If you’ve landed here after seeing ads for quick cash loans through mobile apps, or because you’re exploring whether you can legally operate a lending app in the Philippines, understanding SEC registration is essential. Many apps promise fast approval with minimal paperwork, but only those properly registered with the Securities and Exchange Commission (SEC) can legally offer loans. Unregistered apps often lead to borrower complaints about hidden fees, aggressive collection tactics, and data privacy issues. This guide explains the requirements clearly, what the process actually involves in practice, and how to protect yourself whether you’re a borrower or considering starting a legitimate operation.

Lending apps fall under the broader category of lending companies or online lending platforms (OLPs) / online lending applications (OLAs). They are not the same as bank loans or financing from licensed financing companies. The core rule is straightforward: no one may engage in the business of granting loans on a regular basis without first becoming a stock corporation and obtaining specific SEC authorization.

Legal Basis Under Philippine Law

The primary law is Republic Act No. 9474, the Lending Company Regulation Act of 2007. It defines a lending company as a corporation that grants loans from its own capital funds or from funds sourced from not more than 19 persons. Key requirements include:

The entity must be organized as a stock corporation.
It must secure a Certificate of Authority (CA) to operate from the SEC before accepting any loan applications or disbursing funds.
A statutory minimum paid-in capital of ₱1,000,000 applies, although the SEC has authority to require higher amounts when circumstances warrant (recent discussions indicate potential significant increases to strengthen the sector).

Related laws add layers of protection and compliance:

Republic Act No. 10881 (2016) lifted previous nationality restrictions, allowing up to 100% foreign ownership of lending companies (with constitutional limits if the company ends up owning land through foreclosure).
SEC Memorandum Circular No. 19, Series of 2019 specifically governs online lending platforms and applications, requiring separate registration of each app or website.
The Data Privacy Act (RA 10173), Anti-Money Laundering Act (RA 9160, as amended), Truth in Lending Act (RA 3765), and Credit Information System Act (RA 9510) impose additional obligations on data handling, disclosures, and credit reporting.
Bangko Sentral ng Pilipinas (BSP) circulars cap effective interest rates and fees for smaller loans.

Operating without the required authority violates RA 9474 and can result in fines from ₱10,000 to ₱50,000, imprisonment from six months to ten years, or both, plus administrative sanctions like revocation of any existing authority and app takedowns from Google Play or the App Store.

Primary and Secondary Licensing: Two Distinct Steps

SEC registration for lending apps involves two main layers:

Primary License — Incorporation as a stock corporation through the SEC’s eSPARC (Electronic Simplified Processing of Applications for Registration of Companies) system. The corporate name must clearly indicate lending activities (e.g., “ABC Lending Corporation”).
Secondary License — The Certificate of Authority (CA) to operate as a lending company. This is the critical document that actually authorizes lending activities. You cannot legally launch an app or issue loans without it.

For online operations, you must also register each specific Online Lending Platform (OLP) or Online Lending Application (OLA) with the SEC before launch. This is not automatic upon getting the CA.

Step-by-Step Process to Legally Register

Here’s how the process typically unfolds in practice:

Reserve and register the corporation via eSPARC. Prepare Articles of Incorporation stating the primary purpose as lending, Treasurer’s Affidavit, and proof of capital deposit. At least five incorporators are generally required.
Prepare for the CA application (filed with the SEC’s Financing and Lending Companies Division). Use SEC Form F-107 (notarized). Gather supporting documents including bank certification of paid-up capital, NBI or police clearances for directors and officers, a detailed business plan (including credit scoring and collection strategy), and AML compliance documents.
Register with the Anti-Money Laundering Council (AMLC) as a covered person and adopt a board-approved Money Laundering and Terrorist Financing Prevention Program (MLPP) with robust Know-Your-Customer (KYC) procedures.
For the specific app or website (under MC 19-2019): Submit an affidavit detailing the app name, URLs, third-party developers, hosting details, and proof of intellectual property ownership. Provide system architecture diagrams, APK or web app files, onboarding screenshots, and a third-party information security audit certification (typically aligned with ISO 27001 or equivalent standards). Include a National Privacy Commission (NPC)-stamped Privacy Manual and Privacy Impact Assessment, plus a board resolution authorizing the platform’s launch.
Comply with consumer protection and disclosure rules. Loan agreements and in-app statements must clearly show the principal, net proceeds, all deductions, finance charges, and effective interest rate or annual percentage rate (APR) per the Truth in Lending Act.
Join the Credit Information Corporation (CIC) and commit to regular positive and negative data reporting.
Obtain final acknowledgment from the SEC for the OLP/OLA. Only then can you publicly launch and accept users.

Processing for the CA often takes around 30 calendar days once a complete application is filed, but clarifications or additional requirements can extend this. Full preparation (including audits and manuals) usually takes several months.

Current Realities and the Moratorium on New Online Platforms

Since November 2021, SEC Memorandum Circular No. 10, Series of 2021 has imposed a moratorium on the registration of new online lending platforms. Existing platforms registered before that date may continue operating under strict monitoring. As of mid-2026, the SEC has released draft rules proposing to lift the moratorium while introducing stricter prudential, disclosure, and market conduct requirements.

This means launching a completely new standalone lending app remains restricted or subject to enhanced scrutiny. Many operators explore partnerships with already-licensed lending or financing companies or wait for the final rules. Always check the latest SEC announcements before investing time or capital.

Common Pitfalls and Real-World Challenges

Ordinary people and first-time applicants often underestimate the compliance burden. Third-party security audits and privacy impact assessments can be costly and time-consuming. Directors and officers must pass background checks, and any history of complaints can delay or derail approval.

