A Philippine Legal Article

I. Introduction

Online lending has become common in the Philippines because it offers fast access to credit through websites, mobile applications, and digital platforms. However, the convenience of online lending has also led to abusive collection practices, identity misuse, hidden charges, harassment, and lending operations run by entities that are not properly registered or authorized.

In the Philippine legal setting, a person dealing with an online lending company should not rely merely on advertisements, app-store listings, social media pages, business names, or claims that the lender is “SEC registered.” Verification requires checking whether the company is both:

Registered as a corporation with the Securities and Exchange Commission, and
Authorized to operate as a lending company or financing company, as applicable.

SEC registration alone does not automatically mean the company is legally allowed to lend money to the public.

II. Governing Laws and Regulatory Framework

Online lending companies in the Philippines are primarily regulated under the following legal and regulatory framework:

1. Lending Company Regulation Act of 2007

Republic Act No. 9474, or the Lending Company Regulation Act of 2007, governs lending companies. Under this law, a lending company generally refers to a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than nineteen persons.

A lending company must be organized as a corporation and must secure the necessary authority from the SEC before operating.

2. Financing Company Act

Some companies offering credit may fall under the Financing Company Act, especially if they engage in financing arrangements, installment financing, leasing, factoring, or similar credit accommodations. These companies are also subject to SEC supervision.

3. Revised Corporation Code

Online lending companies must usually be registered as corporations under the Revised Corporation Code of the Philippines. This means they must have a valid corporate registration with the SEC.

4. SEC Rules and Memorandum Circulars

The SEC has issued rules governing lending and financing companies, including requirements for registration, disclosure, advertising, collection practices, corporate names, and online lending platforms.

5. Data Privacy Act of 2012

Because online lending apps often collect personal data, such as contacts, photos, employment information, location data, and identification documents, they must also comply with the Data Privacy Act of 2012. The National Privacy Commission may become involved where there is misuse of personal data, unauthorized access to contacts, public shaming, threats, or disclosure of borrower information.

6. Consumer Protection Laws

Borrowers may also be protected by consumer protection principles, especially against deceptive, unfair, abusive, or unconscionable acts or practices.

III. SEC Registration vs. Authority to Operate

One of the most important distinctions is this:

SEC registration as a corporation is not the same as authority to operate as a lending company.

A corporation may be registered with the SEC for general corporate existence, but that does not necessarily mean it has a Certificate of Authority to operate as a lending company or financing company.

For a lender to operate legally, it must normally have:

SEC Certificate of Incorporation; and
SEC Certificate of Authority to Operate as a Lending Company or Financing Company, depending on the nature of its business.

A company may truthfully say that it is “SEC registered” because it has corporate registration, but that statement may still be misleading if it lacks authority to operate as a lending company.

IV. Why Verification Matters

Verifying SEC registration and authority protects borrowers from:

Illegal lenders operating without authority;
Fly-by-night lending apps that disappear after collecting personal data;
Excessive or hidden charges;
Unfair collection practices;
Misuse of contacts and personal information;
Harassment, threats, and public shaming;
Fraudulent entities using names similar to legitimate companies; and
Impersonation of SEC-registered corporations.

Verification also helps determine where a complaint may be filed and whether the lender is subject to SEC disciplinary action.

V. Basic Information to Gather Before Verification

Before checking the legitimacy of an online lending company, gather as much of the following information as possible:

Exact corporate name of the lender;
Business name or brand name used in the app or website;
Mobile application name;
Website address;
SEC registration number, if provided;
Certificate of Authority number, if provided;
Principal office address;
Contact numbers and email addresses;
Names of officers or representatives;
App developer name listed in the app store;
Screenshots of loan advertisements, terms, and disclosures;
Copies of loan agreement, disclosure statement, and payment instructions; and
Collection messages or calls, especially if abusive.

The exact legal name matters because many online lending platforms operate under trade names, app names, or brand names that differ from the corporation’s registered name.

VI. How to Verify SEC Registration of an Online Lending Company

1. Check Whether the Company Is Registered with the SEC

The first step is to verify whether the company exists as a registered corporation.

A legitimate lending company should be organized as a corporation. Sole proprietorships, informal groups, unregistered partnerships, and individuals generally cannot lawfully present themselves as lending companies under the lending company regulatory framework.

When checking corporate registration, verify:

The exact corporate name;
The SEC registration number;
The date of incorporation;
The registered office address;
Whether the company is active, revoked, suspended, or dissolved; and
Whether the company name matches the app, website, or documents given to the borrower.

