I. Introduction

Online lending has become widespread in the Philippines. Many borrowers now apply for loans through mobile applications, websites, social media pages, messaging platforms, and digital loan marketplaces. These services promise fast approval, minimal documents, and quick cash disbursement through bank accounts or e-wallets.

However, not every online lending app or digital loan provider is legitimate. Some operate without proper authority, use abusive collection practices, charge excessive fees, misuse personal data, contact borrowers’ phone contacts, threaten public shaming, or pretend to be registered companies when they are not.

One of the first checks a borrower should make is whether the lending company is registered with the Securities and Exchange Commission, or SEC, and whether it has authority to operate as a lending or financing company. In the Philippines, incorporation alone is not enough. A company may be registered as a corporation but still lack the required authority to engage in lending or financing activities.

This article explains how to verify whether an online lending company is SEC-registered, what documents to look for, the difference between corporate registration and lending authority, how to identify red flags, what to do if the lender is not registered, and how SEC registration relates to data privacy, consumer protection, and debt collection.

II. Why SEC Registration Matters

SEC registration matters because lending and financing companies are regulated businesses. A person or company cannot simply create a mobile app, offer loans to the public, collect interest, and operate as a lending business without complying with Philippine law.

Verifying SEC registration helps determine whether the company:

Exists as a registered corporation or partnership;
Has authority to engage in lending or financing;
Uses a registered corporate name;
Has disclosed its principal office and responsible officers;
Is subject to SEC regulation;
May be traced for complaints;
Is less likely to be a fly-by-night operator;
Can be held accountable for abusive conduct;
Is using a legitimate online lending platform or app;
Has not been revoked, suspended, or warned against by regulators.

SEC registration does not guarantee that a company is fair, affordable, or free from abusive practices. But absence of registration or authority is a major warning sign.

III. Legal Framework for Lending Companies

Online lending companies may fall under several legal and regulatory frameworks, including:

The Lending Company Regulation Act;
The Financing Company Act, if the entity is a financing company;
SEC rules and circulars on lending and financing companies;
SEC rules on online lending platforms;
Corporate registration rules under the Revised Corporation Code;
Consumer protection rules;
Data privacy law;
Cybercrime law, where online harassment or identity misuse occurs;
Civil Code principles on obligations, contracts, interest, damages, and abuse of rights;
Rules on disclosure of loan terms, interest, penalties, and charges.

A legitimate online lender should comply not only with corporate registration rules but also with lending-specific authority and consumer protection requirements.

IV. SEC Registration vs. Authority to Operate as a Lending Company

This is the most important distinction.

A. SEC Corporate Registration

A company may be registered with the SEC as a corporation. This means it has legal personality as a corporation.

However, corporate registration alone does not necessarily mean that the company is authorized to lend money to the public.

Example:

A corporation named ABC Digital Services Inc. may be registered with the SEC for general business purposes. But if it does not have authority to operate as a lending company or financing company, it should not present itself as a legitimate lending company.

B. Certificate of Authority

A lending company generally needs a Certificate of Authority from the SEC to operate as a lending company.

A financing company also needs authority to operate as such.

The certificate of authority is different from the certificate of incorporation.

C. Why This Difference Matters

Some online lenders mislead borrowers by showing only:

Certificate of incorporation;
SEC registration number;
Business name;
Mayor’s permit;
DTI registration;
App store listing;
Social media page.

These are not enough to prove lawful lending authority.

A borrower should ask: Is the company merely incorporated, or is it authorized by the SEC to operate as a lending or financing company?

V. What Is an Online Lending Company?

An online lending company is a lending or financing business that offers, processes, approves, releases, collects, or manages loans through electronic means.

It may operate through:

Mobile apps;
Websites;
Facebook pages;
Messenger, Viber, Telegram, WhatsApp, or SMS;
Online marketplaces;
Digital wallet partnerships;
Loan comparison platforms;
Agent networks;
QR code forms;
Email or web-based application portals.

The fact that the loan is processed online does not remove the need for legal authority.

VI. What Is an Online Lending Platform?

An online lending platform is the digital system used to offer or process loans. It may be a mobile app, website, portal, or other technology used by the lending company.

A legitimate lending company should clearly disclose:

The registered corporate name;
SEC registration details;
Certificate of Authority number;
Business address;
Contact details;
Data protection officer or privacy contact;
Loan terms;
Interest rate;
fees and penalties;
Collection practices;
Name of the app or platform;
Relationship between app name and registered company.

A common problem is that borrowers know only the app name, not the legal company behind the app.

VII. App Name vs. Corporate Name

The name of the lending app may be different from the legal corporate name.

Example:

The app may be called Quick Peso, but the registered company may be XYZ Lending Corporation.

When verifying registration, do not search only the app name. Identify the company behind the app.

Check:

App profile;
Terms and conditions;
Privacy policy;
Loan agreement;
Disclosure statement;
SMS or email messages;
Collection notices;
Official receipts;
Bank or e-wallet recipient name;
Customer service email;
Company address.

The legal accountability usually belongs to the company, not merely the app name.

VIII. First Step: Identify the Legal Entity Behind the Lending App

Before checking SEC registration, identify the exact legal entity.

