I. Introduction

In the Philippines, lending is a regulated business. A company or person cannot simply advertise loans, collect interest, impose penalties, or operate a financing or lending platform without complying with applicable registration, licensing, and consumer-protection rules. The legal framework exists to protect borrowers from predatory lending, abusive collection, hidden charges, identity misuse, and fraudulent loan schemes.

Verifying whether a lending business is legitimate is therefore not merely a matter of checking whether it has a business name, a Facebook page, a mobile app, or a mayor’s permit. A lending business must be examined through several legal lenses: corporate registration, authority to lend, regulatory supervision, online lending compliance, data privacy obligations, consumer protection rules, taxation, local permits, and the legality of its contracts and collection practices.

This article discusses the Philippine legal context for verifying the registration and legitimacy of a lending business.

II. What Is a Lending Business?

A lending business generally refers to an enterprise that grants loans to the public and earns income through interest, service fees, penalties, or similar charges. In Philippine law and regulation, lending activities may fall under different categories depending on the structure of the business.

The most common categories are:

Lending companies, which are corporations primarily engaged in granting loans from their own capital funds or funds sourced from not more than nineteen persons.
Financing companies, which extend credit facilities through loans, installment sales, factoring, leasing, discounting, or other similar financial arrangements.
Banks and quasi-banks, which are regulated by the Bangko Sentral ng Pilipinas because they accept deposits, perform banking functions, or engage in activities subject to banking supervision.
Pawnshops, which lend money secured by personal property pledged by the borrower.
Cooperatives, which may lend to members under cooperative laws and regulations.
Online lending platforms, which may be lending or financing companies using websites, mobile apps, social media, or digital channels to offer and process loans.

The correct classification matters because different regulators supervise different types of businesses. A business calling itself a “loan provider,” “cash advance company,” “online loan app,” “financing partner,” or “credit service” may still be subject to lending or financing regulations if its actual business is granting loans.

III. Primary Laws and Regulators

The main laws and regulators relevant to lending business registration in the Philippines include the following:

1. Securities and Exchange Commission

The Securities and Exchange Commission, or SEC, is the principal regulator for lending companies and financing companies. A lending company must generally be organized as a corporation and must obtain the proper authority from the SEC before operating as a lending company.

The SEC also regulates financing companies and has issued rules on online lending platforms, unfair debt collection practices, disclosure requirements, ownership requirements, capitalization, and registration.

2. Bangko Sentral ng Pilipinas

The Bangko Sentral ng Pilipinas, or BSP, supervises banks, non-bank financial institutions under its jurisdiction, pawnshops, remittance companies, money service businesses, and other entities covered by banking and monetary regulations.

A company that claims to be a bank, deposit-taking institution, e-wallet operator, remittance company, pawnshop, or money service provider must be checked against BSP-supervised lists.

3. Department of Trade and Industry

The Department of Trade and Industry, or DTI, handles business name registration for sole proprietorships. However, DTI registration alone does not authorize a person or business to operate a lending company. It only registers a business name.

A lender cannot rely solely on a DTI certificate to prove authority to lend to the public if the law requires SEC registration or other regulatory approval.

4. Cooperative Development Authority

The Cooperative Development Authority, or CDA, regulates cooperatives. A cooperative may provide lending services to members if such activity is allowed by its articles, bylaws, and applicable cooperative regulations.

A cooperative lending to the general public, rather than to members, may raise regulatory issues.

5. National Privacy Commission

The National Privacy Commission, or NPC, enforces the Data Privacy Act. Lending businesses often collect sensitive borrower information, such as identification cards, employment details, contact lists, photos, addresses, bank details, and device information. Online lenders in particular must comply with data privacy rules.

Abusive practices such as accessing a borrower’s phone contacts without valid consent, public shaming, unauthorized disclosure of debt, or harassment through personal data misuse may violate privacy laws.

6. Local Government Units

Local government units issue mayor’s permits or business permits. These are necessary for local operation but do not replace SEC, BSP, CDA, or other regulatory authority.

A mayor’s permit only shows that the business has complied with local licensing requirements. It does not necessarily prove that the business has authority to operate as a lender.

