I. Introduction

Lending is a regulated business in the Philippines. A corporation cannot simply register with the Securities and Exchange Commission, or SEC, and begin offering loans to the public. If the business is engaged in granting loans from its own capital funds, or if it holds itself out as a lending company, it must generally comply with the Lending Company Regulation Act of 2007, also known as Republic Act No. 9474, and obtain the required Certificate of Authority from the SEC.

The SEC Certificate of Authority, often called the CA, is the legal authorization that allows a qualified corporation to operate as a lending company. Without it, a company may have corporate registration, articles of incorporation, a business permit, and a tax registration, but it still may not lawfully operate as a lending company.

The requirement is important because lending activities directly affect borrowers, consumers, small businesses, online users, and the public. The SEC supervises lending companies to prevent abusive interest practices, unauthorized lending, harassment, unfair collection practices, misleading advertisements, data privacy abuses, and illegal online lending operations.

In the Philippine context, the SEC Certificate of Authority is not a mere formality. It is the central license that distinguishes a lawful lending company from an unauthorized lender.

II. Legal Framework

The principal law governing lending companies in the Philippines is Republic Act No. 9474, or the Lending Company Regulation Act of 2007.

The law is implemented through SEC rules, memoranda, circulars, opinions, enforcement actions, and licensing procedures. The SEC is the primary regulatory agency for lending companies organized as corporations.

Other laws may also apply depending on the lending company’s activities, such as:

the Revised Corporation Code;
consumer protection laws;
Truth in Lending rules;
data privacy laws;
anti-money laundering rules, where applicable;
cybercrime laws;
electronic commerce rules;
laws on unfair debt collection practices;
tax laws;
local government permit requirements;
rules on online lending platforms and financing applications;
advertising and disclosure rules;
laws on interest, penalties, unconscionable rates, and obligations and contracts.

A lending company must comply not only with SEC licensing rules but also with all applicable laws governing contracts, collection, disclosure, privacy, taxation, corporate governance, and consumer protection.

III. What Is a Lending Company?

A lending company is generally a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than a legally allowed number of persons, subject to the law and SEC rules.

The key features are:

the entity grants loans;
the loans are made to the public, borrowers, consumers, businesses, employees, merchants, or other persons;
the lending activity is conducted as a business;
the lender uses its own capital or authorized funding sources;
the entity is not a bank, quasi-bank, financing company, pawnshop, cooperative, or other separately regulated institution unless covered by a different legal framework.

A lending company is distinct from a casual private lender. It is a formal business that regularly grants loans for profit.

IV. Lending Company vs. Financing Company

A lending company should be distinguished from a financing company.

A lending company primarily grants direct loans. A financing company, on the other hand, may engage in activities such as extending credit facilities, discounting commercial papers, factoring, leasing, and other forms of financing subject to a separate regulatory framework.

Both may be regulated by the SEC, but the legal requirements, capital requirements, licensing rules, permissible activities, and regulatory classifications may differ.

A corporation should not assume that a lending company license allows it to operate as a financing company, or vice versa. The authority granted depends on the specific license and corporate purpose.

V. Lending Company vs. Bank

A lending company is not a bank.

A bank may accept deposits from the public and engage in banking activities under the supervision of the Bangko Sentral ng Pilipinas. A lending company generally cannot accept deposits from the public and cannot hold itself out as a bank.

A lending company that solicits or accepts deposits, investments, or public funds without authority may violate banking, securities, or investment solicitation laws.

This distinction is critical. Many unauthorized lending or investment schemes disguise themselves as lending businesses while actually taking public investments or deposits. A lending company Certificate of Authority does not authorize deposit-taking, investment-taking, or banking.

VI. Lending Company vs. Pawnshop

A pawnshop grants loans secured by personal property pledged by borrowers. Pawnshops are subject to separate laws and regulatory supervision.

A lending company may take collateral depending on its loan products, but it is not automatically a pawnshop. If the business model involves pawn transactions, the entity must comply with pawnshop regulations.

A company should not use a lending company license to conduct pawnshop operations unless specifically authorized under the proper legal framework.

VII. Lending Company vs. Cooperative Lending

Cooperatives may provide loans to members under cooperative laws and the supervision of the Cooperative Development Authority. A cooperative’s lending to members is different from a corporation lending to the public as a lending company.

A cooperative cannot simply operate like a lending company serving the general public if it is not authorized to do so. Likewise, a lending company cannot claim cooperative privileges.

The correct regulatory framework depends on the entity’s legal form and actual activities.

VIII. Lending Company vs. Private Individual Lending

An individual who occasionally lends money to a friend or relative is not necessarily operating a lending company. The lending company law targets business operations conducted through corporations engaged in lending.

However, if an individual or unregistered group repeatedly offers loans to the public, advertises lending services, collects interest, uses agents, or operates an online lending scheme, regulators may treat the activity as unauthorized lending or another regulated activity.

The substance of the business matters more than labels.

IX. Requirement of Corporate Form

A lending company must generally be organized as a corporation. The business is not ordinarily conducted as a sole proprietorship or ordinary partnership if it is to be licensed as a lending company under the Lending Company Regulation Act.

The corporate form allows the SEC to supervise the entity, its directors, officers, capital, reporting obligations, and compliance.

The corporation’s articles of incorporation must include lending as a primary or authorized purpose, and the corporation must satisfy SEC requirements before obtaining a Certificate of Authority.

X. Meaning of Certificate of Authority

The Certificate of Authority is the SEC-issued authorization allowing a corporation to operate as a lending company.

It is separate from:

the certificate of incorporation;
amended articles of incorporation;
mayor’s permit;
barangay clearance;
BIR certificate of registration;
business name registration;
data privacy registration;
registration of an online app or website;
business permits for branches.

A corporation may exist legally as a corporation but still be prohibited from operating as a lending company until the SEC grants the Certificate of Authority.

XI. Why the Certificate of Authority Is Required

The Certificate of Authority serves several purposes.

First, it ensures that only qualified corporations engage in lending.

Second, it allows the SEC to monitor lending companies and protect borrowers.

