Before you borrow from a lending company or online lending app in the Philippines, verify two things: the company’s SEC corporate registration and its Certificate of Authority to Operate as a Lending Company. A company can be incorporated with the Securities and Exchange Commission (SEC) but still be unauthorized to lend money to the public. This guide explains what “SEC registered” really means for lenders, how to check it step by step, what documents or numbers to look for, and what red flags usually point to an illegal or unsafe lender.

What “SEC Registered Lending Company” Means in the Philippines

In ordinary language, people say “SEC registered” to mean “legit.” For lending companies, that is incomplete.

A lending company must have:

Primary registration — the SEC Certificate of Incorporation showing that the corporation legally exists; and
Secondary authority or license — the SEC Certificate of Authority (CA) allowing it to operate as a lending company.

Republic Act No. 9474, or the Lending Company Regulation Act of 2007, defines a lending company as a corporation that grants loans from its own capital funds or from funds sourced from not more than 19 persons. The law excludes banks, investment houses, savings and loan associations, financing companies, pawnshops, insurance companies, cooperatives, and other credit institutions already regulated by other laws. Under RA 9474, a lending company must be a corporation, and no lending company may conduct business unless it has authority to operate from the SEC. (Supreme Court E-Library)

This is why a screenshot of a business permit, DTI registration, Facebook page, or “SEC Registration Number” is not enough. The more important question is:

Does this company have a valid and subsisting SEC Certificate of Authority to Operate as a Lending Company?

Legal Basis for Checking SEC Registration

The main law is RA 9474 (2007). It gives the SEC regulatory and supervisory authority over lending companies, including the power to require reports, examine records, impose fines, suspend operations, or revoke a lending company’s authority to operate. (Supreme Court E-Library)

The implementing rules of RA 9474 define a Certificate of Authority as the certificate issued by the SEC allowing a lending company to engage in the lending business. The rules also require lending companies to be organized as stock corporations, include words such as “Lending Company” or “Lending Investor” in their corporate or trade name, and secure prior SEC approval before operating branches, extension offices, units, or satellite offices. (Lawphil)

Other important laws and rules include:

Law or rule	Why it matters when verifying a lender
RA 9474, Lending Company Regulation Act of 2007	Requires lending companies to be corporations and to have SEC authority to operate.
RA 3765, Truth in Lending Act	Requires disclosure of finance charges, interest, fees, and total amount payable.
RA 7394, Consumer Act of the Philippines	Applies to consumer protection matters not inconsistent with RA 9474.
RA 11765, Financial Products and Services Consumer Protection Act	Protects financial consumers and strengthens regulators’ consumer protection powers. (Supreme Court E-Library)
SEC Memorandum Circular No. 18, Series of 2019	Prohibits unfair debt collection practices by financing and lending companies. (ADB Law and Policy Reform)
SEC Memorandum Circular No. 19, Series of 2019	Requires disclosures in advertisements and reporting of online lending platforms. (Scribd)
BSP Circular No. 1133, Series of 2021	Sets caps for certain small, short-term, unsecured loans offered by lending companies, financing companies, and online lending platforms.
NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02	Regulates processing of personal data for loan-related transactions, including online lending practices. (National Privacy Commission)

SEC Registration vs. Certificate of Authority

A common scam tactic is showing only one document: the SEC Certificate of Incorporation. That document proves the company exists as a corporation. It does not automatically prove that the company can legally lend money to the public.

What the lender shows you	What it proves	Is it enough?
SEC Certificate of Incorporation	The corporation was registered with the SEC.	No. It does not by itself authorize lending.
SEC Registration Number	The corporation has an SEC record.	No. You still need the lending CA.
Certificate of Authority to Operate as a Lending Company	The SEC authorized the company to engage in lending.	Yes, if valid, current, and not suspended or revoked.
Mayor’s permit or barangay clearance	The business may have local business permits.	No. Local permits do not replace SEC authority.
DTI registration	A sole proprietorship or business name may be registered with DTI.	No. Lending companies must be corporations under RA 9474.
App store listing	The app is listed on Google Play, App Store, or another platform.	No. App availability is not legal authorization.

