I. Introduction

Lending is a regulated business in the Philippines. A person or entity that regularly lends money to the public for profit cannot simply operate as an informal lender, online loan app, financing page, social media lender, or cash loan business without complying with legal requirements. In the Philippine context, the legitimacy of a lending company is closely tied to registration with the Securities and Exchange Commission, corporate authority to lend, proper disclosure of loan terms, lawful collection practices, data privacy compliance, anti-money laundering awareness where applicable, and observance of consumer protection rules.

A lending company’s failure to comply with registration and legitimacy requirements can result in administrative sanctions, revocation of authority, civil liability, criminal exposure, consumer complaints, unenforceability issues, reputational harm, and possible closure. For borrowers, knowing how to verify a lender’s legitimacy helps avoid abusive lending, hidden charges, harassment, excessive interest, online shaming, identity misuse, and scams.

This article discusses the legal framework, SEC registration requirements, legitimacy indicators, documentary requirements, prohibited practices, borrower protections, and practical compliance considerations for lending companies in the Philippines.

II. What Is a Lending Company?

A lending company is generally an entity engaged in granting loans from its own capital funds or from funds sourced in accordance with law. It lends money to borrowers and earns through interest, charges, penalties, fees, or other compensation.

Lending companies may offer:

Personal loans;
Salary loans;
Emergency cash loans;
Business loans;
Appliance or gadget loans;
Online loans;
Motorcycle or vehicle-related loans;
Microloans;
Collateralized loans;
Unsecured loans;
Installment loans;
Loans through mobile applications or websites.

A lending company is different from a bank, pawnshop, financing company, cooperative, informal private lender, or investment-taking entity. Each category may be governed by different laws and regulators.

III. Main Legal Framework

The principal law governing lending companies is the Lending Company Regulation Act of 2007, commonly known as Republic Act No. 9474. Under this law, lending companies are regulated by the Securities and Exchange Commission.

Other laws and rules may also apply, including:

The Revised Corporation Code;
SEC rules and circulars on lending companies;
Truth in Lending rules;
Consumer protection rules;
Data Privacy Act of 2012;
Cybercrime Prevention Act, where online conduct is involved;
Revised Penal Code provisions on threats, coercion, unjust vexation, libel, or other offenses;
Anti-Money Laundering Act, where applicable;
Financial consumer protection principles;
Rules on interest, penalties, unconscionable stipulations, and contracts;
Electronic commerce and electronic evidence rules, for online lending platforms;
Local business permit and tax registration requirements.

The SEC is the key agency for registration and supervision of lending companies, but other agencies may become relevant depending on the lender’s operations.

IV. Why SEC Registration Matters

SEC registration matters because lending is a regulated business. A lending company must have legal personality and authority to operate. Registration protects the public by allowing the government to monitor lending entities, impose disclosure requirements, regulate abusive conduct, and sanction unauthorized or predatory lenders.

SEC registration helps establish that:

The company legally exists;
Lending is within its corporate purpose;
The company has authority to operate as a lending company;
The company is subject to SEC supervision;
Borrowers can verify its legitimacy;
Complaints can be directed to a regulator;
The entity is not merely an anonymous or fraudulent lender.

However, SEC registration alone does not automatically mean that every act of the company is lawful. A registered lending company may still violate consumer protection, data privacy, collection, disclosure, interest, or contract rules.

V. Lending Company vs. Ordinary Corporation

A corporation registered with the SEC is not automatically allowed to operate as a lending company. A company may have a certificate of incorporation, but it still needs authority to engage in lending as a regulated activity.

A legitimate lending company generally needs:

SEC registration as a corporation;
A primary or authorized purpose involving lending;
A Certificate of Authority to Operate as a Lending Company;
Compliance with capitalization and documentary requirements;
Business permits and tax registrations;
Compliance with ongoing reporting obligations;
Lawful disclosure, collection, and data practices.

Borrowers should not be satisfied with a screenshot of a generic SEC registration. They should verify whether the entity has authority to operate as a lending company.

VI. Lending Company vs. Financing Company

A lending company generally grants loans from its own funds. A financing company is commonly involved in extending credit facilities, leasing, discounting receivables, factoring, and similar financing activities. Financing companies are also regulated and require proper authority.

