If you are about to borrow from a lending company, loan app, or “fast cash” business in the Philippines, the safest first step is to verify whether it is legally allowed to lend. In Philippine practice, it is not enough that a company has an SEC registration number or a nice-looking “certificate” posted online. A legitimate lending company must have both a corporate registration with the Securities and Exchange Commission and a valid Certificate of Authority to operate as a lending company. For online lending apps, you also need to check whether the specific app or platform is properly recorded with the SEC.

Why SEC registration matters for lending companies

A lending company deals directly with people’s money, debts, personal information, and financial hardship. Because of that, Philippine law treats lending as a regulated business.

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. The law excludes banks, pawnshops, cooperatives, financing companies, insurance companies, investment houses, and other credit institutions already regulated by other laws.

The key rule is simple: no lending company may legally conduct lending business in the Philippines unless it has authority to operate from the SEC.

This matters because unlicensed lenders are more likely to:

hide their real corporate name;
charge unclear or excessive fees;
refuse to provide a proper loan disclosure statement;
use harassment, shame tactics, or threats to collect;
misuse your phone contacts, photos, or personal data;
pretend to be connected with a legitimate SEC-registered company.

Verification does not guarantee that every transaction will be problem-free, but it helps you avoid obvious illegal lenders before you sign, upload IDs, or give an app access to your phone.

SEC registration vs. Certificate of Authority: know the difference

Many borrowers get confused because lenders casually say, “SEC registered kami.” That phrase can mean different things.

What the lender shows	What it means	Is it enough to legally lend?
SEC Certificate of Incorporation	The company exists as a corporation registered with the SEC.	No. This only proves corporate existence.
SEC Registration Number	The company has a corporate record with the SEC.	No. A regular corporation cannot automatically lend to the public.
Certificate of Authority to Operate as a Lending Company	The SEC has authorized the corporation to conduct lending business.	Yes, if valid and not revoked, suspended, or cancelled.
Business name or trade name	A brand name used by the corporation, such as a loan app name.	No, by itself. You must trace it to the authorized corporation.
Recorded Online Lending Platform	The specific app, website, or platform has been reported/recorded under SEC rules.	Important for online lending, but it must still be connected to a licensed lending or financing company.

The Implementing Rules and Regulations of RA 9474 define a Certificate of Authority as the certificate issued by the SEC in favor of a lending company to engage in the business of lending regulated by RA 9474 and its rules.

In plain English: SEC incorporation tells you the company exists. The Certificate of Authority tells you it may legally operate as a lending company.

Legal basis for checking lending companies in the Philippines

The main legal sources are:

Republic Act No. 9474, Lending Company Regulation Act of 2007 This law governs the establishment, operation, and regulation of lending companies. It requires lending companies to be corporations and to secure SEC authority before doing business.
IRR of RA 9474 The IRR gives operational details, including the requirement that a lending company be a stock corporation, use lending-related words in its corporate or trade name, secure a Certificate of Authority, and obtain prior SEC approval for branches or extension offices.
Republic Act No. 3765, Truth in Lending Act The Truth in Lending Act requires disclosure of finance charges and the true cost of credit. Under the IRR of RA 9474, lending companies must give borrowers a disclosure statement before the transaction is completed.
SEC Memorandum Circular No. 19, Series of 2019 SEC MC No. 19, s. 2019 covers disclosure requirements in advertisements of financing and lending companies and reporting of online lending platforms.
SEC Memorandum Circular No. 18, Series of 2019 SEC MC No. 18, s. 2019 prohibits unfair debt collection practices by financing companies and lending companies.
Republic Act No. 10173, Data Privacy Act of 2012 This becomes relevant when online lenders harvest contacts, send shame messages, misuse photos, or disclose debt information to third parties. The National Privacy Commission has specifically warned that online lenders are prohibited from harvesting phone and social media contact lists for harassment or debt collection.

How to verify if a lending company is SEC registered

1. Get the exact corporate name

Before checking the SEC list, get the lender’s complete corporate name. Do not rely only on the app name, Facebook page name, or store sign.

For example, an app may be called “Quick Peso,” but the legal operator may be “ABC Lending Corporation.” You need the corporation name because that is what appears in SEC records.

Look for the corporate name in:

the loan contract;
disclosure statement;
privacy policy;
app page or website footer;
collection notice;
official receipts;
emails or SMS messages;
posted permits in the physical office.

