A Legal Overview and Practical Guide
I. Introduction
“Online lending apps” (OLAs) are now a common way for Filipinos to borrow small amounts quickly using their phones. In the Philippines, non-bank online lenders fall primarily under the jurisdiction of the Securities and Exchange Commission (SEC), not the Bangko Sentral ng Pilipinas (BSP), if they operate as lending or financing companies.
Because many abusive and illegal OLAs have appeared, understanding what it means to be “SEC-registered” and what rights and protections borrowers have is essential.
II. Legal Framework
Several laws and regulations intersect when we talk about SEC-registered lending apps:
Lending Company Regulation Act (LCRA, RA 9474)
- Regulates lending companies whose primary business is granting loans from their own capital.
- Requires SEC registration and a Certificate of Authority (CA) to operate.
Financing Company Act (RA 8556)
- Regulates financing companies, generally providing credit facilities like consumer loans, business finance, leasing, etc.
- Also requires SEC registration and a CA.
Securities Regulation Code (RA 8799)
- Gives the SEC regulatory and enforcement powers over corporations and entities it supervises.
Truth in Lending Act (RA 3765)
- Requires clear disclosure of loan terms, including finance charges, to borrowers.
Data Privacy Act (RA 10173)
- Protects personal data. Covers how OLAs collect, store, and use borrower information.
Other laws
- Revised Penal Code & Cybercrime Prevention Act – relevant when there are threats, unjust vexation, extortion, cyber harassment in collection.
- Consumer protection principles under the Civil Code.
The SEC issues Memorandum Circulars and guidelines specifically on lending and financing companies and their online operations (e.g., conduct rules, disclosure requirements, and rules on online collection practices).
III. What Is an “SEC-Registered Online Lending App”?
Legally, the app itself is only a tool or channel. What must be registered and licensed is the corporation behind the app.
An SEC-registered online lending app should mean:
- The entity behind the app is a corporation duly registered with the SEC;
- It has obtained a Certificate of Authority (CA) as a lending or financing company;
- It has registered its online operations and apps with the SEC, following specific guidelines on OLAs (e.g., app names, websites, platforms);
- It abides by SEC’s conduct, disclosure, and reporting requirements.
In practice, this involves:
- SEC Registration Number – proves the company exists as a corporation.
- CA Number – proves it is authorized as a lending or financing company.
- App store listings and websites usually must show the corporate name, business address, and SEC registration and CA numbers.
IV. SEC Registration vs. Certificate of Authority
These two are distinct:
SEC Company Registration
- All corporations must be registered with SEC to have juridical personality.
- This alone does not authorize the company to engage in lending.
Certificate of Authority (CA)
- Specific licensing for lending companies and financing companies.
- Issued after the SEC evaluates capital, ownership, business plan, compliance, etc.
- Operating a lending business without a CA is generally illegal, even if the entity is SEC-registered as a corporation.
So a compliant online lending app should be backed by a corporation that has BOTH:
- SEC registration, and
- A valid CA as a lending or financing company.
V. Regulatory Requirements for Lending/Financing Companies Operating Apps
1. Corporate and Capital Requirements
A lending or financing company must comply with:
- Minimum paid-up capital as set by law and SEC rules (typically in the millions of pesos);
- Restrictions on who may own and manage the company (e.g., fit and proper standards for directors and officers);
- Proper corporate documentation: Articles of Incorporation, By-laws, corporate approvals.
2. Registration of Online Operations
For companies that use apps, websites, and other digital platforms, the SEC requires them to:
- Disclose and register their online platforms (e.g., app names, URLs, websites);
- Ensure that any marketing and solicitation done online complies with SEC rules;
- Use officially declared corporate names and trade names;
- Update SEC when they launch new apps or change existing ones.
This is partly to prevent the practice of a single company having dozens of shadow apps, some of which may be abusive, anonymous, or designed to evade enforcement.
