled.
It has authority to operate as a lending company or financing company.
Its Certificate of Authority appears valid.
The details match the information disclosed by the app.

The phrase “registered corporation” alone does not answer the second and third questions.

A company incorporated for purposes such as information technology, marketing, consultancy, or general services cannot automatically engage in lending simply because it has an SEC certificate of incorporation.

4. Verify the Certificate of Authority number

A legitimate lender should be able to disclose its Certificate of Authority number clearly. Compare that number with official SEC information.

Watch for these problems:

No Certificate of Authority number appears anywhere.
The company gives only an SEC registration number.
The certificate belongs to a differently named corporation.
The lender sends a blurry, cropped, or altered certificate.
The number cannot be confirmed through official SEC channels.
The certificate appears expired, suspended, revoked, or cancelled.
The company refuses to answer questions about its license.

A screenshot supplied by the lender is not independent verification. Certificates and SEC logos can be copied or edited.

5. Confirm that the particular loan app belongs to the licensed company

Even when the company is legitimate, the app may not be.

Compare the app’s details with the licensed corporation’s details:

Detail	What should match
App developer	The licensed company or a clearly disclosed authorized operator
Privacy-policy owner	The same corporation offering the loan
Loan agreement	The licensed company’s complete legal name
Disclosure Statement	The licensed company and the actual loan terms
Payment recipient	The company or an explainable authorized collection channel
Customer-support domain	Preferably the company’s official domain
Website and app branding	Consistent ownership and contact details

A payment demand to an unrelated person’s personal bank or e-wallet account is a major red flag. It is not automatically proof of fraud, because some businesses use authorized payment partners, but the lender should be able to explain and document the relationship.

Also be cautious when the lender’s contract names one corporation, its privacy policy names another, and payment is requested by a third party.

6. Ask the SEC directly when the portal result is unclear

If you cannot confirm the company’s authority or the app’s connection to it, submit an inquiry through the SEC iMessage portal. iMessage is the SEC’s official web-based platform for public inquiries, complaints, requests, and incident reports. It generates a ticket that can be tracked online. (Securities and Exchange Commission)

State your question precisely. For example:

Please confirm whether ABC Lending Corporation, SEC Registration No. ______ and Certificate of Authority No. ______, is currently authorized to operate as a lending company and whether the online lending app called “Quick Peso,” published by ______, is reported or recognized as its online lending platform.

Attach whatever evidence you have:

Screenshot of the app-store page
App or website link
Claimed corporate name
Claimed SEC and Certificate of Authority numbers
Screenshots of advertisements
Privacy policy and terms
Loan agreement or Disclosure Statement
Payment instructions
Messages from the lender

The SEC’s response time depends on the nature of the inquiry and agency workload. Do not release sensitive documents or pay an advance fee while verification remains unresolved.

7. Use SEC eSEARCH for additional corporate documents

The SEC’s eSEARCH service allows the public to search for and obtain documents submitted to the SEC. Depending on availability, these may include incorporation records, Articles of Incorporation, and General Information Sheets. (eSEARCH)

These documents can help you confirm:

The company’s exact legal name
Its stated business purposes
Registered office address
Directors and officers
Whether the person communicating with you appears connected to the company

Official document requests may involve registration, processing requirements, or fees. Corporate documents are useful for confirming identity, but they should not replace verification of the lender’s Certificate of Authority.

8. Search for SEC advisories, suspension orders, or revocation orders

Search the official SEC website using the company name, app name, or both. Look for:

Public advisories
Cease-and-desist orders
Suspension orders
Revocation orders
Notices involving unregistered online lending platforms
Warnings about misuse of a legitimate company’s identity

Use the publication date carefully. An old advisory may have been followed by a later order, compliance action, or license change. Likewise, an old list of registered companies may no longer reflect the lender’s current status.

The safest approach is to combine the public records with a direct SEC inquiry when current status is uncertain.

