I. Introduction

Lending is a regulated business in the Philippines. A person or entity cannot simply lend money to the public as a business and call itself a “lending company” without complying with the requirements imposed by law and the Securities and Exchange Commission. The legitimacy of a lending company depends not only on ordinary business registration, but also on authority to operate as a lending company under Philippine law.

The central law governing lending companies is Republic Act No. 9474, or the Lending Company Regulation Act of 2007. Its implementing rules, SEC memoranda, and related regulations govern how lending companies are formed, registered, supervised, penalized, and, when necessary, revoked or shut down.

In the Philippine context, SEC registration is not merely a formality. It is a core indicator of whether a lending company is legally authorized to operate.

II. What Is a Lending Company?

A lending company is generally a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than nineteen persons. It lends money to borrowers and earns income through interest, fees, and other lawful charges.

A lending company is different from a bank, financing company, pawnshop, cooperative, or informal private lender.

A lending company:

must be organized as a corporation;
must be registered with the SEC;
must secure the proper authority to operate as a lending company;
may lend money to the public only within the limits of the law;
is subject to SEC supervision and penalties.

The law is designed to protect the public from abusive lending, usurious practices disguised as fees, harassment, privacy violations, predatory collection, and fraudulent online lending schemes.

III. Governing Laws and Regulations

The principal legal framework includes:

1. Republic Act No. 9474

This is the main law regulating lending companies. It sets out who may engage in lending, the corporate form required, registration rules, capitalization requirements, penalties, and SEC supervisory authority.

2. SEC Implementing Rules and Regulations

The SEC issued implementing rules for RA 9474. These rules provide practical requirements for registration, licensing, capitalization, branch operations, reporting, advertisements, and sanctions.

3. Revised Corporation Code

Because a lending company must be a corporation, it must also comply with the Revised Corporation Code, including rules on incorporation, corporate powers, directors, officers, by-laws, capitalization, and corporate governance.

4. Truth in Lending Act

Lending companies must disclose the true cost of credit. Borrowers must be informed of interest, finance charges, penalties, fees, and the total amount payable.

5. Data Privacy Act

This is especially important for online lending companies and lending apps. Lending companies collecting personal data, phone contacts, IDs, photos, employment details, location data, or financial information must comply with data privacy rules.

6. Financial Consumer Protection Laws and Rules

Lending companies must deal fairly with borrowers, avoid deceptive practices, disclose charges clearly, and provide mechanisms for complaints.

7. SEC Rules on Online Lending Platforms

Companies using websites, mobile applications, or digital platforms to lend money are subject to SEC regulation. Online lending operators are closely monitored because of prior abuses involving unauthorized lending apps, harassment, shaming, threats, and unlawful use of borrower data.

IV. SEC Registration: Meaning and Importance

In ordinary business language, people often say that a company is “SEC registered” if it has a certificate of incorporation. In the lending industry, that is not enough.

For a lending company to be legitimate, it must generally have:

SEC registration as a corporation, and
a Certificate of Authority to Operate as a Lending Company.

A corporation may be registered with the SEC as a legal entity, but that does not automatically mean it is authorized to engage in lending. The authority to operate as a lending company is a separate regulatory requirement.

This distinction is crucial.

A company may truthfully say, “We are SEC registered,” but still be unauthorized to lend if it does not have the proper lending authority. This is one of the most common sources of public confusion.

V. Corporate Form Requirement

Under Philippine law, a lending company must be organized as a corporation. A sole proprietorship or partnership generally cannot legally operate as a lending company under RA 9474.

This means that a legitimate lending company must have articles of incorporation, by-laws, directors, officers, capital structure, corporate name approval, and registration with the SEC.

The corporate name usually must indicate that the entity is a lending company or otherwise comply with SEC naming requirements. A company cannot use misleading words suggesting that it is a bank, financing company, investment house, or government-accredited lender if it is not authorized as such.

VI. Certificate of Authority to Operate

The most important regulatory document for a lending company is the Certificate of Authority, often called the CA.

The Certificate of Authority is the SEC’s authorization allowing the corporation to engage in lending operations.

Without it, the corporation cannot lawfully operate as a lending company, even if it has been incorporated.

A legitimate lending company should be able to show:

its SEC Certificate of Incorporation;
its Certificate of Authority to Operate as a Lending Company;
its business address;
its official corporate name;
its registration or authority number;
its authorized branches or online platforms, if applicable.

VII. Minimum Capitalization

Lending companies must meet minimum paid-up capital requirements. The required capitalization may vary depending on the place of operation, scope, or applicable SEC rules.

