A lending company can have a polished website, thousands of social-media followers, and an app available for download—and still lack authority to lend in the Philippines. The safest approach is to verify the exact legal company, its current Certificate of Authority from the Securities and Exchange Commission (SEC), and, for digital loans, the specific online lending platform or brand before submitting identification documents, granting phone permissions, or paying any money.

What Makes a Lending Company Legitimate in the Philippines?

A legitimate lending company normally passes three separate tests:

The company legally exists. It is registered as a corporation with the SEC.
The company is authorized to lend. It holds a valid Certificate of Authority to operate as a lending company.
Its actual loan operations comply with consumer-protection rules. It provides clear disclosures, charges lawful rates and fees, protects personal information, and uses fair collection methods.

Passing only the first test is not enough. A corporation may be registered with the SEC for another business purpose but have no authority to offer loans.

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, a lending company must generally be organized as a stock corporation and obtain a Certificate of Authority from the SEC before engaging in the lending business. The Supreme Court has likewise recognized that only corporations with valid SEC authority may operate as lending companies. (Lawphil)

A Certificate of Authority is sometimes called a secondary license because it is separate from the company’s basic SEC Certificate of Incorporation.

Which Government Agency Regulates the Lender?

Not every business that lends money is legally classified as a “lending company” under RA 9474. Check the type of institution before deciding where to verify it.

Type of lender	Main regulator or verification source
Lending company	Securities and Exchange Commission
Financing company	Securities and Exchange Commission
Bank or digital bank	Bangko Sentral ng Pilipinas
Pawnshop	Bangko Sentral ng Pilipinas
Cooperative	Cooperative Development Authority
Government lending institution	The agency’s enabling law and official government website

RA 9474 excludes banks, financing companies, pawnshops, cooperatives, insurance companies and several other institutions already governed by separate laws. A genuine bank or cooperative may therefore be absent from the SEC list of lending companies without being unauthorized. Verify it instead through the BSP directory of banks and non-bank financial institutions or the CDA Cooperative Masterlist. (Lawphil)

How to Check If a Lending Company Is Legitimate

1. Get the lender’s complete legal identity

Do not search using only the app name, Facebook page name, or advertising brand. Ask the lender for:

Full SEC-registered corporate name
SEC registration number
Certificate of Authority number
Registered business address
Official telephone number and email address
Name of the online lending platform, if applicable
Website address and privacy policy
Name of the company that will receive repayments

For example, an app may be advertised as “Quick Peso,” while the actual operator is “ABC Lending Company, Inc.” The legal name should appear in the loan agreement, disclosure statement, privacy notice, app-store developer information, and payment instructions.

A vague response such as “We are SEC registered” is not sufficient. Ask for the exact corporation and authority details.

2. Search the company through the SEC’s official systems

Use the SEC Check with SEC portal to search the corporation’s exact name. You may also use SEC eSEARCH to obtain available corporate records and SEC-submitted documents.

Check whether:

The legal name exactly matches the lender’s documents
The SEC registration number is consistent
The company status is active rather than revoked, suspended or delinquent
Its stated business purpose relates to lending
The address matches the lender’s website or agreement

The SEC’s official online-services page identifies both Check with SEC and eSEARCH as verification resources. (Securities and Exchange Commission)

A search result confirming that the corporation exists proves only its primary registration. Continue to the next step to verify its authority to lend.

3. Confirm that the company has a valid Certificate of Authority

Search the SEC’s official list of registered lending companies.

Compare the entry with the information supplied by the lender:

Detail to compare	What to look for
Corporate name	Exact spelling, including “Inc.” or “Corporation”
SEC registration number	Same number shown in the agreement or disclosure
Certificate of Authority	Current authority to operate as a lending company
Registered address	Consistent with official documents
Status	No indication of revocation, suspension or cancellation

Do not accept a screenshot of an SEC certificate as final proof. Certificates can be altered, copied from another company, or retained after an authority has been suspended or revoked.

When the online list is unclear or appears outdated, submit an inquiry through SEC iMessage. Under the Financing and Lending Companies Department options, the SEC provides a service for requesting certification of the status of a lending or financing company’s Certificate of Authority. (Securities and Exchange Commission)

Include the company’s exact legal name, SEC registration number, claimed Certificate of Authority number, app or platform name, and a copy of the document you want verified. Wait for written confirmation before releasing sensitive information or paying an advance amount.

4. Verify the specific online lending app or website

A licensed company’s authority does not automatically prove that every app using its name is genuine. Scammers may impersonate real companies, while some licensed companies may operate platforms that have not been properly recorded or disclosed.