A frequent issue is attempting to operate through an existing ordinary corporation without obtaining the specific CA for lending activities. Another common mistake is launching the app first and applying later — this exposes everyone involved to enforcement action.

For borrowers, unregistered apps frequently violate data privacy rules by requesting excessive permissions (beyond essential camera, microphone, or location for KYC) or engage in prohibited collection practices such as contacting relatives and employers without consent, public shaming, or using profane language (prohibited under SEC MC No. 18, Series of 2019). Many such apps have been delisted after SEC complaints.

Foreign nationals or expats can own up to 100% of a lending company, but they still need to navigate the full incorporation and CA process, often with the help of local counsel familiar with SEC requirements.

How to Verify if a Lending App Is Legitimate

Legitimate apps must prominently display in the app store description, website, and in-app notices:

The full corporate name
SEC Registration Number
Certificate of Authority number

Cross-check these details. Visit the official SEC website or contact the SEC directly for verification. Red flags include apps that pressure you for immediate decisions, lack a clear physical office address or landline (recent SEC reminders require landlines for online operators), or make unrealistic promises with no mention of effective interest rates.

Required Documents, Fees, and Typical Timelines

Core documents for CA application typically include:

Notarized SEC Form F-107
Certified true copy of Certificate of Incorporation
Information sheet on directors/officers with clearances
Bank certification of minimum paid-up capital
AMLC registration proof and board-approved MLPP
Business plan
For OLAs: systems description, app files/screenshots, third-party security audit, NPC privacy documents, and board resolution

Fees (approximate and subject to change):

Incorporation fees based on authorized capital stock (roughly 0.2% plus legal research and documentary stamp fees)
CA application fee around ₱10,000 (plus ₱2,000 per additional branch)
Separate OLP/OLA registration fee around ₱10,000 per platform

Timelines: eSPARC incorporation can move quickly (often within days to a few weeks if documents are complete). CA processing averages 30 days but varies. Adding OLP registration, audits, and AMLC/NPC steps extends the total timeline to several months for a properly prepared application.

Frequently Asked Questions

Do all lending or loan apps in the Philippines need SEC registration?
Yes. Any entity regularly granting loans must be a stock corporation with a valid Certificate of Authority from the SEC. Specific online platforms or apps also require separate registration under SEC rules.

How can I check if a particular lending app is legitimate?
Look for the SEC Registration Number and Certificate of Authority number displayed clearly in the app and on its website or store page. Verify these details through official SEC channels or the SEC website. Unregistered apps cannot legally operate.

What is the minimum capital required to start a lending company?
The law sets a statutory minimum paid-in capital of ₱1,000,000. The SEC may require higher amounts, and recent regulatory discussions point toward increases to improve sector stability.

Can foreigners own and run a lending app business in the Philippines?
Yes. Republic Act No. 10881 allows up to 100% foreign ownership of lending companies, subject to constitutional restrictions if land ownership becomes involved through loan enforcement.

What are the risks of borrowing from an unregistered lending app?
You may face unfair or illegal collection practices, excessive data collection, privacy breaches, and limited legal recourse. The SEC actively works to remove unauthorized apps and has revoked authorities of non-compliant operators.

Are there limits on how lending apps can collect payments or use my data?
Yes. SEC rules prohibit harassment, public shaming, unauthorized disclosure of debt, and excessive app permissions. Collection calls are restricted to reasonable hours, and data use must comply with the Data Privacy Act with proper consent.

How long does the full SEC process usually take?
Incorporation via eSPARC can be relatively fast. The Certificate of Authority often takes about 30 days once filed completely. Preparing audits, privacy documents, and AML compliance adds significant time — expect several months overall for a new online platform.

Besides the SEC, what other registrations are usually needed?
Most operators must register with the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC) for data privacy, and the Credit Information Corporation (CIC) for credit reporting. Business permits from the local government unit are also required.

Can I use an existing corporation to launch a lending app?
Only if that corporation already holds (or obtains) a Certificate of Authority specifically authorizing lending activities. An ordinary stock corporation without the CA cannot legally engage in lending.

Where can I find official lists of registered lending companies?
The SEC maintains lists and verification mechanisms on its official website (sec.gov.ph). Some Freedom of Information requests or official publications also publish updated rosters of registered lending and financing companies.

Key Takeaways

Lending apps must operate through a stock corporation that holds both a Certificate of Incorporation and a specific Certificate of Authority from the SEC.
Each online platform or app requires separate registration under SEC Memorandum Circular No. 19, Series of 2019.
A long-standing moratorium on new OLP registrations remains relevant, with proposed rules in 2026 aimed at lifting it under stricter standards.
Minimum paid-in capital starts at ₱1,000,000 under RA 9474, but practical and regulatory expectations are often higher.
Foreigners may own up to 100% of a lending company, but full compliance with incorporation, CA, AML, privacy, and security audit requirements still applies.
Borrowers should always verify SEC numbers independently and be wary of apps that request unnecessary phone permissions or use aggressive collection tactics.
The process involves multiple government touchpoints (SEC, AMLC, NPC, CIC) and significant preparation — it is not a quick or low-cost undertaking.
Operating without proper authority carries heavy penalties, including fines, imprisonment, and business closure.

Staying informed about these requirements helps both borrowers avoid risky platforms and legitimate operators build sustainable businesses that comply with Philippine law. Requirements and procedures can evolve, so the most current details should always be confirmed directly with the SEC or qualified Philippine legal counsel familiar with financing and lending regulations.