The distinction matters because a company may be registered as one type but actually perform activities requiring another authority. An entity that claims to be a “loan provider” but engages in financing, investment solicitation, deposit-taking, or quasi-banking may be operating beyond its authority.

VII. Lending Company vs. Private Individual Lender

Not every private loan requires SEC registration. A person who occasionally lends money to a friend or relative does not necessarily become a lending company. However, a person or group that regularly lends money to the public for profit may be considered engaged in a lending business and may need to comply with lending company regulations.

Indicators of lending business activity include:

Regular solicitation of borrowers;
Public advertising of loans;
Use of business name or lending brand;
Multiple borrowers;
Standard loan forms;
Interest-based profit model;
Use of agents or collectors;
Online lending page or app;
Repeated lending transactions;
Maintaining a lending office or digital platform.

A private individual cannot evade regulation by calling the business “personal lending,” “cash assistance,” “community fund,” or “online pautang” if the substance shows a lending business.

VIII. Who May Operate a Lending Company?

A lending company is usually required to be organized as a corporation. The law and SEC rules generally regulate lending companies as corporate entities rather than informal individuals or unregistered groups.

The company must meet requirements involving:

Corporate registration;
Nationality restrictions, if applicable;
Minimum capitalization;
Fit and proper qualifications of incorporators, directors, trustees, officers, or controlling persons;
Lawful source of funds;
Place of business;
Corporate name requirements;
Authority from the SEC;
Compliance with continuing obligations.

IX. Corporate Name Requirements

A lending company’s corporate name should not mislead the public. It should reflect the nature of the business and should comply with SEC naming rules.

The name should not:

Imply it is a bank if it is not;
Suggest government affiliation without authority;
Use prohibited or restricted words without approval;
Mislead borrowers into believing it is licensed by another regulator;
Use names confusingly similar to registered entities;
Conceal the company’s lending nature;
Operate under an unregistered trade name.

For lending companies, the name commonly includes words such as “Lending,” “Lending Company,” or similar identifiers required or accepted by the SEC.

X. Certificate of Incorporation vs. Certificate of Authority

A key concept is the difference between:

1. Certificate of Incorporation

This proves that the corporation exists as a juridical person.

2. Certificate of Authority to Operate as a Lending Company

This proves that the corporation is authorized by the SEC to engage in the lending business.

A company may have the first but not the second. Borrowers should look for both.

A corporation that lends money without the required certificate of authority may be operating illegally, even if it has a general SEC registration.

XI. Minimum Capitalization

Lending companies are subject to capitalization requirements. The exact minimum may depend on the law, SEC rules, location of operation, ownership, and whether the company operates through branches, online channels, or other arrangements.

Capitalization rules exist to ensure that the company has real financial capacity and is not merely a shell used to collect fees, misuse borrower data, or conduct scams.

A company should maintain sufficient paid-up capital and comply with SEC requirements regarding proof of capital, deposits, bank certificates, audited financial statements, and related documents.

XII. Basic SEC Registration Process for Lending Companies

The general process usually involves several stages.

Step 1: Corporate Planning

The organizers determine:

Corporate name;
Incorporators and directors;
Shareholding structure;
Principal office;
Capitalization;
Lending business model;
Source of funds;
Loan products;
Online or physical operations;
Compliance officers or responsible personnel.

Step 2: Name Verification and Reservation

The proposed corporate name is checked and reserved with the SEC.

Step 3: Preparation of Corporate Documents

Documents usually include:

Articles of incorporation;
By-laws, where applicable;
Treasurer’s affidavit or equivalent certification;
Details of incorporators, directors, and officers;
Proof of capital;
Board approvals;
Other SEC forms.

Step 4: Application for Lending Authority

The company applies for authority to operate as a lending company. This may require specific forms, supporting documents, business plan, capitalization proof, and compliance undertakings.

Step 5: SEC Evaluation

The SEC evaluates whether the applicant meets the legal requirements.

Step 6: Issuance of Certificate of Authority

If approved, the SEC issues authority to operate as a lending company.

Step 7: Post-Registration Compliance

After SEC approval, the company must secure business permits, tax registration, books of accounts, official receipts or invoices, and comply with reporting obligations.

