Checking whether a lending company is legitimate in the Philippines is not just about avoiding scams. It is also about knowing whether the lender is legally allowed to lend, whether the app or website is properly connected to a licensed company, whether the loan charges are disclosed, and whether the lender’s collection practices are lawful. Many borrowers get misled because an app says “SEC registered,” but in Philippine lending regulation, SEC registration alone is not enough. A legitimate lending business generally needs the proper corporate registration, a Certificate of Authority from the Securities and Exchange Commission, and, for online lending, a properly reported or recorded online lending platform.

What Makes a Lending Company Legitimate in the Philippines?

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company is a corporation that grants loans from its own capital funds or from funds sourced from not more than 19 persons. The law expressly says that a lending company must be a corporation and must not conduct business unless it has been granted authority to operate by the SEC. (Supreme Court E-Library)

This means a legitimate lending company should usually have:

Requirement	What it means in plain English
SEC corporate registration	The entity legally exists as a Philippine corporation.
Certificate of Authority to Operate as a Lending Company	The SEC has authorized it to engage in the lending business.
Correct corporate or trade name	The name used in the app, contract, receipt, or collection message should match or be traceable to the licensed company.
Proper loan disclosure	The borrower should receive clear written disclosure of interest, fees, penalties, amortization, and total cost.
Lawful collection practices	The lender and its collectors cannot harass, shame, threaten, or misuse personal data.

A financing company is related but not exactly the same. Financing companies are governed mainly by Republic Act No. 8556, the Financing Company Act of 1998, while lending companies are governed by RA 9474. Both are supervised by the SEC for these purposes, but their legal basis, capital requirements, and permitted activities may differ. (Lawphil)

SEC Registration Is Not the Same as a Lending License

One of the most common tricks used by questionable lenders is showing a screenshot of an SEC registration number and saying, “Registered kami sa SEC.”

That may be true but incomplete.

A corporation may be registered with the SEC as a business entity but still not authorized to operate as a lending company. Under RA 9474, no lending company may conduct business unless it has authority to operate from the SEC. Operating as a lending company without valid SEC authority can lead to fines, imprisonment, or both. (Supreme Court E-Library)

For online lending apps, there is another practical issue: the app name may be different from the corporation’s name. For example, the app may be called “FastCashNow,” but the operator may be “ABC Financing Corporation” or “XYZ Lending Company Inc.” Your job is to connect the dots:

What is the app name?
What is the corporate operator?
Is that operator in the SEC list of registered lending or financing companies?
Is the app, website, or online platform listed or recorded under that operator?
Is the Certificate of Authority still valid and not revoked, suspended, or cancelled?

If any of these links are missing, treat it as a serious warning sign.

How to Check If a Lending Company Is Legitimate: Step-by-Step

1. Get the exact legal name of the lender

Before checking SEC records, identify the lender properly. Do not rely only on a Facebook page, app icon, Viber account, or collector’s nickname.

Look for the following:

Full corporate name
SEC registration number
Certificate of Authority number
App name or website name
Business address
Official email address and hotline
Name appearing in the loan agreement or disclosure statement
Name appearing in payment instructions or receipts

If the app refuses to disclose the corporate operator, that is already a red flag. Legitimate lenders should not hide behind random mobile numbers, personal GCash accounts, or vague “loan department” names.

2. Check the SEC’s lists of lending and financing companies

The SEC has official verification resources for lending companies, financing companies, and recorded online lending platforms. In an SEC FOI response, the agency directed the public to check its lists of registered lending companies, registered financing companies, and recorded online lending platforms when verifying a lender. (www.foi.gov.ph)

When checking, search using variations of the name:

Exact corporate name
App name
Trade name
Abbreviated name
Name shown in the loan agreement
Name shown in the app privacy policy
Name used in collection messages

A practical tip: many people search only the app name and stop when they do not find it. Search the operator’s corporate name too. Some online lending apps operate under a financing or lending company with a different registered name.

3. Check whether the company has a Certificate of Authority

The most important document is not just the SEC Certificate of Incorporation. For lending companies, look for the Certificate of Authority to Operate as a Lending Company.

