The digital transformation of the Philippine financial landscape has led to a proliferation of Online Lending Platforms (OLPs). While these offer convenience, they have also become a breeding ground for predatory entities and "loan sharks" masquerading as legitimate businesses. In the Philippine legal context, the primary regulatory body overseeing these entities is the Securities and Exchange Commission (SEC).

Verifying the legitimacy of a lending company is not merely a precaution; it is a legal necessity to ensure protection under the Lending Company Regulation Act of 2007 (Republic Act No. 9474) and the Financial Products and Services Consumer Protection Act (Republic Act No. 11765).

1. The Distinction Between "Registered" and "Authorized"

A common point of confusion is the difference between a Certificate of Incorporation and a Certificate of Authority.

Certificate of Incorporation (SEC Registration): This simply means the company exists as a legal entity. It does not grant the power to lend money to the public.
Certificate of Authority (CA): This is the specific license required to operate as a lending or financing company. Under RA 9474, no lending company shall conduct business unless it has obtained a CA from the SEC.

Verification Step: Always look for the CA Number. If a company provides an SEC Registration Number but cannot produce a CA Number, it is operating illegally.

2. Utilizing the SEC Official Database

The SEC maintains updated lists of entities authorized to lend. To verify a company, one should consult the official SEC website (sec.gov.ph) under the "Lending and Financing Companies" section.

Check the Company Name: Ensure the corporate name matches exactly. Illegal lenders often use names similar to legitimate banks or established brands to deceive borrowers.
Check the App Name: Since many companies operate via mobile apps, the SEC provides a specific list of Verified Online Lending Platforms. If the app you are using is not explicitly listed as a registered OLP of a licensed company, it is unauthorized.

3. Compliance with the Truth in Lending Act (RA 3765)

Legitimate, SEC-registered companies are legally mandated to provide full transparency regarding the cost of credit. Before a loan is perfected, the lender must furnish a Disclosure Statement that clearly outlines:

The cash price or delivered cost of the service.
The amount to be credited as a down payment or trade-in.
The total amount to be financed.
The finance charges (interest, fees, and service charges) expressed in Pesos and Centavos.
The Effective Interest Rate (EIR).

Red Flag: If a lender refuses to provide a Disclosure Statement before you sign or click "accept," or if they deduct "processing fees" that were never disclosed, they are in violation of SEC Memorandum Circulars.

4. Evaluation of Collection Practices

The SEC, through Memorandum Circular No. 18 (Series of 2019), strictly prohibits unfair debt collection practices. Legitimate companies are barred from:

Contacting people in the borrower’s contact list (unless they were named as guarantors/references).
Using threats of violence, profane language, or "shaming" on social media.
Misrepresenting themselves as lawyers, court officials, or police officers to intimidate the borrower.
Contacting borrowers at unreasonable hours (typically before 6:00 AM or after 10:00 PM).

An entity that requests access to your entire contact list or gallery as a condition for a loan is often a "Shark App" and should be avoided, regardless of its registration claims.

5. Mandatory Corporate Governance Requirements

Under SEC rules, registered lending companies must satisfy specific organizational criteria that "fly-by-night" operations usually lack:

Minimum Paid-up Capital: Lending companies must have a minimum paid-up capital of PHP 1,000,000 (unless higher amounts are required by specific zones or categories).
Physical Office: They must maintain a principal place of business. Be wary of lenders that only exist as a WhatsApp or Telegram number.
Filipino Ownership: At least a majority of the voting stock must be owned by citizens of the Philippines, unless otherwise provided by law.

6. The "Cease and Desist" and Revocation List

The SEC frequently issues Cease and Desist Orders (CDO) against companies found to be engaging in "boiler room" operations or predatory lending.

Before transacting, check the SEC Press Releases or the "Public Advisory" section. Many apps remain available on the Google Play Store or Apple App Store even after their licenses have been revoked or a CDO has been issued. The availability of an app on a digital storefront is not evidence of legal legitimacy.

Summary Checklist for Borrowers

Feature	Legitimate SEC-Registered Entity	Illegal/Unregistered Lender
Licenses	Has both Incorporation and Certificate of Authority (CA).	Only has Incorporation or no license at all.
Transparency	Provides a detailed Disclosure Statement before the loan.	Hidden fees; deductions from the principal amount.
Permissions	Requests minimal, relevant data.	Requests access to Contacts, Gallery, and Social Media.
Interests	Follows BSP-mandated interest rate caps.	Charges exorbitant "daily" interest or 20%+ per week.
Collection	Professional; follows SEC MC No. 18.	Harassment, shaming, and threats of "arrest."