3. Reporting and Compliance
SEC-registered lenders and financing companies must:
- File regular reports (financial statements, compliance reports);
- Keep proper loan records and ledgers;
- Maintain a compliance officer or designated person responsible for regulatory adherence;
- Cooperate with SEC examinations and investigations.
Failure to comply can lead to fines, suspension, or revocation of their Certificate of Authority and corporate registration.
VI. Conduct and Consumer Protection Standards
1. Required Disclosures
Under the Truth in Lending Act and SEC regulations, OLAs must disclose to borrowers, in clear and understandable form:
- Principal amount of the loan;
- Applicable interest rate (often as a per-annum rate, but they should also show how it applies to the loan term);
- All other charges and fees (service fee, processing fee, convenience fee, penalties, etc.);
- Total amount to be repaid and the due date(s);
- Consequences of non-payment (penalty rates, late fees, actions that may be taken).
“Hidden charges” and misleading statements about interest (e.g., quoting only a low “service fee” but hiding actual finance charges) can be a violation of disclosure rules and a form of deceptive practice.
2. Prohibition of Abusive Collection Practices
SEC rules and general law prohibit harassment and abusive collection methods, such as:
- Threatening violence, public shaming, or arrest;
- Using obscene, profane, or humiliating language;
- Sending messages to the borrower’s contacts solely to shame the borrower;
- Posting the borrower’s face and personal information on social media;
- Contacting borrowers at unreasonable hours, or repeatedly calling to harass.
These acts can also lead to:
- Criminal liability (grave threats, unjust vexation, anti-cybercrime offenses);
- Data Privacy Act issues (unauthorized use of contacts’ personal data);
- Administrative sanctions from SEC.
3. Data Privacy and Access Permissions
SEC-registered OLAs must still comply with the Data Privacy Act:
- Collect only data necessary for loan processing (identity, contact info, basic financial data);
- Obtain valid consent for any collection and clearly state the purpose;
- Avoid excessive permissions such as unrestricted access to contacts, photos, messages if not necessary and not transparently justified;
- Secure the data and avoid unauthorized sharing with third parties.
Unlawful use of contact lists to harass borrowers’ friends or employers, or posting personal data online, may violate the Data Privacy Act and could be reported to the National Privacy Commission (NPC) in addition to SEC.
VII. Distinguishing SEC-Supervised OLAs from Other Lenders
Not all apps offering loans are SEC’s responsibility:
- Banks and certain non-bank financial institutions are BSP-supervised, not SEC-supervised. Their digital lending apps fall under BSP regulations.
- Cooperatives are supervised by the Cooperative Development Authority (CDA).
- Money lenders operating informally and not incorporated as lending or financing companies might be illegal; they are not covered by the “SEC-registered” concept but may still be liable under criminal and civil law.
For non-bank, non-cooperative OLAs that operate as corporate lenders, SEC is the key regulator.
VIII. Red Flags: Signs an App May Not Be Properly SEC-Registered
Even without seeing SEC’s latest lists, typical warning signs include:
No clear corporate identity
- App or website doesn’t show a full official corporate name, business address, or SEC registration and CA numbers.
Suspiciously high and hidden charges
- App advertises a very low interest rate but upon approval the net disbursement is far lower because of huge “processing” or “service” fees.
- The agreement does not clearly state effective interest or total repayment amount.
Excessive data access
- App insists on access to contacts, photos, SMS, microphone, or camera without explaining why these are needed for lending.
Harassing collection practices from day one
- Threats, insults, or mass messaging of your contacts as soon as you miss or are about to miss due dates.
No written contract or unclear terms
- Loan “agreement” shows only a few lines inside the app, with no downloadable or printable contract.
Short history and constantly changing names
- App keeps changing its name or disappears and reappears under a different name with the same behavior.
Presence of one or two red flags does not automatically prove illegality, but the more red flags, the higher the risk that the app is non-compliant or abusive.