Look for:

Full corporate name;
SEC registration number;
Certificate of Authority number;
Principal office address;
App name;
Website;
Customer service email;
Privacy policy;
Data protection officer contact;
Loan contract signatory;
Payment account name;
Collection agency name, if involved.

If the app refuses to disclose the legal company name, that is a serious red flag.

IX. Where to Find the Company Name

The company name may appear in:

App store description;
App “About” page;
Terms and conditions;
Privacy policy;
Loan agreement;
Promissory note;
Disclosure statement;
Payment instructions;
Email confirmation;
SMS notices;
Collection messages;
Official receipt;
Company website footer;
Facebook page transparency information;
Customer support reply;
Data privacy consent form.

Always take screenshots because app pages and online content can change.

X. What to Ask the Lending App Directly

A borrower may ask:

What is your registered corporate name?
What is your SEC registration number?
What is your SEC Certificate of Authority number?
Are you registered as a lending company or financing company?
What is your principal office address?
What is your official email address?
What is your customer service hotline?
What is your data protection officer contact?
Is your mobile app registered or disclosed to the SEC?
Are you using any collection agency?
What is the name and authority of the collection agency?
Can you provide a copy of your Certificate of Authority?

A legitimate lender should be able to answer clearly.

XI. Documents That May Show Legitimacy

A legitimate lending company may have the following documents:

SEC Certificate of Incorporation;
Articles of Incorporation;
By-Laws;
SEC Certificate of Authority to Operate as a Lending Company;
General Information Sheet;
Business permit or mayor’s permit;
BIR Certificate of Registration;
Disclosure statement for the loan;
Loan agreement;
Official receipts;
Privacy notice;
Data processing consent form;
Board-authorized signatories;
Authority for online lending platform, if applicable under SEC rules;
Relevant compliance documents.

However, borrowers should remember: the Certificate of Authority is the key document for lending operations.

XII. Certificate of Incorporation Is Not Enough

A certificate of incorporation proves that the company exists as a corporation. It does not automatically prove that the company is allowed to lend money to the public.

Some companies show their SEC registration number to appear legitimate. But a borrower should ask whether the company has lending authority.

A company can be:

SEC-registered as a corporation but not authorized to lend;
SEC-registered and authorized as a lending company;
SEC-registered but with revoked or suspended authority;
Not registered at all;
Using another company’s registration details;
Using a name similar to a legitimate company;
Operating under an unregistered app name.

XIII. DTI Registration Is Not Enough

Some online lenders show a DTI business name registration. This may apply to sole proprietorships or business names, but lending companies that lend to the public generally require proper authority under lending or financing laws.

A DTI certificate alone is not enough to prove that an online lending app is authorized to operate as a lending company.

XIV. Mayor’s Permit Is Not Enough

A mayor’s permit or business permit shows that a business has local government permission to operate at a certain location. It does not replace SEC lending authority.

A business may have a local permit for an office, but still lack authority to operate as a lending company.

XV. BIR Registration Is Not Enough

A BIR Certificate of Registration shows that the business is registered for tax purposes. It does not prove that the business is authorized by the SEC to lend money to the public.

Tax registration is different from regulatory authority.

XVI. App Store Listing Is Not Enough

An app appearing in Google Play, the App Store, or another platform does not automatically mean that the lending company is SEC-registered or legally authorized.

App stores may host apps submitted by developers, but regulatory authority in the Philippines must still be verified separately.

Borrowers should not assume legitimacy merely because an app is downloadable.

XVII. Social Media Presence Is Not Enough

A Facebook page, TikTok page, Telegram channel, or sponsored advertisement does not prove legitimacy.

Scammers and unauthorized lenders often use:

Professional-looking logos;
Fake certificates;
Paid ads;
Fake testimonials;
Stolen company names;
Fake customer service accounts;
Copied SEC registration numbers;
Fake office addresses.

Always verify using company details and official records.

XVIII. How to Verify SEC Registration Practically

The practical verification process involves several steps.

Step 1: Identify the Corporate Name

Find the exact legal name behind the app or website.

Do not rely only on app name.

Step 2: Check Corporate Registration

Confirm whether the company exists in SEC records.

Look for exact name, registration number, and corporate status.

Step 3: Check Certificate of Authority

Confirm whether the company has authority to operate as a lending company or financing company.

Step 4: Check the App or Platform

Verify whether the app name is connected to the registered company.

Step 5: Check for Revocation, Suspension, or Advisory

Determine whether the SEC has issued warnings, revocations, suspensions, or advisories involving the company or app.

Step 6: Compare Details

Compare the SEC details with the app’s disclosed details.

Check whether the address, corporate name, app name, and contact details match.

Step 7: Verify Loan Documents

Check whether the loan agreement, disclosure statement, and receipts use the same registered corporate name.

Step 8: Preserve Evidence

Take screenshots and save documents before borrowing or filing a complaint.

XIX. What Details Should Match?

The following details should be consistent:

Corporate name in SEC records;
Corporate name in app terms;
Corporate name in privacy policy;
Corporate name in loan agreement;
Corporate name in disclosure statement;
Corporate name in receipts;
Corporate name in payment channels;
Business address;
Contact details;
Certificate of Authority details;
App name disclosed by the company;
Customer service name;
Collection agency authority, if any.

