I. Introduction

A lending company in the Philippines is not an ordinary corporation that may simply register with the Securities and Exchange Commission (“SEC”) and begin lending money to the public. It is a regulated financial entity. Its creation, ownership, licensing, operations, branches, reporting, collection practices, and consumer-facing conduct are governed principally by Republic Act No. 9474, or the Lending Company Regulation Act of 2007, its implementing rules, SEC regulations, the Revised Corporation Code, consumer protection laws, data privacy rules, anti-money laundering rules where applicable, and general civil and commercial law.

The central rule is this: a corporation may not lawfully engage in the business of lending unless it is registered with the SEC and has authority to operate as a lending company. The SEC Certificate of Incorporation gives juridical personality, but the business of lending requires the proper licensing or authority from the SEC. SEC-issued incorporation documents themselves warn that a certificate of incorporation does not authorize the corporation to act as a financing or lending company without the necessary secondary license. (Esparc)

II. Governing Law

The primary statute is Republic Act No. 9474, enacted to regulate the establishment and operation of lending companies and to place their business on a sound, stable, and efficient basis. (Lawphil) Its Implementing Rules and Regulations define key regulatory concepts, including “Certificate of Authority,” which is the certificate issued by the SEC allowing a lending company to engage in the lending business regulated under R.A. No. 9474. (Lawphil)

Other important laws and rules include:

Republic Act No. 11232, the Revised Corporation Code, because lending companies are organized as corporations.
Republic Act No. 10881, which amended nationality restrictions for certain investment areas, including lending companies. It amended Section 6 of R.A. No. 9474 on citizenship requirements. (Lawphil)
Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, which strengthens consumer protection in financial products and services. (Lawphil)
SEC rules on unfair debt collection practices, particularly for lending and financing companies.
Data Privacy Act obligations, because lending companies commonly process sensitive personal and financial information.
Anti-Money Laundering Act obligations, where the company falls within covered-person rules or applicable AMLC registration/reporting requirements.
Truth in Lending principles, requiring transparent disclosure of loan charges, interest, penalties, and effective cost of credit.

III. What Is a Lending Company?

A lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced in accordance with law, but not from deposits. It is distinct from a bank because it does not receive deposits from the public. It is also distinct from a financing company, although the two are often discussed together because both are supervised by the SEC and both may require secondary authority.

The lending company business generally involves:

extending cash loans;
charging interest, service charges, penalties, or other fees;
accepting collateral or guarantees;
collecting receivables;
maintaining borrower records;
operating physical or digital branches, platforms, or loan channels; and
advertising credit products to the public.

The decisive factor is not the label used by the company but the substance of the activity. A corporation that regularly lends money to the public or a defined market segment for compensation may fall within lending company regulation.

IV. Why SEC Registration Alone Is Not Enough

A corporation registered with the SEC acquires juridical personality. However, lending is a regulated activity. The SEC’s eSPARC-generated certificates expressly state that the certificate of incorporation does not authorize the corporation to engage in activities requiring a secondary license, including acting as a financing or lending company. (Esparc)

Thus, a lending company needs two layers of authority:

First, corporate registration as a stock corporation under the Revised Corporation Code.

Second, authority from the SEC to operate as a lending company under R.A. No. 9474 and its rules.

A company that has only the first but not the second may exist as a corporation but may not lawfully conduct the regulated lending business.

V. Who May Organize a Lending Company?

A lending company must be organized as a corporation. Under the Revised Corporation Code, a corporation may generally be formed by one or more incorporators, subject to the requirements applicable to the specific corporate form. Lending and financing companies, however, are treated specially in the SEC registration system and regulatory framework.

SEC eSPARC classifies company applications by type and includes Lending and Financing as corporate subclasses. (Esparc) As of the SEC’s current eSPARC registration environment, lending and financing companies are handled under regular processing rather than the ordinary simplified route for most domestic stock corporations. The SEC’s eSPARC page states that beginning April 7, 2025, domestic stock corporations are processed through SEC ZERO, except lending and financing companies, and identifies lending and financing companies as covered under Regular Only processing. (Esparc)

VI. Foreign Equity and Nationality

Originally, lending companies were subject to nationality restrictions. R.A. No. 10881 amended Section 6 of R.A. No. 9474 on citizenship requirements. (Lawphil) In practical terms, applicants should not rely on old assumptions about mandatory Filipino ownership without checking the current SEC, foreign investment, and negative-list treatment applicable at the time of filing.

