Legitimacy Checks for Lending Companies in the Philippines

I. Introduction

Credit is a lifeline for many Filipinos—whether for small businesses, emergency expenses, or consumption. But alongside legitimate lenders, there is a persistent problem of unregistered “lending investors,” predatory online lending apps, and fly-by-night entities that harass borrowers, misuse personal data, or impose unconscionable terms.

This article discusses how to assess the legitimacy of a lending company in the Philippines, from the perspective of borrowers, investors, and regulators. It covers the basic legal framework, the role of regulatory agencies, the specific documents and licenses to look for, and red flags suggesting an illegal or abusive lender.

Disclaimer: This is general legal information, not legal advice. For specific cases, consult a Philippine-licensed lawyer or communicate directly with the relevant regulators.

II. Legal and Regulatory Framework

Legitimacy checks for lending companies sit at the intersection of several laws and regulators. The core pillars include:

  1. Lending Company Regulation Act of 2007 (Republic Act No. 9474)

    • Governs lending companies, defined (in essence) as corporations engaged in granting loans from their own funds, not being banks, financing companies, or cooperatives.
    • Requires a Certificate of Authority from the Securities and Exchange Commission (SEC) before engaging in business.
    • Imposes capitalization, ownership, and compliance requirements and penalizes unauthorized lending operations.

  2. Financing Company Act of 1998 (Republic Act No. 8556)

    • Covers financing companies (e.g., those financing purchases of goods, services, or business operations).
    • Also requires SEC registration and a Certificate of Authority as a financing company.

  3. Revised Corporation Code (Republic Act No. 11232)

    • Sets out the general legal framework for corporations in the Philippines, including lending and financing corporations.
    • Legitimacy check: whether the entity is properly formed and existing as a corporation.

  4. Banking Laws and Bangko Sentral ng Pilipinas (BSP) Regulations

    • Banks and quasi-banks (e.g., universal, commercial, thrift, rural banks) are licensed and supervised by the BSP, not just the SEC.
    • If an entity presents itself as a “bank” or “rural bank,” legitimacy hinges on a valid BSP license and membership in the banking system.

  5. Truth in Lending Act (Republic Act No. 3765)

    • Requires full disclosure of finance charges, interest rates, and other loan costs to protect borrowers.
    • Applied and reinforced through SEC and BSP regulations.
    • Legitimacy check: whether the lender practices proper disclosure.

  6. Financial Products and Services Consumer Protection Act (Republic Act No. 11765)

    • Strengthens consumer protection across financial institutions, including lending and financing companies.
    • Empowers regulators to address unfair, abusive, fraudulent, or deceptive acts/practices.

  7. Data Privacy Act of 2012 (Republic Act No. 10173)

    • Applies to lending companies’ collection, use, storage, and sharing of borrowers’ personal data (including those via mobile apps).
    • Legitimacy check: whether the company has lawful data processing, privacy notices, and security measures.

  8. Anti-Money Laundering Act (Republic Act No. 9160, as amended)

    • Certain lending entities may be covered as “covered persons” depending on specific implementing rules and thresholds.
    • Legitimacy check: proper customer due diligence, reporting, and record-keeping where applicable.

  9. Special Rules on Online Lending and Collections

    • SEC and BSP have issued various circulars on fair debt collection, prohibitions on harassment or “shaming,” and conditions for operating online lending platforms (OLPs).
    • Legitimacy check: adherence to these behavioral and operational standards.

III. Lending Companies vs. Other Lenders

Before checking legitimacy, you must understand what kind of entity you are dealing with:

  1. Lending Companies (RA 9474)

    • Must be organized as a corporation under Philippine law.
    • Must have SEC registration indicating a primary purpose related to lending.
    • Must secure a Certificate of Authority (CA) from the SEC specifically to operate as a lending company.
    • Cannot start operations or advertise lending services before obtaining the CA.

  2. Financing Companies (RA 8556)

    • Also corporate entities under the Revised Corporation Code.
    • Must obtain from the SEC a Certificate of Authority as a financing company.
    • Often engaged in installment financing for vehicles, equipment, appliances, etc.

  3. Banks and Quasi-Banks

    • Must be authorized by the BSP.
    • Also registered with the SEC as corporations, but their authority to operate as a bank comes from the BSP.