The IRR of RA 9474 defines a Certificate of Authority as the certificate issued by the SEC in favor of a lending company to engage in the regulated business of lending. (Lawphil)

If a company says it is “SEC registered,” ask:

“Registered as what?”
“Do you have a Certificate of Authority to Operate as a Lending Company or Financing Company?”
“What is your CA number?”
“Is your CA still valid?”
“Is this app or online lending platform recorded with the SEC under that company?”

A legitimate lender should be able to give clear answers.

4. Check whether the online lending platform is recorded

For online loans, the legal issue is not only the company but also the platform. SEC Memorandum Circular No. 19, series of 2019, covers disclosure requirements for advertisements of financing and lending companies and the reporting of online lending platforms. (SEC Appointment System)

The online lending platform may be a:

Mobile app
Website
FinTech-enabled loan system
Web-based loan portal
Marketplace-style loan platform

SEC MC No. 3, series of 2022, defines an online lending platform as mobile lending applications, websites, and other FinTech-enabled programs or systems where the services and products of lending or financing companies are made available.

If the company is registered but the app is not traceable to that company, be careful. Scammers sometimes copy the name of a real company or pretend to be connected with a licensed lender.

5. Review the loan disclosure before accepting the money

Republic Act No. 3765, the Truth in Lending Act, requires disclosure of finance charges in credit transactions. Its policy is to protect citizens from lack of awareness of the true cost of credit by assuring full disclosure. (Lawphil)

Before accepting the loan, check whether the lender gives a written disclosure showing:

Item to check	Why it matters
Principal loan amount	The actual amount you are borrowing.
Net proceeds	The amount you actually receive after deductions.
Interest rate	The stated cost of borrowing.
Effective interest rate	The truer cost after fees and charges.
Processing or service fees	Some abusive lenders hide interest as “fees.”
Penalties	Check when penalties apply and how they are computed.
Amortization schedule	Shows due dates and amounts payable.
Collection procedures	Shows what happens if you default.
Total amount payable	Helps you see if the loan is realistic.

Under the RA 9474 IRR, a lending company must furnish the borrower a disclosure statement before consummation of the transaction, including the principal amount, interest rate, service or processing fee, amortization schedule, late payment penalties, collection fees, notarial fees, other fees, collection and lien enforcement procedures, and method of calculating the total obligation in case of default. (Lawphil)

6. Check whether the charges are suspiciously high

High interest does not automatically mean the company is fake, but excessive or hidden charges are a strong warning sign.

For small-value, short-term, unsecured general-purpose loans covered by SEC MC No. 3, series of 2022, the circular applied to loans not exceeding ₱10,000 with a tenor of up to four months, whether obtained online or offline. It imposed ceilings including 6% nominal interest per month, 15% effective interest rate per month, 5% monthly cap on late payment penalties on the outstanding scheduled amount due, and a total cost cap of 100% of the total amount borrowed.

For general loan law, remember two Civil Code rules:

Under Article 1956 of the Civil Code, no interest is due unless it has been expressly stipulated in writing. (Lawphil)
Even when interest is written, courts may reduce interest or penalties that are iniquitous, unconscionable, or excessive. In Medel v. Court of Appeals, the Supreme Court held that 5.5% monthly interest, or 66% per year, was iniquitous or unconscionable. (Supreme Court E-Library)

So if the lender does not disclose the real cost, deducts huge fees before release, or makes the balance balloon quickly, do not treat that as “normal lending practice.”

Red Flags That a Lending Company or Loan App May Not Be Legitimate

The lender cannot give its exact corporate name

A real company should not hide its registered name. Be suspicious if the lender uses only:

A Facebook page name
A Telegram or WhatsApp handle
A generic “loan department” name
A personal mobile number
A personal e-wallet account
A name that does not match the contract

The lender says “SEC registered” but shows no Certificate of Authority

Again, SEC incorporation is not enough. For lending, the key is authority to operate as a lending or financing company.

The app name is not connected to the licensed company

This happens often. A lending app may use a friendly name, but the legal operator must still be identifiable. If the app, privacy notice, payment channel, and loan agreement show different names, investigate further.

The lender asks for advance fees before releasing the loan

Be careful with “processing fees,” “activation fees,” “insurance fees,” or “clearance fees” that must be paid before release. Legitimate lenders usually deduct disclosed fees from loan proceeds or include them in the loan documents. Advance-fee scams often disappear after payment.