Where foreign ownership is involved, the applicant must ensure consistency among:

the Articles of Incorporation;
SEC foreign equity classification;
the Foreign Investments Act and applicable negative lists;
paid-up capital requirements, where applicable;
tax registration;
beneficial ownership declarations; and
documentary proof of foreign investor authority, identity, and remittance, where required.

VII. Corporate Name Requirements

A lending company’s name must comply with SEC rules on corporate and partnership names. eSPARC requires name verification, and the SEC system warns that name availability is not the same as approval of registration. The proposed name and any trade name must pass SEC validation before registration takes effect. (Esparc)

A lending company should usually include a descriptor indicating its regulated activity, such as “Lending,” “Lending Company,” or a similar SEC-acceptable descriptor. Misleading names, names suggesting banking authority, or names implying government affiliation may be rejected or require amendment.

VIII. Primary Purpose Clause

The Articles of Incorporation must contain a primary purpose clause authorizing the corporation to engage in lending activities, subject to SEC authority. A lending company should not use an overly broad financial-services purpose clause that suggests it may engage in banking, investment-taking, securities dealing, e-wallet operations, remittance, virtual asset services, or quasi-banking unless it has separate authority from the proper regulator.

A properly drafted primary purpose clause should make clear that the company will engage in the business of lending in accordance with R.A. No. 9474, its IRR, and SEC rules.

IX. Capitalization

Capitalization is central in lending company registration. The SEC will review the authorized capital stock, subscribed capital, and paid-up capital to determine compliance with applicable minimums and regulatory rules. Capital must be genuine, properly documented, and supported by treasurer’s affidavits, bank certificates, or other proof required by the SEC.

The company must avoid sham capitalization, simulated subscriptions, circular funding, or capital that is immediately withdrawn after registration. Any falsity, misrepresentation, or fraud in registration documents may be a ground for revocation or cancellation of the certificate issued by the SEC. (Esparc)

X. SEC Registration Process

The modern SEC registration process is largely electronic through eSPARC, the Electronic Simplified Processing of Application for Registration of Company. The SEC describes eSPARC as a facility for applications for registration of corporations, allowing the applicant or authorized representative to submit the proposed company name and input details of the Articles of Incorporation for SEC review. (Esparc)

For lending and financing companies, the SEC’s current public eSPARC materials indicate that they are treated under Regular Only processing. (Esparc)

The usual stages are:

Account creation or access through SEC online systems.
Selection of company type and subclass, including stock corporation and lending subclass.
Name verification.
Encoding of company details, including address, capital structure, incorporators, directors, officers, treasurer, and corporate purpose.
Generation or upload of registration documents, depending on the applicable SEC route.
Payment of assessed fees through the SEC’s payment facilities. The SEC’s eSPAYSEC portal states that payment is based on a Payment Assessment Form issued by the relevant SEC department. (eSPAYSEC)
Submission of signed, notarized, or authenticated hard copies, where required.
SEC review and post-evaluation.
Issuance of Certificate of Incorporation and/or Certificate of Authority, as applicable.
Post-registration compliance, including corporate, tax, local government, reportorial, and operational requirements.

The SEC Regular Processing page states that after payment, applicants must submit proof of payment and originally signed and authenticated or notarized registration documents through the prescribed submission channels. (Esparc)

XI. Documents Commonly Required

The exact requirements may vary depending on SEC rules, foreign equity, branch applications, amendments, and the company’s structure. Generally, applicants should prepare:

Application form or application summary form;
Cover sheet;
Articles of Incorporation;
By-laws, if separately required;
Treasurer’s affidavit;
proof of paid-up capital;
name verification approval;
incorporators’, directors’, trustees’, and officers’ information;
beneficial ownership declaration;
tax identification information;
proof of office address or principal office details;
board approvals, if juridical entities are incorporators;
documents for foreign corporate subscribers, if any;
SEC forms for lending company authority;
undertaking to comply with R.A. No. 9474 and SEC rules;
sworn statements or certifications required by the SEC;
proof of payment of SEC filing and licensing fees; and
other documents required by the SEC processing office.

For Regular eSPARC applications, SEC materials note that applications for registration or licensing of partnerships, lending, financing, and foreign corporations may be exempted from the usual uploading process, but documentary submissions to the chosen SEC processing office are required within the applicable period from payment. (Esparc)

XII. Certificate of Authority

The Certificate of Authority is the critical regulatory document for a lending company. The IRR of R.A. No. 9474 defines it as the certificate issued by the SEC in favor of a lending company to engage in the business of lending regulated by R.A. No. 9474 and its IRR. (Lawphil)

Without the Certificate of Authority, the company should not:

advertise itself as a lending company;
offer loans to the public;
operate a lending app or digital lending platform;
maintain lending branches;
collect lending receivables as a regulated lender;
use lending company trade names; or
represent that it is SEC-authorized to lend.