Third, it discourages fly-by-night lenders and abusive collection practices.

Fourth, it ensures that the company has sufficient capital and proper corporate structure.

Fifth, it creates accountability for directors, officers, agents, branches, online platforms, and loan products.

Sixth, it helps the public identify legitimate lending companies.

Seventh, it gives the SEC enforcement power against unauthorized lending and abusive practices.

XII. No Certificate, No Lending Business

The basic rule is simple: a corporation must not operate as a lending company without an SEC Certificate of Authority.

This means it should not:

advertise loans to the public;
grant loans as a regular business;
collect processing fees for loan applications;
operate lending branches;
launch an online lending app;
hire loan agents;
enter into lending agreements as a business;
use “lending,” “loan,” “credit,” or similar words to represent authorized lending services;
hold itself out as a licensed lending company;
collect interest and charges from loan borrowers under an unlicensed lending operation.

Operating without authority may expose the company, directors, officers, and responsible persons to penalties and enforcement action.

XIII. SEC Registration Is Not Enough

A common misconception is that SEC incorporation is enough.

It is not.

The SEC may register a corporation as a juridical entity, but that does not automatically authorize it to engage in regulated activities. Lending is a regulated activity. The corporation must obtain a separate Certificate of Authority.

For example, a corporation named “ABC Lending Corporation” may receive a certificate of incorporation. But before it can actually lend as a business, it must secure the lending company Certificate of Authority.

Corporate existence and regulatory authority are different.

XIV. Local Business Permit Is Not Enough

A mayor’s permit or business permit from a local government unit does not replace the SEC Certificate of Authority.

Local permits allow the business to operate at a location for local regulatory and tax purposes. They do not authorize a corporation to engage in lending if the SEC has not issued the required authority.

A lending company normally needs both:

SEC Certificate of Authority; and
local business permits for its principal office and branches.

The local permit depends partly on the existence of proper national regulatory authority.

XV. BIR Registration Is Not Enough

BIR registration allows the taxpayer to issue invoices, file tax returns, pay taxes, and comply with tax obligations. It does not authorize lending operations.

A corporation that registers with the BIR as a taxpayer but lacks SEC authority cannot rely on tax registration as proof of lawful lending business.

Tax registration and regulatory licensing are separate obligations.

XVI. Who Issues the Certificate of Authority?

The Securities and Exchange Commission issues the Certificate of Authority to qualified lending companies.

The SEC evaluates the corporation’s articles, capitalization, directors, officers, beneficial ownership, compliance history, business plan, location, documentary requirements, and other conditions required by law and regulation.

The SEC may grant, deny, suspend, revoke, or cancel the Certificate of Authority depending on compliance.

XVII. Capital Requirements

A lending company must meet minimum paid-up capital requirements prescribed by law and SEC rules.

The required capital may vary depending on the location, scale, and type of operations. Lending companies operating in larger markets or with broader operations may be subject to higher capital requirements than those operating in smaller municipalities.

Capital requirements are important because lending companies should have genuine financial capacity and should not operate merely as fronts, shells, or conduits for unauthorized public fund solicitation.

The capital must be properly subscribed, paid, documented, and reflected in corporate records.

XVIII. Foreign Ownership

Foreign ownership in lending companies may be subject to constitutional, statutory, and regulatory restrictions depending on the applicable laws and foreign investment rules.

Investors should not assume that full foreign ownership is automatically allowed. Lending may involve nationalization rules, foreign investment limitations, anti-dummy law concerns, and regulatory approvals.

A corporation with foreign shareholders, foreign directors, foreign beneficial owners, foreign funding sources, or foreign-controlled online operations should carefully review the applicable requirements before applying for authority.

XIX. Corporate Name

The name of a lending company is regulated.

The corporate name should not be misleading and should comply with SEC naming rules. If the corporation intends to operate as a lending company, the name may need to include words indicating its lending business, subject to SEC approval.

A company should not use names suggesting that it is a bank, quasi-bank, financing company, investment company, government agency, or official public institution unless legally authorized.

Misleading names may result in denial, suspension, or enforcement action.

XX. Articles of Incorporation

The corporation’s articles of incorporation must authorize lending activities.

The primary purpose clause should be carefully drafted to reflect lawful lending company activities and must not include unauthorized banking, deposit-taking, investment solicitation, securities offering, or financing company activities unless separately authorized.

The SEC may require amendment of articles if the corporate purpose is too broad, misleading, inconsistent with law, or insufficient for lending authority.

XXI. By-Laws and Corporate Governance

The corporation must have by-laws and governance rules consistent with the Revised Corporation Code and SEC requirements.

The by-laws should address:

board meetings;
officer roles;
corporate authority;
internal controls;
approval of loans;
recordkeeping;
conflict of interest;
compliance officer functions;
branch supervision;
delegation of authority;
audits and reporting.

Good governance is important because lending companies handle sensitive borrower data, loan funds, collections, penalties, collateral, and consumer complaints.

XXII. Directors and Officers

The SEC may examine the qualifications, identity, and records of directors and officers.

Persons involved in fraud, illegal lending, investment scams, corporate violations, abusive collection practices, or repeated regulatory non-compliance may create licensing problems.

Directors and officers are expected to ensure compliance with lending laws, consumer protection rules, disclosure requirements, privacy rules, and SEC reporting.

They may be held accountable for violations, especially when unlawful practices are authorized, tolerated, or ignored.

XXIII. Beneficial Ownership

The SEC may require disclosure of beneficial owners.

Beneficial ownership rules prevent the use of nominees, dummies, layered corporations, or hidden controllers to evade regulation, foreign ownership limits, liability, or enforcement.

A lending company should accurately disclose who ultimately owns, controls, or benefits from the corporation.

False or misleading ownership disclosures may lead to serious consequences.

XXIV. Application for Certificate of Authority

The application for a lending company Certificate of Authority generally involves submission of corporate, financial, ownership, and operational documents to the SEC.