IV. Corporate Registration Is Not the Same as Authority to Lend

A common misunderstanding is that a company is legitimate simply because it is registered with the SEC. This is incomplete.

There is a difference between:

SEC company registration and SEC authority to operate as a lending or financing company.

A corporation may be registered with the SEC as a legal entity, but that does not automatically mean it is authorized to engage in lending. Its articles of incorporation, primary purpose, secondary purpose, license, certificate of authority, and regulatory status must be examined.

A lending company normally needs both:

Registration as a corporation, and
A Certificate of Authority to Operate as a Lending Company, when required by law.

For financing companies, a separate authority or license from the SEC is also required.

Therefore, when verifying a lending business, it is not enough to ask, “Is this company SEC-registered?” The better question is:

Is this company registered with the SEC and authorized by the SEC to operate as a lending company or financing company?

V. The Lending Company Regulation Act

The principal statute governing lending companies is the Lending Company Regulation Act of 2007, also known as Republic Act No. 9474.

Under this law, lending companies are required to comply with registration and regulatory standards. The law aims to prevent informal, abusive, and unregulated lending operations.

Key concepts under the law include:

A lending company must generally be organized as a corporation.
It must obtain authority from the SEC before operating.
It may grant loans from its own funds or from funds sourced from a limited number of persons.
It must comply with capitalization requirements.
It must disclose relevant loan terms to borrowers.
It is subject to SEC supervision and sanctions.
Unauthorized lending activity may expose the operator to penalties.

A person or entity that lends occasionally, privately, or personally may not necessarily be operating a regulated lending company. But when lending is carried on as a regular business, advertised to the public, systematized through agents or platforms, or conducted under a business name, regulatory compliance becomes critical.

VI. Financing Companies

Financing companies are governed separately from ordinary lending companies. A financing company usually provides credit facilities through means such as:

installment financing;
leasing;
factoring;
discounting of receivables;
consumer financing;
commercial financing;
credit accommodation; and
similar transactions.

A financing company must be registered and authorized under the applicable financing company laws and SEC regulations.

The distinction between a lending company and financing company may be technical, but it matters. Some businesses call themselves “financing partners” or “loan providers” even though their activities are closer to regulated financing. Verification should therefore include checking the actual services offered, not merely the label used by the business.

VII. Online Lending Platforms

Online lending has created special verification concerns. A company may advertise through:

a mobile application;
a website;
Facebook pages;
TikTok or Instagram accounts;
SMS campaigns;
messaging apps;
third-party agents;
digital wallets;
app stores; or
referral links.

The fact that a lending app is available for download does not mean it is authorized. Likewise, high ratings, paid testimonials, influencer promotions, or professional-looking interfaces do not prove legitimacy.

For online lending platforms, verification should include:

The legal name of the company operating the app.
The SEC registration number of the company.
The SEC Certificate of Authority number, if applicable.
Whether the company is on the SEC list of registered lending or financing companies.
Whether the app or platform is specifically disclosed or registered as an online lending platform.
Whether the platform’s privacy policy identifies the correct operating company.
Whether the lender discloses loan terms before approval.
Whether the app collects excessive permissions, such as access to contacts, photos, messages, or location without a lawful and proportionate basis.
Whether the company has been the subject of SEC advisories, enforcement actions, app takedowns, complaints, or privacy investigations.

A legitimate lending company should not hide its corporate identity behind a brand name. The borrower should be able to identify the exact legal entity, office address, contact details, regulatory authority, and complaint channels.

VIII. Step-by-Step Verification of a Lending Business

1. Identify the Exact Legal Name

The first step is to identify the exact legal name of the business. Many lenders operate under trade names, app names, or marketing brands that are different from the registered corporate name.

For example, a mobile app may use a brand name like “FastCash,” but the actual operator may be a corporation with a completely different legal name.

Ask for or look for:

full corporate name;
SEC registration number;
Certificate of Authority number;
principal office address;
official website;
official email address;
business permit;
name of responsible officers;
privacy policy;
loan contract; and
disclosure statement.