Inconsistencies do not always prove illegality, but they justify caution.

XX. SEC Advisories and Enforcement Actions

The SEC may issue advisories, warnings, suspensions, revocations, or other enforcement actions involving lending or financing companies and online lending platforms.

A borrower should check whether the company or app has been subject to:

SEC advisory;
cease-and-desist order;
suspension;
revocation of Certificate of Authority;
complaint for abusive collection practices;
warning against unauthorized lending;
finding of unregistered operation;
order involving online lending platform violations;
penalties for non-disclosure;
data privacy or harassment-related enforcement.

A company may have been legitimate before but later suspended or revoked. Current status matters.

XXI. Why Current Status Matters

A company may once have been registered but later lost authority.

Possible changes include:

Certificate of Authority revoked;
authority suspended;
corporate registration revoked;
company became delinquent;
company changed name;
company merged;
app was discontinued;
app was removed from authorized platforms;
company stopped lending operations;
company transferred operations to another entity.

A borrower should verify the current status, not merely rely on old screenshots or certificates.

XXII. Beware of Stolen SEC Registration Details

Some illegal apps use the name or registration number of a legitimate company without authority.

Signs include:

Company name in app does not match payment account;
App name is not listed in the legitimate company’s website;
Contact details differ from official company contacts;
Customer service uses free email accounts;
Loan agreement has another company name;
Payment is sent to an individual;
App refuses to provide Certificate of Authority;
Privacy policy is copied from another company;
The legitimate company denies connection.

When in doubt, contact the registered company through independently verified channels.

XXIII. Financing Company vs. Lending Company

A lending company and a financing company are related but not identical.

A. Lending Company

A lending company generally grants loans from its own capital funds or funds from lawful sources, subject to lending company regulations.

B. Financing Company

A financing company may engage in broader financing activities, such as extending credit facilities, factoring, leasing, or other financing arrangements, subject to financing company laws.

C. Why It Matters

Some online platforms may be operated by financing companies rather than lending companies. The borrower should verify the correct authority type.

The question is not merely “SEC registered?” but “registered and authorized for the specific financial activity being offered?”

XXIV. Loan Broker, Agent, or Marketplace

Some apps or websites do not directly lend money but act as loan brokers, lead generators, referral platforms, or marketplaces.

These platforms may collect personal data and refer applicants to lenders.

Borrowers should ask:

Are you the lender or only a broker?
Who is the actual lender?
Is the lender SEC-authorized?
Are you authorized to collect personal data?
Do you share my data with multiple lenders?
Will you charge a broker fee?
Who is responsible for collection?
Who issues the loan agreement?

A referral platform should not hide the actual lender.

XXV. Collection Agency Is Not the Same as Lender

Sometimes borrowers receive messages from a collection agency rather than the lender.

A collection agency may collect on behalf of a lender, but it does not necessarily own the loan.

Borrowers should ask:

Who is the original lender?
Is the lender SEC-authorized?
Are you authorized to collect?
Can you provide proof of authority?
What is the exact amount due?
Can you provide a statement of account?
What personal data did you receive?
Are you registered as a business?

Collection agencies must not use threats, harassment, unauthorized disclosure, or abusive practices.

XXVI. What a Legitimate Online Lending App Should Disclose

A legitimate online lending app should clearly disclose:

Registered corporate name;
SEC registration number;
Certificate of Authority number;
Principal office address;
Contact number;
Customer service email;
Data protection officer contact;
Privacy policy;
Terms and conditions;
Loan amount;
Interest rate;
processing fee;
service fee;
penalties;
total amount payable;
repayment schedule;
collection policy;
borrower rights;
complaint mechanism;
regulatory information.

Lack of transparency is a major warning sign.

XXVII. Disclosure Statement Requirement

Borrowers should receive clear disclosure of loan terms before accepting the loan.

A proper disclosure should show:

Principal amount;
interest rate;
finance charges;
processing fees;
service fees;
penalties;
total amount to be paid;
net proceeds released;
repayment date;
annual or effective interest information where required;
consequences of default;
borrower confirmation.

If the app releases a much smaller amount than the approved loan due to hidden deductions, or charges unclear fees, the borrower should scrutinize the lender carefully.

XXVIII. Interest Rates and Charges

SEC registration does not automatically mean that all interest, fees, or penalties are valid. A registered lender may still impose unlawful, unconscionable, unclear, or abusive charges.

Borrowers should check:

Nominal interest rate;
effective interest rate;
processing fee;
service fee;
platform fee;
late payment penalty;
collection fee;
rollover fee;
pre-termination fee;
total amount payable.

A loan advertised as low-interest may become expensive due to fees and short repayment periods.

XXIX. Red Flags of an Unregistered or Suspicious Online Lender

Be cautious if the lending app:

Does not disclose corporate name;
Does not disclose SEC Certificate of Authority;
Uses only a Facebook page or messaging app;
Requires access to all phone contacts;
Requires access to photos, files, or SMS without clear reason;
Uses threatening collection messages;
Contacts relatives or employers;
Posts borrower information online;
Charges hidden fees;
Releases less than promised without clear disclosure;
Requires upfront fees before loan release;
Uses personal bank or e-wallet accounts for repayment;
Refuses to issue receipts;
Has no office address;
Uses fake lawyer or police threats;
Claims immediate arrest for unpaid debt;
Refuses to provide loan agreement;
Changes app name frequently;
Uses copied SEC documents;
Has numerous complaints of harassment.