Documents a Legitimate Online Lender Should Provide

Before accepting a loan, request or save copies of the following:

Document or information	Why it matters
Complete corporate name	Identifies the legal lender
SEC registration number	Helps confirm incorporation
Certificate of Authority number	Shows authority to conduct lending or financing
Loan agreement	States the parties’ legal obligations
Disclosure Statement	Shows the loan’s true cost before consummation
Schedule of payments	Identifies due dates and installment amounts
Privacy notice	Explains how personal data will be processed
Official payment channels	Reduces the risk of paying an impostor
Customer-service and complaint details	Allows disputes to be documented

Under Republic Act No. 9474, lending transactions must comply with the Truth in Lending Act, Republic Act No. 3765, and applicable consumer-protection requirements. The lender should disclose the finance charge and other material loan terms rather than presenting only the amount you will receive and the amount you must repay. (Supreme Court E-Library)

Red Flags That the Online Lender May Be Unregistered or Fake

Pause the application when you encounter any of these:

The app does not disclose a complete corporate name.
Only a DTI or BIR number is provided.
The lender claims that app-store approval is equivalent to an SEC license.
The SEC registration number belongs to a different company.
The Certificate of Authority cannot be verified.
The company name changes across the app, contract, privacy policy, and payment instructions.
The lender pressures you to send identification before showing the loan terms.
An “agent” demands an advance processing, insurance, release, or activation fee.
You are instructed to pay a personal account with no documented connection to the lender.
The app requests broad access to contacts, photos, messages, social-media accounts, or files unrelated to processing the loan.
The lender threatens to post your identity or contact everyone in your phone.
The company refuses to communicate through an official channel.
The lender uses a certificate image but will not provide searchable registration details.

No single red flag conclusively proves illegality, but several inconsistencies together should stop you from proceeding.

Registration Does Not Make Every Practice Lawful

A lender may be properly registered and still violate consumer-protection, disclosure, collection, interest-rate, or data-privacy rules.

Unfair collection practices remain prohibited

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt-collection practices by lending and financing companies. (SEC Appointment System)

In a joint public advisory dated March 18, 2026, the DICT, National Privacy Commission, and SEC addressed reports involving harassment, intimidation, public shaming, and unlawful use of borrowers’ personal data by online lending platforms. The advisory applies to both recorded and unrecorded platforms and reminds borrowers to use only verified platforms operated by duly registered and licensed entities.

Access to phone contacts is not unlimited

The Data Privacy Act of 2012, Republic Act No. 10173, and National Privacy Commission rules restrict unnecessary and excessive processing of personal information.

A person listed as a character reference is not automatically a guarantor. A character reference is generally used to verify a borrower’s identity or the truthfulness of information supplied. A guarantor, by contrast, expressly agrees to answer for the debt under the applicable agreement.

Current NPC rules require separate treatment of character references and guarantors. For debt collection, an online lender may contact a properly designated guarantor, but it may not simply contact other people found in the borrower’s phonebook or contact list. (National Privacy Commission)

Some small online loans are subject to rate caps

BSP Circular No. 1133, Series of 2021 imposes caps on certain unsecured, general-purpose loans offered by lending and financing companies when the principal does not exceed ₱10,000 and the loan term does not exceed four months.

For qualifying loans, the circular provides:

Maximum nominal interest rate: 6% per month
Maximum effective interest rate, including applicable charges: 15% per month
Maximum late-payment or nonpayment penalty: 5% per month on the scheduled amount due
Maximum total cost: 100% of the amount borrowed

Not every loan falls within these conditions. Excessive charges are a warning sign, but rate compliance alone does not prove that a lender is SEC-authorized.

What to Do If You Cannot Verify the Lender

Do not continue the application. Avoid uploading additional identification, selfies, bank information, or contact permissions.
Do not pay an advance release fee. A demand for money before the promised loan is released is a common fraud indicator.
Preserve the evidence. Take screenshots of the app listing, advertisements, website, privacy policy, loan terms, chat messages, account numbers, and claimed SEC credentials.
Submit a verification request or complaint to the SEC. Use the SEC iMessage portal. The March 2026 inter-agency advisory also identifies the SEC FINLEND hotline at 1-4732 or 1-4SEC for reports involving unfair collection practices.
Report privacy violations to the National Privacy Commission. The NPC’s formal complaint instructions and complaint form explain the current filing process. A formal NPC complaint generally requires the prescribed form, notarization, and submission in accordance with the agency’s instructions. (National Privacy Commission)
Report threats, fraud, or cybercrime to the proper authorities. Depending on the conduct, reports may be made to the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or DICT Cyber Hotline. Immediate threats to personal safety should be reported to the police without delay.
Keep a complete loan accounting if money was already released. Record the principal actually received, deductions made before release, payments completed, interest charged, penalties, and remaining amount claimed.