XIII. Branches, Extension Offices, Satellites, and Units

A lending company cannot freely open branches or satellite offices without SEC approval. The IRR states that loan transactions must be booked in authorized offices and that no lending company may establish or operate a branch, extension office, unit, or satellite office without prior authority. (Lawphil)

This matters because many lending businesses expand through kiosks, mall desks, provincial offices, collection units, agents, or digital service points. If the location functions as a lending or collection office, the company should determine whether it requires SEC branch authority.

XIV. Online Lending and Digital Platforms

Online lending companies are still lending companies. The use of websites, mobile apps, social media, messaging platforms, or automated underwriting does not remove the requirement of SEC authority. In fact, digital lending creates additional regulatory exposure because it often involves:

mass collection of personal data;
access to phone contacts or device data;
automated credit scoring;
digital advertising;
electronic contracts;
third-party collection agencies;
data sharing with affiliates;
cybersecurity risk; and
consumer complaints.

Digital lenders must therefore comply not only with R.A. No. 9474 but also with data privacy law, consumer protection rules, cybersecurity standards, and SEC rules against abusive collection practices.

XV. Interest, Fees, and Charges

A lending company may charge interest and fees, but they must be lawful, disclosed, and not unconscionable. Loan documents should clearly state:

principal amount;
interest rate;
method of interest computation;
service fees;
processing fees;
documentary stamp tax, if passed on;
penalty charges;
late payment charges;
collection charges;
maturity date;
amortization schedule;
total amount payable;
effective interest rate, where required;
security or collateral;
borrower remedies; and
consequences of default.

Even where parties freely agree to interest, Philippine courts may reduce interest, penalties, or charges that are unconscionable, iniquitous, or contrary to morals, law, or public policy.

XVI. Disclosure Duties

Lending companies must be transparent with borrowers. A borrower should know the true cost of credit before accepting the loan. Hidden charges, misleading “zero interest” claims, deceptive processing fees, or unclear compounding formulas can create regulatory and civil liability.

A compliant loan disclosure should be understandable to the ordinary borrower. This is especially important for salary loans, pension loans, motorcycle loans, small-business loans, online microloans, and emergency cash loans, where borrowers may be vulnerable or financially distressed.

XVII. Advertising and Marketing

A lending company should not advertise unless it has proper SEC authority. Advertisements must not:

claim guaranteed approval without conditions;
conceal charges;
misuse the SEC name or seal;
imply government endorsement;
misrepresent interest rates;
advertise daily or weekly rates without disclosing equivalent total cost;
use harassment-based collection threats;
target minors or legally incapacitated persons;
induce borrowers to submit false information; or
suggest that nonpayment is automatically a criminal offense.

The company name, SEC registration number, Certificate of Authority number, business address, contact details, and complaint channels should be used consistently in public-facing materials.

XVIII. Collection Practices

Debt collection is one of the most heavily scrutinized areas for lending companies. The SEC has issued rules against unfair debt collection practices by financing and lending companies. These rules address abusive conduct such as threats, harassment, shaming, false representations, unauthorized disclosure of borrower information, and contacting persons in a borrower’s phonebook or social network without proper basis.

A lending company and its collection agents should avoid:

threatening imprisonment for ordinary nonpayment of debt;
using obscene or insulting language;
contacting the borrower at unreasonable hours;
disclosing debt to employers, relatives, friends, or social media contacts;
posting borrower information online;
using fake legal documents;
pretending to be police, prosecutor, court personnel, or government officer;
threatening violence or reputational harm;
collecting from non-obligors; and
accessing or using personal data beyond the borrower’s consent and lawful purpose.

The company remains responsible for third-party collection agencies acting on its behalf. Outsourcing collection does not outsource liability.

XIX. Data Privacy Compliance

Lending companies process personal information, sensitive personal information, financial information, identification documents, employment data, contact details, bank details, device data, and sometimes location data. They must comply with the Data Privacy Act and National Privacy Commission rules.

A compliant lending company should have:

a privacy notice;
lawful basis for processing;
borrower consent where required;
data minimization;
access controls;
retention and deletion policy;
data sharing agreements;
breach response procedure;
privacy impact assessment for apps or digital platforms;
trained personnel;
vendor due diligence;
borrower rights procedures; and
restrictions on access to contacts, galleries, messages, or device data unless strictly lawful and necessary.

Improper harvesting of phone contacts, public shaming of borrowers, or disclosure of debt to third parties may create privacy, consumer protection, civil, administrative, and even criminal exposure.