The lender threatens arrest, barangay action, immigration action, or public shaming

Debt alone is normally a civil obligation. A collector cannot simply order your arrest, issue a warrant, block your passport, deport you, or send police to your house just because you missed a payment.

The 2026 DICT-NPC-SEC advisory on online lending platforms specifically warned against harassment, intimidation, public shaming, and unlawful use of personal data in collection practices. It also states that threats of violence, threats involving criminal means, and threats to take action that cannot legally be taken are prohibited unfair collection practices.

The app accesses or messages your contacts

This is one of the biggest red flags in online lending. The 2026 DICT-NPC-SEC advisory states that unnecessary, unauthorized, excessive, or disproportionate processing of personal data, especially access to borrowers’ contact lists, is prohibited. It also says contacting persons on the borrower’s contact list other than named guarantors is prohibited, and for debt collection, lenders may contact only the guarantor.

The National Privacy Commission has also stated that online lenders are prohibited from harvesting phone or social media contact lists for harassment or debt collection. (National Privacy Commission)

What Documents Should You Save Before Borrowing or Complaining?

Keep screenshots and copies before the app or lender deletes them.

Document or evidence	Why it matters
App page or website page	Shows the name, operator, and advertisements.
Loan agreement	Shows the legal lender and loan terms.
Disclosure statement	Proves whether the lender disclosed the true cost.
Payment instructions	Helps trace whether payments go to the company or a personal account.
Receipts or proof of payment	Important if the lender claims non-payment.
Collection messages	Evidence of harassment, threats, or false claims.
Call logs	Shows frequency and timing of collection calls.
Messages sent to your contacts	Important for SEC, NPC, or cybercrime complaints.
App permission screenshots	Useful for privacy complaints involving contact lists, photos, camera, or location.
SEC search results	Shows whether you checked registration and authority.

For privacy complaints before the National Privacy Commission, the NPC’s complaint page says a formal complaint must use the required form, be printed and filled out, notarized, and submitted in person, by courier, or by scanned email. (National Privacy Commission)

Where to Report a Fake or Abusive Lending Company

Different agencies handle different issues. Filing in the right place helps avoid delay.

Problem	Office usually involved
No SEC authority, fake lending company, abusive collection by lending or financing company	SEC Financing and Lending Companies Department / SEC iMessage
Misuse of contacts, photos, personal data, privacy violations	National Privacy Commission
Threats, extortion, fake warrants, cyber harassment, identity misuse, fraud	PNP Anti-Cybercrime Group, NBI Cybercrime Division, DICT Cyber Hotline
Bank, e-wallet, or BSP-supervised financial institution	Bangko Sentral ng Pilipinas consumer assistance channels
Actual court case or demand letter	The court named in the papers, or the lawyer/party who sent the demand

The SEC now uses its iMessage ticketing system for complaints, reports, and feedback. (imessage.sec.gov.ph) The 2026 DICT-NPC-SEC advisory also lists SEC iMessage for unfair debt collection complaints and gives cybercrime reporting channels for harassment, threats, fraud, and scams.

When emailing or filing a complaint with the SEC, the SEC FOI response advises using a clear subject format: complete name, respondent company, and subject of complaint, such as “JUAN DELA CRUZ_ABC LENDING_DISCLOSURE STATEMENT VIOLATION.” (www.foi.gov.ph)

Special Notes for Foreigners and OFWs

Foreigners and overseas Filipinos are often targeted because scammers assume they are unfamiliar with Philippine procedures.

A few practical points:

A lending company is not automatically illegal just because it has foreign owners. Republic Act No. 10881 lifted certain nationality restrictions and allows lending and financing companies to be up to 100% foreign-owned, subject to constitutional limits, especially where land is involved. (Supreme Court E-Library)
If you are abroad and signing loan documents for Philippine use, the lender may ask for notarized or apostilled documents depending on the transaction. Do not send original passports, residence cards, or IDs unless there is a clear legal reason and a secure process.
If the lender threatens immigration consequences over an ordinary unpaid loan, treat that as a red flag. Immigration action is not a normal private debt collection tool.
If your family in the Philippines is being harassed, ask them to save screenshots and call logs. Their evidence may support SEC, NPC, or cybercrime complaints.
If the lender is asking for land as collateral and the company is foreign-owned, land-related restrictions may become relevant because the Philippine Constitution restricts land ownership by foreign nationals and foreign-owned corporations.