Check the SEC list of recorded online lending platforms. Then match all of the following:

Platform or app name
Operating corporation
Website domain
App-store developer
Privacy-policy owner
Customer-service contact details
Repayment-account holder

The SEC treats online lending platforms as mobile applications, websites or other technology-enabled systems through which lending or financing services are offered. Current government guidance tells borrowers to use official or verified download sources and to confirm that the platform is operated by a duly registered and licensed entity.

A listing in Google Play or Apple’s App Store is not a government license. Neither are positive reviews, download counts, influencer endorsements or a verified social-media badge.

2026 regulatory update: SEC Memorandum Circular No. 20, Series of 2026 provides for the lifting of the moratorium on new online lending platforms beginning August 1, 2026, subject to stricter registration and compliance requirements. This does not make newly launched apps automatically legitimate. The operating company and its platform must still satisfy SEC licensing, registration and disclosure rules. (Context.ph → Context.ph)

5. Ask for the written loan disclosure before accepting

The Truth in Lending Act, Republic Act No. 3765, requires a creditor to give the borrower a clear written disclosure of the cost of credit before the loan is completed.

For lending companies, the disclosure should identify matters such as:

Principal loan amount
Amount actually released to the borrower
Interest rate
Finance charge in pesos
Processing, service or administrative fees
Payment dates and installment amounts
Late-payment penalties
Collection charges
Notarial fees
Other deductions or charges
Procedures in case of default
Total amount the borrower will pay

The “amount borrowed” and “cash received” may be different. For example, a document may state a ₱10,000 principal but release only ₱8,500 after deducting fees. Calculate the loan’s true cost using the amount you actually receive, not merely the stated principal. (Lawphil)

Do not rely on a representative’s verbal statement that “the interest is only 3%.” Ask:

Three percent of what amount?
Is it charged daily, weekly or monthly?
Is the rate flat or based on the declining balance?
Are there processing and service fees?
What is the total repayment amount?
What happens if payment is one day late?

Save or download the disclosure before pressing “Accept.” Some apps make the agreement difficult to retrieve after disbursement.

6. Check whether the interest, fees and penalties comply with current caps

Effective April 1, 2026, SEC Memorandum Circular No. 14, Series of 2025 applies updated caps to covered loans that are:

Unsecured;
For general purposes;
Not more than ₱10,000; and
Payable within four months or less.

For covered loans, the principal limits include:

Charge	Maximum under the current SEC rule
Nominal interest	6% per month, approximately 0.20% per day
Effective interest, including applicable fees	12% per month, approximately 0.40% per day
Late-payment or nonpayment penalty	5% per month on the outstanding scheduled amount due
Total cost of credit	Not more than 100% of the amount borrowed

The total-cost ceiling includes interest, fees, charges and penalties. The SEC also prohibits arrangements designed to evade the caps, such as artificially splitting a loan, disguising interest as another fee, or repeatedly repackaging the same obligation.

These numerical caps do not apply to every loan. Larger loans, longer-term loans and secured loans require a separate examination of the contract and applicable rules. However, the SEC and other financial regulators may determine whether interest and fees are reasonable under the Financial Products and Services Consumer Protection Act, Republic Act No. 11765. (Lawphil)

An unusually expensive loan is a warning sign, but an interest rate alone does not establish whether the company has an SEC license. Verify both the lender’s authority and the legality of the particular charges.

7. Examine how the lender wants to receive money

Be particularly cautious when someone asks you to pay before any loan proceeds are released.

Common scam instructions include paying a supposed:

Loan-release fee
Insurance fee
Account-verification charge
Anti-money-laundering clearance fee
Deposit to “activate” the loan
Tax or documentary fee
Fee to correct an alleged error in your application
Additional amount to unlock frozen proceeds

A legitimate lender may impose lawful and properly disclosed processing charges. The critical warning sign is a demand to transfer money in advance—especially to an individual’s bank account, personal GCash or Maya number, cryptocurrency wallet, or changing account—before the promised loan can be released.

Confirm that the repayment account belongs to the same corporation or an officially disclosed payment partner. Call the company using contact details obtained independently from the SEC record or official website, not merely the number supplied in a chat message.

8. Review the app’s permissions and privacy practices

A lender does not become trustworthy merely because it has an SEC license. A licensed lender can still violate data-privacy or debt-collection rules.

Before installing or using an app, review whether it requests access to:

Your entire contact list
SMS messages
Call history
Photos and videos
Camera and microphone
Precise location
Social-media accounts
Files unrelated to identity verification

The March 2026 joint advisory of the SEC, National Privacy Commission and Department of Information and Communications Technology states that unnecessary, excessive and disproportionate processing of personal information is prohibited. Contact-list access must not be used for harassment or to contact people other than properly designated guarantors. Camera or photo-gallery access may be used for legitimate identity-verification purposes but should be disabled after that purpose has been completed.

