A lending company can look professional online and still be unauthorized. In the Philippines, a “legit” lender is not just a business with a Facebook page, app, barangay permit, DTI name, or even an SEC certificate of incorporation. For a company to legally lend money to the public as a lending company, it must generally be a corporation and must have a valid Certificate of Authority to Operate as a Lending Company from the Securities and Exchange Commission (SEC). If it operates through a website or mobile app, the online platform should also be properly reported or recorded with the SEC. This guide explains how to check a lending company’s legitimacy, what documents to ask for, where to verify, and what red flags to watch before you borrow.

What Makes a Lending Company Legitimate in the Philippines?

A lending company is legitimate when it has the legal authority to operate under Philippine law and complies with borrower-protection rules.

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. The law expressly says that a lending company cannot conduct business unless it has authority to operate from the SEC.

This means there are two different things you must check:

What you are checking	What it proves	Is it enough by itself?
SEC Certificate of Incorporation	The corporation exists as a registered company	No
SEC Certificate of Authority to Operate as a Lending Company	The company is authorized to engage in lending	Yes, but still check status
Recorded online lending platform, app, or website	The company reported its online lending channel to the SEC	Needed if it lends through an app or website
DTI business name	A sole proprietor or business name was registered	Not enough for lending to the public
Mayor’s permit or barangay clearance	Local business permitting	Not enough for lending authority

The most common mistake is assuming that “SEC registered” automatically means “authorized lender.” It does not. Many corporations are SEC-registered for ordinary business purposes, but they are not allowed to lend money to the public unless they have the proper secondary license or Certificate of Authority.

Legal Basis: Philippine Laws and Rules That Protect Borrowers

Several Philippine laws and SEC rules work together in this area.

Republic Act No. 9474: Lending Company Regulation Act of 2007

RA 9474 is the main law for lending companies. It provides that:

A lending company must be organized as a corporation.
It must have a valid authority to operate from the SEC.
It must generally comply with capitalization and reporting requirements.
The SEC may suspend or revoke the lending company’s authority and impose fines for violations.
Engaging in lending business without valid SEC authority may carry fines, imprisonment, or both.

RA 9474 also recognizes that lending companies are regulated mainly by the SEC, although certain entities connected with banks or quasi-banks may involve Bangko Sentral ng Pilipinas (BSP) supervision.

Republic Act No. 8556: Financing Company Act of 1998

Some lenders are not “lending companies” but financing companies. A financing company may engage in direct lending, leasing, factoring, and similar financing activities under Republic Act No. 8556. Like lending companies, financing companies also need authority from the SEC.

For borrowers, the practical point is simple: if the entity says it is a financing company, check whether it is on the SEC’s list of registered financing companies and whether its authority is still valid.

Republic Act No. 3765: Truth in Lending Act

The Truth in Lending Act requires creditors to disclose the true cost of credit before the loan is completed. A legitimate lender should be able to give you a clear written disclosure showing:

Amount borrowed
Interest rate
Finance charges
Service fees
Processing fees
Penalties
Total amount to be paid
Effective annual interest rate or equivalent rate
Payment schedule

If the lender refuses to give a disclosure statement before you accept the loan, that is a serious warning sign.

SEC Memorandum Circular No. 18, Series of 2019: Unfair Debt Collection Practices

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies, including collection agents. It covers abusive conduct such as threats, harassment, deceptive collection methods, and improper disclosure or publication of borrower information.

A lender may collect a valid debt, but it must do so lawfully and in good faith. A legitimate debt does not give the lender the right to shame you online, threaten your family, message your entire contact list, or pretend to be a police officer, lawyer, court sheriff, or barangay official.

SEC Memorandum Circular No. 19, Series of 2019: Online Lending Platforms and Advertising Disclosures

SEC MC No. 19, Series of 2019 requires lending and financing companies to disclose important identifying information in advertisements and online lending platforms, including their corporate name, SEC registration number, and Certificate of Authority number.

This is important because many online lending apps operate under catchy brand names that are different from the actual SEC-registered corporation. A legitimate online lending platform should not hide the corporation behind the app.

Republic Act No. 10173: Data Privacy Act of 2012

The Data Privacy Act protects personal information. Online lending apps must handle borrower data lawfully, fairly, and securely.