A lender that refuses to disclose its legal name or regulatory authority is a serious red flag.

2. Check SEC Registration

For lending and financing companies, SEC registration is essential. The company’s name should match SEC records.

However, the verification must go beyond checking whether the company exists. A corporation may be registered for a different purpose and may not be authorized to lend. The articles of incorporation and certificate of authority must be checked where possible.

The relevant questions are:

Is the company registered with the SEC?
Is its registration active?
Is its corporate name exactly the same as the name used in the loan documents?
Is its primary or secondary purpose related to lending or financing?
Does it have the required Certificate of Authority?
Has its authority been suspended, revoked, or cancelled?

3. Check the Certificate of Authority

A Certificate of Authority is a key document for a lending company or financing company. It indicates that the SEC has authorized the company to conduct the regulated business.

A legitimate lender should be able to provide details of its authority. The borrower should check whether the certificate:

is issued to the same company offering the loan;
covers the specific lending or financing business;
is current and not revoked;
corresponds to the business’s actual operations; and
is not merely a fabricated or altered document.

A screenshot of a certificate should not be accepted blindly. Fake documents can be created easily. Cross-checking with official records is important.

4. Check SEC Advisories and Enforcement Actions

The SEC regularly issues advisories against unauthorized lending companies, abusive online lending apps, investment scams, and businesses soliciting funds without authority.

A business may be registered with the SEC but still be subject to an advisory or enforcement action for unlawful practices. The existence of an advisory is not automatically a final court judgment, but it is a major warning sign.

Check for:

unauthorized lending advisories;
cease-and-desist orders;
revocation orders;
suspension orders;
online lending app notices;
complaints or warnings involving the company;
misleading use of corporate names; and
entities using names similar to legitimate companies.

Fraudulent operators sometimes imitate the names of registered companies. The exact spelling, SEC number, address, and officers should be compared.

5. Check Whether It Is BSP-Regulated

If the lender claims to be a bank, quasi-bank, pawnshop, money service business, remittance agent, e-money issuer, or financial institution under BSP supervision, verify it with the BSP.

A company should not represent itself as a bank or deposit-taking institution without proper authority. Lending businesses that ask the public to place money, invest funds, deposit cash, or earn guaranteed returns may involve additional regulatory issues.

A lender that combines lending with investment solicitation should be treated with caution.

6. Check DTI Registration for Sole Proprietorships

For sole proprietorships, DTI registration only proves that a business name has been registered. It does not prove that the owner is authorized to operate a lending company.

Because lending companies are generally required to be corporations under the Lending Company Regulation Act, a sole proprietor offering public lending services under a DTI business name may require closer scrutiny.

DTI registration may be relevant for business identity, but it is not a substitute for SEC authority when SEC authority is legally required.

7. Check Local Business Permits

A mayor’s permit or business permit shows that the business has local authorization to operate at a particular address. It is useful but not conclusive.

Check whether:

the permit is issued to the same legal entity;
the business activity indicated includes lending or financing;
the address matches the lender’s disclosed office;
the permit is current;
the barangay clearance and local tax records are consistent; and
the business has an actual office.

A business permit cannot legalize an activity that requires separate national regulatory approval.

8. Check the Loan Documents

A legitimate lender should provide clear loan documents before disbursement. These documents should identify the lender and disclose the loan terms.

Review whether the contract contains:

full name of the lender;
address and contact details;
loan amount;
interest rate;
processing fee;
service fee;
documentary stamp tax, if any;
repayment schedule;
penalties;
total amount payable;
collection procedures;
borrower rights;
privacy consent;
dispute resolution clause; and
governing law.

The lender should not hide charges through vague terms such as “platform fee,” “approval fee,” “unlocking fee,” “verification fee,” or “wallet fee” without clear disclosure.

A request for an upfront payment before loan release is a common fraud indicator.

IX. Disclosure Requirements and Truth in Lending

The Truth in Lending Act requires creditors to disclose the true cost of credit to borrowers. The purpose is to allow borrowers to understand the actual cost of borrowing before agreeing to the loan.