  4. Cooperatives

    • Lending operations of cooperatives are regulated by the Cooperative Development Authority (CDA) and their own special laws.
    • Their registration regime differs from lending/financing corporations with the SEC.

  5. Informal Individual Lenders (“5-6,” friends/family, etc.)

    • A natural person lending occasionally may be engaged in a private loan transaction, not operating a “lending company” under RA 9474.
    • However, if a person or group is in the business of lending to the public without a license, that activity may violate RA 9474 and related laws.

IV. Core Legitimacy Checks

Legitimacy checks can be grouped into four main clusters:

  1. Legal Existence and Authority to Operate
  2. Regulatory and Local Government Compliance
  3. Consumer Protection and Fair Practices
  4. Data Protection and Cyber Legitimacy (especially for online lenders)

Each is described below.

V. Legal Existence and Authority to Operate

1. Corporate Existence

For lending/financing companies:

  • Check the corporate form.

    • Under RA 9474, a lending company must be a stock corporation. If the entity presents itself as “ABC Lending Corporation” but cannot show corporate registration, that is a major red flag.

  • Verify the name and primary purpose.

    • The Articles of Incorporation should reflect a primary purpose related to lending or financing.

  • Confirm that the corporation is active.

    • Suspension or revocation of SEC registration, or delinquent status (e.g., for failure to submit reports), raises questions of legitimacy.

For banks:

  • Corporate existence through the SEC is necessary, but not sufficient; a BSP license is essential.

2. SEC Registration and Certificate of Authority

Under RA 9474 and RA 8556:

  • A lending or financing company must:

    1. Be registered as a corporation with the SEC; and
    2. Obtain a Certificate of Authority to operate as a lending/financing company from the SEC.

Key points:

  • It is unlawful to operate a lending business without this Certificate of Authority.
  • It is also unlawful to hold oneself out to the public as a lending or financing company (e.g., through signage, online ads) without the required SEC authority.
  • The Certificate of Authority is separate from the basic SEC Certificate of Incorporation.

Legitimacy check:

  • Ask to see the SEC Certificate of Incorporation and the SEC Certificate of Authority as a lending or financing company.
  • Compare the corporate name on the certificates with the name used in contracts, signage, or the mobile app.

3. BSP License (for banks or quasi-banks)

If the entity calls itself a bank or uses words reserved for banks:

  • It must have a valid BSP license.
  • Banks and similar institutions are also usually participants in the Philippine Deposit Insurance Corporation (PDIC) system.

Legitimacy check:

  • Confirm that the entity is recognized by the BSP as a bank or quasi-bank and not merely a corporation using the term “bank” or “rural bank” in its trade name.

VI. Regulatory and Local Government Compliance

1. Local Government Permits

Even with SEC or BSP licenses, the entity must comply with local requirements:

  • Mayor’s/Business Permit from the city or municipality where it operates.
  • Barangay clearance, where applicable.
  • Physical branch offices should display their permits.

Legitimacy check:

  • For brick-and-mortar lenders, ask to see the Mayor’s Permit and check if it is current and matches the business name and address.

2. Bureau of Internal Revenue (BIR) Registration

A legitimate lending company should:

  • Be registered with the BIR.
  • Issue official receipts or acknowledgment receipts for payments.
  • Have a Tax Identification Number (TIN) associated with the corporation.

Red flag:

  • Refusal or inability to issue any form of valid official receipt for payments of interest or principal.

3. Reporting and Disclosure Obligations

Lending and financing companies are generally required to:

  • Submit annual financial statements and General Information Sheets to the SEC.
  • Comply with regulatory reporting relevant to consumer protection and AML where applicable.

Consistent compliance suggests legitimacy; failure or unwillingness to disclose basic information is a warning sign.

VII. Consumer Protection & Contract Legitimacy

Legitimacy is not only about licenses, but also about how the lending company treats borrowers and what appears in the loan documents.

1. Written Loan Agreement

A legitimate lender should provide:

  • A written loan contract or promissory note;

  • Clear terms on:

    • Principal amount
    • Interest rate (per month/per annum, clearly indicated)
    • Other fees and charges
    • Payment schedule and due dates
    • Penalties for late payment
    • Remedies upon default
    • Collateral, if any

Red flags:

  • No written contract at all;
  • Asking the borrower to sign blank forms;
  • Terms being changed after signatures;
  • Handwritten insertions that were not explained.