If the lender refuses to give its corporate name, that is already a serious red flag.

2. Ask for the SEC registration number and Certificate of Authority number

A legitimate lending company should be able to provide:

corporate name;
SEC registration number;
Certificate of Authority number;
principal office address;
branch address, if you are dealing with a branch;
trade name or app name, if any.

For online lending platforms, SEC rules require disclosure of the corporate name, SEC registration number, and Certificate of Authority number in online platforms and advertisements. A lender that hides this information or only gives a screenshot without searchable details should be treated with caution.

3. Check the official SEC lists

The SEC maintains public references for lending and financing companies. Go to the SEC’s official website and look for the section on Lending Companies and Financing Companies. The SEC has also advised the public to check licensed lending and financing companies through its official lending and financing company resources.

When checking, search for:

the exact corporate name;
former corporate name, if mentioned;
SEC registration number;
CA number;
trade name;
online lending platform name.

Be careful with spelling. Some companies use “Lending Corporation,” “Lending Company Inc.,” “Lending Investor Inc.,” or similar names. A one-word difference can point to a different entity.

4. Use the SEC Check App

The SEC Check App is the SEC Philippines’ official mobile app. It gives users access to SEC advisories, rules, announcements, and verification tools. The Philippine Information Agency has reported that the SEC Check App may be used to verify whether an entity is authorized to solicit investments or engage in lending and financing activities.

Use it as an additional verification layer, especially when you are checking from your phone before downloading or using a loan app.

5. Verify the online lending app separately

For online loans, do not stop at the company name. Check whether the specific online lending platform, app, or website is also properly recorded or connected to the authorized company.

This is important because scammers sometimes use the name of a legitimate lending company but operate a different app, fake website, or social media page.

Ask yourself:

Is the app name listed as a business name or platform of the authorized corporation?
Does the app disclose the same corporate name and CA number?
Does the app developer name match the licensed company or its disclosed platform?
Is the lender using a random Gmail, Telegram account, Facebook profile, or personal GCash number?
Is the app newly created but claiming to be a long-established lender?

Under SEC MC No. 19, s. 2019, online lending platforms must be reported and properly disclosed. The SEC also imposed a moratorium on new online lending platforms under SEC MC No. 10, s. 2021, with only those registered as of November 2, 2021 allowed to operate and be used for online lending or financing, subject to strict monitoring.

6. Check for SEC advisories, cease and desist orders, suspensions, or revocations

Even if a company was once registered, its authority may later be:

suspended;
revoked;
cancelled;
subject to a cease and desist order;
involved in an SEC advisory.

Search the SEC website for the company name and app name. Also search the exact name together with words like:

“SEC advisory”
“revoked”
“cease and desist”
“unauthorized lending”
“online lending app”
“Certificate of Authority cancelled”

This is especially important if the lender is pressuring you to borrow immediately.

7. Request official SEC documents if needed

If you need formal proof, you can request SEC documents through the SEC Express System. This may be useful when:

you are dealing with a large loan;
you are preparing a complaint;
the company claims to be registered but will not show documents;
you need authenticated corporate records for a dispute.

SEC Express allows online requests for plain or authenticated SEC documents. Delivery is commonly indicated as 3 to 5 working days within Metro Manila and up to 7 working days for provincial deliveries, counted from release of the documents by the SEC for delivery.

What information should match?

When verifying a lending company, compare the details side by side.

Detail to check	What you should compare
Corporate name	Must match the SEC record, not merely the brand name.
SEC registration number	Must match the corporate record.
Certificate of Authority number	Must correspond to authority to operate as a lending company or financing company.
Address	Should match the principal office or approved branch.
App or platform name	Should be disclosed or recorded as connected to the authorized company.
Contact details	Should use official company channels, not only personal numbers.
Loan documents	Should use the same legal entity as the SEC record.
Disclosure statement	Should show principal, interest, fees, penalties, amortization, and total obligation details.

A mismatch does not always mean fraud, because companies may change names or operate trade names. But it means you should verify further before borrowing.