In a lending transaction, the borrower should be informed of material terms such as:

finance charges;
interest rate;
effective interest rate;
service fees;
penalties;
total amount to be paid;
payment schedule; and
consequences of default.

A lender that advertises “low interest” but deducts large fees from the loan proceeds may be misleading borrowers. For example, if the borrower applies for ₱10,000 but receives only ₱7,000 due to deductions, while still being required to repay ₱10,000 plus interest, the actual cost of credit may be much higher than advertised.

Verification of legitimacy should therefore include checking not only registration but also compliance with disclosure laws.

X. Interest Rates, Penalties, and Charges

Philippine law generally allows parties to agree on interest, but interest rates, penalties, and charges may be challenged if they are unconscionable, excessive, iniquitous, or contrary to law, morals, public policy, or regulations.

Courts may reduce excessive interest or penalty charges in appropriate cases. A loan contract is not automatically valid merely because the borrower signed it.

Watch for:

extremely high daily interest;
compounding penalties;
hidden deductions;
automatic rollovers;
multiple penalty layers;
charges not disclosed before approval;
harassment-based collection fees;
inflated attorney’s fees;
vague service fees; and
short loan terms designed to trigger penalties.

A registered lending company can still commit unlawful or abusive acts. Registration is not a license to impose unfair terms.

XI. Collection Practices

A key part of verifying a lending business is examining how it collects debts. The SEC has rules against unfair debt collection practices by financing and lending companies.

Abusive collection practices may include:

using threats or violence;
using obscene or insulting language;
falsely representing legal consequences;
threatening arrest for ordinary unpaid debt;
contacting third persons without proper basis;
publicly shaming borrowers;
posting borrower information online;
contacting employers in an abusive manner;
pretending to be a police officer, prosecutor, court employee, or lawyer;
sending fake subpoenas, warrants, or court documents;
repeated calls at unreasonable hours;
using borrower photos or contact lists for harassment; and
disclosing debt information to friends, family, co-workers, or social media contacts.

Non-payment of a debt is generally a civil matter. A lender should not threaten imprisonment merely because a borrower failed to pay an ordinary loan. However, separate criminal issues may arise in cases involving fraud, falsification, bouncing checks, identity theft, or similar acts.

A legitimate lender may collect debts, send demand letters, negotiate settlement, report to lawful credit information systems where allowed, and file civil cases. It may not use harassment, deception, intimidation, or public humiliation.

XII. Data Privacy Issues in Lending

Lending businesses collect personal information from borrowers. This may include:

name;
address;
birthdate;
government ID;
selfie photo;
employment details;
payslips;
bank or wallet details;
contact numbers;
references;
device information;
location data; and
emergency contacts.

The Data Privacy Act requires personal data processing to be lawful, fair, transparent, proportionate, and limited to legitimate purposes.

For online lending apps, privacy verification is especially important. Red flags include:

requiring access to the borrower’s entire contact list;
accessing photos or files unrelated to loan evaluation;
collecting social media credentials;
vague privacy policies;
sharing data with unnamed third parties;
using personal data for shaming or harassment;
sending messages to contacts about the borrower’s debt;
refusing to delete data when legally required;
failing to identify the personal information controller; and
collecting excessive permissions before loan approval.

Consent buried in an app permission screen may not be valid if it is not informed, specific, and freely given. Even where consent exists, the lender must still comply with proportionality and lawful processing requirements.

A privacy policy should identify:

the company collecting the data;
the purposes of processing;
categories of data collected;
legal basis for processing;
data sharing practices;
retention period;
borrower rights;
data protection officer or contact person;
complaint mechanism; and
security measures.

