Before you borrow money from an online lending app, Facebook lender, or “fast cash” company in the Philippines, the most important question is not only “Is it SEC-registered?” but “Does it have authority from the SEC to operate as a lending company?” A corporation may appear in the Securities and Exchange Commission (SEC) database and still be not legally authorized to lend. This guide explains how to verify SEC registration of a lending company in the Philippines, how to check its Certificate of Authority, how to verify online lending platforms, and what warning signs to watch for before giving your ID, bank details, or personal data.

Why SEC Registration Alone Is Not Enough

Many borrowers search for “SEC registered lending company Philippines” because they want to avoid scams. That is a good first step, but it is incomplete.

In Philippine practice, there are two different checks:

What you are checking	What it proves	Why it matters
SEC company registration	The entity exists as a corporation or company registered with the SEC	This only proves corporate existence
SEC Certificate of Authority	The entity is authorized to operate as a lending company	This is the key license for lending activity

A company can be registered with the SEC as an ordinary corporation, but that does not automatically allow it to lend money to the public.

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, a lending company must be a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. The law expressly states that no lending company shall conduct business unless granted authority to operate by the SEC. (Supreme Court E-Library)

In simple terms: SEC registration answers “Does the company exist?” The Certificate of Authority answers “May it legally lend?”

Legal Basis: Who Regulates Lending Companies in the Philippines?

The main law is Republic Act No. 9474, also called the Lending Company Regulation Act of 2007. It regulates the establishment, operation, and supervision of lending companies in the Philippines.

Under RA 9474:

A lending company must be organized as a corporation.
It must obtain an SEC authority to operate.
It must comply with SEC supervision, reportorial requirements, and inspections.
It must comply with the Truth in Lending Act and the Consumer Act where applicable.
Operating as a lending company without valid SEC authority may lead to fines, imprisonment, or both. (Supreme Court E-Library)

The SEC’s implementing rules define a Certificate of Authority, often shortened to CA, as the certificate issued by the SEC in favor of a lending company to engage in the lending business regulated by RA 9474. The same rules require lending companies to operate through authorized offices and prohibit unauthorized branch operations. (Lawphil)

Other important laws and rules may also apply:

Law or rule	Why it matters to borrowers
RA 9474, Lending Company Regulation Act of 2007	Requires SEC authority before lending companies may operate
RA 3765, Truth in Lending Act	Requires clear written disclosure of finance charges, interest, and other credit costs before the transaction is completed
RA 7394, Consumer Act of the Philippines	Applies suppletorily where consumer protection issues are involved
RA 10173, Data Privacy Act of 2012	Protects borrowers’ personal information, including phone contacts, IDs, and financial data
RA 11765, Financial Products and Services Consumer Protection Act	Gives financial regulators, including the SEC, consumer protection powers over financial service providers
SEC Memorandum Circular No. 18, Series of 2019	Prohibits unfair debt collection practices by financing and lending companies
SEC Memorandum Circular No. 19, Series of 2019	Requires disclosures in advertisements and online lending platforms
BSP Circular No. 1133, Series of 2021	Sets ceilings for interest and fees on covered small, short-term loans offered by lending companies, financing companies, and their online platforms

The Truth in Lending Act requires creditors to give borrowers a clear written statement of credit costs, including the finance charge and the percentage that the finance charge bears to the amount financed. (Lawphil)

Step-by-Step Guide to Verify a Lending Company’s SEC Registration

1. Get the exact legal name of the lending company

Before checking any SEC list, identify the lender’s exact corporate name.

This is important because many lenders use:

app names;
Facebook page names;
trade names;
shortened business names;
“doing business as” names;
names copied from legitimate companies.

For example, the app name may be “Fast Peso Loan,” but the registered company may be “ABC Lending Corporation.” You need both names.

Ask or look for the following:

complete corporate name;
SEC registration number;
Certificate of Authority number;
official business address;
website or app name;
customer service email;
name of the collection agency, if any.

A legitimate lending company should not hesitate to provide its SEC registration number and Certificate of Authority number. SEC Memorandum Circular No. 19, Series of 2019 requires lending and financing companies to disclose their corporate name, SEC registration number, and Certificate of Authority number in advertisements and online lending platforms. (ACCRALAW)

2. Search the company in the SEC’s official verification tools

You can verify corporate registration through the SEC’s official online tools, including the Check with SEC portal and the SEC Check App.

The SEC iMessage portal lists Check with SEC among the SEC’s online services, and the SEC Check App is described as the official mobile application of SEC Philippines for checking corporate sector and capital market information. (Securities and Exchange Commission) (Google Play)

When searching, try several versions of the name:

exact corporate name;
app name;
trade name;
name appearing in the loan agreement;
name appearing in text messages or payment instructions;
SEC registration number, if available.