Common Real-Life Scenarios

“The app is on Google Play or the App Store. Does that mean it is legitimate?”

No. App store availability is not the same as Philippine lending authority. Always check the SEC status of the company and whether the online lending platform is properly connected to a registered lending or financing company.

“The lender showed me an SEC certificate. Is that enough?”

Not necessarily. Ask whether it is only a Certificate of Incorporation or whether it is a Certificate of Authority to Operate as a Lending Company or Financing Company. For lending businesses, the authority to operate is the critical document.

“The company is registered, but the collector is abusive. Does registration make the harassment legal?”

No. A lender can be registered and still violate SEC rules, the Data Privacy Act, or criminal laws. Legitimacy is not a license to threaten, shame, or misuse personal data.

“If the lending company is illegal, do I still have to pay?”

Do not assume the debt automatically disappears. The lender’s illegal operation may expose it to SEC sanctions or criminal liability, but questions about repayment, principal, interest, and enforceability may still depend on the facts, the documents, and court findings. A safe practical approach is to preserve evidence, stop paying suspicious personal accounts, and verify the company before making further payments.

Frequently Asked Questions

How do I know if a lending company is SEC registered in the Philippines?

Check the SEC’s lists of registered lending companies and financing companies, then verify whether the company also has a Certificate of Authority. For online loans, check whether the app or platform is recorded or traceable to the registered company. (www.foi.gov.ph)

Is SEC registration enough for a lending company?

No. A corporation may be SEC registered but not licensed to lend. Under RA 9474, a lending company must have SEC authority to operate before conducting lending business. (Supreme Court E-Library)

What is a Certificate of Authority for a lending company?

It is the SEC-issued authority allowing a lending company to engage in the regulated business of lending. The RA 9474 IRR defines it as the certificate issued by the SEC in favor of a lending company to engage in lending regulated by RA 9474 and its rules. (Lawphil)

How do I check if an online lending app is legit?

Identify the app’s corporate operator, then check whether that company is a registered lending or financing company with a valid Certificate of Authority. Also check whether the online lending platform is recorded or reported under that company. Do not rely only on the app name, logo, or app store listing.

Can a lending app contact my phone contacts if I do not pay?

Generally, no. The 2026 DICT-NPC-SEC advisory states that contacting persons on the borrower’s contact list other than named guarantors is prohibited, and lenders may contact only the guarantor for debt collection.

Where can I complain about online lending harassment?

For unfair debt collection by lending or financing companies, file with the SEC through its complaint channels or iMessage system. For misuse of personal data, file with the National Privacy Commission. For threats, fraud, extortion, or cyber harassment, report to cybercrime authorities such as the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DICT Cyber Hotline.

Can a lender have me arrested for not paying a loan?

Non-payment of a loan by itself is generally a civil matter. A lender or collector cannot simply cause your arrest without a proper criminal case, prosecutor action, and court process. Be especially careful with fake “warrants,” fake police threats, and messages pretending to be from courts or government offices.

What should I do before paying a suspicious lender?

Verify the company name, SEC registration, Certificate of Authority, app/operator connection, and payment account. Pay only through official channels traceable to the registered company. Save receipts and screenshots.

Are foreign-owned lending companies allowed in the Philippines?

Yes, lending and financing companies may be up to 100% foreign-owned under RA 10881, subject to constitutional restrictions, especially involving land. Foreign ownership alone does not make a lender illegal. Lack of SEC authority, hidden identity, abusive collection, or unlawful data use are bigger warning signs. (Supreme Court E-Library)

Key Takeaways

SEC registration alone is not enough. A lending company must have authority to operate from the SEC.
Always identify the exact corporate name behind the app, website, or loan offer.
For online loans, check both the company and the online lending platform.
A legitimate lender should give a clear loan agreement and Truth in Lending disclosure before loan release.
Hidden charges, advance fees, personal payment accounts, fake warrants, and threats are serious red flags.
Lenders and collectors cannot harass you, publicly shame you, or misuse your contact list.
Complaints may go to the SEC, NPC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, DICT Cyber Hotline, or BSP, depending on the issue.
Save screenshots, contracts, disclosures, payment records, and collection messages before filing any complaint.