I. Introduction

Online lending apps have become a common source of quick credit in the Philippines. They offer fast approval, minimal documentary requirements, and convenient mobile access. At the same time, they have also generated serious regulatory concerns, especially involving unauthorized lending, excessive interest and charges, harassment in debt collection, misuse of personal data, and public shaming of borrowers.

In the Philippine legal context, one of the first and most important checks before using, investing in, promoting, or partnering with an online lending app is SEC registration verification.

This article explains what SEC registration means, what it does not mean, how to verify an online lending app, why verification matters, what laws and regulations apply, and what legal consequences may arise when an app operates without proper authority.

II. Why the SEC Matters in Online Lending

In the Philippines, lending companies and financing companies are regulated by the Securities and Exchange Commission, commonly called the SEC.

The SEC is not merely a corporate registry. For lending and financing businesses, it also acts as a regulator. A company that wants to legally engage in lending as a business must generally comply with corporate registration requirements and must also obtain the proper authority to operate as a lending or financing company.

This is especially important for online lending apps because many of them operate through mobile applications, websites, social media pages, advertisements, and third-party digital platforms. The fact that an app is available on an app store does not automatically mean that it is legally authorized to lend money in the Philippines.

III. SEC Registration Is Not the Same as Authority to Operate as a Lending Company

A common misunderstanding is that a company is “SEC registered,” therefore it may legally operate an online lending app.

That is not always correct.

There are two different concepts:

1. SEC corporate registration

This means the entity is registered with the SEC as a corporation, partnership, or other juridical entity. It has legal personality. It may have a certificate of incorporation or registration.

2. SEC authority to operate as a lending or financing company

This is the authority or license that allows the company to engage in lending or financing activities as a regulated business.

For online lending, the more important question is not only:

“Is the company SEC registered?”

The better question is:

“Is the company registered with the SEC and does it have a valid Certificate of Authority to operate as a lending or financing company?”

A corporation may exist legally but still be unauthorized to conduct lending operations. In the same way, a business may have a business name, website, app, or social media page but lack the specific authority required for lending.

IV. Key Laws Governing Online Lending Apps in the Philippines

Several laws and regulations apply to online lending apps. The most relevant include:

1. Lending Company Regulation Act of 2007

The Lending Company Regulation Act of 2007, or Republic Act No. 9474, governs lending companies in the Philippines.

Under this law, a lending company is generally a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than a prescribed number of persons. Lending companies must be organized as corporations and must secure the proper authority from the SEC.

The law exists to regulate lending as a business and to prevent informal, abusive, or unauthorized lending operations.

2. Financing Company Act

Financing companies are also regulated entities. They are commonly involved in extending credit facilities, installment financing, leasing, factoring, and similar financing arrangements. Like lending companies, they are generally required to obtain SEC authority.

Some online lending platforms may operate under a financing company structure rather than a simple lending company structure, depending on the nature of their business model.

3. SEC Memorandum Circulars and Rules on Online Lending Platforms

The SEC has issued rules and circulars dealing specifically with online lending platforms. These rules require covered lending and financing companies to disclose and register their online lending platforms, websites, applications, and similar digital channels.

This means that verification should include not only the company name but also the name of the app or online platform used to offer loans.

A company may have a certificate of authority, but the specific online lending app may still need to be disclosed, approved, registered, or otherwise recognized under SEC rules.

4. Truth in Lending Act

The Truth in Lending Act, or Republic Act No. 3765, requires lenders to disclose important loan terms to borrowers. These include finance charges, interest, service fees, penalties, total amount payable, and other costs of credit.

For online lending apps, this means that the borrower should be clearly informed of the cost of the loan before accepting it. Hidden charges, unclear deductions, or misleading representations may raise legal issues.

5. Consumer Protection Laws

Online lending apps may also fall under general consumer protection principles. Borrowers are consumers of financial or credit services, and they should not be subjected to unfair, deceptive, or abusive acts.

Misleading advertisements, fake “zero interest” claims, hidden processing fees, automatic deductions, and unclear repayment obligations may expose lenders to regulatory action.

6. Data Privacy Act of 2012

The Data Privacy Act of 2012, or Republic Act No. 10173, is highly relevant to online lending apps.

Many online lending apps request access to personal data, phone contacts, photos, SMS logs, device information, employment details, government IDs, selfies, and bank or e-wallet information. The collection and use of this data must comply with data privacy principles, including transparency, legitimate purpose, proportionality, security, and lawful processing.

Abusive practices such as accessing a borrower’s contact list and sending collection messages to relatives, co-workers, employers, or friends may create liability under data privacy law.

7. Cybercrime Prevention Act

The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, may become relevant if online lending apps or their agents engage in threats, identity misuse, cyber libel, unauthorized access, harassment through electronic communications, or other unlawful digital conduct.

8. Revised Penal Code and Special Penal Laws

Certain collection practices may also give rise to criminal issues, depending on the facts. These may include threats, coercion, unjust vexation, grave coercion, libel, slander, identity misuse, or other offenses.