One red flag may warrant caution. Multiple red flags suggest serious risk.

XXX. Upfront Fee Scams

A common scam involves requiring borrowers to pay fees before loan release.

The scammer may demand:

Processing fee;
activation fee;
insurance fee;
verification fee;
anti-fraud fee;
tax clearance fee;
collateral fee;
wallet unlocking fee;
penalty for wrong account number;
cancellation fee.

After payment, the loan is not released, and more fees are demanded.

A legitimate lender may charge lawful fees, but deductions should be disclosed and usually deducted from proceeds or reflected in the loan contract. Be cautious when a supposed lender demands repeated upfront payments to personal accounts.

XXXI. Fake Approval Screenshots

Some scam lenders send fake approval notices showing that a loan is ready but “locked” until the borrower pays a fee.

Borrowers should not rely on:

screenshot approvals;
unofficial chat messages;
fake app dashboards;
fake certificates;
fake transaction references;
pressure tactics.

Verify the company before sending any payment.

XXXII. Data Privacy Concerns in Online Lending Verification

An online lender’s legitimacy is not only about SEC registration. It must also comply with data privacy law.

Check whether the app has:

Privacy policy;
data protection officer contact;
clear consent form;
explanation of data collected;
explanation of contact access;
retention period;
data sharing disclosures;
account deletion process;
complaint mechanism;
security safeguards.

A registered lender may still violate data privacy law if it collects excessive data or uses personal data for harassment.

XXXIII. App Permissions as a Legitimacy Signal

Check what permissions the app asks for.

Suspicious permissions may include:

Full contact list access;
SMS access;
photo gallery access;
microphone access;
camera access beyond selfie verification;
location tracking beyond necessary verification;
call log access;
file storage access;
social media account access.

Some permissions may be necessary for identity verification, but excessive permissions should raise concern.

A borrower should deny permissions not necessary for the loan.

XXXIV. Abusive Collection Practices

Even if a lender is SEC-registered, it may still violate rules if it uses abusive collection practices.

Examples include:

Threatening harm;
threatening imprisonment without legal basis;
pretending to be police or court personnel;
using profane language;
contacting all phone contacts;
shaming borrower in group chats;
posting borrower’s photo or ID;
disclosing debt to employer;
calling at unreasonable hours;
sending fake legal notices;
using fake warrant or subpoena;
claiming relatives are liable when they are not.

Borrowers may file complaints even against registered lenders.

XXXV. SEC Registration Does Not Legalize Harassment

A borrower should not think that a registered lender may do anything to collect.

Registration gives the company authority to operate, but it must still follow:

lending laws;
consumer protection rules;
disclosure rules;
data privacy law;
civil and criminal laws;
fair collection standards;
rules against abusive, unethical, or unfair practices.

A debt may be valid, but collection methods must remain lawful.

XXXVI. What to Do Before Borrowing From an Online Lender

Before applying, a borrower should:

Identify the legal company name;
Verify SEC registration;
Verify Certificate of Authority;
Check if the app is connected to that company;
Read the loan agreement;
Check interest and total charges;
Review privacy policy;
Check app permissions;
Search for complaints or regulatory advisories if available through official means;
Avoid upfront fee demands;
Avoid apps that require unnecessary contact access;
Save screenshots of all disclosures;
Use official payment channels only;
Confirm customer support and office address.

If the lender cannot pass these checks, avoid borrowing.

XXXVII. What to Do After Borrowing

After borrowing, the borrower should:

Save the loan agreement;
save disclosure statement;
keep proof of disbursement;
keep payment receipts;
record due dates;
request official receipts;
monitor charges;
avoid rollovers without understanding costs;
communicate disputes in writing;
request full payment certificate after settlement;
request account deletion if no longer needed;
preserve evidence of harassment, if any.

Good documentation protects the borrower.

XXXVIII. What to Do if You Discover the Lender Is Not SEC Registered

If the lender appears unregistered or unauthorized:

Stop applying for new loans from it;
Do not send upfront fees;
Preserve screenshots and documents;
Save the app name and company name used;
Save payment account details;
Save chat messages;
Save loan agreement, if any;
Verify if any amount was actually released;
Seek advice before paying disputed charges;
File a complaint with the proper regulator;
Report harassment, threats, or data misuse;
Warn contacts if the app accessed your phone book.

If money was actually borrowed, the borrower should not automatically assume that no obligation exists. The legal effect may depend on the facts. However, unauthorized lending and abusive practices may be subject to complaint and regulatory action.

XXXIX. Does an Unregistered Lender’s Loan Become Automatically Free?

Not necessarily.

If a borrower actually received money, legal issues may remain regarding repayment, unjust enrichment, civil obligations, or the validity of interest and charges. But an unregistered lender may face regulatory consequences and may have difficulty enforcing unlawful charges.

The borrower should distinguish between:

Principal amount actually received;
interest and fees;
penalties;
abusive collection;
data privacy violations;
unauthorized lending operations.