XIII. Common Red Flags of an Unregistered or Abusive Lender

A lending business may be suspicious if it shows any of the following signs:

It cannot provide its SEC registration number.
It cannot provide a Certificate of Authority.
It uses only a Facebook page, Telegram account, WhatsApp number, or personal GCash number.
It asks for an upfront “processing fee” before releasing the loan.
It claims guaranteed approval without proper verification.
It uses a business name different from the name on the loan agreement.
It uses personal bank or e-wallet accounts for business transactions.
It refuses to issue receipts.
It has no physical office or verifiable address.
It threatens arrest for non-payment.
It sends fake legal documents.
It contacts the borrower’s relatives, friends, employer, or phone contacts to shame the borrower.
It requires access to phone contacts, photos, messages, or social media accounts.
It deducts undisclosed fees from the loan proceeds.
It gives extremely short repayment periods with large penalties.
It is listed in SEC advisories or app warnings.
It uses names similar to legitimate companies.
It pressures the borrower to sign immediately.
It changes terms after approval.
It refuses to provide a copy of the contract.

The presence of one red flag does not always prove illegality, but several red flags together strongly suggest that the borrower should avoid the transaction or seek legal assistance.

XIV. Documents to Request from a Lending Business

A borrower, investor, business partner, or due diligence officer may request the following documents:

SEC Certificate of Incorporation.
Articles of Incorporation.
Latest General Information Sheet.
SEC Certificate of Authority to Operate as a Lending Company or Financing Company.
Business permit or mayor’s permit.
BIR Certificate of Registration.
Official receipts or invoices.
Sample loan agreement.
Disclosure statement.
Privacy policy.
Terms and conditions.
List of authorized representatives or agents.
Board resolution authorizing signatories, if relevant.
Contact details of the compliance officer or data protection officer.
Proof of authority for online lending platform or app, where applicable.
Complaints handling policy.
Collection policy.
Data sharing agreements, where relevant.

The documents should be consistent with one another. Inconsistencies in name, address, registration number, signatory, or business activity should be investigated.

XV. Verifying Agents, Collectors, and Representatives

Some lending businesses use agents, loan officers, field collectors, or third-party collection agencies. Borrowers should verify not only the company but also the person dealing with them.

An agent should be able to show:

company identification;
written authority;
official contact channels;
company-issued email or number;
authorization to collect payments, if applicable;
official receipt process; and
clear instructions on where payments should be made.

Payments should ideally be made only through official company channels. A borrower should be cautious when asked to send payments to a personal e-wallet, personal bank account, or unrelated third party.

Collection agencies must also follow lawful collection practices. A lender cannot avoid responsibility by outsourcing harassment to third-party collectors.

XVI. The Role of Receipts and Tax Registration

A legitimate lending business should be properly registered with the Bureau of Internal Revenue and should issue appropriate receipts or invoices for fees, charges, or payments where required.

The absence of receipts may indicate tax compliance issues or informal operations. While tax registration alone does not prove lending authority, it is part of the broader legitimacy check.

Borrowers should keep:

loan contracts;
disclosure statements;
payment receipts;
screenshots of payment confirmations;
messages from the lender;
demand letters;
call logs;
emails;
proof of harassment, if any; and
copies of IDs or documents submitted.

These records may be important in disputes, complaints, or court proceedings.

XVII. Lending Through Social Media

Social media lending is common in the Philippines. Lenders may operate through Facebook groups, marketplace posts, TikTok videos, Messenger, Viber, Telegram, or WhatsApp.

Social media lending can be legitimate if conducted by a properly registered and authorized company. However, many scams also operate through social media.

Typical social media loan scams include:

advance fee scams;
fake approval notices;
identity theft schemes;
use of stolen corporate names;
fake SEC certificates;
phishing links;
loan offers requiring bank OTPs;
recruitment of borrowers into investment schemes;
“loan assistance” pages pretending to represent banks or government agencies; and
fake agents charging “processing fees.”

A person should never provide OTPs, passwords, banking credentials, or e-wallet PINs to a lender or loan agent.

XVIII. Lending Versus Investment Solicitation

Some entities present themselves as lending companies but also solicit money from the public to fund loans. This may raise securities law issues.

For example, a business may claim:

“Invest in our lending pool.”
“Earn fixed monthly returns.”
“Fund borrowers and receive guaranteed interest.”
“Become a lender-investor.”
“Deposit capital and earn passive income.”
“We use investor funds for lending.”

When a lending business solicits investments from the public, it may need separate authority to offer securities. SEC registration as a corporation or lending company does not automatically authorize public investment solicitation.