Look for these details:

Detail	What to check
Company name	Must match the lender’s legal name, not just a similar name
SEC registration number	Should match what appears in the app, ad, or contract
Corporate status	Check if active, suspended, revoked, or otherwise inactive
Registered address	Compare with the address in the loan documents
Company type or purpose	Should be consistent with lending activity

A mismatch is a warning sign. Scammers often copy the name of a real SEC-registered company but use a different mobile number, Telegram account, GCash account, or Facebook page.

3. Check if the company has a Certificate of Authority to operate as a lending company

This is the most important step.

Go to the SEC’s official lending and financing companies section and check the list of lending companies with Certificate of Authority. The SEC has identified official pages for verifying registered lending companies, financing companies, and recorded online lending platforms through its lending and financing companies section. (www.foi.gov.ph)

You are looking for language such as:

“Lending Company”
“Lending Corporation”
“Certificate of Authority”
“CA No.”
“authorized to operate as a lending company”

Do not rely on the phrase “SEC registered” alone.

A lender should have both:

SEC corporate registration, and
Certificate of Authority to operate as a lending company.

If the company is only listed as a regular corporation and you cannot confirm a Certificate of Authority, treat that as a serious risk.

4. If it is an app or website, check the SEC list of recorded Online Lending Platforms

Online lending apps are a separate problem because the company name and the app name are often different.

Under SEC rules, online lending platforms must be reported or recorded with the SEC. SEC Memorandum Circular No. 10, Series of 2021 imposed a moratorium on new online lending platforms, and enforcement actions have treated unrecorded apps as violations. In one SEC revocation case reported by the Philippine News Agency, the SEC stated that only online lending platforms previously approved by the Commission may operate while the moratorium remained in place. (Philippine News Agency)

For online lending apps, verify all three:

Item	Must match
App or platform name	The exact app, website, or online lending platform used by the borrower
Corporate owner	The lending or financing company behind the app
SEC authority	The company’s CA and the platform’s recorded status

A common scam pattern is this: the company claims to be SEC-registered, but the specific app is not recorded or authorized. Another pattern is impersonation: the scammer uses the name of a real lending company but directs payments to a personal GCash, Maya, bank, or crypto wallet.

5. Check SEC advisories, cease and desist orders, and revoked licenses

Even if a lender once had a Certificate of Authority, it may later be suspended, revoked, or penalized.

Before borrowing, check for:

SEC advisories against the company;
cease and desist orders;
revocation or suspension notices;
inclusion in lists of unrecorded online lending platforms;
complaints about unauthorized lending or abusive collection.

In 2026, the SEC continued issuing advisories against unrecorded online lending platforms, reminding the public that unauthorized OLPs, apps, and websites are not allowed to offer, process, or provide loans through app stores or websites. (Bulacan Provincial Government)

A company’s legal status can change. Always check the latest SEC list, not a screenshot from months or years ago.

6. Verify the loan documents before sending money or IDs

Before you accept the loan or send personal documents, ask for a copy of the loan agreement and disclosure statement.

Check whether the documents show:

full legal name of the lending company;
SEC registration number;
Certificate of Authority number;
principal loan amount;
interest rate;
service fees;
processing fees;
penalties;
total amount payable;
payment schedule;
collection contact details;
privacy notice or data processing terms.

Under the Truth in Lending Act, the borrower should be informed in writing of finance charges and the cost of credit before the transaction is consummated. (Lawphil)

Be careful if the lender says:

“No need for contract.”
“Just send your ID first.”
“Pay processing fee before release.”
“Deposit first to unlock your loan.”
“We are SEC registered, no need to check.”
“Use Telegram only.”
“Do not contact the SEC.”

Legitimate lending companies do not normally require borrowers to pay an advance “release fee” to get a loan. Advance-fee loan scams are common in social media and messaging apps.

How to Verify an Online Lending App in the Philippines

Online lending apps need extra caution because they can quickly access a borrower’s personal data.

Use this practical checklist:

Search the app name in the SEC list of recorded online lending platforms. Make sure the exact app name appears.
Identify the corporate owner of the app. The app should clearly show the lending or financing company behind it.
Check the corporate owner’s Certificate of Authority. The owner should be a lending company or financing company with proper SEC authority.
Compare the app’s disclosures with SEC requirements. The app or advertisement should show the corporate name, SEC registration number, and CA number.
Check the app permissions before installing. Be wary of access to contacts, photos, SMS, call logs, and social media accounts.
Search SEC advisories using both the app name and company name. Some illegal apps change names frequently.
Do not rely only on app store availability. Being downloadable from Google Play, Apple App Store, or an APK link does not automatically prove SEC authorization.