Common requirements may include:

application form;
articles of incorporation;
by-laws;
certificate of incorporation or proposed registration documents;
treasurer’s affidavit or proof of paid-up capital;
bank certificate or proof of capital deposit;
information sheet of directors and officers;
personal information and identification documents;
clearance or undertaking documents;
business plan;
lending operations manual;
sample loan documents;
disclosure forms;
branch list, if any;
proof of office address;
compliance undertakings;
payment of filing and regulatory fees;
other documents required by the SEC.

The SEC may update requirements. Applicants should comply with the checklist in force at the time of filing.

XXV. Business Plan

The SEC may require or examine the applicant’s business plan.

A lending company business plan should explain:

target borrowers;
loan products;
loan amounts;
interest rates;
fees and charges;
repayment terms;
credit evaluation methods;
collection procedures;
funding sources;
branch or online operations;
risk controls;
complaint handling;
data privacy compliance;
staffing;
internal controls;
financial projections.

The business plan should reflect lawful lending, not disguised investment solicitation, deposit-taking, or predatory lending.

XXVI. Lending Operations Manual

A lending operations manual is important for regulatory compliance.

It may cover:

loan application process;
borrower identification;
credit assessment;
approval authority;
loan documentation;
interest and fee disclosure;
release of proceeds;
repayment methods;
collection procedures;
restructuring or renewal;
complaint handling;
data privacy safeguards;
branch supervision;
employee conduct;
agent conduct;
record retention;
reporting to regulators;
anti-fraud controls.

A weak or incomplete manual may suggest poor compliance readiness.

XXVII. Loan Documents

A lending company should have lawful loan documents, such as:

loan application form;
promissory note;
disclosure statement;
loan agreement;
amortization schedule;
privacy notice or consent form;
collateral documents, if applicable;
co-maker or guaranty agreements, if applicable;
collection notices;
restructuring documents;
official receipts or acknowledgment documents.

Loan documents should be understandable, transparent, and consistent with consumer protection rules.

XXVIII. Truth in Lending

Lending companies must comply with disclosure rules requiring clear information about the true cost of credit.

Borrowers should be informed of:

principal amount;
interest rate;
finance charges;
service fees;
processing fees;
penalties;
due dates;
amortization schedule;
total amount payable;
effective interest rate, where required;
consequences of default;
collateral or security;
other material terms.

The purpose is to prevent hidden charges and misleading loan offers.

XXIX. Interest Rates

Philippine law generally allows parties to agree on interest rates, subject to rules on unconscionability, disclosure, consumer protection, and applicable regulations.

A lending company should not impose interest, penalties, or fees that are excessive, hidden, misleading, or unconscionable.

Even if a borrower signs a contract, courts or regulators may examine whether the terms are oppressive, contrary to law, or contrary to public policy.

The SEC may also act against abusive or predatory lending practices.

XXX. Fees and Charges

Lending companies may impose fees only if lawful, disclosed, reasonable, and agreed upon.

Common charges may include:

processing fee;
service fee;
documentary stamp tax recovery, where applicable;
late payment penalty;
collection-related charges, where lawful;
notarial or documentation fees;
insurance-related charges, where applicable.

Hidden charges, automatic deductions, undisclosed fees, and misleading advertisements may violate disclosure and consumer protection rules.

A loan advertised as “zero interest” but loaded with undisclosed fees may be considered deceptive.

XXXI. Disclosure Statement

A disclosure statement is a key borrower protection document. It should show the borrower the financial terms of the loan before or at the time of loan execution.

It helps borrowers understand what they are agreeing to.

Failure to provide proper disclosure may expose the lending company to regulatory penalties and disputes over enforceability.

XXXII. Advertising and Marketing

Lending advertisements must be truthful and not misleading.

A lending company should avoid advertising:

“guaranteed approval” if false;
“no fees” if fees exist;
“zero interest” if hidden charges apply;
fake SEC registration numbers;
fake government endorsements;
misleading testimonials;
false app ratings;
deceptive collection consequences;
unauthorized use of government logos;
claims that imply banking authority.

All marketing should identify the lending company accurately and, where required, disclose its SEC authority.

XXXIII. Online Lending Applications

Online lending has become a major area of SEC enforcement in the Philippines.

A lending company operating through a mobile app, website, platform, social media page, or digital loan system must still have an SEC Certificate of Authority.

It must also comply with additional rules on online lending platforms, borrower privacy, advertising, unfair collection, cybersecurity, and disclosure.

An online app does not avoid the licensing requirement. Digital lending is still lending.

XXXIV. Registration of Online Lending Platforms

The SEC may require lending companies to disclose, register, or report their online lending platforms, websites, mobile applications, trade names, and other digital channels.

A licensed lending company should not operate undisclosed or unregistered lending apps.

If a corporation has one Certificate of Authority but operates multiple apps under different names, it may be required to disclose and obtain approval for those platforms.

Using multiple app names to hide identity or evade complaints may lead to enforcement action.

XXXV. Unfair Debt Collection Practices

Lending companies must avoid abusive collection methods.

Improper collection practices may include:

threats of violence;
insults, profanity, or humiliation;
public shaming;
contacting the borrower’s employer without lawful basis;
contacting the borrower’s phone contacts;
posting the borrower’s photo or debt online;
falsely claiming criminal liability for ordinary non-payment;
pretending to be a lawyer, police officer, court, or government agency;
threatening arrest without legal basis;
excessive calls or harassment;
disclosure of debt to third parties;
use of abusive text blasts;
defamatory messages;
coercive collection from relatives not liable on the loan.

Debt collection must be lawful, professional, and proportionate.

XXXVI. Collection Agencies and Agents

A lending company may use agents, collectors, or third-party collection service providers, but it remains responsible for their conduct.

The company should ensure that collectors follow:

SEC rules;
consumer protection requirements;
data privacy rules;
harassment prohibitions;
debt collection policies;
script and communication standards;
confidentiality rules.

A company cannot avoid liability by saying that the harassment was done by an outsourced collector.

XXXVII. Data Privacy Compliance

Lending companies collect sensitive personal information, including:

names;
addresses;
phone numbers;
employment details;
income information;
IDs;
bank or e-wallet information;
contact persons;
photos;
device data;
credit history;
location data in some digital operations.