XIII. Common Documentary Requirements

Although exact requirements may vary depending on current SEC rules and the applicant’s circumstances, a lending company may need to prepare:

Articles of incorporation;
By-laws or corporate governance documents;
Name reservation confirmation;
Treasurer’s certification or affidavit;
Bank certificate or proof of paid-up capital;
List of directors, officers, and stockholders;
Personal information sheets;
Tax identification details;
Proof of office address;
Lease contract or proof of ownership of office;
Business plan or lending operations plan;
Loan contract templates;
Disclosure statement templates;
Collection policy;
Data privacy policy;
Website or app details, if operating online;
Authorization for branches, if any;
Board resolutions;
Undertakings required by the SEC;
Proof of payment of filing fees.

A company should ensure consistency across documents. Inconsistencies in corporate purpose, office address, capitalization, business model, and ownership may delay or jeopardize approval.

XIV. Local Business Permits and Tax Registration

SEC authority is not the only requirement. After registration, a lending company generally needs local and tax compliance.

Common requirements include:

Mayor’s permit or business permit;
Barangay clearance;
BIR registration;
Authority to print receipts or invoices, where applicable;
Registration of books of accounts;
Tax filings;
Local taxes and fees;
Signage permits, if applicable;
Employee registrations with SSS, PhilHealth, and Pag-IBIG, if the company has employees.

Operating without local permits or tax registration can create separate violations even if SEC registration exists.

XV. Branches, Satellites, Agents, and Online Operations

A lending company should not operate branches, satellite offices, kiosks, agents, websites, mobile apps, or social media lending pages in a manner inconsistent with its SEC authority.

Issues may arise when:

A company opens unregistered branches;
Agents collect payments without authority;
A company operates multiple online lending brands;
A mobile app uses a different name from the registered company;
A company hides its real SEC-registered name;
Loan contracts do not identify the true lender;
Collection is outsourced to unauthorized or abusive collectors;
A company uses shell entities to avoid regulation.

The public-facing brand should be traceable to the SEC-registered entity.

XVI. Online Lending Companies

Online lending companies are subject to the same basic legitimacy requirements as physical lenders, with additional concerns involving digital platforms, data privacy, cybersecurity, advertising, e-signatures, and online collection behavior.

An online lending company should clearly disclose:

SEC-registered corporate name;
Certificate of Authority number;
Office address;
Contact information;
Loan terms;
Interest rate;
fees and charges;
Penalties;
Data collection practices;
Privacy policy;
Complaint channels;
Collection practices;
Identity of third-party service providers, where relevant.

An app or website that offers loans but hides the lender’s true identity is a major red flag.

XVII. SEC Verification of Lending Company Legitimacy

Borrowers should verify a lending company before borrowing.

Useful steps include:

Check whether the company is registered with the SEC;
Confirm whether it has a Certificate of Authority to Operate as a Lending Company;
Compare the company name in the loan contract with SEC records;
Check whether the app or brand name matches a registered lending company;
Verify address, contact information, and official channels;
Be cautious if only a social media account, mobile number, or personal e-wallet is provided;
Check whether the company has been subject to advisories or complaints;
Review the loan contract and disclosure statement;
Confirm that fees and interest are clearly stated;
Avoid paying advance fees to unverified lenders.

A legitimate lender should be transparent and verifiable.

XVIII. Red Flags of an Illegitimate Lending Entity

Warning signs include:

No SEC registration;
SEC registration but no lending authority;
Refusal to provide Certificate of Authority;
Use of a personal bank or e-wallet account for company payments;
No physical or official business address;
Only communicates through anonymous chat accounts;
Requires upfront processing fees before loan release;
Uses threats, shaming, or harassment;
Demands access to phone contacts, photos, or messages;
Does not provide written loan terms;
Hides interest and charges;
Uses fake government logos;
Claims “SEC approved” but cannot provide details;
Uses multiple app names but one unknown company;
Collectors refuse to identify themselves;
Posts borrowers online;
Contacts relatives and employers abusively;
Offers guaranteed loans with no verification but asks for fees;
Uses foreign or untraceable entities;
Pressures borrowers to sign quickly.

XIX. Loan Documentation Requirements

A legitimate lending company should document its loans properly. A borrower should receive or have access to written loan terms.

Loan documents may include:

Loan agreement;
Promissory note;
Disclosure statement;
Amortization schedule;
Privacy notice;
Consent forms, if legally appropriate;
Payment instructions;
Collection policy;
Official receipts or acknowledgments;
Collateral documents, if any.