XX. Consumer Protection Under R.A. No. 11765

R.A. No. 11765 protects consumers of financial products and services. It broadly covers financial consumer protection and imposes duties on financial service providers within the jurisdiction of financial regulators, including the SEC for entities it supervises. (Lawphil)

For lending companies, this means the company should maintain systems for:

fair treatment of borrowers;
transparent disclosure;
suitability or appropriateness of products;
responsible pricing;
complaint handling;
protection of consumer data;
avoidance of deceptive marketing;
avoidance of abusive collection practices;
fraud prevention;
board and senior management oversight; and
recordkeeping.

A lending company should treat consumer protection as a board-level compliance matter, not merely a customer service issue.

XXI. Anti-Money Laundering Considerations

A lending company should assess whether it is required to register or report as a covered person under AML laws and AMLC rules. The AMLC states that registration is for covered persons enumerated under the Anti-Money Laundering Act, as amended. (Anti-Money Laundering Council) The AMLC also maintains resources for SEC-supervised covered persons. (Anti-Money Laundering Council)

Even where a lending company’s AML obligations require legal classification analysis, prudent compliance includes:

customer identification;
beneficial ownership checks;
sanctions screening;
politically exposed person screening;
suspicious transaction escalation;
fraud monitoring;
source-of-funds review for large or unusual transactions;
employee training;
record retention; and
internal controls against identity fraud and loan-mule activity.

XXII. Local Government and Tax Registration

SEC registration does not replace local and tax registration. After SEC approval, the lending company must usually secure:

BIR Certificate of Registration;
authority to print or issue invoices/receipts, as applicable;
books of accounts registration;
local business permit from the city or municipality;
barangay clearance, where required;
employer registrations with SSS, PhilHealth, and Pag-IBIG;
documentary stamp tax compliance, where applicable;
withholding tax compliance;
income tax and percentage/VAT analysis; and
local business tax compliance.

The SEC eSPARC system notes integration with the Philippine Business Hub for TIN and employer numbers after registration. (Esparc)

XXIII. Reportorial Requirements

A lending company must comply with ordinary corporate reportorial requirements and special SEC requirements applicable to lending companies.

Ordinary SEC requirements commonly include:

General Information Sheet;
Audited Financial Statements, where required;
beneficial ownership information;
MC No. 28 contact information submission;
stock and transfer book stamping or maintenance;
notices of changes in directors, officers, address, capital, or corporate name; and
amendments through SEC processes when corporate documents change.

The SEC’s eSPARC-generated corporate materials state that domestic corporations must submit annual reports such as the General Information Sheet and Financial Statements and comply with MC No. 28 contact information requirements. (Esparc) The MC28 portal is specifically for submission and processing of compliance with SEC Memorandum Circular No. 28, series of 2020. (mc28.sec.gov.ph)

Special lending company compliance may include annual fees, branch reports, operational reports, and submissions required by the SEC’s lending and financing company monitoring units.

XXIV. Amendments, Conversion, and Corporate Changes

Changes in corporate name, primary purpose, capitalization, office address, directors, officers, ownership, or branch network may require SEC filing or approval. The SEC’s public ticketing/manual materials list services involving amendments of Articles and By-laws of lending and financing companies, corporate conversions from ordinary corporation to lending corporation, and conversions between lending and financing company status. (imessage.sec.gov.ph)

A corporation should not simply amend its Articles to add lending as a purpose and begin lending. If the new activity requires lending company authority, the corporation must secure the necessary SEC approval and Certificate of Authority.

XXV. Suspension, Revocation, and Penalties

A lending company may face penalties for:

operating without SEC authority;
misrepresenting its authority;
maintaining unauthorized branches;
using abusive collection practices;
failing to submit reports;
concealing beneficial ownership;
violating consumer protection rules;
violating data privacy rules;
charging unlawful or unconscionable fees;
using misleading advertisements;
failing to comply with SEC orders;
fraud or falsity in registration documents; and
continuing operations despite suspension or revocation.

The SEC registration system warns that falsity, misrepresentation, or fraud in submitted documents may justify revocation of registration or cancellation of certificates, without prejudice to criminal charges under the Revised Corporation Code and other laws. (Esparc)

XXVI. Criminal and Civil Risks

Borrower default is generally civil in nature. A lending company must be careful not to frame ordinary nonpayment as a criminal offense unless there is a separate criminal act, such as fraud, falsification, or issuance of a bouncing check under applicable law. Threatening imprisonment for ordinary debt collection may itself be an abusive collection practice.