A character reference is not automatically a guarantor. A guarantor must expressly consent to assume responsibility for the loan.

For foreign borrowers, a lender may legitimately request a passport, visa, Alien Certificate of Registration Identity Card, Philippine address, proof of income or other know-your-customer documents. Foreign registration of the lender’s parent company, however, does not replace the Philippine operating company’s required local authority. Upload identity documents only through a verified channel, and avoid sending unrestricted copies through personal messaging accounts.

9. Evaluate the lender’s collection policies

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt-collection practices by lending and financing companies and their collection agencies.

Prohibited conduct includes:

Threatening violence or other criminal acts
Threatening action that cannot legally be taken
Using insults, obscenities or profane language
Publicly disclosing a borrower’s name and personal information
Making false or deceptive statements
Contacting unrelated people in the borrower’s phonebook
Contacting a borrower before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions under the circular
Pretending to be a police officer, court employee, lawyer or government official

A collection agency cannot avoid these rules by saying it is a separate company. The original lending or financing company remains ultimately responsible for the conduct of its collection agents.

Late payment can lead to lawful collection, credit reporting or a civil case. It does not authorize public shaming, threats against family members, publication of edited photographs, or fabricated claims that a borrower will be arrested immediately for an ordinary unpaid loan.

A Practical Ten-Minute Verification Checklist

Before continuing with an application, answer each question:

Question	Safe result
Do I know the full legal corporate name?	Yes, not merely the app or brand name
Is the corporation searchable through SEC systems?	Yes
Does it have a current Certificate of Authority?	Yes
Is the specific app or platform recorded with the SEC?	Yes, when applicable
Do the app developer and privacy-policy owner match the operator?	Yes
Have I received a written disclosure of all charges?	Yes
Can I identify the exact amount I will receive and repay?	Yes
Are payment accounts in the company’s or authorized partner’s name?	Yes
Are app permissions limited to legitimate purposes?	Yes
Is anyone demanding an advance payment to a personal account?	No

Do not proceed when important details do not match. A legitimate company should be able to explain discrepancies without pressuring you to decide immediately.

Documents and Evidence to Save

Keep copies of the following from the beginning of the transaction:

Screenshot of the lender’s SEC listing
Certificate of Authority details
Online-platform listing
App-store page and developer name
Website and privacy-policy pages
Loan application and approval notice
Disclosure statement
Promissory note or loan agreement
Repayment schedule
Proof of the amount actually received
Receipts and transaction reference numbers
Names and account numbers of payment recipients
Emails, text messages and chat conversations
Collection calls, voicemails and threatening messages
Screenshots showing app permissions

Record the date of each screenshot. SEC lists, websites and app-store pages can change, and an app may disappear after complaints begin.

Common Red Flags That a Lender May Be Fake or Unauthorized

It presents only a DTI certificate

A Department of Trade and Industry business-name registration does not authorize a person or business to operate as a lending company. Neither does a barangay clearance, mayor’s permit, BIR registration or social-media business registration replace an SEC Certificate of Authority.

Its documents use different company names

A loan agreement issued by one corporation, a privacy notice naming another company, and repayment instructions pointing to an individual create a serious identity problem. Do not assume they belong to the same group without written and independently verifiable proof.

It guarantees approval without meaningful verification

Statements such as “100% approved,” “no requirements,” or “instant loan for everyone” are commonly used to attract advance-fee payments or collect identity data. Fast approval is possible, but a responsible lender normally performs at least identity, eligibility and fraud checks.

It asks for passwords or one-time passwords

A lender does not need your online-banking password, e-wallet PIN, email password, social-media password or one-time password. Never install remote-access software or allow someone to control your phone to “process” a loan.

It creates false urgency

Be cautious when told that approval will expire within minutes, an SEC officer is waiting for payment, or additional money must be sent immediately to prevent arrest or account closure.

It relies on a certificate image that cannot be verified

Fraudsters sometimes use the name and documents of a genuine company. Verification must include the contact details, website, app, bank account and representatives involved—not merely the company name printed on a certificate.