The rationale is that lending companies should have sufficient capital to support lending operations and should not simply operate as fronts for unregulated money-lending schemes.

A lending company that expands, opens branches, or operates through digital platforms may also be subject to additional capital or registration requirements.

VIII. Foreign Ownership

Foreign ownership in lending companies is subject to Philippine laws on foreign investment and applicable SEC regulations. Depending on the structure and applicable negative list rules, foreign participation may be limited or may require compliance with additional regulatory conditions.

A lending company with foreign shareholders must ensure that its ownership structure, paid-up capital, and business activities comply with Philippine foreign investment laws.

IX. Branches, Extension Offices, and Online Platforms

A lending company’s authority does not necessarily allow it to operate anywhere in any manner it wants.

If it operates branches, satellite offices, websites, mobile applications, or online lending platforms, it may need to register or disclose these operations with the SEC.

For online lending, the SEC has been particularly strict. A lending company cannot hide behind an app name that is different from its registered corporate name. Borrowers must be able to identify the actual lending company behind the app or website.

A legitimate online lending company should clearly disclose:

the registered corporate name;
SEC registration details;
Certificate of Authority details;
office address;
contact information;
lending terms;
privacy policy;
collection policy;
complaint channels.

An app that gives loans but does not disclose the company behind it is a serious red flag.

X. Distinguishing Lending Companies from Financing Companies

A lending company is not the same as a financing company.

A lending company primarily grants loans from its own funds.

A financing company, governed by separate laws, may engage in financing arrangements such as installment sales financing, leasing, factoring, and other credit facilities.

Both are regulated by the SEC, but they are different types of regulated entities. A company authorized as a lending company should not represent itself as a financing company, bank, investment company, or remittance institution unless separately authorized.

XI. Distinguishing Lending Companies from Banks

Banks are regulated by the Bangko Sentral ng Pilipinas, not merely the SEC. Banks may accept deposits from the public. Lending companies cannot operate like banks and cannot solicit or accept public deposits.

This is a critical legal distinction.

A lending company may lend money, but it may not lawfully hold itself out as a bank, accept deposits, issue deposit-like instruments, or promise fixed investment returns to the public.

If a supposed lending company invites the public to “invest” money in exchange for guaranteed returns, that may raise issues under securities regulation, investment fraud rules, and illegal deposit-taking laws.

XII. Lawful Lending Activities

A legitimate lending company may grant loans to individuals, small businesses, employees, consumers, or other borrowers, depending on its business model.

Loans may be secured or unsecured. They may involve salary loans, personal loans, business loans, motorcycle loans, gadget loans, emergency loans, or other lawful credit products.

However, the company must comply with rules on:

disclosure of interest and charges;
fair collection practices;
data privacy;
truthful advertising;
proper documentation;
receipts and records;
complaint handling;
reporting to regulators;
restrictions on abusive penalties and hidden charges.

XIII. Interest Rates and Charges

Philippine law generally allows parties to stipulate interest, subject to limitations against unconscionable, excessive, iniquitous, or illegal charges.

Even where no fixed statutory ceiling applies to a particular loan, courts may reduce interest rates, penalties, and charges if they are excessive or unconscionable.

A lending company should clearly disclose:

nominal interest rate;
effective interest rate;
service fees;
processing fees;
penalties;
collection charges;
late payment charges;
documentary stamp tax, if applicable;
net loan proceeds;
total amount payable.

A common abusive practice is advertising “low interest” while deducting large processing fees upfront or imposing hidden penalties. Such practices may violate disclosure, consumer protection, or anti-fraud rules.

XIV. Truth in Lending Requirements

The Truth in Lending Act requires creditors to clearly disclose the cost of credit. Borrowers must not be misled about the amount they are borrowing and the amount they must repay.

A proper loan disclosure should show the borrower, before the loan is finalized:

the amount financed;
finance charges;
interest rate;
payment schedule;
total amount payable;
penalties and default charges;
deductions from loan proceeds;
consequences of non-payment.

Failure to disclose may expose the lending company to penalties and may affect enforceability of charges.

XV. Loan Agreements

A lending company should use written loan agreements. These agreements should be understandable and not misleading.

A proper loan agreement should contain:

names of the borrower and lender;
principal amount;
interest rate;
payment schedule;
maturity date;
fees and charges;
penalties for late payment;
security or collateral, if any;
events of default;
collection procedure;
data privacy consent, if applicable;
borrower’s rights and obligations;
lender’s rights and remedies;
venue and dispute resolution clauses.