Loan documentation protects both lender and borrower. It reduces disputes over interest, due dates, penalties, and payment history.

XX. Truth in Lending and Disclosure Requirements

A lending company must disclose the true cost of borrowing. Borrowers should be informed of the amount financed, interest rate, finance charges, penalties, service fees, deductions, and payment schedule.

A transparent loan disclosure should state:

Principal amount;
Net proceeds released to borrower;
Interest rate;
Computation of interest;
Service or processing fees;
Documentary or notarial charges, if any;
Late payment penalties;
Collection fees, if any;
Due dates;
Total amount payable;
Effective cost of the loan;
Consequences of default.

Hidden charges may be challenged as unfair, deceptive, abusive, or contrary to disclosure requirements.

XXI. Interest Rates and Penalties

Lending companies may charge interest, but interest and penalties must be lawful, disclosed, and not unconscionable. Philippine courts may reduce interest, penalties, and charges that are excessive, iniquitous, or contrary to morals and public policy.

Factors that may be considered include:

Whether interest was clearly agreed upon;
Whether the borrower understood the charges;
Whether the rate is excessive compared with the transaction;
Whether penalties compound unreasonably;
Whether fees disguise additional interest;
Whether the borrower received the full principal;
Whether the lender acted abusively;
Whether the contract is one-sided or oppressive.

A lending company should not assume that any rate is enforceable merely because the borrower signed.

XXII. Advance Fees and Loan Scams

Some fraudulent lenders ask borrowers to pay “processing fees,” “insurance fees,” “release fees,” “verification fees,” or “taxes” before releasing the loan, then disappear or demand more money.

A legitimate lender may charge lawful fees, but these should be clearly disclosed and usually connected to an actual loan transaction. Borrowers should be cautious if:

The lender asks for upfront payment before approval or release;
The lender refuses to issue receipts;
The lender uses personal e-wallet accounts;
The lender promises guaranteed approval;
The lender cannot be verified with SEC;
The lender communicates only through chat;
The lender threatens cancellation unless fees are sent immediately.

Such schemes may involve fraud or estafa, depending on the circumstances.

XXIII. Collection Practices

Lending companies may collect unpaid debts, but collection must be lawful. The right to collect does not include the right to harass, threaten, shame, deceive, or abuse borrowers.

Improper collection practices may include:

Threats of violence;
Threats of arrest for ordinary debt;
Public shaming;
Posting borrower’s face or personal details online;
Contacting relatives with humiliating messages;
Contacting employers without lawful purpose;
Repeated calls at unreasonable hours;
Use of obscene or insulting language;
False representation as police, lawyer, court, or government officer;
Threatening criminal charges without basis;
Disclosing debt to unrelated persons;
Using borrower’s phone contacts for harassment;
Collecting amounts not legally due;
Misleading borrowers about legal consequences.

A registered lending company may still be sanctioned for abusive collection.

XXIV. Use of Collection Agencies

A lending company may engage collectors or collection agencies, but it remains responsible for lawful collection. Outsourcing does not excuse harassment or illegal conduct.

The lender should ensure that collectors:

Are properly authorized;
Identify themselves truthfully;
Follow collection rules;
Protect borrower data;
Avoid threats and abusive language;
Do not disclose debt to third parties;
Keep accurate payment records;
Issue receipts or proper acknowledgments;
Escalate disputes lawfully;
Observe complaint procedures.

Borrowers may complain not only against the collector but also against the lending company that engaged them.

XXV. Data Privacy Compliance

Lending companies process personal information, sensitive personal information, financial data, employment data, contact information, IDs, photos, device data, and sometimes location or digital behavior. They must comply with data privacy principles.

Key principles include:

Transparency;
Legitimate purpose;
Proportionality;
Data minimization;
Lawful consent or other lawful basis;
Security of personal information;
Limited retention;
Respect for data subject rights;
Proper handling of data breaches;
Accountability.

Online lenders are especially scrutinized because some apps have misused borrower contacts, photos, and phone data for shaming or coercive collection.

A lending app should not demand excessive permissions unrelated to credit assessment or loan servicing.

XXVI. Borrower Consent and Mobile App Permissions

Consent must be specific, informed, and freely given. A borrower’s acceptance of a privacy policy does not automatically authorize abusive or excessive data use.

