The Philippine financial technology (fintech) and lending sector has seen a significant regulatory evolution aimed at balancing financial inclusion with consumer protection. For foreign investors, the landscape is governed primarily by the Securities and Exchange Commission (SEC) and the Bangko Sentral ng Pilipinas (BSP).
This article details the comprehensive requirements and procedural steps for establishing a foreign-owned fintech or lending company in the Philippines as of 2026.
1. Legal Framework and Corporate Structure
Foreign entities must determine whether their operations fall under a Lending Company or a Financing Company, as these are governed by different laws:
- Lending Company Regulation Act of 2007 (RA 9474): Governs entities engaged in granting loans from their own capital or funds sourced from not more than 19 persons.
- Financing Company Act of 1998 (RA 8556): Governs entities engaged in extending credit facilities through leasing, factoring, or discounting of receivables.
Foreign Ownership and Nationality Requirements
Under Republic Act No. 10881, the nationality requirements for lending and financing companies have been repealed. Foreign nationals may now own up to 100% of the voting stock of these entities. However, if a lending company owns land in the Philippines (e.g., through foreclosure), foreign ownership is capped at 40% per Constitutional restrictions on land ownership.
2. Capitalization Requirements
The minimum paid-up capital varies based on the type of entity and its location:
| Entity Type | Location | Minimum Paid-up Capital |
|---|---|---|
| Lending Company | Nationwide | PHP 1,000,000 |
| Financing Company | Metro Manila / 1st Class Cities | PHP 10,000,000 |
| Other Cities | PHP 5,000,000 | |
| Municipalities | PHP 2,500,000 |
Note on Foreign Investments Act (FIA): While RA 10881 allows 100% ownership, any domestic market enterprise with more than 40% foreign equity generally must comply with the FIA's minimum capital floor of US$200,000. This can be reduced to US$100,000 if the company involves advanced technology or employs at least 50 direct Filipino employees.
3. The SEC Registration Process
Registration is a two-tier process: securing a Certificate of Incorporation and a Certificate of Authority (CA).
Phase I: Incorporation
- Name Reservation: The name must include "Lending Company," "Lending Investor," "Financing Company," or "Finance Corporation."
- Articles of Incorporation (AOI): The primary purpose must explicitly state the intent to engage in lending or financing.
- Resident Directors: At least a majority of the Board of Directors must be residents of the Philippines.
Phase II: Certificate of Authority to Operate
Operating without a CA is a criminal offense. Requirements include:
- Information Sheet: Detailing the owners and officers.
- Manual on Corporate Governance: Required if foreign equity is involved or assets exceed certain thresholds.
- Work Program: A detailed three-year plan of operations and financial projections.
- Affidavit of No Derogatory Record: For all directors and officers.
4. Fintech-Specific Licensing (BSP)
If the lending company utilizes a digital platform or engages in specialized fintech activities, additional licenses from the Bangko Sentral ng Pilipinas (BSP) are required:
- Operator of Payment System (OPS): Required for entities that provide cash-in/cash-out services, payment gateways, or merchant acquisition.
- Electronic Money Issuer (EMI): Required if the company issues "e-money" (stored value) that can be used for third-party transactions.
- Virtual Asset Service Provider (VASP): Required if the fintech platform facilitates the exchange or transfer of cryptocurrencies or other digital assets.
The SEC PhiliFintech Innovation Office (PIO) also supervises "Cloud-based" or "App-based" lending, requiring companies to disclose their online lending platforms (OLPs) and comply with strict cybersecurity and data privacy standards.
5. Regulatory Compliance and Fair Practices
Once operational, foreign fintechs must adhere to stringent Philippine laws:
Data Privacy Act of 2012 (RA 10173)
Fintechs must register with the National Privacy Commission (NPC). They are required to appoint a Data Protection Officer (DPO) and implement robust systems to protect borrower data, especially when using mobile apps.
Fair Debt Collection Practices (SEC MC No. 18, s. 2019)
The SEC prohibits "unfair debt collection practices," such as:
- Using threats, insults, or profane language.
- Contacting persons in a borrower’s contact list without consent.
- Disclosing the borrower’s name and debt status publicly.
Interest Rate Caps (BSP Circular No. 1133)
For small-value, short-term loans (typically those offered by online lending apps), the BSP has imposed a nominal interest rate cap (e.g., 6% per month) and a limit on late fees (e.g., 1% per month) to prevent predatory pricing.
6. Post-Registration Obligations
To maintain a valid license, companies must fulfill recurring requirements:
- BIR Registration: Registration with the Bureau of Internal Revenue for a Tax Identification Number (TIN) and Authority to Print (ATP) invoices.
- LGU Permits: Securing a Mayor's Business Permit from the local government where the office is located.
- Credit Information Corporation (CIC): All lending and financing companies are mandated to submit borrower credit data to the CIC.
- Anti-Money Laundering Council (AMLC): Registration as a "covered person" and submission of a Money Laundering and Terrorist Financing Prevention Program (MTPP).