The National Privacy Commission has warned that online lenders are prohibited from harvesting borrowers’ phone and social media contact lists for harassment or debt-shaming. (National Privacy Commission)

Red Flags That a Lending Company May Be Illegal or Unsafe

Be extra careful if you see any of these warning signs:

The company says it is “SEC registered” but cannot provide a Certificate of Authority number.
The name on the SEC record is different from the name on the app or contract.
The lender uses only Facebook, Messenger, Viber, WhatsApp, or Telegram.
The lender asks for a processing fee, insurance fee, tax fee, notarization fee, or “unlocking fee” before releasing the loan.
Payment is requested through a personal account instead of the company’s official account.
The lender refuses to give a written disclosure statement.
The app asks for unnecessary access to your contacts, gallery, SMS, or social media.
The lender threatens to message your employer, family, barangay, or Facebook friends.
The company claims that non-payment is automatically a criminal case.
The agent pressures you to borrow immediately because the “offer expires today.”

Failure to pay a loan is generally a civil obligation, not automatically a criminal offense. However, fraud, falsification, bouncing checks, identity theft, or other separate acts may create criminal exposure depending on the facts. Do not let a collector scare you with false claims that every unpaid loan means automatic imprisonment.

What If the Company Is SEC-Registered but Has No Certificate of Authority?

If the company has SEC corporate registration but no lending authority, it should not hold itself out as a lending company.

Under RA 9474, engaging in lending business without a validly subsisting authority from the SEC is punishable by fine, imprisonment, or both. The law also penalizes officers who knowingly hold themselves out as a lending company through advertisements, stationery, commercial papers, or other representations without authority. (Supreme Court E-Library)

For borrowers, this means:

Do not proceed with the loan.
Do not send additional IDs, selfies, bank details, or e-wallet screenshots.
Save all evidence.
Report the company to the SEC.
If your data was misused, consider reporting to the National Privacy Commission.
If there was fraud, threats, extortion, identity theft, or hacking, consider reporting to law enforcement such as the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or Cybercrime Investigation and Coordinating Center.

Required Information to Prepare Before Filing a Complaint

If you need to report a lender, organize your evidence first. This saves time and makes your complaint clearer.

Evidence	Examples
Identity of lender	Corporate name, app name, Facebook page, website, phone numbers, email addresses
SEC details claimed	SEC registration number, CA number, screenshots of claims
Loan documents	Loan agreement, disclosure statement, repayment schedule
Payment proof	GCash, Maya, bank transfer, pawnshop remittance, receipts
Communications	Text messages, emails, Messenger chats, Telegram chats, call logs
Harassment proof	Screenshots sent to family, employer, contacts, or social media
Data privacy proof	App permissions, contact-harvesting messages, debt-shaming posts
Fraud proof	Requests for advance fees, fake approval notices, blocked accounts
Your own timeline	Dates of application, approval, release, payments, harassment, reports

For SEC complaints involving lending and financing companies, prior SEC FOI responses have directed borrowers to use the SEC complaint process and include the complete name, respondent company, and subject of complaint in the email subject line. The SEC has also identified its official verification links for registered lending companies, financing companies, and recorded online lending platforms. (www.foi.gov.ph)

Where to Report Problems With Lending Companies

The correct agency depends on the problem.

Problem	Where to go
Lending company has no Certificate of Authority	SEC
Online lending app is not recorded or authorized	SEC
Abusive collection by lending or financing company	SEC
Unauthorized access to contacts or debt-shaming	National Privacy Commission
Threats, extortion, hacking, identity theft, cyber harassment	PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC
Bank, e-money, or BSP-supervised financial institution issue	BSP
Barangay-level harassment or mediation need	Barangay, if appropriate and parties are within barangay conciliation coverage

The SEC iMessage portal accepts tickets and identifies the SEC Headquarters at 7907 Makati Avenue, Salcedo Village, Bel-Air, Makati City. (Securities and Exchange Commission) The BSP’s consumer complaint guide also directs complaints or inquiries about financing and lending companies, online lending apps or platforms, and collection agencies to the SEC, identifying the SEC iMessage portal and SEC contact numbers for these concerns. (Bangko Sentral ng Pilipinas)

Practical Scenarios

Scenario 1: “The lender is SEC-registered. Is it safe?”

Not automatically. Check if it has a Certificate of Authority to operate as a lending company. SEC corporate registration alone only proves that the corporation exists.

Scenario 2: “The app name is different from the company name.”

This is common, but you must verify the connection. The app should be listed as a recorded online lending platform of the authorized lending or financing company. If the company has a CA but the app is unrecorded, be careful.

Scenario 3: “They asked me to pay a processing fee before loan release.”