Problematic practices include:

Accessing entire contact lists without necessity;
Uploading borrower contacts to servers;
Sending collection messages to unrelated contacts;
Accessing photos, files, or messages unrelated to the loan;
Using personal data for public shaming;
Sharing data with undisclosed third parties;
Retaining data after the loan is closed without lawful basis;
Using consent buried in vague terms.

A legitimate lending company should limit data collection to what is necessary for identity verification, credit assessment, loan release, servicing, collection, and legal compliance.

XXVII. Advertising and Marketing Rules

Loan advertisements should be truthful and not misleading. A lending company should not advertise in a way that deceives borrowers about approval, interest, fees, or consequences.

Problematic advertisements include:

“Guaranteed approval” with hidden conditions;
“Zero interest” but with high service fees;
“No requirements” but later demanding sensitive data;
“SEC approved” without proof;
Fake testimonials;
Misleading use of celebrity images;
False government affiliation;
Concealing the real lender;
Advertising one rate but charging another;
Using bait-and-switch loan terms.

Marketing materials should match the actual loan contract.

XXVIII. Lending Through Social Media

Many unregistered lenders operate through Facebook pages, TikTok, Instagram, Telegram, or messaging apps. Social media lending is not exempt from regulation.

A lender using social media should still have:

SEC-registered corporate identity;
Certificate of Authority;
Official loan documents;
Clear disclosure of rates and charges;
Lawful privacy policy;
Official collection channels;
Receipts and records;
Complaint mechanisms;
Local and tax compliance.

Borrowers should avoid lenders that use only personal accounts, anonymous pages, or changing group names.

XXIX. Lending Through Agents

Some lenders use agents or brokers to find borrowers. This can create legitimacy issues.

Agents should not:

Misrepresent loan terms;
Collect unauthorized fees;
Use fake approvals;
Impersonate the lending company;
Hide the real lender;
Promise guaranteed release;
Keep borrower documents unlawfully;
Use personal accounts for company funds;
Harass applicants;
Process loans for unregistered lenders.

A lending company should have written agreements and controls over agents.

XXX. Borrower’s Right to Information

Borrowers should be able to ask for:

SEC registration details;
Certificate of Authority details;
Corporate name and address;
Loan contract;
Disclosure statement;
Amortization schedule;
Computation of balance;
Official receipts;
Payment history;
Data privacy policy;
Contact details for complaints;
Identity of authorized collectors.

Refusal to provide basic information is a legitimacy concern.

XXXI. Borrower Complaints Against Lending Companies

Borrowers may complain when a lending company:

Operates without authority;
Charges undisclosed fees;
Imposes unconscionable interest;
Harasses borrowers;
Publicly shames borrowers;
Misuses personal data;
Contacts employers or relatives abusively;
Refuses to issue receipts;
Collects amounts already paid;
Uses threats or intimidation;
Misrepresents legal consequences;
Uses fake SEC documents;
Fails to provide loan documents;
Engages in fraud.

Possible complaint channels may include the SEC, National Privacy Commission, police or prosecutor for criminal acts, barangay or courts for civil disputes, and other relevant agencies depending on the facts.

XXXII. SEC Sanctions

The SEC may impose sanctions against lending companies that violate law or rules. Sanctions may include:

Warning;
Fines;
Suspension of authority;
Revocation of Certificate of Authority;
Revocation of corporate registration, in serious cases;
Cease and desist orders;
Disqualification of officers;
Administrative proceedings;
Referral for criminal prosecution;
Public advisories.

Administrative sanctions may apply even if borrowers also have private civil or criminal remedies.

XXXIII. Criminal Exposure

Certain acts connected with lending may create criminal exposure, such as:

Operating without required authority;
Fraudulent collection of advance fees;
Use of threats or intimidation;
Cyber libel or online shaming;
Unjust vexation;
Grave coercion;
Identity theft or misuse of personal data;
Falsification of documents;
Estafa or swindling;
Violation of specific lending company laws;
Unauthorized use of corporate or government names;
Harassment amounting to criminal conduct.

The existence of a debt does not authorize criminal acts by the lender.

XXXIV. Civil Liability

A lending company may face civil liability for:

Breach of contract;
Unlawful collection;
Excessive or unconscionable charges;
Misrepresentation;
Damages from harassment;
Violation of privacy;
Defamation;
Abuse of rights;
Negligent handling of borrower data;
Wrongful reporting or blacklisting;
Collection of amounts not due.