Step-by-Step: How to Verify If a Lending Company Is SEC Registered

1. Get the lender’s exact legal name

Do not rely only on the app name, brand name, Facebook page, or agent’s display name.

Ask for the following:

Full corporate name
SEC Registration Number
Certificate of Authority Number
Date of issuance of the Certificate of Authority
Registered office address
Trade name or app name, if different from the corporate name
Customer service email and official website
Name of collection agency or third-party service provider, if any

A legitimate lender should be able to give these details clearly. If the agent says “just check our app,” “we are SEC approved,” or “confidential po ang documents,” treat that as a red flag.

2. Check the company through SEC online services

The SEC’s online services include Check with SEC, eSEARCH, and SEC Express/electronic document request channels. The SEC iMessage portal itself lists Check with SEC and eSEARCH among SEC online services. (Securities and Exchange Commission)

Use the company’s exact corporate name or SEC Registration Number. Watch for small differences:

“ABC Lending Corp.” is not the same as “ABC Financing Corp.”
“ABC Loan App” may only be a trade name, not the registered corporation.
A company may use “formerly known as” names after amendments; check whether the current name matches the lender you are dealing with.

The SEC Express System also allows users to search using a company’s registered name or SEC registration number and request SEC documents such as Articles of Incorporation, By-laws, General Information Sheet, Audited Financial Statements, and other company-related documents. Delivery may take 3 to 5 working days within Metro Manila and up to 7 working days for provincial deliveries from release of the documents by the SEC. (SEC Express)

3. Verify the Certificate of Authority, not just incorporation

For lending companies, the key document is the Certificate of Authority to Operate as a Lending Company.

Check whether the CA:

Is issued to the same corporate name
States authority to operate as a lending company
Has a CA number
Has not been suspended, revoked, cancelled, or expired
Covers the head office or branch involved in the transaction
Matches the lender’s advertised name, app name, website, and address

The SEC iMessage user guide lists a service under the Financing and Lending Companies Department for Request for Certification of Status on Certificate of Authority (CA) Monitoring of Financing and Lending Companies. It also lists Complaints on Financing and Lending Companies under the Monitoring and Compliance Division. (Securities and Exchange Commission)

This is especially useful when the lender’s name appears in old lists, when the lender recently changed names, or when you are unsure whether a CA is still valid.

4. Check SEC lists, advisories, and revocation notices

The SEC publishes information on lending and financing companies, including relevant laws, lists, advisories, and revoked or suspended companies. The SEC lending and financing companies page links to lists of financing companies, revoked and suspended lending companies, requests for monitoring, and complaints. (SEC Appointment System)

When checking lists, remember:

A PDF list may be dated. Always check the date.
A company that appeared in an old list may later be suspended or revoked.
A company may have changed its name.
A lender may be using a name similar to a legitimate company.
An online app may be operated by a company different from the name displayed in ads.

If there is a mismatch, verify directly through SEC iMessage or the SEC Financing and Lending Companies Department.

5. For online lending apps, verify both the company and the platform

For online lending platforms, check:

The registered corporation behind the app
The Certificate of Authority of that corporation
Whether the online lending platform, website, or app is recorded or reported with the SEC
Whether the app’s privacy notice and loan disclosure identify the same company
Whether the app asks for unnecessary phone permissions or contacts access

An online lending platform may be a mobile app, website, or other fintech-enabled system where lending or financing products are made available. BSP Circular No. 1133 uses this concept consistently with SEC rules on online lending platforms.

In March 2026, the DICT, National Privacy Commission, and SEC issued a public advisory reminding the public that online lending platforms must not engage in harassment, intimidation, public shaming, or unlawful use of personal data. The advisory also states that contacting persons in a borrower’s contact list other than those named as guarantors is prohibited; for debt collection, lenders may only contact the guarantor.

6. Check whether the lender discloses fees and loan terms properly

A legitimate lending company should give a written disclosure before the loan is finalized.