They must comply with data privacy laws and principles, including transparency, legitimate purpose, proportionality, security, retention limits, and respect for borrower rights.

Online lending apps must be especially careful not to access phone contacts, photos, messages, or device data beyond what is lawful, necessary, and disclosed.

XXXVIII. Consent Is Not Always Enough

Borrower consent does not automatically legalize every data practice.

Even if an app asks for permission, the collection and use of personal data must still be lawful, necessary, proportionate, and related to a legitimate lending purpose.

Accessing a borrower’s entire contact list and threatening those contacts may violate privacy and debt collection rules.

A lending company should collect only data reasonably necessary for credit evaluation, loan administration, fraud prevention, and lawful collection.

XXXIX. Cybersecurity and Digital Lending

Online lending companies should maintain cybersecurity measures to protect borrower data.

Security controls may include:

secure app design;
encryption;
access controls;
employee permissions;
audit logs;
breach response plans;
secure servers;
third-party vendor controls;
privacy impact assessments;
data retention and deletion policies.

A data breach may lead to regulatory investigations, borrower claims, reputational damage, and penalties.

XL. Branches and Extension Offices

A lending company may need approval, registration, or reporting for branches, extension offices, satellite offices, kiosks, or service points.

A Certificate of Authority for the principal office does not automatically authorize unlimited branch expansion without compliance with SEC rules.

Each branch may also need local business permits and must display required documents or notices.

XLI. Display of Certificate and Public Information

Lending companies may be required to display their Certificate of Authority, SEC registration information, company name, address, and complaint channels in their office, website, app, or advertisements.

Transparency helps borrowers verify whether the company is legitimate.

A company should not hide behind app names, agents, or social media pages without identifying the licensed corporation.

XLII. Reports to the SEC

Licensed lending companies must submit periodic reports to the SEC.

These may include:

general information sheets;
audited financial statements;
special forms for lending companies;
list of branches;
list of online platforms;
ownership updates;
compliance reports;
loan portfolio information;
changes in directors and officers;
amendments to articles or by-laws;
other regulatory submissions.

Failure to submit reports may lead to fines, suspension, revocation, or non-renewal of authority.

XLIII. Audited Financial Statements

A lending company must maintain proper books and submit audited financial statements as required.

Financial reporting allows the SEC to monitor capitalization, solvency, operations, funding sources, and compliance.

A company that fails to maintain accurate financial records may face penalties and may be suspected of operating irregularly.

XLIV. General Information Sheet

The General Information Sheet, or GIS, identifies the corporation’s directors, officers, shareholders, capital structure, address, and corporate information.

For lending companies, accurate GIS filings are important because regulators need to know who controls and manages the company.

Failure to update corporate information can create regulatory problems.

XLV. Changes Requiring SEC Approval or Notice

A lending company may need prior SEC approval or notice for changes such as:

corporate name;
principal office;
branches;
online lending platforms;
directors and officers;
ownership structure;
capital increase or decrease;
amendment of articles;
merger or consolidation;
change in business model;
cessation of operations;
transfer of authority;
change in trade name.

A Certificate of Authority should not be treated as freely transferable or usable by another entity.

XLVI. Transfer of Certificate of Authority

A Certificate of Authority is generally granted to a specific corporation based on its qualifications.

It should not be sold, leased, lent, assigned, or used by another person or entity without SEC approval.

Using another company’s authority to operate a lending business may be treated as unauthorized lending, misrepresentation, or regulatory evasion.

XLVII. Use of Trade Names

A lending company may use trade names or brand names subject to SEC rules and disclosure.

The public should be able to identify the actual corporation behind the brand.

Using numerous trade names to conceal complaints, avoid bad reputation, or confuse borrowers may be treated as deceptive.

XLVIII. Funding Sources

A lending company must fund its lending operations through lawful sources.

It should not raise funds from the public unless authorized by law.

A lending company Certificate of Authority does not authorize:

deposit-taking;
issuance of investment contracts;
sale of securities to the public;
pooled investment schemes;
public solicitation of funds;
quasi-banking;
crowdfunding without authority;
promise of fixed investment returns to fund loans.

If the company needs investor funding, securities law issues must be separately addressed.

XLIX. Lending From Own Capital

The lending company model generally contemplates lending from the company’s own capital or authorized sources.

This protects the public from entities that collect funds from many investors and lend them out without banking, securities, or investment authority.

If the company receives funds from many persons with promises of return, the activity may become an investment solicitation or securities issue.

L. Loan Products

A lending company may offer various loan products if lawful and within its authority, such as:

personal loans;
salary loans;
business loans;
microloans;
emergency loans;
appliance or consumer loans;
vehicle-secured loans;
real estate-secured loans;
education loans;
online cash loans;
merchant loans;
employee loans;
purchase financing, if within authority and not requiring a different license.

Each loan product should be supported by proper documents, disclosures, rates, and collection procedures.

LI. Secured and Unsecured Loans

A lending company may grant secured or unsecured loans, depending on its business model.

Secured loans may involve collateral such as:

chattel mortgage;
real estate mortgage;
pledge;
assignment of receivables;
post-dated checks, subject to legal limits;
guaranty or suretyship;
salary deduction authorization, where lawful;
other security arrangements.

Security documents must comply with civil law, registration rules, consumer protection, and disclosure requirements.

LII. Post-Dated Checks

Some lenders use post-dated checks as payment security. This practice requires caution.

The lender should not use threats of criminal prosecution as a coercive collection method where the dispute is essentially civil or where the legal elements of the offense are not present.

Borrowers should not be misled into believing that every missed loan payment automatically results in imprisonment.

Use of checks must comply with applicable law and fair collection rules.

LIII. Salary Loans and Employer Arrangements

Lending companies may offer salary loans, but they must be careful when working with employers.

Issues include:

employee consent;
payroll deduction authority;
data privacy;
employer participation;
maximum deductions;
labor law limits;
transparency of interest and fees;
complaints and refunds;
collection after separation.

The employer should not become an unauthorized collector or disclose employee data without lawful basis.