Borrowers may seek damages where legally justified.

XXXV. Enforceability of Loans by Unregistered Lenders

A loan from an unregistered or unauthorized lender raises legal issues. The borrower’s obligation to return money actually received may still be considered separately from the lender’s regulatory violations. However, illegal lending operations may expose the lender to sanctions, and unlawful interest, penalties, or charges may be reduced or invalidated.

A borrower should not assume that borrowing from an unregistered lender means no money is owed. Likewise, an unregistered lender should not assume it can enforce all charges despite operating illegally. The court or regulator may examine the facts, legality, equity, and public policy considerations.

XXXVI. Registration Does Not Validate Abusive Terms

Even a registered lending company cannot enforce abusive, illegal, or unconscionable terms simply because it is SEC-registered.

Registration does not excuse:

Hidden charges;
Misleading disclosure;
Excessive interest;
Illegal penalties;
Unauthorized data use;
Harassment;
Public shaming;
Deceptive collection;
Breach of consumer rights;
Violation of privacy.

Borrowers may still challenge unfair terms and abusive conduct.

XXXVII. Compliance Program for Lending Companies

A legitimate lending company should maintain a compliance program covering:

SEC registration and renewals;
Corporate records;
Board oversight;
Loan product approval;
Interest and fee review;
Disclosure templates;
Borrower complaints;
Data privacy compliance;
Cybersecurity;
Collection practices;
Agent and collector training;
Advertising review;
Record retention;
Regulatory reporting;
Internal audit;
Anti-fraud controls;
Consumer protection policies.

Compliance should be operational, not merely documentary.

XXXVIII. Corporate Governance

Good governance helps prevent abusive lending. Directors and officers should ensure that the company operates lawfully.

Governance responsibilities include:

Approving lawful loan products;
Monitoring capital and financial condition;
Ensuring accurate disclosures;
Supervising collectors and agents;
Handling complaints;
Preventing data misuse;
Avoiding conflicts of interest;
Maintaining corporate records;
Filing reports;
Responding to regulators;
Preventing fraudulent practices;
Ensuring ethical marketing.

Officers may be held accountable when violations occur under their authority or participation.

XXXIX. Record-Keeping Requirements

A lending company should keep accurate records of:

Loan applications;
Borrower IDs and verification documents;
Loan approvals;
Loan agreements;
Disclosure statements;
Release of proceeds;
Payment records;
Receipts;
Collection communications;
Complaints and resolutions;
Data consents and privacy notices;
Corporate approvals;
Financial statements;
Tax records;
SEC filings;
Branch and agent records.

Poor records can lead to disputes, regulatory findings, and inability to prove claims in court.

XL. Receipts and Payment Acknowledgments

Borrowers should receive receipts or payment confirmations. Lending companies should accurately record all payments.

A borrower should keep:

Official receipt;
Electronic payment confirmation;
Collection receipt;
Bank transfer record;
Screenshot of payment;
Updated statement of account;
Name of collector;
Date and time of payment;
Reference number;
Remaining balance confirmation.

Disputes often arise when payments are made to collectors who fail to remit. Companies should control and audit collection channels.

XLI. Statement of Account and Balance Verification

Borrowers may request an updated statement of account. A proper statement should show:

Principal;
Interest;
Fees;
Penalties;
Payments received;
Dates of payments;
Remaining balance;
Computation method;
Due dates;
Contact person for disputes.

A lender that cannot explain the computation of the balance may face credibility and compliance issues.

XLII. Collateral and Security

Some lending companies require collateral, postdated checks, salary deduction authority, vehicle documents, gadgets, jewelry, land titles, or other security.

Collateral arrangements should be lawful, documented, and proportionate. Lenders should avoid:

Taking original IDs as coercive security;
Retaining ATM cards or payroll cards unlawfully;
Confiscating property without legal process;
Using blank signed documents abusively;
Repossessing property through force or intimidation;
Charging penalties not disclosed;
Misusing postdated checks;
Holding personal documents to pressure payment.

Collateral enforcement must follow law and contract.

XLIII. Postdated Checks

Some lenders require postdated checks. Borrowers should understand that dishonored checks may have legal consequences under specific laws if elements are present.