Under the implementing rules of RA 9474 and the Truth in Lending Act, a lending company must provide a disclosure statement showing, when applicable:

Principal amount of the loan
Interest rate
Service or processing fee
Amortization schedule
Penalty charge for late payment
Collection fee
Notarial fee
Other fees connected with the loan
Collection and lien enforcement procedures
Method of computing the total obligation in case of default (Lawphil)

If the lender refuses to show the total amount payable, hides fees until after approval, or deducts large charges from the released amount, do not treat SEC registration alone as protection. A registered lender can still violate disclosure, consumer protection, privacy, or debt collection rules.

What Information Should Appear in Ads or Online Lending App Pages?

Under SEC rules on advertisements and online lending platforms, lending and financing companies are expected to disclose identifying details so borrowers can verify them. In practice, you should look for:

Corporate name
SEC Registration Number
Certificate of Authority Number
Registered office address
Email address and customer service channel
Privacy notice
Loan terms and charges
Statement advising borrowers to study the disclosure statement before proceeding

If an ad only says “SEC approved,” “registered loan app,” “legit lending,” or “fast cash guaranteed” without the corporate name and CA number, verify before submitting personal data.

Red Flags That a Lender May Not Be Legitimate

Be careful when you see any of these:

The lender uses only a personal GCash, Maya, or bank account for fees.
The agent asks for an “advance processing fee” before loan release.
The lender cannot provide its corporate name and CA number.
The app name does not match the corporate name.
The company shows only a DTI certificate or mayor’s permit.
The lender claims it is “SEC registered” but refuses to show the Certificate of Authority.
The lender’s address is vague, fake, or only a virtual office.
The app asks for broad access to contacts, photos, messages, location, or social media.
The lender threatens to message your family, employer, or social media contacts.
The lender sends shame posts, edited photos, threats of arrest, or fake barangay/police notices.
The lender says nonpayment is automatically a criminal case.

Debt nonpayment is generally a civil matter unless there is fraud, bouncing checks, falsified documents, or another separate criminal act. Threats of immediate arrest, public shaming, or contacting unrelated persons are warning signs of abusive collection practices.

Interest Rate and Fee Checks for Small Online Loans

For certain small, short-term loans, there are specific caps.

BSP Circular No. 1133 covers unsecured, general-purpose loans offered by lending companies, financing companies, and their online lending platforms that do not exceed ₱10,000 and have a loan tenor of up to four months. For covered loans, the circular sets:

Charge	Cap under BSP Circular No. 1133
Nominal interest	6% per month, about 0.2% per day
Effective interest rate	15% per month, about 0.5% per day, including interest and applicable fees
Late payment or nonpayment penalty	5% per month on outstanding scheduled amount due
Total cost cap	100% of total amount borrowed, covering interest, fees, charges, and penalties

These caps were issued to protect borrowers from predatory lending, excessive charges, and debt traps while maintaining access to credit for underserved borrowers.

High interest alone does not automatically prove that a company is unregistered. But excessive, hidden, or confusing charges are a strong reason to verify the lender and preserve evidence.

Philippine courts may also reduce unconscionable interest. In Medel v. Court of Appeals, the Supreme Court held that 5.5% monthly interest on a loan was excessive, iniquitous, unconscionable, and exorbitant, even though the old usury ceilings had been lifted. (Supreme Court E-Library)

Required Documents You Can Ask From the Lender

Document or detail	Why it matters
SEC Certificate of Incorporation	Confirms the corporation exists.
SEC Certificate of Authority to Operate as a Lending Company	Confirms authority to engage in lending.
General Information Sheet	Shows officers, directors, address, and corporate details.
Official loan disclosure statement	Shows principal, interest, fees, penalties, and total amount payable.
Privacy notice	Shows how personal data will be collected, used, stored, and shared.
Collection policy or customer service process	Helps identify whether collection practices are lawful.
Online lending platform/app name registered or reported to SEC	Helps confirm that the app is connected to the authorized company.
Branch authority, if dealing with a branch	Confirms the branch or satellite office is authorized.