LIV. Micro-Lending

Micro-lending serves small borrowers, sari-sari store owners, vendors, tricycle drivers, market sellers, and low-income households.

Because borrowers may be financially vulnerable, micro-lending must be conducted responsibly.

The lending company should avoid:

excessive daily interest;
confusing repayment schemes;
coercive field collection;
public shaming in barangays or markets;
undisclosed fees;
loan flipping or repeated refinancing trapping borrowers in debt.

Financial inclusion should not become predatory lending.

LV. Online Instant Loans

Online instant loans are high-risk from a compliance perspective.

Problems commonly arise from:

vague app identity;
extremely short repayment periods;
high service charges;
automatic deductions;
hidden effective interest;
access to contacts;
harassment of contacts;
abusive text messages;
repeated loan rollovers;
threats of legal action;
fake legal notices.

A licensed company operating online loans must ensure that speed and automation do not compromise legal compliance.

LVI. Responsible Lending

Responsible lending means assessing whether the borrower can reasonably repay the loan and ensuring that terms are fair, transparent, and appropriate.

A lending company should avoid granting loans solely to earn penalties, renewals, and collection fees.

Responsible lending includes:

clear disclosure;
reasonable credit evaluation;
transparent costs;
borrower education;
fair repayment schedule;
lawful collection;
complaint handling;
avoidance of debt traps.

LVII. Know-Your-Customer Procedures

Lending companies should verify borrower identity to prevent fraud, identity theft, and illegal transactions.

KYC procedures may include:

valid government ID;
address verification;
phone number verification;
employment or income verification;
business permits for business borrowers;
face matching or liveness checks for online lending;
fraud screening;
sanctions or watchlist checks, where applicable.

KYC should be balanced with data minimization and privacy obligations.

LVIII. Anti-Money Laundering Considerations

Depending on activities, loan products, funding structure, and regulatory classification, lending companies may need to consider anti-money laundering obligations.

Even when not classified the same way as banks, lenders should maintain controls against fraud, identity theft, suspicious transactions, and misuse of loan channels.

A company should avoid becoming a conduit for unlawful funds or sham transactions.

LIX. Tax Obligations

A lending company must comply with tax laws.

Common tax obligations may include:

income tax;
withholding taxes;
documentary stamp tax on loan documents, where applicable;
percentage tax or VAT issues depending on classification and law;
expanded withholding tax on certain expenses;
withholding tax on compensation;
local business taxes;
registration and invoicing rules;
books of accounts;
audited financial statements.

Tax compliance does not replace SEC licensing, but failure in tax compliance may affect regulatory standing and business operations.

LX. Documentary Stamp Tax

Loan agreements, promissory notes, and debt instruments may be subject to documentary stamp tax depending on the instrument and applicable tax rules.

A lending company should determine whether DST applies, who bears it under the contract, and how it is paid.

Undisclosed shifting of DST to borrowers may create transparency issues.

LXI. Books and Records

A lending company should maintain complete records of:

loan applications;
approvals;
borrower identity documents;
disclosure statements;
promissory notes;
loan agreements;
amortization schedules;
payment records;
collection communications;
restructuring agreements;
complaints;
official receipts;
ledgers;
collateral documents;
litigation files;
regulatory reports.

Poor recordkeeping may impair loan enforceability and regulatory compliance.

LXII. Borrower Complaints

A lending company should have a complaint-handling system.

Borrowers should know how to complain about:

wrong computation;
unauthorized charges;
payment posting errors;
harassment;
data privacy violations;
mistaken identity;
fraudulent loan applications;
collection after full payment;
refusal to issue receipts;
app issues;
unauthorized disclosure.

A responsive complaint process can prevent escalation to regulators.

LXIII. SEC Enforcement Powers

The SEC may investigate lending companies and take action against violations.

Possible regulatory actions include:

warning;
fines;
suspension of Certificate of Authority;
revocation of Certificate of Authority;
cease and desist orders;
cancellation of registration;
disqualification of directors or officers;
referral for criminal prosecution;
takedown requests or coordination against online platforms;
publication of advisories;
orders to stop abusive practices.

The SEC may act on complaints, reports, examinations, or its own monitoring.

LXIV. Revocation or Suspension of Certificate of Authority

A lending company may lose its authority for violations such as:

operating contrary to law;
failure to commence operations within required period;
failure to submit reports;
material misrepresentation in application;
insufficient capital;
unlawful lending practices;
unfair debt collection;
abusive online lending;
unauthorized branches;
undisclosed lending apps;
fraudulent activities;
repeated consumer complaints;
violation of SEC orders;
use of authority by another entity;
failure to comply with corporate reportorial obligations.

Revocation is serious because the company can no longer lawfully operate as a lending company.

LXV. Consequences of Operating Without Authority

Operating a lending company without SEC authority may result in:

administrative fines;
cease and desist orders;
criminal liability under applicable law;
closure of operations;
inability to enforce certain arrangements;
cancellation of corporate registration;
liability of directors and officers;
consumer complaints;
reputational damage;
tax and local government issues;
removal from online platforms;
referral to law enforcement.

Borrowers may also raise lack of authority as part of their defense or complaint.

LXVI. Liability of Directors and Officers

Directors and officers may be held accountable if they authorize, tolerate, or participate in unlawful lending operations.

Potentially liable persons may include:

president;
general manager;
treasurer;
compliance officer;
operations head;
collection manager;
app administrator;
beneficial owner;
directors who approved unlawful practices;
officers who signed false reports;
persons acting as de facto managers.

Corporate limited liability does not always shield individuals from regulatory or criminal liability.

LXVII. Liability of Employees and Collectors

Employees and collectors may also face liability for unlawful acts, especially harassment, threats, data misuse, falsification, or fraud.

A collector cannot justify abusive conduct by saying that he or she was only following instructions.

Companies should train and supervise employees to avoid personal and corporate exposure.

