The rise of Financial Technology (FinTech) in the Philippines has revolutionized access to credit. However, the convenience of digital lending is balanced by a stringent legal framework designed to prevent predatory lending, protect data privacy, and ensure financial stability. Establishing an Online Lending Platform (OLP) requires more than just an app; it demands a rigorous adherence to corporate, financial, and digital laws.

1. Corporate Formation and SEC Registration

The foundational requirement for any lending business in the Philippines is incorporation. Under the Lending Company Regulation Act of 2007 (Republic Act No. 9474) or the Financing Company Act of 1998 (Republic Act No. 8556), a lending entity must be organized as a stock corporation.

Certificate of Authority (CA)

Simply registering with the Securities and Exchange Commission (SEC) as a corporation is insufficient. A company cannot engage in lending activities without a Certificate of Authority to Operate as a Lending/Financing Company.

Lending Companies: Generally provide loans from their own capital or through no more than 19 funders.
Financing Companies: Can engage in more complex activities like leasing and factoring.

Minimum Capitalization

The SEC imposes strict paid-up capital requirements:

Lending Companies: Minimum of ₱1,000,000, though this may be higher depending on the specific location and secondary licenses.
Financing Companies: Requirements vary significantly, ranging from ₱10,000,000 for those in smaller regions to ₱100,000,000 for those operating in Metro Manila or seeking to engage in specific financial instruments.

2. Regulation of Online Lending Platforms (OLPs)

If a lending company intends to operate through an app or website, it must comply with SEC Memorandum Circular No. 19, Series of 2019. This circular specifically targets the digital nature of the business.

Mandatory Disclosure

Every OLP must prominently display its:

Corporate Name and Business Name (d/b/a).
SEC Registration Number.
Certificate of Authority (CA) Number.

Failure to display these credentials on the platform's interface is a direct violation and often leads to an immediate cease-and-desist order.

Reporting Requirements

Companies must notify the SEC of the names and web addresses of all OLPs they operate. There is a strict prohibition against operating an "unregistered" OLP under a parent company that holds a CA.

3. Truth in Lending Act (RA 3765)

Transparency in the cost of credit is a statutory mandate. Before a loan transaction is consummated, the lender must provide the borrower a Disclosure Statement that includes:

The cash price or amount to be loaned.
Down payments or credits (if any).
All fees, service charges, and individual itemized costs.
The Effective Interest Rate (EIR).

The EIR must be clearly stated to ensure the borrower understands the total cost of the loan over time, rather than just the monthly nominal rate.

4. Data Privacy and Cyber-Security

Online lending platforms handle sensitive personal and financial data, making them "Personal Information Controllers" under the Data Privacy Act of 2012 (RA 10173).

Registration with the NPC: Lending companies with at least 1,000 records of sensitive personal information must register their Data Processing Systems with the National Privacy Commission (NPC).
Consent: Platforms must obtain explicit, informed consent for data collection. Accessing a user's contact list or photo gallery for "shaming" purposes is strictly prohibited and constitutes a criminal offense.
Data Privacy Officer (DPO): Every lending company must appoint a DPO to ensure compliance and handle data breaches.

5. Prohibited Debt Collection Practices

To curb harassment, SEC Memorandum Circular No. 18, Series of 2019 outlines "Unfair Debt Collection Practices." Lenders and their third-party collection agencies are prohibited from:

Using threats of violence or physical harm.
Using profanity or insults.
Disclosing a borrower's debt information to third parties (unless permitted by law).
Contacting the borrower's references or contacts without consent.
Contacting borrowers during "unreasonable hours" (typically between 10:00 PM and 6:00 AM).

6. AMLC Compliance

As "Covered Persons" under the Anti-Money Laundering Act (AMLA), lending companies must register with the Anti-Money Laundering Council (AMLC). This involves:

Know Your Customer (KYC): Implementing robust identity verification processes.
Record Keeping: Maintaining records of all transactions for at least five years.
Reporting: Submitting "Covered Transaction Reports" (for transactions exceeding ₱500,000) and "Suspicious Transaction Reports" (regardless of the amount).

7. The SEC Moratorium (Regulatory Context)

It is important to note that the SEC has periodically issued moratoriums on the registration of new online lending platforms to manage the influx of applications and evaluate the existing market. Potential operators must check the current status of SEC Memorandum Circular No. 8, Series of 2022, which initiated a pause on new OLP registrations while allowing existing ones to continue operations under strict monitoring.

Summary Checklist for Compliance

Requirement	Governing Law/Regulation
Incorporation	Revised Corporation Code
Lending License	RA 9474 (Lending Co. Act)
Online Platform Filing	SEC MC No. 19, S. 2019
Interest Disclosure	RA 3765 (Truth in Lending)
Data Protection	RA 10173 (Data Privacy Act)
Debt Collection Ethics	SEC MC No. 18, S. 2019
Anti-Money Laundering	AMLA (RA 9160)