Red flags that a lender may be illegal or unsafe

Be extra careful if you see any of these warning signs:

The lender says it is “SEC registered” but cannot show a Certificate of Authority.
The app name appears online, but the corporate name is hidden.
The lender uses only Facebook Messenger, Telegram, Viber, or WhatsApp.
The lender asks for an “advance processing fee” before releasing the loan.
Payments go to a personal GCash, Maya, or bank account instead of a company account.
The loan contract has no complete company name or address.
The lender does not give a Truth in Lending disclosure statement.
The app asks for unnecessary access to contacts, gallery, SMS, or social media accounts.
Collectors threaten to post your photo, message your employer, or shame your family.
The company name is almost identical to a known lender but has small spelling changes.
The lender pressures you to decide “within 10 minutes” or lose approval.

A legitimate lender may still conduct credit checks and collection, but it must do so within the law.

What a legitimate lending company should give you before you borrow

Before you accept a loan, ask for documents and take screenshots or copies.

Document or information	Why it matters
Corporate name and SEC registration number	Identifies the legal entity.
Certificate of Authority number	Shows authority to operate as a lender.
Loan agreement	States the terms you are accepting.
Disclosure statement under RA 3765	Shows the true cost of credit.
Amortization schedule	Shows due dates and amounts.
List of fees and penalties	Helps you spot hidden charges.
Privacy notice	Explains how your personal data will be used.
Official payment channels	Reduces risk of fake collectors and payment disputes.
Receipts or payment confirmations	Proves you paid.

Under the IRR of RA 9474, the disclosure statement should include, when applicable, the principal amount, interest rate, service or processing fee, amortization schedule, late payment penalty, collection fee, notarial fee, other fees, collection and lien enforcement procedures, and the method of computing the total obligation in case of default.

What to do if the lending company is not on the SEC list

If you cannot verify the lender:

Do not upload more documents. Avoid sending additional IDs, selfies, bank details, payslips, or proof of billing.
Do not give the app unnecessary permissions. Deny access to contacts, photos, SMS, and social media accounts unless clearly necessary and lawful.
Take screenshots. Save the app page, loan offer, messages, corporate claims, payment instructions, and names of collectors.
Search using the exact names. Check both the app name and the corporate name. Some apps use different trade names.
Contact the SEC through official channels. The SEC has an iMessage SEC portal for feedback, reports, and complaints.
If personal data was misused, prepare a privacy complaint. The National Privacy Commission complaint page explains that formal complaints must be in the required format, printed, filled out, notarized, and submitted in person, by courier, or by scanned email.
If threats or cyber harassment are involved, preserve evidence. Keep screenshots, phone numbers, links, call logs, and names. These may be relevant to the SEC, NPC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, or local law enforcement.

Special issues with online lending apps

App store presence does not automatically mean SEC authority

Being available on Google Play or the App Store does not, by itself, prove that a lender is licensed. App stores may screen financial apps, but the Philippine legal authority still comes from SEC registration and the proper Certificate of Authority.

A registered company can still violate collection rules

Verification answers one question: “Is this company authorized to lend?” It does not automatically answer: “Is this lender behaving lawfully?”

Even authorized lending companies must follow laws on:

truth in lending;
fair debt collection;
data privacy;
consumer protection;
corporate compliance;
SEC reportorial requirements.

If a licensed lender harasses borrowers, contacts third parties without proper basis, posts debt information online, or misuses personal data, it can still face regulatory action.

Debt shaming and contact harvesting are not normal collection practices

The National Privacy Commission has stated that online lenders are prohibited from harvesting borrowers’ phone and social media contact lists for harassment. Unnecessary permissions include accessing phone or email contact lists, harvesting social media contacts, and saving them for debt collection or harassment.

If a loan app threatens to message your contacts, employer, relatives, or social media friends, treat that as a serious warning sign and document everything.

Practical checklist before accepting a loan

Use this quick checklist before you sign or tap “Accept.”

I know the lender’s exact corporate name.
I have the SEC registration number.
I have the Certificate of Authority number.
I checked the SEC list or SEC Check App.
If online, I checked whether the app/platform is connected to the licensed company.
The loan agreement names the same company I verified.
I received a disclosure statement showing interest, fees, penalties, and total payment.
The app does not demand unnecessary access to contacts, gallery, SMS, or social media.
Payments are made to official company channels.
I saved screenshots and copies of all key documents.

If you cannot check most of these boxes, slow down.

Common scenarios

“The lender sent me an SEC certificate. Is that enough?”