LXVIII. Borrower Remedies Against Unauthorized or Abusive Lenders

Borrowers dealing with unauthorized or abusive lenders may consider:

filing a complaint with the SEC;
filing a complaint with data privacy authorities for privacy violations;
filing a police or prosecutor complaint for threats, harassment, identity theft, or cyber-related offenses;
disputing unlawful charges;
seeking legal advice on enforceability of loan terms;
filing civil action for damages in appropriate cases;
documenting messages, calls, screenshots, payment records, and app details;
reporting online apps to app stores or platforms.

Borrowers should not ignore legitimate debts, but they are protected against unlawful collection and unauthorized lending practices.

LXIX. Validity of Loans Granted by Unauthorized Lenders

The effect of lack of authority on a specific loan may depend on law, facts, and court or regulator determination.

A borrower may still have received money and may have an obligation to return principal under civil law principles. However, interest, penalties, charges, and collection practices may be challenged if unlawful, unconscionable, undisclosed, or imposed by an unauthorized lender.

Lack of authority can expose the lender to penalties even if the borrower received funds.

The proper treatment should be assessed case by case.

LXX. Unconscionable Interest and Penalties

Philippine courts may reduce interest, penalties, or charges that are unconscionable or contrary to morals or public policy.

A lending company should not assume that any rate is enforceable merely because the borrower signed the agreement.

Factors that may be considered include:

borrower’s vulnerability;
disclosure;
effective interest rate;
compounding;
penalty stacking;
loan duration;
hidden charges;
disparity in bargaining power;
industry practice;
oppressive terms.

A lawful lending company should design rates that are transparent, reasonable, and defensible.

LXXI. Criminalizing Debt

Non-payment of a loan is generally a civil obligation. A lending company should be cautious about threatening borrowers with imprisonment for ordinary failure to pay.

There may be criminal issues in specific cases, such as fraud, bouncing checks, falsification, or deceit, but a lender must not misrepresent the law.

Threatening automatic arrest, police action, or criminal conviction for mere non-payment may be considered abusive or deceptive collection.

LXXII. Court Collection Cases

A lending company may file civil collection cases when borrowers default.

Depending on amount and circumstances, remedies may include:

small claims;
ordinary civil action;
foreclosure of collateral;
replevin for secured movable property;
enforcement of guaranty;
compromise or restructuring.

Even in collection litigation, the company must prove its authority, documents, loan release, disclosures, computation, payments, and outstanding balance.

LXXIII. Small Claims

Many lending disputes may fall under small claims procedure if the amount is within the jurisdictional threshold.

Small claims allow faster court resolution without lawyers appearing for parties in the hearing, subject to procedural rules.

Lending companies using small claims should ensure accurate statements of account and lawful charges.

LXXIV. Collateral Enforcement

If a loan is secured, the lender may enforce collateral according to law.

Possible collateral enforcement includes:

foreclosure of real estate mortgage;
foreclosure of chattel mortgage;
repossession through lawful means;
enforcement of pledge;
collection against guarantors.

Self-help repossession, threats, trespass, or breach of peace may create liability.

LXXV. Guarantors and Co-Makers

A lending company may require guarantors, co-makers, or sureties.

The legal effect depends on the wording of the document.

A co-maker may be directly liable, while a guarantor may have different rights and defenses depending on the contract.

Lending companies should explain the obligation clearly. Borrowers and co-makers should understand that signing as co-maker is not a mere reference.

LXXVI. References Are Not Co-Makers

Borrowers often list personal references in loan applications. A reference is not automatically liable for the loan.

A lending company should not collect from references unless they legally signed as co-maker, guarantor, surety, or debtor.

Contacting references to shame or pressure the borrower may violate privacy and collection rules.

LXXVII. Loan Renewal and Rollover

Loan renewals and rollovers should be handled transparently.

A lender should disclose:

remaining principal;
interest already accrued;
fees;
penalties waived or carried over;
new principal;
new repayment schedule;
total cost.

Repeated rollovers can trap borrowers in debt and may be scrutinized as predatory.

LXXVIII. Early Payment and Prepayment

Loan agreements should state whether early payment is allowed and whether any charges apply.

Unreasonable prepayment penalties may be challenged, especially if not disclosed.

A borrower should be given accurate payoff computation.

LXXIX. Receipts and Payment Records

A lending company must issue proper receipts or acknowledgments for payments.

Failure to issue receipts can create disputes, tax issues, and regulatory complaints.

Borrowers should keep proof of payment, including official receipts, bank transfers, e-wallet screenshots, and acknowledgment messages.

LXXX. Collection Notices

Collection notices should be accurate and professional.

They should state:

borrower’s name;
loan account;
amount due;
due date;
breakdown of principal, interest, fees, and penalties;
payment channels;
contact information;
dispute procedure;
consequences of non-payment stated lawfully.

Collection notices should not contain threats, insults, false legal claims, or public disclosure.

LXXXI. Outsourcing Technology

A lending company using third-party technology providers, app developers, cloud services, credit scoring tools, or collection platforms remains responsible for compliance.

Vendor contracts should address:

data security;
confidentiality;
access controls;
regulatory cooperation;
breach notification;
ownership of borrower data;
deletion or return of data;
restrictions on subcontracting;
compliance with Philippine law.

Technology cannot be used to evade lending regulations.

LXXXII. Artificial Intelligence and Credit Scoring

If a lending company uses automated credit scoring, it should ensure fairness, transparency, accuracy, and data protection.

Automated systems should not unlawfully discriminate or rely on excessive personal data.

Borrowers should be able to understand basic reasons for rejection or adverse terms where required by consumer protection principles.

LXXXIII. Social Media Lending

A company offering loans through Facebook pages, messaging apps, online groups, or social media advertisements must still be licensed.

Social media lending can be risky because scammers often impersonate legitimate lending companies.

A lawful lending company should clearly disclose its corporate name, SEC registration, Certificate of Authority, office address, and complaint channels.

LXXXIV. Loan Agents

Loan agents may help source borrowers, but they must not misrepresent terms, collect unauthorized fees, or pretend to be the lending company if not authorized.

The company should regulate agent conduct through contracts, training, monitoring, and disciplinary measures.

Agents who collect “advance fees” from borrowers without authority may expose the company to liability.