A mismatch does not automatically mean illegality, because some companies use trade names or app names. However, the company must be able to clearly identify the corporation behind the lending platform.

2. Check Whether the Company Has a Certificate of Authority

The second and more important step is to verify whether the company has authority to lend.

For lending companies, the key document is usually the:

Certificate of Authority to Operate as a Lending Company

For financing companies, the equivalent authority is usually a:

Certificate of Authority to Operate as a Financing Company

A company that is merely incorporated but does not have the proper Certificate of Authority should not be treated as fully authorized to conduct lending operations.

When reviewing the authority, check:

Whether the Certificate of Authority exists;
Whether it is issued to the same corporate entity;
Whether the authority is current and has not been revoked or suspended;
Whether the principal office and business details match;
Whether the company is allowed to operate through an online platform; and
Whether the app or website is among those disclosed or registered with the SEC, if applicable.

3. Check the SEC List of Registered Lending and Financing Companies

The SEC typically maintains or publishes lists of:

Lending companies with Certificates of Authority;
Financing companies with Certificates of Authority;
Revoked or suspended lending companies;
Online lending platforms that have been reported, suspended, ordered removed, or otherwise flagged; and
Advisories against unauthorized entities.

A borrower should check not only whether the company appears in a positive list, but also whether it appears in a negative list, advisory, revocation list, or enforcement notice.

A company may have once been registered but later had its authority suspended, revoked, or cancelled.

4. Search the Exact Corporate Name, Not Just the App Name

Many online lending apps use names that are not the same as the corporate name. For example, an app may use a short brand name, while the registered corporation has a different full legal name.

Verification should be done using:

App name;
Website name;
Corporate name;
Trade name;
SEC registration number; and
Certificate of Authority number.

If only the app name appears but no corporate name is disclosed, that is a warning sign.

A legitimate lender should clearly disclose the identity of the company behind the loan.

5. Confirm That the Company Name Matches the Loan Documents

A borrower should compare the name shown in:

The mobile app;
The loan agreement;
The disclosure statement;
Payment instructions;
Collection notices;
Receipts;
Emails or SMS messages; and
SEC records.

If the loan agreement names one entity, the payment account belongs to another, and the app is operated by a third entity, the borrower should be cautious.

A legitimate lending company should provide transparent documentation showing who the creditor is.

6. Verify the Certificate of Authority Number

Some lenders display a Certificate of Authority number in their app, website, or marketing materials. This number should be checked carefully.

The borrower should verify:

Whether the number is genuine;
Whether it belongs to the same company;
Whether it is still valid;
Whether it corresponds to a lending company or financing company; and
Whether the number is being misused by another platform.

Fraudulent operators may copy the registration details of legitimate corporations. Therefore, a borrower should not rely on a number alone.

7. Check for SEC Advisories

SEC advisories are important because they warn the public about entities that may be operating without authority, misrepresenting registration, or engaging in unlawful solicitation or lending activities.

An SEC advisory may indicate that:

The company is not registered;
The company is registered but lacks authority to lend;
The company’s authority has been suspended or revoked;
The company is using abusive or unfair practices;
The company is impersonating another entity; or
The public should exercise caution in dealing with it.

The absence of an advisory does not automatically prove legitimacy. It only means no advisory may have been found or issued.

8. Check Whether the App or Platform Is Authorized

For online lending, it is not enough to check the corporation alone. The online platform itself should also be examined.

A company may be authorized as a lending company, but its online platform may still raise issues if:

The platform is not disclosed to regulators;
It operates under a different name without proper disclosure;
It uses misleading advertisements;
It charges undisclosed fees;
It accesses borrower contacts without a valid purpose;
It uses harassment in collections; or
It uses another company’s authority.

A borrower should check whether the app name is connected to the registered lending company.

VII. Documents a Legitimate Online Lending Company Should Provide

A legitimate online lending company should be able to provide or disclose:

Full corporate name;
SEC registration number;
Certificate of Authority number;
Business address;
Contact details;
Loan agreement;
Disclosure statement;
Interest rate;
Service fees;
Penalties and charges;
Total amount due;
Repayment schedule;
Data privacy policy;
Terms and conditions;
Collection policy; and
Complaint-handling mechanism.

A borrower should be wary of any lender that refuses to disclose its legal identity or provides only a brand name, phone number, or social media page.