Not always. Check what certificate it is. If it is only a Certificate of Incorporation, it proves the company exists, not that it is licensed to lend. Look for the Certificate of Authority to Operate as a Lending Company.

“The app name is not the same as the company name. Is that illegal?”

Not automatically. A company may use a trade name or online platform name. But the app name should be traceable to the authorized corporation, and the platform should comply with SEC disclosure and reporting rules.

“The company was registered before, but I found an SEC revocation notice.”

Treat the latest regulatory status as more important. A company can lose its authority. If the SEC has revoked or cancelled its Certificate of Authority or registration, it may no longer lawfully operate as before.

“The lender is foreign-owned. Is that allowed?”

RA 9474 and its IRR impose citizenship requirements. As a general rule, a majority of the voting stock of a lending company must be owned by Philippine citizens. The IRR also provides that no foreign national may own stock unless the foreign national’s country gives reciprocal rights to Filipinos. For borrowers, the practical point is this: foreign branding or foreign shareholders do not remove the need for Philippine SEC authority.

“The lender has a physical office in my city. Does that prove legitimacy?”

No. A physical office helps, but it does not replace SEC authority. Under the IRR of RA 9474, a lending company must secure prior SEC approval for branch, extension, satellite, or similar offices. A branch office should be connected to the authorized head office.

Frequently Asked Questions

How do I check if a lending company is SEC registered in the Philippines?

Get the exact corporate name, SEC registration number, and Certificate of Authority number. Then check the SEC’s official lending and financing company resources, use the SEC Check App, and search for any SEC advisories, suspensions, revocations, or cease and desist orders involving the company or app.

Is an SEC registration number enough for a lending company?

No. An SEC registration number usually proves that the entity is registered as a corporation. A lending company also needs a valid Certificate of Authority from the SEC to operate as a lending company.

What is a Certificate of Authority for a lending company?

A Certificate of Authority is the SEC-issued authority allowing a corporation to engage in the regulated business of lending under RA 9474. Without it, a company cannot legally conduct lending business to the public as a lending company.

How can I check if an online lending app is legit?

Check both the corporate operator and the app. The corporate operator should have SEC registration and a valid Certificate of Authority. The app or platform should disclose the corporate name, SEC registration number, and CA number, and should be traceable to the authorized company.

Can a lending company operate under a different app name?

Yes, but the app name should be properly connected to the licensed corporation. If the app hides the corporate name or uses a name that cannot be matched with SEC records, be cautious.

What if the lending company is not listed with the SEC?

Do not proceed until you can verify it through official sources. Save screenshots, avoid sending more personal information, and consider reporting the lender through SEC iMessage if it is offering loans to the public without proper authority.

Can a registered lending company contact my family or employer?

Debt collection must comply with SEC rules, data privacy law, and other applicable laws. Harassment, public shaming, threats, and misuse of personal data are not acceptable collection practices. If collectors contact third parties to shame or pressure you, preserve evidence.

Are online lenders allowed to access my contacts?

Online lenders should not harvest phone contacts, email lists, or social media contacts for debt collection or harassment. The National Privacy Commission has specifically warned against this practice.

Where can I complain about an abusive online lender?

For lending or financing regulation issues, you may use the SEC’s official complaint channels, including iMessage SEC. For misuse of personal data, contact the National Privacy Commission. For threats, cyber harassment, or identity-related abuse, preserve evidence for possible reporting to cybercrime authorities.

Does SEC registration mean the loan terms are automatically fair?

No. SEC registration is only one part of the check. You should still review the disclosure statement, interest, fees, penalties, payment schedule, privacy terms, and collection practices before accepting the loan.

Key Takeaways

A lending company in the Philippines must be a corporation and must have SEC authority to operate.
SEC incorporation is not the same as a Certificate of Authority.
For online loans, verify both the corporate operator and the specific app or platform.
A legitimate lender should disclose its corporate name, SEC registration number, Certificate of Authority number, loan terms, fees, and official payment channels.
App store availability, Facebook ads, screenshots, and “SEC registered” claims are not enough.
Watch for red flags such as hidden corporate names, advance fees, personal payment accounts, unclear charges, and threats to message your contacts.
Borrowers are protected by RA 9474, the Truth in Lending Act, SEC rules on online lending and debt collection, and the Data Privacy Act.
When in doubt, pause the transaction, document everything, and verify directly through official SEC resources.