LXXXV. Advance Fees and Scams

Borrowers should be cautious of entities demanding advance payments before loan release, especially if the lender is unlicensed or refuses to disclose its SEC authority.

Legitimate fees should be disclosed in loan documents and handled transparently.

A lending company should not use deceptive advance-fee schemes where borrowers pay processing charges but never receive loans.

LXXXVI. Use of the Word “SEC Registered”

Some entities advertise that they are “SEC registered” to imply that they are licensed lenders.

This can be misleading.

SEC registration as a corporation is not the same as SEC authority to operate as a lending company.

A lawful lending company should disclose that it has a Certificate of Authority to operate as a lending company, not merely that it is registered with the SEC as a corporation.

LXXXVII. Public Verification

Borrowers, partners, employers, investors, and app users should verify whether a lending company has SEC authority.

Verification may involve checking the company’s:

corporate name;
SEC registration number;
Certificate of Authority number;
principal office;
approved branches;
approved online platforms;
status with the SEC;
advisories or enforcement actions;
business permits.

A mismatch between app name and corporate name should be investigated.

LXXXVIII. Lending Company Compliance Program

A lending company should maintain a compliance program covering:

SEC licensing;
reportorial submissions;
loan disclosures;
fair collection;
data privacy;
consumer complaints;
anti-fraud controls;
advertising review;
branch monitoring;
online platform compliance;
employee training;
vendor oversight;
regulatory updates;
internal audit;
board reporting.

Compliance should be active, not paper-only.

LXXXIX. Compliance Officer

A lending company should designate responsible officers for compliance.

The compliance officer should monitor:

SEC filings;
Certificate of Authority conditions;
branch approvals;
online platform disclosures;
complaints;
collection practices;
data privacy;
advertising;
regulatory changes;
employee training.

The compliance officer should have enough authority to stop unlawful practices.

XC. Internal Audit

Internal audit helps detect:

unauthorized charges;
incorrect interest computation;
missing disclosures;
unrecorded payments;
collector misconduct;
data access abuse;
fake loan accounts;
employee fraud;
branch violations;
app compliance problems.

Regular audit reduces regulatory risk.

XCI. Board Responsibility

The board of directors should oversee lending operations.

The board should approve or monitor:

loan products;
interest and fee policies;
compliance program;
collection policy;
data privacy program;
branch expansion;
technology vendors;
complaint reports;
regulatory findings;
financial statements;
capital adequacy;
risk management.

A board that ignores abusive practices may face accountability.

XCII. Consumer Protection

Consumer protection is central to lending regulation.

A lending company should ensure that borrowers:

understand loan terms;
receive disclosures;
are not deceived by advertising;
are not charged hidden fees;
are not harassed during collection;
have access to complaints;
have their data protected;
receive accurate payment records;
can dispute errors.

Fair lending is not only ethical; it is a regulatory expectation.

XCIII. Common Violations

Common violations by lending companies include:

operating without Certificate of Authority;
using unregistered online lending apps;
failing to disclose true cost of credit;
imposing hidden fees;
abusive collection;
public shaming of borrowers;
contacting phone contacts without authority;
failure to issue receipts;
failure to submit reports;
misrepresentation as SEC licensed when not authorized;
use of another company’s license;
unauthorized branches;
unfair interest and penalties;
failure to protect borrower data;
raising public investments without authority.

XCIV. Common Mistakes by Start-Up Lenders

Start-up lenders often make the following mistakes:

incorporating first without checking licensing requirements;
launching a loan app before SEC approval;
advertising while application is pending;
using “lending” in brand name without authority;
assuming a mayor’s permit is enough;
copying loan documents from the internet;
ignoring truth-in-lending disclosures;
hiring aggressive collectors;
collecting unnecessary phone contacts;
charging excessive processing fees;
using investor money without securities compliance;
operating multiple apps under one undisclosed entity;
failing to budget for compliance personnel.

These mistakes can destroy the business before it becomes fully operational.

XCV. Pending Application Does Not Authorize Operations

A corporation that has filed an application for Certificate of Authority should not operate as a lending company while the application is pending.

A pending application is not approval.

The company should wait for the SEC to issue the authority before launching, advertising, releasing loans, or collecting lending-related fees.

XCVI. Revoked Authority

A corporation whose Certificate of Authority has been revoked, suspended, or cancelled cannot continue lending operations as if nothing happened.

Continuing operations after revocation may aggravate liability.

The company may need to wind down, collect existing receivables only as allowed, stop new lending, notify borrowers, and comply with SEC directives.

XCVII. Dormant Lending Companies

A lending company that stops operations may still have SEC obligations unless it properly closes, surrenders authority, or complies with cessation requirements.

Non-operating companies should not ignore reportorial obligations. Failure to file reports may lead to penalties.

If the company later wants to resume lending, it may need SEC clearance or reactivation procedures.

XCVIII. Merger, Acquisition, and Sale of Lending Business

A buyer acquiring a lending company should conduct due diligence on:

Certificate of Authority status;
SEC filings;
unpaid penalties;
borrower complaints;
collection practices;
online apps;
loan portfolio quality;
data privacy compliance;
litigation;
tax liabilities;
funding sources;
beneficial ownership;
branch permits;
contracts with agents and vendors.

Acquiring a company with regulatory violations may expose the buyer to inherited risk.

XCIX. Due Diligence for Investors

Investors should verify that the lending company:

has valid SEC authority;
is not merely SEC incorporated;
has no revoked or suspended license;
is not subject to SEC advisories;
complies with foreign ownership rules;
has lawful funding structure;
does not solicit public investments unlawfully;
has compliant loan documents;
has data privacy safeguards;
has manageable complaint history.

A profitable lending business may still be legally dangerous if non-compliant.

C. Role of Lawyers

Legal counsel may assist lending companies with:

incorporation;
SEC Certificate of Authority application;
foreign ownership review;
loan document drafting;
disclosure forms;
collection policy;
data privacy compliance;
online lending review;
complaint response;
regulatory investigations;
branch approvals;
capital restructuring;
due diligence;
litigation and collection cases.

Borrowers may also need lawyers when facing abusive collection, unlawful charges, privacy violations, or unauthorized lenders.