VIII. Red Flags of an Unregistered or Unauthorized Online Lending Company

The following are common warning signs:

No disclosed corporate name;
No SEC registration number;
No Certificate of Authority;
Only a Facebook page, Telegram account, Viber number, or mobile number is provided;
The lender claims to be “SEC registered” but cannot show authority to lend;
The company name does not match the app name or payment account;
The lender asks for advance fees before releasing the loan;
The lender demands access to contacts, photos, messages, or social media accounts;
The lender threatens to contact family, friends, employer, or barangay officials;
The lender sends shame messages or defamatory statements;
The lender imposes vague or hidden charges;
The lender refuses to provide a written loan agreement;
The lender gives only screenshots instead of formal documents;
The lender uses aggressive collection scripts;
The lender’s app has poor or inconsistent legal disclosures;
The lender uses several app names under one unclear operator;
The app disappears and reappears under another name;
Payment is directed to personal e-wallet accounts; and
The lender pressures the borrower to pay immediately using threats or humiliation.

IX. “SEC Registered” Claims: What They Really Mean

The phrase “SEC registered” is often used in advertising. It can mean different things:

1. Registered as a Corporation

This means the entity exists as a corporation. This alone is not enough to operate as a lending company.

2. Registered as a Lending Company

This means the corporation has authority from the SEC to operate as a lending company.

3. Registered as a Financing Company

This means the corporation has authority from the SEC to operate as a financing company.

4. Misleading or False Registration Claim

Some entities claim to be registered but are not. Others use the registration details of another company.

A borrower should always ask: Registered for what purpose?

X. Difference Between Lending Companies, Financing Companies, Banks, and Cooperatives

Not every entity that gives loans is regulated in the same way.

Lending Companies

Lending companies are generally regulated by the SEC and must have authority to operate as lending companies.

Financing Companies

Financing companies are also regulated by the SEC and engage in financing activities under the Financing Company Act.

Banks

Banks are regulated by the Bangko Sentral ng Pilipinas, not merely by the SEC. A bank may have SEC registration as a corporation, but its banking authority comes from banking regulators.

Cooperatives

Credit cooperatives are generally regulated under cooperative laws and by the Cooperative Development Authority, not as ordinary SEC lending companies.

Pawnshops and Money Service Businesses

These may fall under Bangko Sentral regulation, depending on the activity.

Thus, verification depends on the type of lender involved.

XI. Online Lending and Data Privacy Issues

Online lending often involves the collection of personal data. Legitimate registration does not excuse violations of privacy law.

Even a registered lending company may violate the Data Privacy Act if it:

Collects excessive personal information;
Accesses the borrower’s contact list without lawful basis;
Uses borrower photos for shaming;
Sends messages to third parties about the borrower’s debt;
Discloses loan information to employers, relatives, or friends;
Uses threats, insults, or defamatory statements;
Stores data insecurely; or
Fails to provide a proper privacy notice.

A borrower should review the app permissions requested by the lending platform. Excessive access to contacts, camera, gallery, microphone, or location may be a warning sign.

XII. Collection Practices and Borrower Protection

A lending company may collect unpaid debts, but collection must be lawful. The right to collect does not include the right to harass, threaten, shame, defame, or misuse personal data.

Potentially abusive acts include:

Threatening criminal prosecution for ordinary nonpayment of debt;
Threatening arrest without legal basis;
Posting the borrower’s photo or personal information online;
Sending defamatory messages to contacts;
Calling the borrower repeatedly at unreasonable hours;
Using obscene, insulting, or humiliating language;
Pretending to be a lawyer, police officer, court employee, or government official;
Threatening to report the borrower to an employer in a humiliating manner; and
Collecting amounts not disclosed in the loan agreement.

Nonpayment of debt is generally a civil matter, although fraud, falsification, or other criminal acts may create separate issues. Lenders should not use baseless criminal threats to coerce payment.

XIII. Interest Rates, Fees, and Disclosure

A verified online lending company should disclose the true cost of borrowing. Borrowers should examine:

Principal amount;
Net proceeds actually received;
Interest rate;
Processing fee;
Service fee;
Platform fee;
Penalty charges;
Late payment fees;
Collection fees;
Total repayment amount; and
Effective interest rate.

A common abusive practice is advertising a low interest rate while deducting large fees upfront. For example, the borrower may apply for ₱5,000, receive only ₱3,500, but be required to repay ₱5,000 or more within a short period. This should be carefully reviewed.

XIV. Practical Step-by-Step Verification Checklist

Step 1: Identify the lender

Find the exact legal name of the company behind the app or website.

Do not rely only on the app name.