For online lending, the borrower may accept terms electronically, but the company must still ensure that consent is valid, informed, and recorded.

XVI. Collection Practices

Collection is one of the most sensitive areas in lending regulation.

A lending company has the right to collect unpaid loans, but it must do so lawfully.

Prohibited or abusive collection practices may include:

threats of violence;
insults, humiliation, or obscene language;
public shaming;
contacting people who are not parties to the loan in a harassing manner;
posting borrower information online;
sending defamatory messages to contacts;
pretending to be police, court personnel, or government officers;
threatening arrest for ordinary non-payment of debt;
using false legal documents;
repeated calls at unreasonable hours;
unauthorized use of borrower data;
coercion, intimidation, or blackmail.

Non-payment of a simple loan is generally a civil matter. A borrower cannot be imprisoned merely for inability to pay a debt. However, criminal liability may arise in separate situations, such as fraud, bouncing checks, falsification, or other criminal acts.

XVII. Online Lending Apps and Data Privacy

Online lending has created major legal issues in the Philippines. Some lending apps have been accused of accessing borrowers’ contact lists, sending threats to relatives and employers, posting defamatory statements, or misusing personal data.

A legitimate online lending company must comply with the Data Privacy Act.

It should collect only personal data that is necessary and lawful. It should explain why the data is collected, how it will be used, how long it will be stored, and whether it will be shared.

Borrower consent must be specific, informed, and freely given. Blanket permission to access all phone contacts, photos, messages, or social media accounts may be legally questionable, especially if unrelated to credit evaluation.

Borrowers should be cautious of apps that demand excessive permissions, such as access to contact lists, galleries, microphones, messages, or location data without clear justification.

XVIII. Advertising and Public Representations

Lending companies must not mislead the public.

Advertisements should not falsely state or imply that the company is:

a bank;
government-approved in a way that exceeds its actual authority;
endorsed by the SEC beyond registration or authorization;
offering zero-interest loans when hidden fees apply;
offering guaranteed approval without conditions;
authorized to collect deposits or investments;
allowed to operate without proper disclosure.

Using phrases such as “SEC registered” can be misleading if the company has no Certificate of Authority to operate as a lending company.

A more accurate representation would state that the company is incorporated with the SEC and has a specific Certificate of Authority to operate as a lending company.

XIX. How to Verify Whether a Lending Company Is Legitimate

A borrower should verify legitimacy before borrowing.

The following should be checked:

1. SEC registration

Confirm that the company exists as a registered corporation.

2. Certificate of Authority

Confirm that the company has authority to operate as a lending company.

3. Corporate name

Check whether the name used in advertisements, apps, or messages matches the registered corporate name.

4. Business address

A legitimate lender should have a verifiable office address.

5. Contact details

There should be official phone numbers, email addresses, and complaint channels.

6. SEC advisories

The SEC regularly issues advisories against unauthorized lenders, abusive online lending platforms, and investment scams.

7. App identity

For online lending, verify the company behind the mobile app. The app name alone is not enough.

8. Loan documents

Legitimate companies issue loan contracts, disclosure statements, receipts, and payment records.

9. Collection behavior

Threats, shaming, harassment, and misuse of contacts are red flags.

10. Investment solicitation

If the company asks the public to invest money for guaranteed profits, it may be operating outside the scope of a lending company.

XX. Red Flags of an Illegitimate Lending Operation

A lending operation may be suspicious if it:

has no SEC registration;
has SEC incorporation but no Certificate of Authority;
refuses to disclose its corporate name;
uses only an app name or Facebook page;
has no physical address;
uses personal bank accounts or e-wallets for payments;
charges excessive hidden fees;
deducts large amounts from loan proceeds without explanation;
imposes vague penalties;
threatens arrest for non-payment;
contacts the borrower’s relatives, friends, or employer to shame them;
posts borrower information online;
asks for access to phone contacts and photos;
uses fake legal documents;
represents itself as connected to a government agency;
solicits investments from the public;
uses multiple app names to hide the true operator.

XXI. Consequences of Operating Without SEC Authority

A person or entity operating a lending business without proper authority may face serious consequences.

Possible consequences include:

administrative fines;
revocation of registration;
suspension or cancellation of Certificate of Authority;
cease-and-desist orders;
disqualification of officers or directors;
criminal prosecution;
civil liability to borrowers;
data privacy complaints;
consumer protection complaints;
inclusion in SEC advisories;
app takedown or platform restrictions.

The SEC may act against unauthorized lending companies, especially those engaging in online lending without authority or abusive collection practices.