2. Truth in Lending and Disclosure

Under the Truth in Lending Act and related regulations:

  • The lender must disclose, before the loan is consummated:

    • The finance charge (total cost of credit);
    • The effective interest rate;
    • Any other charges such as service fees, processing fees, collection fees, insurance premiums, etc.

Legitimacy check:

  • Confirm that the lender gives a document or disclosure statement showing the full cost of the loan in pesos and in percentage terms.

3. Interest Rates and Unconscionable Charges

Although usury ceilings have been effectively lifted by monetary board issuances, courts in the Philippines may still strike down unconscionable interest rates and charges.

Legitimacy check:

  • Extremely high interest and penalties (especially when combined with short terms and add-on fees) may indicate predatory lending practices, even if the lender is technically registered.

Borrowers can question such terms in court or in a regulatory complaint; legitimacy is not solely formal (licensing) but also substantive (fairness and legality of the contract).

4. Fair Collection Practices

Regulators have issued rules prohibiting:

  • Threats, obscenities, and harassment;
  • Public “shaming” of borrowers on social media;
  • Calling employers, neighbors, or unrelated contacts unnecessarily;
  • Contacting borrowers at unreasonable hours.

Legitimacy check:

  • Ask whether the company has a collection policy or code of conduct;
  • Borrower reports of systematic harassment, doxxing, or shaming strongly indicate a problematic or potentially illegal operation.

VIII. Data Privacy and Online Lending Apps

Online lending apps have added a new dimension to legitimacy checks.

1. Data Privacy Act Compliance

A legitimate online lending company should:

  • Have a privacy notice that is accessible and understandable;

  • Specify:

    • What personal data are collected;
    • For what purposes;
    • Whether data are shared with third parties (e.g., collection agencies, analytics);
    • How long data are retained;
    • How users can exercise rights (access, correction, erasure, etc.).

Red flags:

  • Vague or missing privacy policy;
  • Overly broad data collection unrelated to the loan (e.g., full contact list, photos, messages) without clear necessity.

2. Permissions and Access via Mobile Apps

Many problematic apps historically demanded access to:

  • Contact lists;
  • Photos and media;
  • Location;
  • SMS or call logs.

Legitimacy check:

  • Consider whether the app’s requested permissions are reasonably necessary for granting a loan.
  • Apps that clearly threaten to use your contacts to shame you for late payment are likely violating both data privacy norms and collection rules.

3. Cybersecurity and Fraud Risks

A legitimate lending app should:

  • Use secure connections (e.g., HTTPS);
  • Avoid requesting passwords for unrelated services (e.g., email, social media);
  • Not require the user to send sensitive documents through insecure channels.

IX. Red Flags of Illegitimate or Problematic Lending Operations

Some common warning signs include:

  1. No SEC/BSP Authorization

    • Claiming to be a lending company, financing company, or bank but unable or unwilling to show SEC/BSP authorization.

  2. Mismatch Between Name and Documents

    • Business name on signboard or app does not match the name on the SEC or BSP documents.

  3. Lack of Local and Tax Registrations

    • No Mayor’s Permit, barangay clearance, or BIR registration; no official receipts issued.

  4. Abusive Collection and Harassment

    • Use of threats, insults, public shaming, or harassment of borrowers’ relatives and contacts.

  5. Opaque Terms and Hidden Fees

    • No clear written breakdown of interest, fees, and penalties; net proceeds are far less than the stated loan amount.

  6. Retention of Sensitive Documents or Items

    • Lender keeps original IDs, ATM cards, debit cards + PIN, or passbooks as “collateral.”
    • While certain collateral arrangements are lawful, confiscation of IDs and ATM cards is a classic red flag.

  7. Unreasonable Contract Structures

    • Contracts that make it nearly impossible to pay off the loan (e.g., interest-only payments with balloon payments not explained).

  8. Online Apps With Excessive Permissions and No Transparency

    • Access to contacts used to threaten borrowers; no stated privacy policy; vague company identity.

X. Remedies and Enforcement

Legitimacy checks also involve understanding where to go if something is wrong.