Step 2: Look for corporate registration

Check whether the company is registered with the SEC as a corporation.

Step 3: Look for lending or financing authority

Confirm that the company has a Certificate of Authority to operate as a lending or financing company.

Step 4: Match the names

Compare the SEC records with the app, website, loan agreement, and payment details.

Step 5: Check SEC advisories

Look for advisories, suspensions, revocations, or warnings involving the company or app.

Step 6: Review the loan documents

Confirm that the interest rate, fees, penalties, and repayment schedule are clearly disclosed.

Step 7: Review privacy permissions

Check whether the app asks for unnecessary access to contacts, photos, location, messages, or social media accounts.

Step 8: Preserve evidence

Keep screenshots of the app, advertisements, loan terms, collection messages, receipts, and payment instructions.

Step 9: Report suspicious conduct

If the company appears unauthorized or abusive, prepare a complaint with supporting evidence.

XV. Where to File Complaints

Depending on the issue, a borrower may consider filing a complaint with the appropriate agency.

1. Securities and Exchange Commission

Complaints involving unauthorized lending, lack of Certificate of Authority, misleading registration claims, abusive online lending practices, or violations by lending and financing companies may be brought to the SEC.

2. National Privacy Commission

Complaints involving misuse of personal data, unauthorized access to contacts, public shaming, data leaks, or disclosure of debt information to third parties may be brought to the National Privacy Commission.

3. Bangko Sentral ng Pilipinas

If the lender is a bank, quasi-bank, electronic money issuer, remittance company, pawnshop, or other BSP-supervised entity, complaints may fall under BSP channels.

4. Department of Trade and Industry

Consumer complaints involving unfair or deceptive trade practices may sometimes involve the DTI, depending on the nature of the entity and transaction.

5. Philippine National Police or National Bureau of Investigation

If threats, extortion, identity theft, cyber libel, hacking, unauthorized access, or other crimes are involved, the matter may be referred to law enforcement authorities.

6. Courts

Civil claims, damages, injunctions, collection disputes, and other legal remedies may be brought before the proper court, depending on the facts and amount involved.

XVI. Evidence to Preserve for Complaints

A borrower should preserve evidence before deleting the app or blocking collectors. Useful evidence includes:

Screenshots of the app page;
App name and developer name;
Website URL;
Loan application screenshots;
Loan agreement;
Disclosure statement;
Promissory note, if any;
Payment schedule;
Proof of amount received;
Proof of amount paid;
E-wallet or bank payment details;
SMS, chat, email, or call logs;
Harassing or threatening messages;
Messages sent to contacts;
Screenshots of public posts or defamatory content;
Privacy policy;
App permissions;
SEC registration claims; and
Names or phone numbers of collection agents.

The clearer the evidence, the easier it is for regulators to determine whether the company is authorized and whether violations occurred.

XVII. Common Legal Misconceptions

Misconception 1: “The app is in the app store, so it must be legal.”

An app-store listing does not prove Philippine regulatory authority. App stores are not substitutes for SEC authorization.

Misconception 2: “They showed an SEC registration number, so they can lend.”

Not necessarily. The company must also have authority to operate as a lending or financing company.

Misconception 3: “A debt collector can threaten arrest.”

Ordinary unpaid debt is generally civil in nature. Threats of arrest may be improper if there is no lawful basis.

Misconception 4: “A lender can message all my contacts because I gave app permission.”

Consent must still comply with data privacy principles. Excessive, unfair, or abusive use of personal data may still be unlawful.

Misconception 5: “If the lender is unregistered, I automatically do not owe anything.”

Lack of authority may expose the lender to regulatory sanctions, but whether the borrower must repay the principal or any lawful obligation depends on the specific facts, documents, and applicable law. Borrowers should not assume automatic cancellation of all obligations.

Misconception 6: “A business permit is enough.”

A mayor’s permit, barangay clearance, or DTI business name registration is not the same as SEC authority to operate as a lending company.

XVIII. Effect of Dealing with an Unauthorized Lender

If a lender is not properly authorized, several consequences may arise:

The SEC may issue advisories or enforcement actions;
The company may be ordered to stop operations;
Its authority, if any, may be suspended or revoked;
Administrative penalties may be imposed;
Officers may face liability depending on the facts;
The borrower may raise defenses in disputes; and
Separate complaints may be filed for privacy violations, harassment, fraud, or other unlawful acts.

However, borrowers should distinguish between the validity of the debt, the legality of the lender’s operations, and the lawfulness of collection methods. These are related but separate issues.