XXII. Liability of Directors, Officers, and Agents

Corporate officers, directors, employees, agents, collectors, and beneficial owners may face liability if they participate in illegal lending operations or abusive practices.

Incorporation does not automatically shield individuals from liability when they personally participate in fraud, harassment, unauthorized operations, privacy violations, or criminal acts.

Collectors may also be liable if they use threats, intimidation, libelous statements, or unauthorized disclosure of personal information.

XXIII. Borrower Rights

Borrowers dealing with lending companies have rights.

These include the right to:

know the true identity of the lender;
receive clear loan terms;
know the total cost of credit;
receive receipts or proof of payment;
be treated fairly during collection;
be free from harassment and threats;
have personal data protected;
file complaints with regulators;
dispute unlawful charges;
seek legal remedies against abusive lenders.

Borrowers should keep screenshots, messages, loan agreements, payment receipts, call logs, and other evidence if they experience abuse.

XXIV. Remedies Against Abusive or Illegal Lending Companies

A borrower may consider filing complaints with:

Securities and Exchange Commission, for unauthorized lending, lack of Certificate of Authority, abusive lending practices, or misleading representations;
National Privacy Commission, for misuse of personal data, unauthorized contact harvesting, or data privacy violations;
Department of Trade and Industry, for consumer protection concerns, where applicable;
Bangko Sentral ng Pilipinas, if the entity is falsely representing itself as a bank or financial institution under BSP supervision;
Philippine National Police or National Bureau of Investigation, for threats, cyber harassment, identity misuse, extortion, or other criminal acts;
courts, for civil claims, injunctions, damages, or defense against illegal charges.

A borrower sued for collection may raise defenses such as lack of authority, unconscionable interest, invalid penalties, improper disclosure, payment, fraud, or other applicable legal defenses.

XXV. Common Misconceptions

Misconception 1: “SEC registered” means fully legitimate.

Not always. A corporation may be SEC registered but still lack authority to operate as a lending company.

Misconception 2: Online lending apps do not need SEC approval.

They do. Online lending is still lending. The use of technology does not remove regulatory requirements.

Misconception 3: A borrower can be jailed simply for unpaid debt.

Generally, no. Non-payment of debt is ordinarily civil. However, related acts such as fraud or issuing worthless checks may create separate criminal liability.

Misconception 4: High interest is always illegal.

Not automatically. But courts may reduce excessive, unconscionable, or iniquitous interest and penalties.

Misconception 5: Consent allows a lender to do anything with borrower data.

No. Consent under data privacy law must still be lawful, specific, proportionate, and limited to legitimate purposes.

Misconception 6: A collector may contact anyone in the borrower’s phonebook.

No. Collection must be lawful and proportionate. Harassment, shaming, and unauthorized disclosure may violate privacy and other laws.

XXVI. Legitimacy Checklist for Lending Companies

A lending company is more likely legitimate if it can show the following:

Requirement	Why It Matters
SEC Certificate of Incorporation	Shows that the corporation legally exists
Certificate of Authority	Shows authority to operate as a lending company
Registered corporate name	Identifies the real legal entity
Verifiable business address	Helps establish accountability
Clear loan documents	Protects borrower and lender
Truthful disclosure of charges	Required for informed consent
Lawful collection policy	Prevents harassment and abuse
Data privacy compliance	Protects borrower information
Official payment channels	Reduces fraud risk
Complaint mechanism	Allows borrower recourse

XXVII. Duties of Lending Companies

A legitimate lending company should:

maintain its SEC registration and authority;
submit required reports to the SEC;
operate only within its authorized purposes;
keep proper books and records;
disclose loan terms truthfully;
avoid misleading advertisements;
protect borrower data;
train collectors and agents;
investigate borrower complaints;
comply with SEC orders and regulations;
avoid unfair, abusive, or deceptive practices;
ensure that all apps, websites, and branches are properly disclosed.

XXVIII. Due Diligence for Borrowers

Before borrowing, a person should:

check the company name, not just the brand name;
ask for SEC registration and Certificate of Authority details;
read the loan agreement carefully;
calculate the actual amount received and total amount payable;
check whether fees are deducted upfront;
avoid lenders that refuse written terms;
avoid apps demanding unnecessary phone permissions;
avoid lenders using threats or pressure tactics;
pay only through official channels;
keep proof of all payments.

Borrowers should not rely solely on social media pages, screenshots of certificates, or claims that the company is “registered.” Verification should be done independently whenever possible.