1. Complaints to the Securities and Exchange Commission

For lending and financing companies and unregistered lenders:

  • The SEC can:

    • Investigate unregistered or illegally operating lending/financing companies;
    • Issue cease and desist orders;
    • Impose fines;
    • Revoke Certificates of Authority or even corporate registration.

Borrowers or the public can report:

  • Unlicensed lending operations;
  • Violations of RA 9474 or RA 8556;
  • Misrepresentations (e.g., claiming to have SEC authority when they do not).

2. Complaints to the Bangko Sentral ng Pilipinas

For banks and BSP-regulated entities:

  • The BSP handles complaints about:

    • Unfair collection;
    • Improper charges;
    • Violations of consumer protection rules by banks and certain financial institutions.

3. Data Privacy Complaints

To the National Privacy Commission (NPC) for:

  • Misuse or over-collection of personal data;
  • Unauthorized disclosures;
  • Harassment using private information.

4. DTI and Other Consumer Protection Bodies

The Department of Trade and Industry (DTI) and similar agencies may also provide consumer protection mechanisms, especially for unfair trade practices not strictly limited to financial regulators.

5. Civil and Criminal Actions

Depending on the circumstances:

  • Civil cases for:

    • Annulment or reformation of loan contracts;
    • Recovery of amounts paid under unconscionable terms;
    • Damages for harassment or illegal acts.

  • Criminal cases for:

    • Estafa (fraud);
    • Grave threats, unjust vexation, or related offenses;
    • Violations of special penal provisions under lending, privacy, or consumer protection laws.

XI. Legitimacy Checks from the Investor’s Perspective

Investors considering putting capital into a lending company should conduct deeper due diligence:

  1. Regulatory Compliance:

    • Proper SEC registration and Certificate of Authority;
    • Up-to-date regulatory filings and no major pending cases.

  2. Financial Health:

    • Audited financial statements;
    • Asset quality, non-performing loans (NPL) ratio;
    • Capitalization, funding sources, liquidity.

  3. Governance and Internal Controls:

    • Board composition, including independent directors where applicable;
    • Internal audit and compliance functions;
    • AML and data privacy compliance frameworks.

  4. Reputation and Complaint History:

    • Patterns of borrower complaints or media reports about harassment and illegal practices.

Even a legally registered lender may be commercially or reputationally risky if it has a history of abusive practices.

XII. Practical Checklist for Borrowers

A borrower can use this condensed checklist before dealing with a lending company:

  1. Identity & License

    • ☐ Is the lender a corporation (or bank/cooperative) with a clear name and address?
    • ☐ Can it show SEC registration and a Certificate of Authority (or BSP license, if a bank)?

  2. Local & Tax Compliance

    • ☐ Does it have a Mayor’s/Business Permit and BIR registration?
    • ☐ Does it issue official receipts for payments?

  3. Contract Terms

    • ☐ Did you receive a written loan contract with clear terms?
    • ☐ Are the interest rate, fees, and penalties clearly and separately stated?
    • ☐ Is there a disclosure of the total cost of the loan?

  4. Behavior & Collection

    • ☐ Does the lender explain collection practices and respect your rights?
    • ☐ Are there no threats, shaming tactics, or confiscation of IDs/ATM cards?

  5. Data & Privacy (for apps)

    • ☐ Is the company behind the app clearly identified (name, address, registration)?
    • ☐ Is there a privacy policy that explains data collection and use?
    • ☐ Are the requested app permissions reasonable for a lending activity?

If several boxes cannot be ticked, you may be dealing with an illegitimate or high-risk lender.

XIII. Conclusion

In the Philippine setting, a lending company’s legitimacy is not only a question of having the correct SEC or BSP registration. It encompasses:

  • Proper corporate existence and authority to operate;
  • Compliance with national and local regulatory requirements;
  • Transparent and fair loan contracts;
  • Respect for consumer rights and data privacy;
  • Absence of abusive collection and predatory practices.

Borrowers, investors, and even employees of lending institutions benefit from understanding these legitimacy checks. While regulators actively pursue illegal and abusive lenders, the first line of defense is an informed public that knows what to look for, what to demand in terms of documentation and behavior, and where to seek remedies when things go wrong.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.

Privacy Policy

Terms of Use

Lawyer Login

 
 
Privacy Policy         Terms of Use         Lawyer Login