CI. Role of Accountants and Auditors

Accountants and auditors help ensure:

proper capitalization;
correct books;
loan portfolio accounting;
interest income recognition;
impairment or bad debt treatment;
tax compliance;
audited financial statements;
reportorial submissions;
internal controls;
reconciliation of payments.

Financial compliance supports regulatory compliance.

CII. Role of Data Protection Officer

A lending company handling personal data should have a data protection officer or responsible privacy officer where required.

The data protection role includes:

privacy notices;
consent forms;
data inventory;
risk assessments;
breach response;
borrower rights requests;
vendor data sharing agreements;
employee access controls;
retention policy;
privacy training.

Online lenders especially need strong privacy governance.

CIII. Practical Steps to Set Up a Lending Company

A lawful setup process may involve:

define the lending business model;
determine whether the business is lending, financing, pawnshop, banking, cooperative, or another regulated activity;
check foreign ownership and capital requirements;
prepare corporate structure;
draft articles and by-laws;
subscribe and pay required capital;
register corporation with SEC;
prepare Certificate of Authority application;
draft loan documents and disclosures;
prepare operations manual;
prepare collection policy;
prepare data privacy documents;
secure SEC Certificate of Authority;
obtain local business permits;
register with BIR;
register branches or online platforms as required;
train staff and agents;
launch only after authority is issued.

CIV. Practical Compliance Checklist Before Launch

Before lending to the public, the company should confirm:

SEC incorporation completed;
Certificate of Authority issued;
capital requirements satisfied;
directors and officers approved or disclosed;
principal office documented;
branches approved or reported;
online platforms registered or disclosed;
loan documents reviewed;
disclosure statements prepared;
interest and fees approved internally;
privacy notices and consents ready;
collection policy compliant;
complaints system established;
accounting system ready;
tax registration completed;
local permits secured;
employees trained;
agents contracted and supervised.

CV. Practical Checklist for Borrowers

Before borrowing, a borrower should check:

Is the lender a corporation?
Does it have an SEC Certificate of Authority as a lending company?
Is the app or trade name connected to the licensed corporation?
Is the loan agreement clear?
Are interest, fees, and penalties disclosed?
Is the repayment schedule understandable?
Does the app request excessive phone permissions?
Are collection practices lawful?
Are receipts issued?
Is there a complaint channel?
Are there hidden charges?
Is the lender pressuring immediate acceptance?
Are references being treated as co-makers without consent?
Is the lender asking for suspicious advance fees?

Borrowers should avoid unlicensed and abusive lenders.

CVI. Frequently Asked Questions

1. Can a corporation lend money without an SEC Certificate of Authority?

A corporation engaged in lending as a business generally needs an SEC Certificate of Authority. SEC incorporation alone is not enough.

2. Is SEC registration the same as a Certificate of Authority?

No. SEC registration creates the corporation. The Certificate of Authority authorizes operation as a lending company.

3. Can a sole proprietorship operate a lending company?

A lending company under the Lending Company Regulation Act is generally required to be a corporation. A sole proprietorship should not operate a regulated lending company without proper authority.

4. Can a lending company accept investments from the public?

A lending company Certificate of Authority does not authorize public investment solicitation, deposit-taking, or sale of securities. Separate securities or banking laws may apply.

5. Can an online lending app operate if the company has no Certificate of Authority?

No. Online lending is still lending. The company must have proper SEC authority and comply with online lending rules.

6. Can a licensed lending company operate multiple apps?

Only if it complies with SEC disclosure, registration, approval, and reporting rules for online platforms. Undisclosed apps may create violations.

7. Can a lending company contact a borrower’s phone contacts?

This is highly risky and may violate privacy and debt collection rules, especially if used for shaming, harassment, or unauthorized disclosure.

8. Can a lending company threaten borrowers with imprisonment?

Not for ordinary non-payment of debt. Debt is generally civil. Criminal threats must not be used deceptively.

9. Can a borrower refuse to pay because the lender is unlicensed?

The borrower may have defenses and complaints against an unlicensed lender, especially as to interest, charges, and collection practices. However, the principal amount received may still be recoverable depending on the facts and law.

10. Can the SEC revoke a lending company’s authority?

Yes. The SEC may suspend, revoke, or cancel authority for violations of law, rules, reporting obligations, or abusive practices.

CVII. Key Principles

The key principles are:

First, lending as a business is regulated in the Philippines.

Second, a corporation must obtain an SEC Certificate of Authority before operating as a lending company.

Third, SEC incorporation is not enough.

Fourth, mayor’s permit and BIR registration do not replace SEC authority.

Fifth, online lending apps are subject to the same licensing requirement and additional digital compliance rules.

Sixth, lending companies cannot accept deposits or solicit public investments unless separately authorized.

Seventh, loan terms must be disclosed clearly and truthfully.

Eighth, debt collection must be lawful, fair, and non-abusive.

Ninth, borrower data must be protected and used only for legitimate purposes.

Tenth, the SEC may penalize, suspend, or revoke non-compliant lending companies.

CVIII. Conclusion

The SEC Certificate of Authority is the core legal requirement for operating a lending company in the Philippines. It is not optional, not interchangeable with ordinary SEC incorporation, and not replaced by local business permits or tax registration. It is the regulatory license that allows a qualified corporation to engage in lending as a business.

A lawful lending company must be properly incorporated, adequately capitalized, transparent in ownership, compliant in loan disclosures, fair in collection, protective of borrower data, and faithful to SEC reportorial and operational requirements. Online lending companies must be especially careful because digital speed, automated approvals, app permissions, and remote collection create heightened risks of abuse.

For business owners, the safest path is to secure the proper SEC authority before advertising, launching, or granting loans. For borrowers, the safest path is to verify that the lender has a valid Certificate of Authority and to avoid lenders that hide their identity, impose unclear charges, misuse personal data, or threaten unlawful consequences.

In Philippine law, lending is not merely a private contract business. It is a regulated financial activity affecting the public. The Certificate of Authority requirement exists to ensure that those who profit from lending operate with accountability, transparency, and respect for borrower rights.