A borrower should seek legal advice if the amount is significant or if the lender is harassing them.

XL. Can You Refuse to Pay an Unregistered Online Lender?

A borrower should be cautious before simply refusing payment. If money was received, there may be legal consequences. But the borrower may dispute unlawful, undisclosed, excessive, or abusive charges.

A practical approach is:

Document the amount actually received;
document all fees and deductions;
ask for the lender’s SEC authority;
ask for a statement of account;
object to unlawful charges in writing;
offer to settle the legitimate principal if appropriate;
report unauthorized lending and harassment;
do not give in to threats or public shaming;
consult counsel for serious disputes.

XLI. Filing a Complaint Against an Online Lending Company

A complaint may be filed when the lending app:

Operates without SEC authority;
uses an unregistered app;
misrepresents registration;
charges hidden fees;
fails to disclose loan terms;
harasses borrowers;
contacts phone contacts unlawfully;
threatens arrest or public shaming;
posts personal information;
refuses to issue receipts;
misuses personal data;
uses fake legal documents;
continues operating after suspension or revocation.

Complaints should be supported by evidence.

XLII. Evidence to Prepare for a Complaint

Gather:

App name;
screenshots of app store page;
screenshots of app registration page;
terms and conditions;
privacy policy;
loan agreement;
disclosure statement;
proof of disbursement;
proof of payments;
payment account details;
SMS and chat messages;
collection threats;
calls logs;
screenshots from contacted relatives or employer;
proof that contacts were messaged;
alleged SEC registration details used by lender;
company name and address;
customer service replies;
demand letters or fake legal notices;
personal data misuse evidence.

The more complete the evidence, the stronger the complaint.

XLIII. Complaints Involving Data Privacy

If the lender accessed contacts, disclosed debt, posted personal data, or used borrower information for harassment, a complaint may also involve data privacy rights.

Potential privacy violations include:

Unauthorized contact list access;
excessive data collection;
disclosure of debt to third persons;
public posting of borrower details;
sharing ID photos;
processing data after account closure;
refusal to delete unnecessary data;
lack of privacy notice;
failure to protect data;
unauthorized sharing with collectors.

Borrowers may pursue regulatory complaints for both lending violations and privacy violations.

XLIV. Complaints Involving Threats or Harassment

If collectors threaten violence, arrest, public shaming, or criminal prosecution without basis, other remedies may exist.

Possible legal issues include:

Unjust vexation;
grave threats;
light threats;
coercion;
libel or cyberlibel;
identity theft;
unauthorized use of personal data;
cyber harassment;
civil damages;
abusive debt collection.

Preserve all messages and call logs.

XLV. Fake Lawyers, Fake Police, and Fake Court Notices

Some online lenders use fake legal pressure.

Warning signs include:

“Warrant of arrest” sent by text;
fake subpoena through Messenger;
fake police blotter;
fake prosecutor notice;
fake lawyer demand with no roll number;
threats of immediate imprisonment for nonpayment;
claims that barangay or police will arrest borrower;
payment demand to stop a fake case;
use of government logos;
refusal to provide actual case number.

A real court case or prosecutor proceeding follows formal procedures. Borrowers should verify directly before panicking.

XLVI. Online Lending and the Myth of Immediate Imprisonment

Nonpayment of debt is generally not automatically a criminal offense. However, some loan-related conduct may lead to criminal issues, such as fraud, falsification, bouncing checks, identity theft, or other acts if the elements are present.

Collectors often misuse threats of imprisonment to force payment.

A borrower should ask:

What exact case was filed?
What court or prosecutor office?
What case number?
What law was allegedly violated?
Can you send the official document?
Who is the complainant?
Who is the lawyer?

If they cannot provide details, the threat may be harassment.

XLVII. How to Verify a Claimed Legal Case

If the lender claims that a case was filed:

Ask for the case number;
ask for court or prosecutor office;
ask for copy of complaint, subpoena, or Information;
verify with the court or prosecutor;
consult a lawyer;
do not rely on screenshots alone.

A fake notice is common in abusive collection.

XLVIII. Borrower Rights Against Registered and Unregistered Lenders

Borrowers have rights regardless of whether the lender is registered.

These include:

Right to clear loan terms;
right against abusive collection;
right to privacy;
right to accurate accounting;
right to proof of debt;
right to receipts;
right to complain to regulators;
right to dispute unlawful charges;
right to be free from threats and harassment;
right to legal remedies.

Borrowing money does not mean surrendering dignity or privacy.

XLIX. Duties of Borrowers

Borrowers also have duties:

Read the loan terms;
provide truthful information;
borrow only what they can repay;
pay according to agreement;
communicate payment issues early;
keep receipts;
avoid using fake IDs or false information;
avoid borrowing from suspicious lenders;
do not ignore legitimate notices;
report harassment with evidence.

Rights and obligations exist on both sides.

L. How to Read a Loan Agreement Before Accepting

Before accepting an online loan, check:

Name of lender;
SEC authority details;
principal amount;
amount to be released;
deductions;
interest rate;
total charges;
repayment date;
late penalty;
collection policy;
privacy clause;
data sharing clause;
contact permission clause;
dispute resolution;
governing law;
customer service contact.