Be careful with apps that ask for unnecessary permissions such as full contact list access, social media access, photo gallery access, or permission to message your contacts. The National Privacy Commission has repeatedly dealt with complaints involving online lenders that allegedly used borrowers’ personal data for harassment or public shaming.

Republic Act No. 11765: Financial Products and Services Consumer Protection Act

Republic Act No. 11765 strengthens consumer protection for financial products and services. It recognizes financial consumers’ rights to fair treatment, disclosure and transparency, data privacy, protection from fraud and misuse, and timely complaint handling.

For ordinary borrowers, this means lenders should not rely on confusing loan terms, hidden charges, aggressive collection, or misleading advertisements.

Step-by-Step: How to Check If a Lending Company Is Legitimate

1. Get the Exact Name of the Company

Before searching online, collect the lender’s exact details. Do not rely only on the app name or Facebook page name.

Ask for:

Complete corporate name
SEC registration number
Certificate of Authority number
Registered business address
Name of the online lending app, website, or platform
Customer service email and phone number
Name of the person or agent communicating with you
Copy of the loan agreement and disclosure statement

For example, an app may be called “Quick Peso Loan,” but the SEC-registered company may have a different corporate name. You need the corporate name because that is what you will verify with the SEC.

2. Check the SEC List of Registered Lending Companies

Go to the SEC’s official website and look for the page for lending and financing companies.

Check the SEC’s list of:

When checking, search using:

Exact corporate name
Distinctive words in the name
SEC registration number
Certificate of Authority number
App or platform name

If the lender is not on the list, do not immediately assume the worst, because lists may be updated or reorganized. But you should pause and verify directly with the SEC before giving personal data or accepting money.

3. Confirm That the Certificate of Authority Is for Lending or Financing

A corporation may show you a Certificate of Incorporation and say, “SEC registered kami.” That is not enough.

Look for the document or number showing a Certificate of Authority to Operate as a Lending Company or Certificate of Authority to Operate as a Financing Company.

A real authority should match the corporate name. Be careful if:

The app name is different and the company cannot explain the connection.
The Certificate of Authority belongs to another company.
The document is blurry, cropped, or missing pages.
The company refuses to show its CA number.
The company says a DTI certificate is enough.
The company claims it is “registered abroad” but has no Philippine SEC authority.

If the lender operates in the Philippines or lends to Philippine borrowers using a Philippine-facing platform, it should be able to identify its Philippine legal entity and regulatory authority.

4. Check Whether the Online App or Website Is Recorded

For online lending apps, do not stop at checking the company. Check the actual app or website.

A company may be legitimate for branch-based lending but may still violate SEC rules if it operates an unreported or unrecorded online lending platform. The SEC has previously warned that lending and financing companies must report and disclose their online lending platforms and display their corporate name, SEC registration number, and Certificate of Authority number in their apps or advertisements.

Check whether the app name appears in the SEC’s recorded online lending platform list. If the app is not listed but the company claims it is “under” a registered lending company, ask for proof that the platform was reported to the SEC.

5. Search the SEC eSEARCH or SEC Express System

For higher-value loans or suspicious lenders, use official SEC document channels.

You may check available corporate records through:

Useful documents include:

Document	What it helps you verify
Certificate of Incorporation	Whether the corporation exists
Articles of Incorporation	Corporate purpose and authorized activities
Latest General Information Sheet	Current directors, officers, address, and ownership information
Certificate of Authority or related SEC certification	Whether it is allowed to operate as a lending or financing company
Amendments	Name changes, purpose changes, or other updates

For many borrowers, checking the SEC list is enough for a small personal loan. But if you are borrowing a large amount, signing postdated checks, pledging collateral, or dealing with a lender that seems aggressive, paying for official documents can be worth it.

6. Check SEC Advisories, Revocations, and Complaints History

A company may have been registered before but later suspended, revoked, or penalized.

Look for:

SEC advisories against the company
Cease-and-desist orders
Revocation orders
Suspension notices
News releases involving the company
Complaints about abusive collection practices
App store reviews showing patterns of harassment or hidden charges

Search the corporate name, app name, and key officers’ names together with words like:

“SEC advisory”
“revoked”
“suspended”
“online lending”
“complaint”
“harassment”
“cease and desist”

Be careful with social media posts, because some may be inaccurate or exaggerated. But if many borrowers report the same pattern—hidden fees, unauthorized contact access, threats, or public shaming—treat it as a serious risk.