XIX. Corporate Name, Trade Name, and App Name

A key difficulty in online lending verification is the use of multiple names.

A lending company may have:

A registered corporate name;
A trade name;
A mobile app name;
A website name;
A payment merchant name; and
A collection agency name.

For legal clarity, the borrower should identify the actual creditor. The actual creditor should be the entity named in the loan contract and authorized by the SEC.

If the app name is “FastCash,” but the contract names “ABC Lending Corporation,” verification should focus on ABC Lending Corporation, while also checking whether FastCash is a disclosed or authorized platform of that company.

XX. Payment Accounts and Collection Agencies

Payment instructions can reveal inconsistencies. Borrowers should be cautious if they are instructed to pay:

A personal e-wallet account;
A bank account under an individual’s name;
A different company from the lender;
Multiple changing accounts; or
Informal channels without receipts.

Collection agencies may collect on behalf of lenders, but they should clearly identify whom they represent. The borrower may request confirmation that the collector is authorized to collect the debt.

XXI. Verifying Before Borrowing

The best time to verify is before submitting personal information or accepting loan proceeds.

Before borrowing, a person should ask:

Who is the actual lender?
Is the lender registered with the SEC?
Does the lender have a Certificate of Authority?
Is the app connected to that authorized lender?
What is the total cost of the loan?
What personal data will be collected?
Will the app access contacts or photos?
What happens in case of late payment?
Are collection practices disclosed?
Are there SEC advisories against the company or app?

If the answers are unclear, the borrower should avoid proceeding.

XXII. Verifying After Borrowing

If the borrower has already taken a loan, verification remains useful. The borrower should:

Identify the company named in the loan documents;
Check whether it has SEC authority;
Review whether charges were properly disclosed;
Keep proof of the amount actually received;
Keep proof of all payments made;
Save abusive collection messages;
Avoid deleting evidence;
File complaints if there are violations; and
Communicate in writing whenever possible.

Borrowers should avoid responding to harassment with threats or insults. Written, factual communication is better for evidence.

XXIII. Sample Verification Questions to Ask the Lender

A borrower may ask the lender:

What is your full corporate name?
What is your SEC registration number?
What is your Certificate of Authority number?
Are you a lending company or financing company?
What is your principal office address?
Is this app operated by your company?
Is the app name registered or disclosed to the SEC?
Who is the creditor under the loan agreement?
Who is authorized to collect payment?
Where can I obtain a copy of the loan agreement and disclosure statement?

A legitimate lender should be able to answer these questions clearly.

XXIV. Sample Warning Language in Complaints

A complaint may state facts in a clear and organized way, such as:

“The entity represented itself as an online lending company under the name ________. It claimed to be SEC registered but did not provide a Certificate of Authority to operate as a lending company. The mobile application used the name ________, while the payment account was under ________. The company also accessed my contacts and sent collection messages to third persons. Attached are screenshots of the app, loan terms, payment instructions, and collection messages.”

Complaints should avoid exaggeration. Regulators are more likely to act on specific facts supported by documents.

XXV. Legal Importance of the Certificate of Authority

The Certificate of Authority is central because lending is a regulated activity. The SEC’s role is not limited to recording corporations; it also supervises lending and financing companies.

A corporation without authority may not lawfully hold itself out as a lending company. Advertising lending services, offering loans to the public, operating lending apps, or collecting as a lending business without authority may expose the entity to regulatory action.

For borrowers, the Certificate of Authority helps confirm that the lender is subject to SEC oversight.

XXVI. Online Lending Advertisements

Advertisements by online lenders should not be false, misleading, or incomplete. Red flags in advertisements include:

“Guaranteed approval” without conditions;
“No interest” but with large hidden fees;
“SEC registered” without authority details;
“No documents needed” while collecting sensitive data;
“Instant cash” without disclosure of total cost;
Fake testimonials;
Use of government logos without authority; and
Claims suggesting government endorsement.

Borrowers should screenshot advertisements before applying, because ads may later be changed or deleted.

XXVII. Role of App Permissions in Verification

App permissions can indicate whether a platform is risky. A lending app should not collect more data than necessary for legitimate lending purposes.

Borrowers should be cautious when an app requests access to:

Entire contact list;
Gallery or photos;
Camera beyond identity verification;
Microphone;
SMS messages;
Social media accounts;
Location data unrelated to loan processing; and
Device files.

Even if the app is connected to a registered company, excessive data collection may still be unlawful or abusive.