If the app does not show the full agreement before release, do not proceed.

LI. Net Proceeds vs. Principal Amount

Some online lenders approve a loan amount but release less due to deductions.

Example:

Approved loan: ₱5,000 Amount released: ₱3,500 Repayment after 7 days: ₱5,500

The borrower should check whether the deducted fees and total repayment were clearly disclosed before acceptance.

Hidden deductions may be a sign of unfair or abusive lending.

LII. Short-Term Loans and Effective Cost

Many online loans have very short terms, such as 7, 14, or 30 days. Even if the stated fee seems small, the effective cost may be very high.

Borrowers should compute:

amount received;
amount to be repaid;
number of days;
total fees;
penalty if late;
rollover cost.

A registered lender should still disclose charges clearly.

LIII. Rollover and Re-Loan Traps

Some apps encourage borrowers to take new loans to pay old ones. This may lead to a debt cycle.

Warning signs:

repeated extensions with fees;
loan renewal charges;
pressure to borrow more;
increasing penalty balance;
multiple apps under related companies;
unclear statement of account.

Borrowers should avoid borrowing from one app to pay another unless they fully understand the cost.

LIV. Verifying the Payment Channel

A legitimate lending company should provide official payment channels.

Be cautious if payment is requested through:

personal GCash account;
personal Maya account;
individual bank account;
crypto wallet;
remittance to a random name;
constantly changing accounts;
payment link with different merchant name;
collector’s personal account.

If payment is made, request an official receipt or confirmation from the lending company.

LV. Official Receipts and Proof of Payment

Borrowers should keep:

payment receipt;
transaction reference number;
screenshot of payment confirmation;
lender acknowledgment;
updated statement of account;
full payment certificate;
chat or email confirming settlement.

If the lender later claims nonpayment, these records are essential.

LVI. Verifying a Company With Similar Names

Some companies have similar names. Be precise.

Example:

ABC Lending Corporation;
ABC Financing Corporation;
ABC Credit Services Inc.;
ABC Online Lending App;
ABC Loan Agency.

A scammer may use a name close to a real company.

Compare:

exact spelling;
corporate suffix;
SEC registration number;
Certificate of Authority number;
address;
directors or officers;
website;
contact details.

One missing or altered word may refer to a different entity.

LVII. If the App Uses a Foreign Company Name

Some lending apps may claim to be operated by a foreign company or foreign technology provider.

A foreign company operating a lending business in the Philippines may still need proper authority to conduct business and comply with Philippine lending rules.

Borrowers should ask:

Who is the Philippine lender?
Is there a Philippine SEC-registered entity?
Who issued the loan agreement?
Who collects repayment?
Who controls borrower data?
What Philippine address handles complaints?
Is the foreign company authorized to do business locally?

A foreign logo does not remove Philippine compliance obligations.

LVIII. If the App Claims It Is Only a Technology Provider

Some apps may claim that they are only technology platforms and that another entity is the lender.

If so, the borrower should verify:

Actual lender’s SEC authority;
platform operator’s legal identity;
data-sharing arrangement;
who sets loan terms;
who collects payments;
who handles complaints;
who is liable for abusive collection.

A platform cannot use “technology provider” status to hide the real lender.

LIX. If the Lender Claims It Is a Cooperative

Some lending activities are conducted by cooperatives, which may be subject to different regulation. But scammers sometimes misuse the word “cooperative.”

Borrowers should verify:

Whether the cooperative is duly registered with the proper cooperative authority;
whether the borrower must be a member;
whether the loan is only for members;
whether the app is authorized;
loan terms and fees;
complaint mechanisms.

If a supposed cooperative lends to the public through an app without transparency, caution is warranted.

LX. If the Lender Claims It Is a Pawnshop, Bank, or E-Wallet Partner

Different financial institutions may be regulated by different agencies. If the loan is offered through a bank, pawnshop, e-wallet, or finance partner, determine who the actual lender is.

Ask:

Is the lender a bank, financing company, lending company, or partner?
Which regulator supervises it?
What license or authority applies?
Who issues the loan contract?
Who receives payment?
Who handles complaints?
Who processes personal data?

The borrower should not assume that a partner’s brand automatically covers all loan activities.

LXI. SEC Registration and Consumer Confidence

SEC registration is a basic legitimacy check, but responsible borrowing also requires reviewing:

affordability;
total cost;
repayment schedule;
privacy risks;
collection policy;
complaint history;
customer support;
transparency;
data security;
fairness of terms.

A registered lender may still be expensive. A cheap-looking lender may still be dangerous. Verification is only the first step.

LXII. Practical Verification Checklist

Before using an online lending app, verify:

Exact app name;
exact corporate name;
SEC corporate registration;
SEC Certificate of Authority;
whether the app is connected to the registered company;
principal office address;
customer service contact;
privacy policy;
loan agreement;
disclosure statement;
interest, fees, and penalties;
payment channels;
collection policy;
data permissions;
complaint record or warnings, where available;
whether the company is currently active and not revoked or suspended.

If any key item is missing, reconsider using the app.