7. Review the Disclosure Statement Before Accepting the Loan

A legitimate lender should give you the loan terms before you click “accept,” sign, or receive the money.

Look for:

Principal amount
Amount actually released to you
Processing fee
Service fee
Interest rate
Penalty rate
Due date
Installment schedule
Total repayment amount
Early payment rules
Late payment consequences
Collection process
Data privacy consent

A common abusive pattern is advertising “0% interest” but deducting large “processing fees” upfront. For example, you apply for ₱10,000, but only ₱7,000 is released, and you must repay ₱10,000 in seven days. Even if the word “interest” is avoided, the cost of credit may still be very high.

8. Compare the Loan Agreement With What Was Advertised

Save screenshots of the advertisement and compare them with the final loan documents.

Watch for mismatches such as:

Advertisement says “low interest,” but the disclosure shows high fees.
Advertisement says “30 days,” but the app gives only 7 days.
Agent says “no penalty,” but the contract imposes daily charges.
App says “privacy protected,” but it asks for contact list access.
Website says one company name, but the agreement names another.

If the terms change after you upload IDs or bank details, step back before accepting the loan.

Red Flags That a Lending Company May Not Be Legitimate

A lender may be risky or unauthorized if you see several of these signs:

It cannot provide a Certificate of Authority number.
It only shows a DTI certificate or barangay permit.
The app name does not match any SEC-recorded platform.
It uses a foreign company name but no Philippine SEC-registered entity.
It asks you to pay an “advance processing fee” before releasing any loan.
It asks for your OTP, online banking password, or e-wallet PIN.
It requires access to your contact list, gallery, SMS, or social media accounts without a clear legal reason.
It threatens to post your photo or message your employer.
It tells you nonpayment is automatically a criminal case.
It claims police, NBI, barangay, or court action will happen immediately without proper legal process.
It refuses to give a written disclosure statement.
It communicates only through personal numbers or disappearing accounts.
It pressures you to decide within minutes.
It offers loans through random Facebook comments, Telegram groups, or unsolicited texts.
It uses another company’s SEC certificate.

One red flag may be explainable. Several red flags together should make you stop.

“SEC Registered” vs. “Authorized to Lend”: Why the Difference Matters

Many borrowers are misled by the phrase “SEC registered.”

In the Philippines, corporations are generally registered with the SEC. A restaurant corporation, construction company, online seller, or consulting firm may be SEC-registered. That does not mean it can legally lend money to the public.

For lending, the key document is the Certificate of Authority.

Think of it this way:

SEC incorporation = the company was born as a corporation.
Certificate of Authority = the company is licensed to do lending or financing business.

A company that has only the first but not the second should not present itself as a lending company.

Special Issues for Online Lending Apps

Online lending apps create extra risks because the transaction happens quickly and the borrower often gives sensitive personal data before reading the final loan terms.

Before installing or using an online lending app, check:

Is the corporate name visible in the app description?
Is the SEC registration number shown?
Is the Certificate of Authority number shown?
Is the privacy policy available before you apply?
Is the app listed as a recorded online lending platform?
Does the app ask for unnecessary permissions?
Are the loan terms shown before disbursement?
Is there a real customer service channel?
Does the company have a Philippine address?
Are complaints online about harassment consistent and specific?

Do not allow broad phone permissions just because you are desperate for cash. Once an app collects your contacts or photos, damage can happen quickly if the operator is abusive.

What Documents Should a Legitimate Lending Company Give You?

Before you borrow, you should be able to request or access these documents:

Document or information	Why it matters
SEC registration number	Helps identify the corporation
Certificate of Authority number	Shows authority to operate as lender or financing company
Corporate name and registered address	Lets you verify the actual legal entity
Disclosure statement	Shows the true cost of credit
Loan agreement	Contains repayment, penalties, default, and collection terms
Privacy notice	Explains how your data will be collected and used
Official receipt or acknowledgment	Records payments made
Amortization or repayment schedule	Helps prevent surprise charges
Contact details for complaints	Shows accountability

For online loans, save copies immediately. Some apps do not make documents easy to retrieve later.

Practical Verification Timeline

The time needed depends on how careful you want to be.