XXIX. Due Diligence for Investors and Business Partners

A person dealing with a lending company as an investor, funder, agent, or partner should also exercise caution.

They should verify:

whether the company has authority to lend;
whether it is soliciting investments legally;
whether returns are guaranteed;
whether securities registration is required;
whether the company has pending SEC advisories or complaints;
whether its collection practices expose partners to liability;
whether its data handling complies with law;
whether its corporate documents are current.

A lending company’s authority to lend does not automatically authorize it to solicit public investments. Investment solicitation may require separate securities registration or exemption.

XXX. Practical Legal Issues

1. Can an unregistered lender collect a loan?

The borrower’s obligation may still be examined under civil law principles, but an unauthorized lender may face regulatory penalties. Courts may also scrutinize the loan terms, interest, penalties, and legality of the transaction.

2. Can a lending company charge processing fees?

Yes, but fees must be disclosed, reasonable, and not deceptive. Excessive fees used to hide interest may be challenged.

3. Can a lending app access contacts?

Only if there is a lawful, necessary, proportionate, and clearly disclosed purpose. Using contacts to shame or harass a borrower is highly problematic.

4. Can a collector threaten legal action?

A collector may truthfully state lawful remedies, but cannot use false threats, fake warrants, fake subpoenas, threats of imprisonment for ordinary debt, or intimidation.

5. Can a lender post a borrower’s name online?

Public shaming may expose the lender to liability for privacy violations, defamation, cyber-related offenses, or unfair collection practices.

6. Can a lending company use a different trade name?

It may use a trade name or app name only if properly disclosed and not misleading. The real corporate entity must be identifiable.

XXXI. SEC Enforcement

The SEC has authority to regulate lending companies, issue rules, require reports, investigate violations, impose penalties, revoke authority, and issue public advisories.

SEC enforcement is particularly important against:

unregistered lending companies;
lending companies operating without Certificate of Authority;
online lending platforms using abusive collection practices;
entities misrepresenting SEC registration;
corporations soliciting investments without authority;
companies using multiple apps to evade regulation.

Public advisories from the SEC are important warning signs. A borrower should be cautious if the lender or app appears in an SEC advisory.

XXXII. Relationship with Data Privacy Regulation

The SEC regulates the lending company as a financial or credit business, while the National Privacy Commission regulates personal data processing.

A lending company may violate both SEC rules and data privacy law at the same time. For example, an online lender that operates without authority and uses borrower contacts for harassment may face SEC action and privacy complaints.

Proper data privacy compliance requires:

lawful basis for processing;
privacy notice;
limited collection;
secure storage;
restricted access;
clear retention period;
borrower rights mechanisms;
breach response procedures;
proper handling of third-party collectors;
accountability of officers and processors.

XXXIII. Relationship with Cybercrime and Criminal Law

Some lending abuses may involve cybercrime or criminal law, especially when committed through digital platforms.

Possible issues may include:

cyber libel;
grave threats;
unjust vexation;
coercion;
identity theft;
unauthorized access;
computer-related fraud;
data misuse;
falsification;
extortion.

A lender’s right to collect does not include the right to commit crimes.

XXXIV. Best Practices for Legitimate Lending Companies

A compliant lending company should adopt the following best practices:

maintain complete SEC registration and authority records;
publish accurate corporate information;
disclose all loan charges before release;
use plain-language loan agreements;
avoid excessive app permissions;
train collectors on lawful conduct;
prohibit harassment and public shaming;
maintain a borrower complaint desk;
conduct periodic compliance audits;
review advertisements before publication;
separate lending operations from investment solicitation;
maintain data privacy policies;
document borrower consent properly;
use official payment channels;
cooperate with regulators.

XXXV. Conclusion

In the Philippines, the legitimacy of a lending company depends on more than having a business name, app, Facebook page, or SEC incorporation. A lawful lending company must be properly incorporated and must have authority from the SEC to operate as a lending company.

The most important distinction is this: SEC incorporation proves corporate existence; a Certificate of Authority proves permission to engage in lending.

Borrowers, investors, and business partners should verify both.

A legitimate lending company must disclose loan terms, treat borrowers fairly, protect personal data, avoid abusive collection practices, and operate within the authority granted by law. Conversely, unauthorized lending operations, misleading “SEC registered” claims, abusive online lending apps, unlawful collection practices, and misuse of personal data may expose operators, officers, collectors, and agents to administrative, civil, and criminal liability.

In Philippine law, lending is lawful when properly authorized, transparent, and fair. It becomes legally dangerous when it is hidden, abusive, unauthorized, or deceptive.