In the Philippine financial landscape, the proliferation of digital lending platforms and traditional credit facilities has made credit more accessible than ever. However, this ease of access is accompanied by a rise in predatory practices and unauthorized operations. For consumers and legal practitioners alike, verifying the legitimacy of a lending or financing company is the first and most critical step in financial self-defense.

Under Philippine law, lending and financing companies are strictly regulated by the Securities and Exchange Commission (SEC). Operating without the proper authorization is not merely an administrative lapse; it is a criminal offense.

1. The Legal Framework

The regulation of these entities is governed by two primary pieces of legislation:

Republic Act No. 9474 (Lending Company Regulation Act of 2007): Governs companies engaged in granting loans from their own capital or from funds sourced from not more than nineteen (19) persons.
Republic Act No. 8556 (Financing Company Act of 1998): Governs entities primarily organized for the purpose of extending credit facilities through leasing, factoring, or buying installment receivables.

A crucial distinction in Philippine law is that a "Certificate of Incorporation" is not enough to legally operate a lending or financing business. These entities must possess a secondary license known as a Certificate of Authority (CA) to Operate as a Lending or Financing Company.

2. Step-by-Step Verification Process

To ensure a company is legally compliant, the following verification steps should be conducted through the SEC’s official channels:

A. Consult the SEC Official Lists

The SEC Enforcement and Investor Protection Department (EIPD) maintains an updated database of entities with the necessary licenses.

Lending Companies: Check the "List of Lending Companies with Certificate of Authority."
Financing Companies: Check the "List of Financing Companies with Certificate of Authority." These lists are typically accessible via the SEC’s official website (sec.gov.ph) under the "Public Information" or "Lending and Financing Companies" sections.

B. Verify the Certificate of Authority (CA) Number

Legitimate companies are required by law to display their CA Number on their websites, mobile applications, and physical offices. If a company provides a CA number, cross-reference it with the SEC database. If the number is missing or the company only provides a SEC Registration Number (which only proves incorporation, not the authority to lend), exercise extreme caution.

C. Check for Revoked or Suspended Licenses

The SEC frequently issues Cease and Desist Orders (CDOs) against companies found to be engaging in "unfair debt collection practices" or operating without a CA. Always check the SEC’s Advisories section to see if the entity has been flagged for illegal activities.

3. Key Red Flags of Unauthorized Entities

When evaluating a lender, the following "red flags" often indicate an unregistered or illegal operation:

No Physical Address: Registered companies are required to maintain a principal office.
Opaque Terms: Failure to provide a Disclosure Statement before the loan is perfected (a violation of the Truth in Lending Act).
Extreme Interest Rates: While the Philippines currently has a ceiling on interest rates for small-value loans, rates that appear predatory or are not clearly explained are common in "fly-by-night" apps.
Invasive App Permissions: Many illegal online lending apps (OLAs) require access to your contact list, gallery, and social media accounts to harass you or your contacts in case of default.

4. Rights Under the Truth in Lending Act (R.A. 3765)

Every borrower has the right to be informed of the true cost of credit. Before a transaction is consummated, the lender must provide a written disclosure containing:

The cash price or delivered price of the service;
The amount to be credited as a down payment;
The total amount to be financed;
The finance charges (interest, fees, and service charges);
The percentage that the finance charge bears to the total amount to be financed (Effective Interest Rate).

5. What to Do if You Encounter an Unregistered Lender

If an entity is found to be operating without a Certificate of Authority, or is engaging in harassment, complaints should be filed with the SEC Corporate Governance and Finance Department (CGFD) or the Enforcement and Investor Protection Department (EIPD).

For online lending apps specifically, victims may also seek assistance from the National Privacy Commission (NPC) if their data privacy has been breached, or the PNP Anti-Cybercrime Group if they are victims of online threats and harassment.

Summary Table for Quick Reference

Requirement	Registered Company	Illegal/Unregistered Entity
Primary License	Certificate of Incorporation	May or may not have one
Secondary License	Certificate of Authority (CA)	None
SEC Listing	Appears on official SEC "List of Allowed Entities"	Absent from lists or appears in "Advisories"
Transparency	Provides a full Disclosure Statement	Hides fees or changes terms mid-loan
Collection	Follows SEC rules on fair debt collection	Uses harassment, shaming, or threats