Verification step	Typical time needed
Search the SEC lending/financing lists	10–30 minutes
Check app name against recorded online lending platforms	10–30 minutes
Search SEC advisories and public complaints	15–60 minutes
Request SEC documents online	Usually a few days, depending on availability and payment processing
Ask SEC through iMessage or official channels	May take several working days, depending on queue and complexity
File a formal complaint	Longer, because evidence and forms must be prepared properly

If the loan is urgent, at least do the basic SEC list check, app-name check, and disclosure review before accepting.

What If the Lender Is a Cooperative, Pawnshop, Bank, or Financing Company?

Not all legitimate credit providers are “lending companies.”

Different entities may be regulated by different agencies:

Type of lender	Usual regulator
Lending company	SEC
Financing company	SEC
Bank	BSP
Pawnshop	BSP
Cooperative offering credit to members	Cooperative Development Authority
Microfinance NGO	Microfinance NGO Regulatory Council
Credit card issuer or bank loan provider	BSP, and sometimes other regulators depending on entity

If a cooperative lends only to members, check with the Cooperative Development Authority. If it is a bank or pawnshop, check BSP channels. If it is a financing or lending company, check SEC.

If You Are a Foreigner Borrowing in the Philippines

Foreigners can borrow money in the Philippines, but lenders may impose stricter documentation requirements. Common requirements include:

Passport
Alien Certificate of Registration Identity Card, if applicable
Visa or proof of stay
Local address
Philippine mobile number
Proof of income
Employment contract, business documents, or pension documents
Local bank account or e-wallet
Spouse or co-borrower information, if applicable

A legitimate lender should still follow Philippine lending, disclosure, and data privacy rules when dealing with foreign borrowers in the Philippines.

Be cautious if a lender says foreign borrowers must surrender their passport, pay a “guarantee fee” before release, or sign documents they are not allowed to read. A lender may verify identity, but it should not use immigration status to intimidate or trap a borrower.

What If You Already Borrowed From a Suspicious Lending Company?

If you already borrowed and now suspect the lender is unauthorized or abusive, take these steps.

Save all evidence. Keep screenshots of the app, loan offer, disclosure statement, loan agreement, payment receipts, messages, call logs, threats, and proof of contact-list harassment.
Do not delete the app immediately if it contains evidence. First, capture screenshots or screen recordings. If you fear data misuse, revoke app permissions in your phone settings.
Pay only through traceable channels. Avoid sending money to random personal accounts unless the lender officially identifies them in writing. Keep receipts.
Ask for a statement of account. Request a breakdown of principal, interest, fees, penalties, payments, and remaining balance.
Verify with the SEC. Use the SEC lists and official inquiry channels to confirm whether the company has authority.
File a complaint if needed. For lending or financing company violations, use the SEC iMessage portal or the SEC complaint channel for lending and financing companies. For privacy violations, check the National Privacy Commission complaint process. For threats, extortion, identity theft, or hacking, consider reporting to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DOJ Office of Cybercrime.
Do not ignore real legal notices. If you receive an actual court summons, subpoena, barangay notice, or formal demand letter, read it carefully and respond within the required period.

A suspicious lender does not automatically erase a real debt, especially if you actually received money. But unauthorized lending, hidden charges, privacy violations, and abusive collection can expose the lender to administrative, civil, or criminal consequences.

Common Tricks Used by Fake or Abusive Lenders

The “processing fee first” scam

The lender approves your loan but asks you to send a fee before release. After payment, it asks for another fee or disappears. Legitimate lenders normally deduct disclosed fees from proceeds or charge them under written terms, not through random personal transfers before release.

The “borrower committed estafa” threat

Nonpayment of a loan is usually a civil matter. It does not automatically become estafa. Criminal liability may arise only if there are specific elements under the Revised Penal Code, such as deceit from the beginning or issuance of worthless checks under applicable laws. A collector cannot simply declare you criminally liable to scare you into paying.

The “barangay or police will arrest you today” threat

Police do not arrest people merely because a collector says they failed to pay an online loan. Court processes, warrants, subpoenas, and barangay proceedings have rules. Threats of instant arrest are often intimidation tactics.

The “contact list blast”

Some online lenders threaten to message your family, employer, friends, or phone contacts. This may raise issues under SEC debt collection rules and the Data Privacy Act, especially if the contacts are not parties to the loan.