A company may be legally allowed to lend but not legally allowed to solicit investments. This distinction is important for both borrowers and investors.

XIX. Government-Issued IDs and Borrower Verification

Lenders may legitimately require borrowers to provide identification documents for credit assessment, fraud prevention, and compliance. However, collection and use of IDs must be limited and lawful.

Borrowers should be cautious when a lender asks for:

multiple IDs unrelated to the loan;
selfies with IDs in suspicious formats;
blank signed documents;
passwords;
OTPs;
ATM cards;
SIM cards;
social media login credentials;
access to contacts;
access to photos;
collateral documents unrelated to the loan; or
notarized documents without explanation.

A legitimate lender should explain why each document is required and how the information will be protected.

XX. Loan Contracts and Electronic Agreements

Online loans are often processed through electronic contracts, checkboxes, OTP confirmations, app-based acceptance, or digital signatures.

Electronic contracts may be valid in the Philippines if legal requirements are met. However, enforceability may still depend on proof that the borrower actually consented to the terms and that the terms were properly disclosed.

Issues to examine include:

whether the borrower had access to the full terms before accepting;
whether charges were clearly disclosed;
whether the acceptance process was recorded;
whether the lender can prove the borrower’s identity;
whether the borrower received a copy of the agreement;
whether the contract terms are unfair or unconscionable; and
whether the lender complied with data privacy requirements.

A hidden term inside an app interface may be challenged if the borrower was not given reasonable notice.

XXI. Complaints Against Lending Businesses

A borrower may consider filing complaints with different agencies depending on the issue.

1. SEC

Complaints may be filed with the SEC for issues involving:

unauthorized lending;
unregistered lending companies;
abusive online lending platforms;
unfair debt collection practices;
misleading corporate representations;
violations by lending or financing companies;
SEC advisories; and
revocation or suspension concerns.

2. National Privacy Commission

Complaints may be filed with the NPC for:

unauthorized access to contacts;
public disclosure of debt;
data privacy violations;
harassment using personal information;
unlawful data sharing;
refusal to respect data subject rights;
excessive data collection; and
inadequate privacy notices.

3. Bangko Sentral ng Pilipinas

Complaints may be directed to the BSP if the entity is a BSP-supervised financial institution, such as a bank, pawnshop, money service business, or e-money issuer.

4. Department of Trade and Industry

The DTI may be relevant for consumer complaints involving deceptive, unfair, or unconscionable sales acts or practices, particularly where the entity is a sole proprietorship or where consumer protection issues arise.

5. Local Government Unit

The LGU may be approached regarding business permit concerns, unauthorized local operations, or misleading business addresses.

6. Philippine National Police or National Bureau of Investigation

Law enforcement may become relevant if there is:

identity theft;
cyber harassment;
extortion;
threats;
blackmail;
falsification;
use of fake documents;
cyber libel;
phishing;
unauthorized account access;
or other criminal conduct.

7. Courts

Courts may be involved in civil collection cases, contract disputes, injunctions, damages, or criminal complaints where applicable.

XXII. Verifying Before Borrowing

Before taking a loan, a borrower should conduct a practical legal check:

Identify the legal company name.
Verify SEC registration.
Verify the Certificate of Authority.
Check whether the lender appears in SEC advisories.
Review the loan contract.
Confirm the total amount payable.
Check the effective interest and all deductions.
Read the privacy policy.
Avoid giving OTPs, passwords, or excessive app permissions.
Confirm official payment channels.
Save all communications.
Avoid upfront payment schemes.
Do not sign blank documents.
Avoid lenders that threaten or pressure.
Confirm whether the business has a real office and official contact details.

A borrower should not rely solely on advertisements, testimonials, or screenshots.

XXIII. Verifying Before Investing in a Lending Business

Investors should apply a stricter standard. A company authorized to lend is not automatically authorized to solicit investments.