LXIII. Sample Verification Message to an Online Lender

Subject: Request for SEC Registration and Lending Authority Details

Dear Customer Support,

Before proceeding with any loan application, I request confirmation of the following:

Registered corporate name of the lender;
SEC registration number;
SEC Certificate of Authority number to operate as a lending or financing company;
Principal office address;
Official customer service email and hotline;
Name of the online lending platform or app registered or operated under your company;
Data Protection Officer contact details;
Copy or screenshot of your authority to operate, if available;
Loan disclosure statement showing interest, fees, penalties, and total amount payable.

Please provide these details so I may verify the legitimacy of the lender and the loan terms.

Thank you.

[Name]

LXIV. Sample Complaint Summary Against an Online Lending App

A borrower preparing a complaint may summarize:

I downloaded the app named [app name] on [date].
The app claims to be operated by [company name].
It did not disclose any SEC Certificate of Authority.
It required access to my contacts and photos.
It approved a loan of ₱[amount] but released only ₱[amount].
It demanded repayment of ₱[amount] after [number] days.
It charged unclear fees of ₱[amount].
It contacted my relatives and employer on [dates].
It sent threatening messages stating [summary].
I have attached screenshots, payment records, and messages.

This format helps regulators understand the issue quickly.

LXV. What if the Company Is Registered but the App Is Not Disclosed?

If the company is registered and has lending authority, but the app name is not disclosed or appears unrelated, caution remains necessary.

Ask the company:

Is this app officially operated by you?
Is this app included in your SEC disclosures?
Is the app authorized to offer loans under your Certificate of Authority?
Why does the app use a different name?
Who owns and operates the app?
Who processes personal data?
Who collects payments?

An app may be a legitimate brand of a registered lender, but the connection should be clear.

LXVI. What if the Lender Changes App Names?

Frequent app name changes may indicate attempts to avoid complaints, app store takedowns, or regulatory scrutiny.

Borrowers should compare:

old app name;
new app name;
corporate name;
privacy policy;
payment channels;
customer support;
collection messages;
loan terms;
app developer name.

If the same company operates many apps, each app should still be transparent and compliant.

LXVII. What if the App Is Removed From the App Store?

App removal may occur for various reasons, including technical updates, policy violations, regulatory issues, or voluntary removal.

If the borrower already has a loan:

Save all records;
contact official lender channels;
verify repayment method;
avoid paying unknown collectors;
request statement of account;
request proof of authority;
report suspicious conduct;
keep proof of payment.

Do not rely on random messages claiming to be the replacement payment channel.

LXVIII. What if You Already Gave Personal Data to a Suspicious App?

If you submitted IDs, selfies, contacts, or bank details to a suspicious lender:

Stop using the app;
revoke app permissions;
change passwords if needed;
monitor bank and e-wallet accounts;
alert contacts if harassment begins;
preserve screenshots;
request deletion of account and data;
file data privacy complaint if data is misused;
report identity theft if unauthorized accounts appear;
consider replacing compromised documents if serious misuse occurs.

Do not upload more documents to “verify” a suspicious account unless legitimacy is confirmed.

LXIX. How SEC Registration Relates to Data Privacy

SEC registration and data privacy compliance are separate.

A lender may be SEC-registered but still violate privacy. A lender may also be unregistered and violate privacy.

Borrowers should check both:

SEC authority to operate as lender; and
lawful processing of personal data.

A legitimate online lender should have both regulatory authority and responsible data practices.

LXX. How SEC Registration Relates to Interest Validity

SEC authority does not automatically make all interest rates and penalties reasonable. Courts and regulators may still scrutinize unconscionable or abusive charges.

A borrower may challenge:

undisclosed charges;
excessive interest;
unreasonable penalties;
fees not agreed upon;
misleading computation;
deductions not disclosed;
illegal collection charges.

Registration is not a blank check.

LXXI. How SEC Registration Relates to Criminal Threats

Even a registered lender cannot threaten imprisonment without proper legal basis.

A collector cannot lawfully say:

“Police will arrest you today” without actual case process;
“You are automatically criminally liable” for mere nonpayment;
“Your relatives will be jailed” for your debt;
“We will post your photo as a scammer”;
“We will file a case unless you pay within one hour” in a misleading manner.

Threats may be actionable even if the debt exists.

LXXII. Borrowing From Friends vs. Lending Companies

A private person lending money occasionally is different from a company engaged in the business of lending to the public. A person who regularly lends to the public through an app or business model may need regulatory authority.

Borrowers dealing with individuals online should be especially cautious, because informal lenders may lack transparency and may use abusive tactics.

LXXIII. If a Lender Has SEC Registration but No Certificate of Authority

This is a serious issue. It may mean the entity is incorporated but not authorized to operate as a lending company.

Ask the company for its Certificate of Authority. If it cannot provide one, consider filing a complaint or avoiding the loan.

A corporation cannot rely only on general corporate registration to lawfully operate a lending business requiring special authority.

LXXIV. If the Lender Says “We Are Registered Under Our Parent Company”

Ask for proof.

The borrower should know:

Parent company name;
subsidiary or app operator name;
actual lender name;
Certificate of Authority holder;
relationship among entities;
who signs the loan contract;
who receives payments;
who handles personal data;
who answers complaints.

Corporate group structure should not be used to confuse borrowers.