IX. Rights and Remedies of Borrowers
1. Right to Information and Fair Treatment
Borrowers have the right to:
- Receive complete disclosures of loan terms before agreeing;
- Be treated fairly and without harassment;
- Have their personal data protected and used only for lawful purposes;
- Receive copies of contracts or clear records of their obligations and payments.
2. Complaints to the SEC
If dealing with a lending or financing OLA (non-bank), borrowers can:
File a written complaint with the SEC, describing:
- The name of the app and company;
- Nature of the loan;
- Abusive collection practices or undisclosed charges;
- Attach screenshots, messages, contracts, IDs, and proof of payments.
The SEC can:
- Investigate the company;
- Require explanations and submissions;
- Impose administrative sanctions (fines, suspension, revocation of CA and registration);
- Issue advisories warning the public against specific abusive or illegal lenders.
3. Complaints to the National Privacy Commission (NPC)
When harassment involves misuse of personal data:
You can complain to the NPC if the app:
- Accessed and used contact lists to shame you;
- Shared your personal data without valid legal basis;
- Failed to secure your information.
NPC may investigate and penalize data privacy violations (administrative fines, orders to cease processing, etc.).
4. Criminal Complaints and Police/NBI Assistance
If the harassment crosses into criminal territory:
- Threats of harm, defamation, online shaming, extortion can be reported to the PNP (e.g., Anti-Cybercrime Group) or NBI.
- You may file criminal complaints with the Office of the Prosecutor for relevant offenses (grave threats, coercion, unjust vexation, cybercrime, etc.).
5. Civil Remedies
Borrowers may also:
- File a civil case for damages based on the Civil Code (abuse of rights, acts contrary to law and morals) if they suffered mental anguish, reputational harm, or financial loss due to abusive practices;
- Challenge unconscionable loan terms in court.
X. Liabilities of Unregistered or Abusive OLAs
Lending apps and their officers may face:
Administrative sanctions from SEC
- Fines;
- Suspension or revocation of Certificate of Authority;
- Revocation of corporate registration;
- Blacklisting and public advisories.
Criminal liability
- For operating a lending or financing business without the required CA;
- For violations of other laws (e.g., Data Privacy Act, Revised Penal Code, cybercrime laws).
Civil liability
- Damages to borrowers for illegal collection practices and harmful breaches of duty.
In some cases, responsible officers—directors, officers, or managers—may be held personally liable.
XI. Practical Checklist for Borrowers Before Using an Online Lending App
Before you borrow:
Identify the company
- Find the full corporate name, address, and SEC registration/CA numbers in the app or website.
Screen the terms
Check:
- Loan amount and term;
- Interest rate and whether it looks reasonable;
- All fees (processing/service/other charges);
- Total amount you will actually receive and total repayment.
Review data permissions
- Check what the app wants to access.
- Be cautious if it demands contacts, photos, or messages without clear benefit to you.
Look for reviews and patterns of harassment
- Experiences of other borrowers can indicate whether the app harasses users.
Borrow only what you can repay
- High-cost, short-term loans can trap borrowers if taken lightly.
- Always plan realistic repayment before borrowing.
Keep records
- Save screenshots of loan terms, contracts, and payment proofs.
- Download receipts or confirmations after each payment.
XII. Final Notes
“SEC-registered” in relation to online lending apps should mean more than a label—it should signify that:
- The lending business is properly licensed,
- It follows legal standards of disclosure and fair collection, and
- It is subject to ongoing oversight and sanctions.
However, registration alone does not guarantee good behavior. Borrowers must still exercise caution, understand their rights, and be willing to assert those rights before lenders, regulators, and, if necessary, the courts.
This article provides general legal information on SEC-registered online lending apps in the Philippine context and is not a substitute for personalized legal advice. For specific disputes or serious harassment, it is best to consult a lawyer or seek help from the appropriate government agencies.