For online loans, take screenshots before clicking “submit” or “accept.” Save the app page, loan terms, permissions screen, privacy notice, disclosure statement, release amount, deductions, due date, and repayment instructions.

Practical Verification Checklist

Use this checklist before borrowing:

Search the exact corporate name. Do not search only the app name or Facebook name.
Confirm SEC incorporation. Check whether the corporation appears in SEC online records or official SEC document channels.
Ask for the Certificate of Authority Number. A lending company must have a CA to operate as a lending company.
Check if the CA is still valid. If unsure, request CA status verification through SEC iMessage or the SEC Financing and Lending Companies Department.
Compare all names. The corporate name, app name, website, privacy notice, loan disclosure, and payment channels should point to the same lender.
Check SEC advisories and revoked/suspended lists. A company may have been valid before but later suspended or revoked.
Review the disclosure statement. Make sure you understand the total amount you will receive, the total amount you must repay, and all charges.
Review app permissions. The app should not require unnecessary access to your contact list, photos, files, or social media.
Do not pay upfront “release” fees to personal accounts. Advance fee scams often use the name of a real company.
Save evidence. Keep screenshots, messages, receipts, loan contracts, disclosure statements, and call logs.

What If the Lending Company Is Not SEC Registered or Has No Certificate of Authority?

If a person or entity is operating as a lending company without a valid SEC authority, RA 9474 provides penalties. The law imposes a fine of not less than ₱10,000 and not more than ₱50,000, imprisonment of not less than six months but not more than 10 years, or both, for engaging in the lending business without valid SEC authority. (Supreme Court E-Library)

For borrowers, this does not always mean the loan disappears automatically. The underlying facts still matter: whether money was actually received, whether there was fraud, what charges were imposed, whether the lender violated disclosure rules, and whether collection practices were abusive.

Practical steps:

Stop giving additional personal data.
Do not pay unexplained “processing,” “unlocking,” or “release” fees.
Save all messages, screenshots, receipts, and call logs.
Verify the CA status through SEC iMessage.
Report abusive debt collection to the SEC.
Report misuse of personal data to the National Privacy Commission.
Report threats, extortion, hacking, identity theft, or scams to appropriate cybercrime authorities.

The 2026 DICT-NPC-SEC advisory identifies SEC iMessage for unfair debt collection complaints and also lists reporting channels for other forms of harassment, threats, fraud, and scams, including the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

Special Notes for Foreigners and OFWs

Foreigners and Filipinos abroad commonly encounter Philippine lenders through apps, remittance-linked ads, social media, or agents.

The verification process is the same: check the Philippine corporation and its SEC Certificate of Authority.

For foreigners investing in or operating a lending company, the rules are stricter. The implementing rules of RA 9474 require majority Filipino ownership of voting stock in a lending company, and a foreign national may not own stock unless the foreigner’s country gives reciprocal rights to Filipinos. Foreign directors or officers also have additional documentary requirements such as Bureau of Immigration clearance, passport and visa documentation, ACR I-Card, and work permit requirements when applicable. (Lawphil)

For OFW borrowers, be especially careful with lenders that:

Pressure you through relatives in the Philippines
Require access to Philippine contacts
Threaten to report you to your employer or recruitment agency
Use fake legal notices
Ask relatives to pay even if they are not guarantors

A character reference is not automatically a guarantor. NPC guidance explains that a guarantor must separately and expressly consent to be responsible if the borrower defaults; lenders are prohibited from contacting persons in the borrower’s contact list for debt collection unless they were declared guarantors. (National Privacy Commission)

Common Scenarios

“The app says it is SEC registered, but I cannot find the app name.”

Search for the corporate owner, not just the app name. Many online lending apps operate under a brand name. Check the privacy policy, loan agreement, or disclosure statement for the legal corporate name.

If the app does not disclose the corporate owner and CA number, treat it as high risk.

“The company has an SEC Registration Number. Does that mean it is legal?”

Not necessarily. The SEC Registration Number usually refers to corporate registration. A lending company also needs a Certificate of Authority to Operate as a Lending Company.

“The agent sent me a Certificate of Incorporation. Is that enough?”