The “foreign company, no Philippine office” excuse

A lender serving Philippine borrowers cannot avoid Philippine regulation simply by saying it is based abroad. At the very least, you should ask which Philippine SEC-registered company is lending, what its authority number is, and whether the platform is recorded.

Where to Verify or Complain

Concern	Office or channel
Check lending or financing company registration	SEC lending and financing company lists
Check online lending app or platform	SEC recorded online lending platform list
Request corporate records	SEC eSEARCH or SEC Express
File complaint against lending or financing company	SEC iMessage or SEC lending/financing complaint channel
Data privacy violation, contact-list harassment, public shaming	National Privacy Commission
Cyber threats, extortion, identity misuse, hacking	PNP Anti-Cybercrime Group or NBI Cybercrime Division
Bank, pawnshop, or BSP-supervised entity	Bangko Sentral ng Pilipinas
Cooperative lending issue	Cooperative Development Authority

Frequently Asked Questions

How do I know if a lending company is legit in the Philippines?

Check whether it is a corporation with a valid SEC Certificate of Authority to Operate as a Lending Company or Financing Company. If it lends through an app or website, check whether the online lending platform is recorded with the SEC. Do not rely only on a DTI certificate, barangay permit, Facebook page, or SEC Certificate of Incorporation.

Is SEC registration enough for a lending company?

No. SEC registration only proves that the corporation exists. A lending company also needs a Certificate of Authority from the SEC to legally engage in lending business. Always ask for the CA number and verify it.

How can I check if an online lending app is registered with the SEC?

Look for the app’s corporate operator, SEC registration number, Certificate of Authority number, and app name. Then compare these against the SEC lists of registered lending companies, registered financing companies, and recorded online lending platforms. If the app name does not match the company’s disclosed platforms, verify directly with the SEC.

Can a lending company operate with only a DTI permit?

No, not as a lending company lending to the public under RA 9474. Lending companies must be corporations and must have SEC authority. A DTI business name registration is not a license to operate a lending company.

What if the company shows me a Certificate of Incorporation?

Ask for the Certificate of Authority to Operate as a Lending Company or Financing Company. The Certificate of Incorporation alone is not enough. It only shows corporate existence, not lending authority.

Are online lending apps allowed to access my contacts?

Online lenders must comply with the Data Privacy Act. Access to personal data must be lawful, necessary, transparent, and proportionate. Apps that harvest contacts to shame or pressure borrowers may face privacy and regulatory issues. Be very careful with apps requesting unnecessary phone permissions.

Can a lending company threaten to file a criminal case if I do not pay?

A lender may pursue lawful remedies for unpaid debt, but nonpayment is not automatically a crime. Threats of immediate arrest, public shaming, fake police action, or fake court notices are red flags. Real legal processes follow formal rules.

Where can I complain about an abusive lending company?

For lending or financing company violations, file with the SEC through its official complaint channels or iMessage portal. For data privacy violations, file with the National Privacy Commission. For cyber harassment, extortion, identity theft, or threats, consider reporting to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DOJ Office of Cybercrime.

What should I do before accepting an online loan?

Verify the company and app with the SEC, read the disclosure statement, compute the total repayment amount, check app permissions, save copies of all documents, and avoid lenders that pressure you to decide immediately or hide their corporate identity.

Does an unauthorized lender mean I no longer need to pay?

Not necessarily. If you received money, there may still be a debt issue. However, unauthorized lending, hidden charges, privacy violations, and abusive collection may give you grounds to complain, dispute improper charges, or raise defenses depending on the facts.

Key Takeaways

A legitimate lending company in the Philippines must generally be a corporation with a valid SEC Certificate of Authority to Operate as a Lending Company.
SEC incorporation alone is not enough. Always check the Certificate of Authority.
For online lending apps, verify both the company and the specific app or platform.
A DTI certificate, barangang permit, Facebook page, or app store listing does not prove authority to lend.
Legitimate lenders should disclose the true cost of credit before you accept the loan.
Hidden fees, advance processing fees, contact-list access, threats, and fake criminal warnings are major red flags.
Borrowers are protected by RA 9474, RA 3765, RA 10173, RA 11765, and SEC rules on online lending and debt collection.
Save evidence early if you suspect harassment, privacy violations, or unauthorized lending.
Complaints may be filed with the SEC, National Privacy Commission, and cybercrime authorities depending on the issue.