This is a major red flag. Many loan scams ask for advance fees, then block the borrower. Do not send money just to “release” a loan unless you have fully verified the lender and the charge is clearly disclosed in a legitimate loan document.

Scenario 4: “The collector is threatening to message my contacts.”

Save screenshots, phone numbers, and call logs. Threats, public shaming, and disclosure of personal information may violate SEC rules on unfair debt collection and the Data Privacy Act, depending on the facts. SEC Memorandum Circular No. 18, Series of 2019 covers unfair debt collection practices by financing and lending companies and their third-party service providers. (ADB Law and Policy Reform)

Scenario 5: “I am a foreigner borrowing from a Philippine lending company.”

Foreigners can borrow from Philippine lending companies, subject to the company’s policies and Philippine law. You may be asked for passport, visa, ACR I-Card, employment documents, local address, or proof of income. Be careful with lenders that ask for your passport as “collateral” or demand excessive personal data. If documents from abroad are required, some lenders may ask for notarized or apostilled documents, especially for high-value or secured transactions.

Scenario 6: “A foreign-owned lending company is operating in the Philippines.”

Foreign ownership alone does not make a lending company illegal. RA 10881 amended the nationality rule and allows lending companies to be owned up to 100% by foreign nationals, subject to constitutional limits, including restrictions involving land ownership. (Supreme Court E-Library) What still matters for borrowers is whether the company is registered and has the proper SEC authority to operate.

Frequently Asked Questions

How do I know if a lending company is legit in the Philippines?

Check three things: the company’s SEC corporate registration, its SEC Certificate of Authority to operate as a lending company, and whether it appears in SEC advisories or lists of revoked, suspended, or unauthorized entities. For online apps, also check whether the exact app is in the SEC list of recorded online lending platforms.

Is SEC registration the same as a lending license?

No. SEC registration means the company exists as a corporation. A lending license is the Certificate of Authority issued by the SEC allowing the corporation to operate as a lending company. You need to verify both.

Can a company lend money if it is only DTI-registered?

A lending company under RA 9474 must be a corporation and must have SEC authority. DTI business name registration is not enough to operate as a lending company lending to the public.

What is a Certificate of Authority for a lending company?

A Certificate of Authority, or CA, is the SEC-issued authority allowing a corporation to engage in lending business under RA 9474 and its implementing rules. Without a valid CA, a company should not operate or advertise itself as a lending company.

How do I check if an online lending app is registered with the SEC?

Search the exact app name in the SEC list of recorded online lending platforms. Then verify the corporate owner and confirm that the owner has a valid Certificate of Authority as a lending or financing company.

Are online lending apps legal in the Philippines?

Some are legal, but only if properly connected to an authorized lending or financing company and recorded with the SEC as an online lending platform. Apps that are unrecorded, use fake company names, or operate despite SEC advisories are risky.

Can a lending company access my contacts?

A lender should not harvest or misuse your contact list for harassment or debt-shaming. The Data Privacy Act requires lawful and fair processing of personal information, and the NPC has warned against online lenders harvesting phone and social media contacts for harassment. (National Privacy Commission) (National Privacy Commission)

What should I do if I already borrowed from an unregistered lending app?

Save your loan documents, screenshots, payment proof, app details, and communications. Stop giving additional personal data. Verify the company and app with the SEC. If there is harassment, report to the SEC. If your personal data or contacts were misused, report to the NPC. If there are threats, extortion, hacking, or identity theft, report to law enforcement.

Can I refuse to pay an illegal lending company?

Be careful. The legality of the lender and the validity of your payment obligation are not always the same issue. You should not ignore a real debt without understanding the consequences. However, you can report illegal lending activity, dispute unlawful charges, and challenge abusive collection practices. Keep records of the principal amount actually received, payments made, and charges imposed.

What if the lender claims non-payment will send me to jail?

Non-payment of an ordinary loan is generally a civil matter. A collector who says every unpaid loan automatically leads to imprisonment is usually exaggerating or intimidating the borrower. Separate criminal issues may arise only if there are facts such as fraud, falsification, bouncing checks, identity theft, or other criminal acts.

Key Takeaways

SEC registration alone does not prove a lender is authorized to lend.
A legitimate lending company should have a valid Certificate of Authority from the SEC.
For online lending apps, verify both the corporate owner and the specific app or platform.
Check SEC advisories, revoked licenses, and lists of unrecorded online lending platforms before borrowing.
Do not pay advance “release fees” to social media lenders claiming instant approval.
A legitimate lender should give clear written loan disclosures under the Truth in Lending Act.
Harassment, debt-shaming, threats, and misuse of contacts may be reportable to the SEC, NPC, and law enforcement.
Save screenshots, loan documents, payment proof, and messages before filing any complaint.