Lending companies should not misuse checks by:

Filling blanks contrary to agreement;
Depositing checks despite settlement;
Threatening criminal charges without basis;
Using checks to impose unconscionable pressure;
Failing to account for payments.

Borrowers should not issue checks unless they understand the obligation and have funds.

XLIV. Payroll Deduction and Salary Loans

Some lending companies offer salary loans through employers or payroll deduction arrangements. These require clear authorization and lawful deduction practices.

Issues may include:

Validity of employee authorization;
Employer participation;
Limits on deductions;
Final pay deductions;
Data sharing between employer and lender;
Employee consent;
Dispute over balance;
Employer liability for improper deductions.

A lending company should not pressure employers to disclose employee information or deduct wages without proper authority.

XLV. Lending to Employees by Employers

Employers sometimes operate internal lending programs. Whether SEC lending company registration is required depends on the nature of the program, regularity, profit motive, structure, and whether lending is offered as a business to the public or merely an employment benefit.

An employer that effectively runs a lending business beyond incidental employee assistance should seek legal advice on regulatory requirements.

XLVI. Cooperatives and Lending

Cooperatives may provide credit facilities to members under cooperative laws and regulation. A cooperative is not automatically a lending company regulated in the same way as a private lending corporation. However, a cooperative cannot use its status to conduct unauthorized lending to the general public outside its lawful authority.

Borrowers should verify whether the entity is truly a registered cooperative and whether they are dealing with a legitimate cooperative activity.

XLVII. Pawnshops, Banks, and Other Regulated Entities

Banks, pawnshops, financing companies, money service businesses, and cooperatives may engage in credit-related activities under separate regulatory frameworks. A borrower should know what kind of entity they are dealing with because the regulator, requirements, and remedies may differ.

An entity should not misrepresent itself as a bank, pawnshop, cooperative, or financing company if it does not have proper authority.

XLVIII. Investment Solicitation Disguised as Lending

Some schemes claim to be lending companies but actually solicit investments from the public, promising high returns from lending operations. Lending company authority does not automatically authorize public investment solicitation.

Warning signs include:

Guaranteed high returns;
Referral commissions;
Investment packages;
“Fund our lending pool” offers;
No securities registration;
Ponzi-like payout structure;
Use of lending as cover for investment-taking;
Promise of passive income from borrower collections.

Public investment solicitation generally requires separate legal authority and compliance with securities laws.

XLIX. Foreign Ownership and Foreign Online Lenders

Foreign participation in lending companies may be subject to nationality, investment, SEC, and other legal requirements. Foreign online lenders targeting Philippine borrowers may also raise jurisdiction, licensing, consumer protection, data privacy, and enforcement concerns.

Borrowers should be cautious when a lender:

Has no Philippine-registered entity;
Uses foreign addresses only;
Has no SEC lending authority;
Uses foreign apps with local collectors;
Demands payment to personal accounts;
Provides no local complaint channel;
Collects personal data from Philippine borrowers.

Foreign incorporation does not automatically authorize lending in the Philippines.

L. Business Model Review Before Registration

A proposed lending company should review its business model before applying.

Questions to ask include:

Will loans be online, in-office, or through agents?
What loan products will be offered?
What is the source of funds?
What interest and fees will be charged?
Who are the target borrowers?
Will the company use an app or website?
What personal data will be collected?
Who will collect payments?
Will branches operate?
Will collateral be accepted?
Will checks be required?
Will investors fund the loan portfolio?
Will the company advertise publicly?
Will it use third-party credit scoring?
Will it share data with affiliates?

The answers may determine what legal requirements apply.

LI. Sample Legitimacy Checklist for Borrowers

Before borrowing, check the following:

Full registered company name;
SEC registration number;
Certificate of Authority number;
Official office address;
Official website or verified page;
Contact numbers and email;
Loan contract;
Disclosure statement;
Interest rate and fees;
Total amount payable;
Payment channels;
Receipt policy;
Privacy policy;
Collection policy;
Complaint channel;
Whether the lender appears in warnings or complaints;
Whether the app name matches the registered company;
Whether advance fees are being demanded;
Whether the company uses abusive language;
Whether the lender allows time to review documents.

If several items are missing, the borrower should avoid the transaction.

