In the digital age, the proliferation of Online Lending Platforms (OLPs) has provided Filipinos with unprecedented access to credit. However, this convenience is shadowed by the rise of predatory lenders and unregistered entities. Under Philippine law, specifically the Lending Company Regulation Act of 2007 (Republic Act No. 9474) and the Financing Company Act of 1998 (Republic Act No. 8556), all entities engaged in the business of lending must be strictly regulated by the Securities and Exchange Commission (SEC).

For a lender to operate legally in the Philippines, possessing a mere business permit from a Local Government Unit (LGU) is insufficient. They must satisfy specific federal corporate requirements.

1. The Essential Two-Step Verification

When verifying an online lender, it is critical to distinguish between being a "registered corporation" and being an "authorized lender." A company may be legally incorporated but still lack the specific license to lend money to the public.

Certificate of Incorporation: This proves the company is a registered legal entity with the SEC. Every corporation has this, but it does not grant the right to engage in lending or financing.
Certificate of Authority (CA): This is the most crucial document. Under R.A. 9474, no lending company shall conduct business unless it has been granted a Certificate of Authority to Operate as a Lending Company. Operating without a CA is a criminal offense.

2. How to Verify via the SEC Official Database

The SEC maintains updated lists of entities authorized to provide credit. To verify a company, follow these steps:

Visit the SEC Official Website: Navigate to sec.gov.ph.
Access the Public Information Portals: Look for the "Lending & Financing Companies" section under the "Public Information" or "Check an Entity" tabs.
Cross-Reference the Lists: The SEC regularly publishes and updates three specific lists:

Registered Lending Companies: Entities authorized under R.A. 9474.
Registered Financing Companies: Entities authorized under R.A. 8556.
List of Online Lending Platforms (OLPs): A specific list identifying the mobile apps (e.g., "JuanHand," "Tala," etc.) and the registered corporations that own them.

Verify the Corporate Name vs. App Name: Often, the name of the app is different from the registered corporate name. Legal OLPs are required to disclose their corporate name and CA number on their website and within the app's "About" section.

3. Key Red Flags of Unregistered Lenders

If an online lender cannot be found in the SEC database, or if they exhibit the following behaviors, they are likely operating illegally:

No Disclosure of CA Number: Legal apps must prominently display their SEC Registration Number and Certificate of Authority Number.
Requesting Access to Contacts/Gallery: While some apps request permissions, excessive data harvesting is often a precursor to "debt shaming," which is a violation of SEC Memorandum Circular No. 18, Series of 2019.
Hidden Fees: Failure to provide a "Disclosure Statement on Loan/Credit Transaction" before the loan is perfected is a violation of the Truth in Lending Act (R.A. 3765).
Absence of Physical Office: Registered lending companies must maintain a principal office.

4. Regulatory Framework Against Illegal Lending

The SEC, through its Corporate Governance and Finance Department (CGFD), has the power to revoke the primary registration of companies that operate OLPs without a CA.

Furthermore, SEC Memorandum Circular No. 19, Series of 2019 requires all lending and financing companies to report their OLPs to the Commission. If an app is not listed as a registered OLP of a certified corporation, it is considered an unauthorized "phantom" lender.

5. Legal Remedies for Consumers

If a consumer discovers that a lender is unregistered, or if they are a victim of unfair debt collection practices, the following legal avenues are available:

Action	Authority
Formal Complaint	File a verified complaint with the SEC Enforcement and Investor Protection Department (EIPD).
Data Privacy Violations	Report unauthorized access to phone contacts or harassment to the National Privacy Commission (NPC).
Cybercrime	For threats and online shaming, contact the PNP Anti-Cybercrime Group (ACG) or the NBI Cybercrime Division.

Note: Under the "Lending Company Regulation Act," any person who shall engage in the business of lending without a valid Certificate of Authority may face a fine of not less than P10,000.00 to P50,000.00 or imprisonment of 6 months to 10 years, or both.

Summary Table for Verification

Requirement	Proof Needed
Legal Personality	SEC Certificate of Incorporation
License to Lend	SEC Certificate of Authority (CA)
Online Permission	Inclusion in the SEC’s "List of Notified OLPs"
Transparency	Disclosure Statement provided before loan disbursement