LXXV. If the Lender Says “We Are Still Processing SEC Registration”

Avoid borrowing.

A company should not lend to the public as a regulated lending business while merely claiming that registration is pending. Authority should exist before operations.

“Pending registration” is not the same as authority.

LXXVI. If the Lender Says “We Do Not Need SEC Registration”

Be cautious. Lending companies and financing companies are generally regulated. Some entities may fall under different regulatory frameworks, such as banks, cooperatives, pawnshops, or employer salary loan programs, but they should be able to explain their legal authority.

Ask:

What law authorizes your lending activity?
Which regulator supervises you?
What license, registration, or authority do you hold?
Who is the actual lender?

If the answer is vague, do not proceed.

LXXVII. Protecting Yourself From Online Lending Abuse

Practical protection includes:

Borrow only from verified lenders;
do not grant unnecessary app permissions;
read the loan disclosure;
compute total repayment;
avoid multiple short-term loans;
avoid upfront fees;
keep screenshots;
pay through official channels;
request receipts;
report harassment early;
exercise data privacy rights;
consult legal aid for serious abuse.

LXXVIII. Frequently Asked Questions

1. How do I know if an online lending company is SEC registered?

Identify the exact corporate name behind the app, then verify whether it is registered with the SEC and whether it has a Certificate of Authority to operate as a lending or financing company.

2. Is SEC corporate registration enough?

No. A corporation may be SEC-registered but still lack authority to operate as a lending company.

3. What document proves authority to lend?

The key document is the SEC Certificate of Authority to operate as a lending or financing company, depending on the business.

4. Is a DTI certificate enough?

No. DTI business name registration does not replace SEC authority for lending companies.

5. Is a mayor’s permit enough?

No. A mayor’s permit is local business permission and does not substitute for SEC lending authority.

6. Is a BIR registration certificate enough?

No. BIR registration is for tax purposes and does not prove lending authority.

7. Is an app store listing proof of legitimacy?

No. An app being downloadable does not automatically mean the lender is SEC-authorized.

8. What if the app name is different from the company name?

Find the legal company behind the app and verify that the app is officially operated by that company.

9. What if the lender refuses to give its SEC details?

Treat that as a red flag. A legitimate lender should disclose its corporate name and authority.

10. What if the lender is registered but harasses borrowers?

Registration does not legalize harassment. You may file complaints for abusive collection, data privacy violations, threats, or other unlawful acts.

11. Can an unregistered lender still collect from me?

If you actually received money, legal issues may remain, especially as to the amount actually received. But unauthorized lending, hidden charges, and abusive collection may be challenged.

12. Can I refuse to pay hidden charges?

You may dispute undisclosed, excessive, or unlawful charges. Preserve documents and seek advice if the lender threatens you.

13. Can the lender access my contacts?

Access to contacts must have lawful basis and proper disclosure. Excessive or abusive use of contacts may violate privacy rights.

14. Can the lender contact my employer?

It should not disclose your debt or harass your employer without lawful basis. Employment verification and public shaming are different things.

15. Can the lender post my photo online?

Public shaming or posting personal data for collection may violate privacy, cybercrime, civil, and regulatory rules.

16. What should I do if the lender demands upfront fees?

Be very cautious. Upfront fee demands before loan release are common in scams.

17. What if the lender uses a personal e-wallet account for repayment?

That is a red flag. Ask for official payment channels and receipts.

18. What if I already paid but the lender denies payment?

Use your transaction receipt, reference number, screenshots, and written acknowledgments to dispute the claim.

19. What if the app was removed from the app store?

Save all records, verify official payment channels, and avoid paying unknown collectors without proof.

20. What should I do before borrowing?

Verify SEC registration and Certificate of Authority, read the loan disclosure, check app permissions, avoid upfront fees, and save all documents.

LXXIX. Conclusion

To verify whether an online lending company is SEC registered in the Philippines, a borrower must go beyond the app name and identify the actual legal company behind the loan. The borrower should check whether the company is registered with the SEC and, more importantly, whether it has a valid Certificate of Authority to operate as a lending or financing company. Corporate registration alone, DTI registration, BIR registration, a mayor’s permit, an app store listing, or a social media page is not enough.

A legitimate online lender should clearly disclose its corporate name, SEC details, authority to operate, office address, contact information, loan terms, privacy policy, and complaint channels. The app name, loan agreement, payment channel, privacy policy, and official receipts should all point to the same accountable entity.

Borrowers should be cautious of lenders that hide their corporate identity, demand upfront fees, use personal payment accounts, require excessive phone permissions, contact relatives or employers, threaten arrest, post personal information, or refuse to provide loan documents. SEC registration does not excuse abusive collection, hidden charges, or data privacy violations.

If a lender is unregistered, misrepresents its authority, or engages in harassment, borrowers should preserve evidence and file complaints with the proper authorities. If personal data is misused, privacy remedies may also be available. If money was actually received, borrowers should carefully separate the principal amount, interest, penalties, and unlawful charges, and seek advice before making decisions.

The safest rule is simple: verify before borrowing. A few minutes spent checking the lender’s legal identity, SEC authority, loan terms, and privacy practices can prevent excessive debt, harassment, data misuse, and fraud.