LII. Sample Compliance Checklist for Lending Companies

A lending company should maintain:

SEC certificate of incorporation;
SEC Certificate of Authority;
Updated general information sheet;
Audited financial statements;
Business permits;
BIR registration;
Loan templates;
Disclosure statement templates;
Privacy notice;
Data processing records;
Collection policy;
Borrower complaint procedure;
Advertising review process;
Agent agreements;
Collector training records;
Receipts and accounting controls;
Cybersecurity safeguards;
Incident response plan;
Board minutes and approvals;
Regulatory filings.

LIII. Sample Borrower Request for Verification

A borrower may send a message such as:

“Before proceeding with the loan application, please provide your SEC-registered corporate name, SEC registration number, Certificate of Authority to Operate as a Lending Company, official office address, loan disclosure statement, privacy policy, and official payment channels. I would also like to confirm the total amount payable, interest, fees, penalties, and due dates.”

A legitimate lender should be able to provide clear information.

LIV. Sample Complaint Narrative Against an Unauthorized Lender

A borrower complaint may state:

“I applied for a loan from [name/page/app] on [date]. The lender claimed to be authorized to lend but refused to provide its SEC Certificate of Authority. It required me to pay advance fees of ₱[amount] through [account]. After payment, the lender failed to release the loan and demanded additional charges. The lender also threatened to contact my relatives and employer. I request investigation of this entity for possible unauthorized lending, fraud, abusive collection, and misuse of personal information.”

Attach screenshots, receipts, account details, messages, and identification of the app or page.

LV. Sample Internal Policy Statement for Lending Companies

A lending company may adopt a policy such as:

“The Company shall operate only within the authority granted by the Securities and Exchange Commission. All loan products shall be documented, disclosed, and reviewed for compliance with applicable laws. The Company shall prohibit harassment, threats, public shaming, unauthorized disclosure of borrower data, hidden charges, and misleading advertising. All collectors, agents, officers, and employees shall comply with lawful collection standards, data privacy requirements, and consumer protection principles.”

LVI. Frequently Asked Questions

Is SEC registration enough to prove a lender is legitimate?

Not always. The lender should have both SEC corporate registration and authority to operate as a lending company. It should also comply with disclosure, collection, privacy, tax, and local permit requirements.

Can an individual operate a lending business without SEC registration?

Occasional private lending may not necessarily require lending company registration. But regularly lending to the public for profit may require compliance with lending company laws.

Can a lending company charge any interest rate it wants?

No. Interest must be agreed upon, disclosed, and not unconscionable. Courts may reduce excessive interest or penalties.

Is an online lending app legal?

It may be legal if operated by a properly registered and authorized lending company and if it complies with disclosure, privacy, collection, and consumer protection rules.

Can a lender access my contacts?

A lender should not collect or use personal data beyond what is lawful, necessary, and proportionate. Misuse of contacts for shaming or harassment may violate privacy and other laws.

Can a lender post my name or photo online if I do not pay?

No. Public shaming and unauthorized disclosure of borrower information may expose the lender to liability.

Can a lending company threaten arrest for unpaid debt?

Ordinary nonpayment of debt does not automatically justify arrest. Threats of arrest may be abusive or misleading unless based on a legitimate criminal process.

Can a borrower refuse to pay because the lender is unregistered?

The borrower should get legal advice. The borrower may still be liable to return money actually received, but the lender may face sanctions and unlawful charges may be challenged.

Where can borrowers complain?

Depending on the issue, complaints may be brought to the SEC, National Privacy Commission, law enforcement, prosecutors, courts, or other relevant offices.

What documents should a legitimate lender provide?

At minimum, the borrower should receive clear loan terms, disclosure of interest and fees, payment schedule, privacy notice, official lender identity, and payment channels.

LVII. Conclusion

Lending company legitimacy in the Philippines requires more than having a business name or social media page. A lawful lending company should be incorporated, registered with the SEC, authorized to operate as a lending company, properly capitalized, locally permitted, tax-compliant, transparent in its loan disclosures, fair in its charges, lawful in its collection practices, and compliant with data privacy obligations.

For borrowers, the safest approach is to verify the lender before applying, demand clear documentation, avoid advance-fee scams, review interest and penalties, protect personal data, and report abusive or unauthorized lenders. For lending companies, compliance must be built into the business model from the beginning. SEC authority, proper documentation, lawful advertising, fair disclosure, responsible collection, and privacy protection are not optional; they are essential conditions for operating a legitimate lending business in the Philippines.