The digital transformation of the Philippine financial sector has made borrowing money easier than ever. With just a smartphone, a valid ID, and an internet connection, Filipinos can secure quick cash loans within minutes.

However, this convenience has given rise to a massive underground market of illegal lenders. Many of these operators function as predatory "loan sharks," utilizing high interest rates, hidden fees, and highly abusive collection practices—such as accessing a borrower's phone contacts to harass their family, friends, and co-workers.

For your financial safety and legal protection, it is vital to know how to verify if a lending company is operating legally in the Philippines.

The Legal Framework: Republic Act No. 9474

In the Philippines, lending and financing companies are strictly regulated. The primary law governing these entities is Republic Act No. 9474, also known as the Lending Company Regulation Act of 2007.

Under this law, no person or entity can engage in the business of lending unless they are registered as a corporation and have secured the proper authority from the Securities and Exchange Commission (SEC).

Important Legal Distinction: Individual "5-6" lenders or informal peer-to-peer lenders operating without corporate registration are illegal under Philippine law.

The Two Mandatory SEC Credentials

To determine if a loan company is 100% legitimate, it must possess two distinct certificates issued by the SEC. One without the other means the company cannot legally lend money to the public.

1. Certificate of Incorporation (CR)

This certificate proves that the company is a legally recognized corporation registered with the Philippine government. However, a CR only means the business exists; it does not give them the right to lend money.

2. Certificate of Authority to Operate as a Lending/Financing Company (CA)

This is the critical document. The CA is an explicit authorization from the SEC permitting the corporation to engage in lending activities.

If an online lending app (OLA) or physical loan company has an SEC registration number but cannot provide or display a Certificate of Authority Number (CA Number), their lending operations are unauthorized and illegal.

How to Verify a Loan Company’s Legitimacy

The SEC regularly updates public registries of authorized entities. You can verify any lender by cross-referencing them with official government data.

Step 1: Check the SEC Official Checklists

The SEC maintains public, downloadable lists on its official website (sec.gov.ph):

List of Lending Companies with Certificates of Authority.
List of Financing Companies with Certificates of Authority.
List of Registered Online Lending Platforms (OLPs).

Step 2: Verify the App's Ownership

Many online lending apps use marketing names that differ from their registered corporate names. Legitimate apps are legally required to disclose their corporate name and CA number on their website, app store description, and advertisements.

Example: If the app is called "QuickCash," check its "About Us" or legal footer to find the underlying corporation (e.g., "XYZ Lending Corporation") and verify that corporate name on the SEC list.

Step 3: Check for National Privacy Commission (NPC) Compliance

Because online lending apps require access to personal data, legitimate digital lenders must be registered with the National Privacy Commission (NPC) under the Data Privacy Act of 2012 (R.A. 10173). You can verify a company's compliance status via the NPC's official verification portal.

Major Red Flags of Illegal Lenders

If a loan company exhibits any of the following characteristics, avoid them entirely:

No CA Number: They fail to prominently display their SEC Corporate Name and Certificate of Authority Number on their platform.
Invasive App Permissions: The mobile app demands access to your entire contact list, photo gallery, social media accounts, or location before approving the loan.
Undisclosed Fees: Deducting massive "processing fees" or "service fees" upfront, leaving you with significantly less cash than the approved loan amount.
Abnormally Short Terms: Promising 30-day loans but demanding full repayment within 5 to 7 days.
Threats and Harassment: Threatening to shame you to your contact list, post your ID on social media, or send fake legal sub-poenas if you miss a due date.

Borrower Rights Under Philippine Law

Even if you owe money, you maintain explicit legal rights protected by Philippine regulatory bodies.

Truth in Lending Act (R.A. 3765)

Lenders are legally obligated to provide you with a Disclosure Statement before the loan transaction is perfected. This document must clearly state:

The cash price or clear loan amount.
All down payments or credits.
Every single fee, charge, or finance cost itemized individually.
The total finance charge expressed as an annual percentage rate (APR).

Failure to provide this statement in writing before you sign or accept the loan is a violation of criminal law.

SEC Memorandum Circular No. 18 (Series of 2019)

This circular strictly prohibits unfair collection practices. Debt collectors and lenders are legally banned from:

Using threat of force, violence, or criminal administrative actions.
Using insults, profane language, or public shaming (including contacting people on your contact list who are not your co-makers or guarantors).
Disclosing your debt status to third parties without consent.
Contacting you between 10:00 PM and 6:00 AM, unless explicitly agreed upon.

What to Do If You Fall Victim to an Illegal or Abusive Lender

If you discover a lender is unregistered, or if they subject you to illegal harassment, you should immediately file a formal complaint with the following agencies:

Government Agency	Focus of Complaint	Contact Channels
Securities and Exchange Commission (SEC)	Unregistered lending, lack of CA, or violating loan disclosure laws.	Corporate Governance and Finance Department (CGFD) via `cgfd_flcd@sec.gov.ph`
National Privacy Commission (NPC)	Unauthorized access to phone contacts, data leaks, and online cyber-shaming.	`complaints@privacy.gov.ph`
PNP Anti-Cybercrime Group (PNP-ACG)	Blackmail, extortion, hacking, and serious cyber-harassment threats.	Cybercrime complaints desk at Camp Crame or their official Facebook page.