What to Do If You Already Paid or Shared Personal Information

Stop sending additional money. A scammer who obtained one payment will often invent another problem requiring another fee.
Preserve the evidence. Save full-page screenshots, chat exports, receipts, account names, phone numbers, email headers, app links and loan documents before blocking anyone or deleting the app.
Contact your bank or e-wallet provider immediately. Report the transaction as suspected fraud and ask whether the receiving account can be flagged or the transfer investigated. Recovery is not guaranteed, but delay makes tracing and possible freezing more difficult.
Secure your accounts. Change compromised passwords, revoke app permissions, remove remote-access applications and notify contacts if their information may have been exposed.
Report lending or collection violations to the SEC. Use SEC iMessage and select the Financing and Lending Companies Department complaint option. Identify the company, platform, transaction date, loan amount and specific conduct complained of. Attach organized, readable evidence. The 2026 joint advisory also identifies the SEC’s 1-4732 hotline for financing and lending concerns. (Securities and Exchange Commission)
File a privacy complaint when personal data was misused. The National Privacy Commission complaint process requires a completed complaint form and supporting evidence. The form generally must be notarized before submission in person, by courier or through the accepted electronic channel. (National Privacy Commission)
Report threats, impersonation or fraud. Serious harassment, hacking, identity theft, extortion or fraudulent transfers may also be reported to the PNP Anti-Cybercrime Group, NBI Cybercrime Division or DICT Cyber Hotline using the channels listed in the 2026 government advisory on online lending platforms.

A complaint against the lender does not automatically erase a genuine principal obligation. When money was actually borrowed, request a complete statement of account, dispute unauthorized charges in writing, and make payments only through a channel independently confirmed as belonging to the proper creditor.

Frequently Asked Questions

Is SEC registration enough to prove that a lending company is legitimate?

No. SEC incorporation proves that the corporation exists, but a lending company must also have a valid Certificate of Authority to operate. Verify both its corporate registration and its authority to lend.

How can I check whether an online lending app is SEC registered?

Identify the legal company operating the app, verify that company through Check with SEC, confirm its Certificate of Authority in the SEC lending-company list, and check whether the particular app or website appears in the SEC list of recorded online lending platforms.

Is an app legitimate because it is available on Google Play or the Apple App Store?

No. App stores apply their own platform rules but do not issue Philippine lending licenses. Verify the operator directly through SEC records.

What if the app name is different from the SEC-registered company name?

Different names are not automatically suspicious because companies may use registered trade or platform names. The app name must nevertheless be traceable to the licensed corporation through SEC records, the privacy notice, developer information and loan documents. Do not proceed while the relationship remains unclear.

Can a legitimate lender charge a processing fee?

Yes, a lender may charge a properly disclosed and lawful processing fee. It must appear in the written disclosure and be included where applicable in computing the effective cost of credit. A demand to transfer an advance fee to a personal account before release is a strong scam warning.

What is the legal interest rate for online loans in the Philippines?

For covered unsecured, general-purpose loans of up to ₱10,000 with terms of four months or less, the current SEC caps include 6% monthly nominal interest and 12% monthly effective interest, subject to the detailed rules effective April 1, 2026. Other loans are not automatically governed by those same numerical caps.

Can an online lender access all my phone contacts?

It may not use unrestricted contact-list access for harassment or collection from unrelated people. Current government guidance limits contact processing to specified legitimate purposes, such as selecting references or guarantors, and prohibits contacting people who were not properly designated as guarantors.

Can a lender post my photo or message my employer and relatives?

Public shaming, disclosure of personal loan information and contacting unrelated people are prohibited collection practices. Preserve the messages and report the conduct to the SEC and, when personal information was misused, the National Privacy Commission.

What if the lender claims to be a bank, cooperative or pawnshop?

Verify it with the regulator for that type of institution. Banks and pawnshops are generally checked through the BSP, while cooperatives are checked through the CDA. Their absence from the SEC lending-company list does not by itself prove they are unauthorized.

Does an SEC license guarantee that the lender is safe?

No. A valid license establishes authority to operate but does not guarantee that every employee, agent, loan term or collection act complies with the law. Review the actual disclosure, interest and fees, payment instructions, privacy practices and collection conduct.

Key Takeaways

SEC corporate registration alone is not enough. A lending company must have a valid Certificate of Authority.
Verify the exact legal corporation, not merely the app, Facebook page or advertising brand.
For digital loans, confirm that the specific online lending platform is recorded with the SEC.
Obtain and save the written Truth in Lending disclosure before accepting the loan.
Check the amount actually released, total repayment, interest, fees and penalties.
Never send an advance “release” or “activation” payment to a personal account.
App-store availability, reviews and certificate screenshots are not proof of authority.
Excessive data collection, contact-list harassment, threats and public shaming are prohibited.
Keep complete evidence and report lending violations through SEC iMessage, privacy violations to the NPC, and fraud or threats to cybercrime authorities.