Civil remedies may include:

demand letter;
restructuring;
collection suit;
foreclosure of collateral, if valid;
enforcement of security agreements;
small claims action, where applicable; and
ordinary civil action.

However, the lender must ensure that loan documentation, interest rates, penalty clauses, disclosure statements, authority to lend, and collection methods can withstand judicial and regulatory scrutiny.

XXVII. Distinction Between Lending Company and Financing Company

A lending company generally grants loans, while a financing company is typically involved in extending credit facilities, factoring, leasing, discounting, and similar financing arrangements under a separate legal framework. The two are often processed and monitored together by the SEC, but they are not identical.

A business should determine early whether its model is:

simple cash lending;
consumer lending;
salary lending;
business lending;
pawnshop activity;
financing company activity;
leasing;
factoring;
buy-now-pay-later;
payment services;
crowdfunding;
investment solicitation;
securities offering;
remittance;
e-money;
virtual asset service; or
banking/quasi-banking.

Misclassification can result in operating without the correct license.

XXVIII. Lending Apps and Fintech Structures

A fintech lending model may involve several parties: a lending company, technology provider, payment processor, collection agency, data analytics provider, credit bureau, funder, and marketing affiliate. The SEC will look at substance. If the app operator is effectively offering loans, controlling underwriting, collecting payments, and earning from lending charges, it may need lending company authority.

A safer structure identifies:

who the lender of record is;
who owns the loan receivable;
who funds the loans;
who collects payments;
who processes borrower data;
who performs credit scoring;
who handles complaints;
who appears in advertisements;
who bears default risk; and
who has the SEC Certificate of Authority.

The lender of record should be the entity with proper SEC authority.

XXIX. Practical Compliance Checklist

Before operating, a lending company should confirm that it has:

SEC Certificate of Incorporation.
SEC Certificate of Authority to operate as a lending company.
Approved Articles of Incorporation with proper lending purpose.
Adequate paid-up capital.
Valid principal office.
Authorized branches only.
BIR registration.
Local business permit.
Proper loan agreements.
Truth-in-lending disclosures.
Interest and fee schedule.
Privacy notice and data privacy program.
Complaint handling process.
Collection policy compliant with SEC rules.
Third-party collection contracts with compliance obligations.
Consumer protection policies.
AML assessment and registration/reporting, where applicable.
Cybersecurity controls for online platforms.
Annual SEC reportorial calendar.
Board oversight and compliance officer designation.

XXX. Common Mistakes

The most common mistakes are:

believing SEC incorporation alone authorizes lending;
using a lending trade name before authority is issued;
operating branches without approval;
lending through an app under an unlicensed entity;
copying loan agreements from informal lenders;
charging unclear or excessive penalties;
failing to disclose the effective cost of credit;
threatening borrowers with imprisonment;
contacting borrower contacts without lawful basis;
outsourcing collection to abusive agents;
failing to file GIS, AFS, MC28, or special SEC reports;
misclassifying a financing business as a lending company;
using foreign funding structures without regulatory review; and
adding lending as a secondary purpose without securing authority.

XXXI. Due Diligence by Borrowers and Business Partners

Borrowers, investors, payment processors, advertisers, app stores, and business partners should verify whether a lending company is legitimate. They should check:

SEC registration;
Certificate of Authority;
corporate name and trade name;
registered address;
complaint history;
status of branches;
whether the app name matches the licensed company;
whether the lender discloses rates and charges;
whether collection practices are lawful; and
whether the company has been suspended, revoked, or flagged.

The AMLC has also advised that corporate registration status may be checked through SEC verification tools, including the SEC’s public verification facilities. (Anti-Money Laundering Council)

XXXII. Effect of Lack of Authority

The lack of SEC authority may expose the company and responsible persons to administrative sanctions and may impair the enforceability or regulatory defensibility of its lending operations. Courts may still examine the particular loan contract, borrower defenses, illegality, public policy, interest rates, and the circumstances of the transaction.

In litigation, a borrower may question whether the lender had authority to lend, whether interest was properly disclosed, whether charges are unconscionable, and whether collection conduct violated law or regulation.

XXXIII. Conclusion

SEC registration of a lending company in the Philippines is both a corporate registration exercise and a regulated financial licensing process. The company must be validly incorporated, properly capitalized, transparently owned, specifically authorized to lend, compliant with branch rules, disciplined in disclosures, fair in collections, careful with borrower data, and current in reportorial filings.

The essential legal point is simple: a lending company must not treat lending as an ordinary business activity. It is a regulated business requiring SEC authority, continuing supervision, and ongoing compliance.