Before investing, check:

SEC corporate registration;
lending or financing authority;
authority to solicit investments, if any;
securities registration or exemption;
financial statements;
audited reports;
ownership structure;
loan portfolio quality;
default rates;
collection practices;
compliance history;
tax compliance;
litigation history;
data privacy compliance;
source of borrower funds;
use of investor funds;
promised returns;
risk disclosures; and
whether returns are guaranteed.

Guaranteed high returns, referral commissions, and public pooling of funds are classic signs requiring deeper legal review.

XXIV. Consequences of Operating Without Authority

A lending business operating without required authority may face serious consequences, including:

SEC enforcement action;
revocation or suspension of registration;
administrative fines;
cease-and-desist orders;
disqualification of officers;
criminal complaints where applicable;
civil liability;
tax consequences;
business permit cancellation;
app takedown or platform removal;
reputational damage;
privacy enforcement action; and
possible liability for officers, directors, agents, or collectors.

Contracts entered into by an unauthorized lender may still raise complex legal issues. A borrower may not automatically be freed from all repayment obligations simply because a lender has regulatory defects, especially if money was actually received. However, the lender’s lack of authority, abusive charges, illegal collection methods, or defective disclosures may affect enforceability, penalties, damages, and regulatory liability.

XXV. Legal Effect of Borrowing From an Unregistered Lender

Borrowers often ask whether they must repay a loan if the lender is unregistered. The answer depends on the facts.

As a general principle, if a borrower actually received money, there may be an obligation to return what was received. However, excessive interest, unlawful penalties, hidden charges, abusive terms, or illegal collection practices may be challenged.

The lender’s lack of authority may also expose it to regulatory penalties, but that does not always mean the borrower can keep the money without consequence.

The proper legal analysis may involve:

validity of the loan contract;
proof of disbursement;
consent of the borrower;
disclosure of terms;
legality of interest and penalties;
unjust enrichment principles;
regulatory violations;
unfair collection practices;
data privacy violations;
and available remedies.

The borrower should distinguish between the principal amount actually received and illegal or excessive charges imposed by the lender.

XXVI. Harassment and Threats of Imprisonment

Debt collection harassment is one of the most common problems involving unregistered or abusive lenders.

A borrower should understand that inability to pay an ordinary debt is generally not a crime by itself. The Philippine Constitution prohibits imprisonment for debt. However, criminal liability may arise from separate wrongful acts, such as fraud, estafa, falsification, or issuing worthless checks under applicable law.

A lender or collector should not misrepresent the law by saying:

“You will be arrested today.”
“Police are on the way.”
“A warrant has been issued,” when none exists.
“You will go to jail if you do not pay immediately.”
“We will post your face online.”
“We will message all your contacts.”
“We will tell your employer you are a criminal.”

Such statements may be evidence of abusive collection, harassment, or other unlawful conduct.

XXVII. Special Concerns With Salary Loans and Employer-Based Lending

Some lenders offer salary loans, payroll loans, or loans tied to employment. These arrangements may involve salary deduction authorizations, employer coordination, or payroll account access.

Verification should include:

whether the lender is authorized;
whether the employer has a legitimate arrangement with the lender;
whether salary deduction is voluntary and documented;
whether the borrower received full disclosure;
whether deductions comply with labor rules;
whether the lender contacts the employer only within lawful limits;
whether personal data is shared properly; and
whether the borrower can revoke or challenge improper deductions.

A lender should not use employment information as a tool for public embarrassment or coercion.

XXVIII. Collateral, Chattel Mortgages, and Security Arrangements

Some lending businesses require collateral, such as vehicles, appliances, jewelry, land titles, OR/CR documents, postdated checks, ATM cards, or salary ATM cards.

Borrowers should be cautious. Security arrangements may require specific legal formalities. For example:

real estate mortgages must comply with property and registration laws;
chattel mortgages have documentary and registration requirements;
pawn transactions are regulated separately;
postdated checks may create additional legal risks;
surrendering ATM cards may be abusive or unlawful depending on circumstances;
blank signed documents are dangerous; and
land titles should not be surrendered without clear legal documentation.

A legitimate lender should document collateral arrangements clearly and lawfully.