Do not assume that discovering a licensing violation automatically erases every financial obligation. The lender’s authority to operate, the validity of particular charges, and the accounting of money actually received are separate issues. Preserve your records and dispute unsupported amounts in writing.

Common Verification Mistakes

Searching only the app name

The app’s brand may not match the corporation’s name. Find the legal lender in the contract, Disclosure Statement, privacy policy, and app-store developer information.

Accepting a certificate sent through chat

A certificate image can be copied from another company or digitally altered. Independently confirm the name and number through SEC channels.

Treating incorporation as a lending license

A Certificate of Incorporation proves corporate existence. A Certificate of Authority proves permission to operate as a lending or financing company. You normally need to confirm both.

Relying on old online lists

Downloadable lists, social-media posts, blogs, and screenshots can become outdated. Check current SEC records and ask the SEC directly when necessary.

Assuming an app-store listing proves legality

An app’s presence in Google Play, Apple’s App Store, or another marketplace does not replace Philippine licensing requirements. Store availability may also change before government records are updated—or vice versa.

Verifying only before borrowing

Recheck the company when payment instructions, app ownership, website domain, or collection agent changes. Scammers sometimes impersonate a legitimate lender after a borrower has already applied.

Frequently Asked Questions

Is an SEC registration number enough to prove that an online lender is legitimate?

No. The number may prove only that a corporation was incorporated. Confirm that the company also has a valid Certificate of Authority to operate as a lending or financing company and that the specific app genuinely belongs to that company.

Where can I check if an online lending company is SEC-registered?

Start with the official Check with SEC portal. Search the exact corporate name and, when available, its SEC registration number. Use SEC iMessage when the result is missing, unclear, or inconsistent.

What if the loan app name is different from the SEC-registered company name?

That is not automatically illegal because apps often use trade or brand names. However, the app should clearly identify its corporate operator. Confirm the relationship through the privacy policy, loan agreement, Disclosure Statement, app developer details, and the SEC.

Does being listed in an app store mean the lender is licensed?

No. An app-store listing is not an SEC license and does not prove that the developer has authority to conduct lending business in the Philippines.

Can a registered online lender still be reported for harassment?

Yes. SEC registration does not authorize threats, public shaming, deception, abusive collection, or unlawful processing of personal data. Preserve the evidence and report the conduct to the SEC, NPC, or cybercrime authorities, depending on the violation.

Can a loan app contact everyone in my phone?

It should not use your contact list indiscriminately for debt collection. A character reference is not automatically a guarantor, and contacting unrelated people found in your phone may violate NPC rules and the Data Privacy Act.

What should I do if I already borrowed from an unregistered lender?

Keep records of the amount actually received, all deductions, payments, charges, and communications. Report the company to the SEC. Do not assume that the principal automatically disappears, but do not pay unsupported fees or an unknown collector without verifying the payee and obtaining a proper accounting.

Are online lending interest rates legally capped?

Certain unsecured, general-purpose loans of up to ₱10,000 with terms of up to four months are subject to the caps in BSP Circular No. 1133. Other loans may be governed by different rules, but charges must still be properly disclosed and must not be unconscionable or otherwise unlawful.

Can an OFW or foreigner verify a Philippine online lender from abroad?

Yes. The Check with SEC, eSEARCH, and SEC iMessage services are available online. A personal visit is generally unnecessary for an initial verification request. Formal complaints may have additional identification, notarization, or submission requirements, so follow the receiving agency’s current filing instructions.

Key Takeaways

Confirm the corporation’s SEC registration, its Certificate of Authority, and its connection to the specific app or website.
A Certificate of Incorporation alone does not authorize a company to engage in lending.
Match the corporate name across the app listing, privacy policy, loan agreement, Disclosure Statement, and payment instructions.
Do not rely solely on certificates sent by the lender, app-store availability, DTI registration, or old online lists.
Use the official Check with SEC portal and ask through SEC iMessage when the company or platform cannot be independently verified.
Registration does not excuse unlawful interest, misleading disclosures, harassment, public shaming, or misuse of phone contacts.
Preserve screenshots and transaction records before reporting an unverified lender or abusive online lending platform.