No. Ask for the Certificate of Authority and verify its status. Incorporation means the corporation exists; the CA means it has authority to lend.

“The lender has a mayor’s permit. Is that enough?”

No. A mayor’s permit or business permit does not replace SEC authority under RA 9474.

“The lender is contacting my contacts. Is that allowed?”

Contacting people in your contact list for debt collection, other than guarantors, is prohibited under the 2026 DICT-NPC-SEC advisory. Online lending platforms may only access contact lists for limited, legitimate purposes such as allowing borrowers to select character references or guarantors, or for proportional metadata when necessary. Unbridled processing of contact lists is prohibited.

“The app asks for camera, photos, contacts, and location. Is that normal?”

Some access may be justified for identity verification or know-your-customer checks, but it must be necessary, proportionate, and limited. The 2026 advisory states that unnecessary app permissions and excessive processing of personal data are prohibited. It also says platforms should prompt users to turn off or revoke permissions once the purpose has been achieved.

Frequently Asked Questions

How do I know if a lending company is SEC registered?

Check the company’s exact corporate name and SEC Registration Number through SEC online services, then verify whether it has a valid Certificate of Authority to Operate as a Lending Company. The CA is the critical document.

Is SEC registration enough for a lending company?

No. A lending company needs both SEC corporate registration and a Certificate of Authority. A corporation may be SEC registered but not authorized to lend.

What is a Certificate of Authority for a lending company?

It is the SEC-issued authority allowing a corporation to engage in the lending business under RA 9474 and its implementing rules. Without it, the company should not operate as a lending company.

How can I check an online lending app in the Philippines?

Find the legal corporate name behind the app, then verify the SEC registration, Certificate of Authority, and whether the online lending platform is connected to that company. Also check the app’s privacy notice, loan disclosure, and permissions.

Can a lending company operate as a sole proprietorship?

No. RA 9474 requires lending companies to be corporations. The implementing rules require a lending company to be established as a stock corporation. (Lawphil)

Is a DTI permit enough for lending?

No. DTI registration may register a business name, but it does not authorize a lending company to lend to the public. Lending companies must be corporations with SEC authority.

What if the lender is SEC registered but abusive?

Report the abusive conduct. A registered lender can still violate SEC rules, truth-in-lending requirements, consumer protection laws, data privacy rules, and unfair debt collection rules.

Can online lending apps access my contacts?

They cannot have unlimited access. The 2026 DICT-NPC-SEC advisory states that unnecessary or excessive processing of personal data, including excessive access to contact lists, is prohibited. Lenders may not contact persons in your contact list for debt collection except guarantors.

Are high interest rates illegal?

For covered small, short-term, unsecured loans of up to ₱10,000 and up to four months, BSP Circular No. 1133 sets specific caps. Outside that category, interest may still be challenged if it is unconscionable, excessive, or hidden, depending on the facts and applicable rules.

Where can I report an illegal or abusive lending company?

Use SEC iMessage for complaints involving financing and lending companies. For personal data misuse, report to the National Privacy Commission. For cyber harassment, threats, fraud, or scams, preserve evidence and report to the proper cybercrime authorities identified in government advisories.

Key Takeaways

A lending company in the Philippines must be a corporation and must have an SEC Certificate of Authority to Operate as a Lending Company.
SEC incorporation alone is not enough to prove that a lender is legally authorized to lend.
Always verify the corporate name, SEC Registration Number, CA Number, app name, address, and loan disclosure.
For online lending apps, check both the company behind the app and the platform itself.
DTI registration, mayor’s permit, app store listing, and social media ads do not replace SEC authority.
Watch for mismatched names, hidden fees, advance-fee requests, excessive app permissions, and threats to contact your family or employer.
Small, short-term, unsecured loans of up to ₱10,000 and up to four months are subject to BSP caps on interest, fees, penalties, and total cost.
Contacting people in your phone contacts for debt collection, other than guarantors, is prohibited.
When in doubt, verify directly through SEC channels and keep screenshots, contracts, receipts, and messages as evidence.