XXVIII. What to Do If the Lender Is Not Found in SEC Records

If the lender cannot be found, the borrower should:

Recheck spelling and corporate suffixes;
Search using the app name and corporate name;
Check whether the lender is using a trade name;
Ask the lender for its full legal identity;
Ask for the Certificate of Authority number;
Check for advisories or enforcement notices;
Preserve evidence; and
Consider filing a complaint.

A lender’s refusal to provide identifying information is itself suspicious.

XXIX. What to Do If the Lender Is Registered but Abusive

A registered lender can still violate the law. If the company is registered but engages in harassment, threats, privacy violations, or deceptive charges, the borrower may still file complaints.

Registration is not a license to abuse borrowers.

Possible complaints may involve:

Unfair collection practices;
Excessive or undisclosed fees;
Data privacy violations;
Misleading advertisements;
Unauthorized use of personal information;
Defamation or cyber harassment; and
Failure to provide proper disclosures.

XXX. Borrower’s Personal Liability and Responsible Borrowing

Verification protects borrowers, but borrowers should also act responsibly. A borrower should:

Read the loan agreement;
Borrow only what can be repaid;
Keep copies of documents;
Pay through official channels;
Request receipts;
Avoid using fake identities or false documents;
Communicate repayment difficulties early; and
Avoid repeated borrowing from multiple apps to pay previous loans.

Borrowers should not ignore legitimate obligations, but they are entitled to be treated lawfully.

XXXI. Legal Remedies and Possible Claims

Depending on the facts, a borrower may have remedies such as:

Administrative complaint before the SEC;
Complaint before the National Privacy Commission;
Criminal complaint for threats, harassment, identity theft, unauthorized access, or cyber-related offenses;
Civil action for damages;
Injunction or other court relief;
Dispute of unauthorized charges; and
Complaint against collection agencies or representatives.

The proper remedy depends on the evidence, the identity of the lender, the conduct complained of, and the harm suffered.

XXXII. Practical Verification Table

What to Check	Why It Matters	Warning Sign
SEC corporate registration	Confirms corporate existence	No record found
Certificate of Authority	Confirms authority to lend	Only incorporation shown
Corporate name	Identifies legal creditor	App uses different name
App/platform name	Connects online operation to company	No link to authorized lender
SEC advisories	Shows warnings or enforcement action	Company appears in advisory
Loan agreement	Establishes terms	No written contract
Disclosure statement	Shows true loan cost	Hidden charges
Payment account	Confirms official collection channel	Personal account used
Privacy policy	Shows data practices	Excessive app permissions
Collection messages	Shows possible abuse	Threats or public shaming

XXXIII. Best Practices for Borrowers

Before using an online lending app, borrowers should follow these best practices:

Verify the company before downloading or applying;
Do not submit IDs until the lender is verified;
Avoid apps that require access to contacts;
Read the full loan terms before accepting;
Compute the total cost of borrowing;
Avoid lenders with unclear identities;
Pay only through official accounts;
Keep proof of every transaction;
Never rely on verbal promises alone; and
Report abusive or unauthorized lenders.

XXXIV. Best Practices for Online Lending Companies

A compliant online lending company should:

Maintain valid SEC registration;
Maintain a valid Certificate of Authority;
Clearly disclose its corporate name;
Register or disclose its online platforms as required;
Provide transparent loan terms;
Avoid hidden charges;
Comply with data privacy law;
Limit app permissions to what is necessary;
Train collection agents properly;
Avoid threats, harassment, and public shaming;
Maintain complaint channels; and
Cooperate with regulators.

Compliance is not merely documentary. It includes actual conduct toward borrowers.

XXXV. Conclusion

To verify the SEC registration of an online lending company in the Philippines, a borrower must look beyond the phrase “SEC registered.” The proper inquiry is whether the company is a duly registered corporation and whether it has a valid Certificate of Authority to operate as a lending or financing company.

A careful verification process should examine the corporate name, Certificate of Authority, app or platform name, SEC advisories, loan documents, payment channels, privacy practices, and collection behavior. The most common mistake is assuming that corporate registration alone authorizes lending. It does not.

A legitimate online lending company should be transparent about its identity, authority, loan terms, fees, privacy practices, and collection procedures. Where the lender refuses to disclose its legal identity, uses inconsistent names, lacks authority, charges hidden fees, accesses contacts abusively, or threatens borrowers, the borrower should preserve evidence and consider reporting the matter to the proper regulatory or law enforcement agency.