XXIX. Checklist for Verifying a Lending Company

A concise verification checklist is as follows:

Identity

Exact legal name
Brand name or app name
Office address
Official website
Official email and phone number
Names of officers or representatives

Registration

SEC Certificate of Incorporation
SEC registration number
Certificate of Authority
Business permit
BIR registration
Relevant BSP, CDA, or other regulator registration, if applicable

Regulatory Status

Active registration
No revocation or suspension
No adverse SEC advisory
No misleading similarity to another company
Online lending platform compliance, if applicable

Loan Terms

Principal amount
Net proceeds
Interest rate
Effective cost of credit
Fees and deductions
Penalties
Payment schedule
Total amount payable
Default consequences

Data Privacy

Privacy policy
Data protection contact
App permissions
Data sharing
Retention period
Borrower rights
Proportionality of data collected

Collection

Lawful collection policy
No threats
No shaming
No fake legal documents
No unauthorized third-party disclosures
Clear payment channels
Official receipts

Warning Signs

Upfront fees
Personal payment accounts
No written contract
No disclosure statement
No verifiable office
Excessive interest
Harassment
Fake authority documents
Pressure tactics

XXX. Practical Examples

Example 1: SEC-Registered Corporation Without Lending Authority

A corporation shows its SEC Certificate of Incorporation and says it is “SEC registered.” However, it cannot show a Certificate of Authority to operate as a lending company. Its articles of incorporation show a general trading purpose, not lending.

This is not enough. SEC incorporation alone does not prove authority to lend.

Example 2: Online Loan App With Hidden Operator

A mobile app offers instant loans but does not disclose the legal company name. Its privacy policy mentions a foreign company, while payments are collected through a personal e-wallet account.

This is a major red flag. The borrower cannot properly verify the lender, the regulator, or the responsible entity.

Example 3: Lender With Authority but Abusive Collection

A registered lending company grants a loan but later threatens to message the borrower’s contacts and post the borrower’s photo online.

Registration does not excuse abusive collection. The borrower may have remedies before the SEC, NPC, or law enforcement depending on the facts.

Example 4: Fake Agent Using a Real Company Name

A person claims to represent a legitimate lending company and sends a screenshot of a certificate. The person asks for a “release fee” through a personal GCash account.

This may be a scam. The borrower should contact the company through official channels and avoid paying upfront fees.

Example 5: Lending Business Soliciting Investments

A lending company tells the public to invest ₱50,000 and earn fixed monthly returns from its borrower pool.

Even if the company is authorized to lend, it may not be authorized to solicit investments. Separate securities laws may apply.

XXXI. Best Practices for Lending Businesses

A legitimate lending business should maintain strong compliance practices, including:

Proper SEC registration and authority.
Accurate public disclosure of corporate identity.
Transparent loan terms.
Truth in Lending compliance.
Fair collection policies.
Data privacy compliance.
Secure handling of borrower information.
Proper agent authorization.
Official payment channels.
Receipts and tax compliance.
Complaint handling procedures.
Regular compliance review.
No misleading advertisements.
No hidden fees.
No abusive collection.

A lending business that treats registration as a mere formality exposes itself to regulatory, civil, and reputational risk.

XXXII. Conclusion

Verifying a lending business registration in the Philippines requires more than checking whether a name appears in a government database. A proper verification examines the lender’s exact legal identity, SEC registration, Certificate of Authority, regulatory status, loan documents, disclosure practices, data privacy compliance, collection methods, payment channels, and complaint history.

The key legal principle is simple: registration as a business entity is not the same as authority to operate as a lending business. A legitimate lender should be transparent, traceable, properly authorized, compliant with disclosure rules, respectful of borrower privacy, and lawful in its collection practices.

Borrowers should be especially cautious with online loan apps, social media lenders, advance-fee schemes, personal e-wallet collections, fake legal threats, and lenders that refuse to disclose their corporate identity. Investors should also remember that authority to lend does not automatically mean authority to solicit investments from the public.

In the Philippine context, legality depends not only on the existence of registration documents but also on whether the lender is authorized for the specific activity it performs and whether it conducts that activity in accordance with law, regulation, and public policy.