V. What Is an Online Lending App?

An online lending app is a digital platform that allows borrowers to apply for loans using a mobile application, website, or other online channel.

Typical features include:

digital loan application;
electronic submission of identification documents;
automated credit scoring;
e-wallet or bank disbursement;
short-term repayment periods;
online collection notices;
in-app loan agreements; and
digital payment channels.

Some online lending apps are operated directly by licensed lending companies. Others are operated by financing companies, marketplace platforms, service providers, or technology companies connected to a licensed lender.

The legal analysis depends on who actually lends the money, who collects the debt, who owns the app, who processes the borrower’s data, and whether the proper SEC authority exists.

VI. What Must Be Verified

A proper SEC verification should cover several layers.

1. Corporate name

Check the exact corporate name of the entity. Many online lending apps use trade names or app names that differ from the registered company name.

For example, the app name may be “Fast Peso Loan,” but the registered corporation may have a completely different legal name.

Borrowers should look for the actual company name in the app, privacy policy, loan agreement, disclosure statement, terms and conditions, email notices, or collection messages.

2. SEC registration number

A legitimate corporation should have an SEC registration number. However, this alone does not prove authority to lend.

The registration number should match the company name, not merely appear as a random number in the app or website.

3. Certificate of Authority number

For lending companies and financing companies, the more critical document is the Certificate of Authority issued by the SEC.

This certificate indicates that the company is authorized to operate as a lending or financing company, subject to applicable rules.

4. Status of the Certificate of Authority

The authority should be valid, subsisting, and not revoked, suspended, cancelled, or expired.

An online lending app may claim to be operated by a registered company, but that company may have been subject to suspension, revocation, or enforcement action.

5. App or platform name

The app or digital platform itself should be checked. Under SEC rules, covered companies may be required to register, disclose, or report their online lending platforms.

A company should not freely operate multiple lending apps under unrelated names without complying with SEC disclosure and registration requirements.

6. Business address and contact details

A legitimate lending or financing company should have verifiable office details, official contact channels, and responsible officers.

Red flags include vague addresses, foreign-only contact numbers, messaging-app-only support, no official email, and no identifiable company officers.

7. Loan documents and disclosure statement

The loan agreement should clearly identify the lender and provide terms of the loan. The borrower should be able to review:

principal amount;
interest rate;
processing fees;
service fees;
penalties;
maturity date;
total amount payable;
collection process;
data privacy terms; and
dispute resolution channels.

If the app disburses less than the stated loan amount but requires repayment based on the full amount without clear disclosure, that may be a warning sign.

VII. How to Verify SEC Registration of an Online Lending App

A careful verification process should include the following steps.

Step 1: Identify the real company behind the app

Do not rely only on the app name. Look for the legal entity in:

the loan agreement;
disclosure statement;
terms and conditions;
privacy policy;
payment reminders;
email notices;
SMS notices;
app store listing;
website footer; and
customer support replies.

The company name should be consistent across documents.

Step 2: Check whether the company is registered with the SEC

A company claiming to lend money in the Philippines should be capable of showing its SEC registration details.

However, corporate registration alone is not enough. A corporation may be registered for a different purpose and may not have lending authority.

Step 3: Check whether the company has a Certificate of Authority

For a lending company, verify whether it has a Certificate of Authority to operate as a lending company. For a financing company, verify whether it has authority to operate as a financing company.

The certificate should be issued by the SEC and should match the company name.

Step 4: Check whether the online lending app is associated with the authorized company

The app name should be traceable to the registered lending or financing company.

A major warning sign is when the app name, lender name, payment recipient, collection agency, and customer service identity do not match or cannot be explained.

Step 5: Check SEC advisories and enforcement notices

The SEC has issued public advisories against unauthorized lending entities and online lending apps. These advisories may indicate that a company or app is not authorized, has violated SEC rules, or has been subject to complaints.

An app appearing in an SEC advisory is a significant red flag.

Step 6: Check whether the app has been subject to suspension or removal

Some online lending apps have been ordered to stop operations, remove abusive features, or comply with regulatory requirements. Some may have been removed from app stores.

The fact that an app is downloadable does not automatically mean it is compliant.

Step 7: Check the National Privacy Commission context

Because many online lending complaints involve misuse of personal data, it is also useful to check whether the app or company has been associated with privacy complaints, enforcement actions, or public warnings.

SEC authority to lend does not exempt a lender from data privacy law.

VIII. Red Flags in Online Lending Apps

The following are common warning signs that an online lending app may be unauthorized, abusive, or legally risky:

no disclosed company name;
app name differs from the lender with no explanation;
no SEC registration number;
no Certificate of Authority;
fake or unverifiable SEC number;
no physical office address;
no official email address;
only messaging-app contact details;
extremely short repayment terms;
very high service fees or deductions;
unclear interest and penalty computation;
automatic access to phone contacts;
threats to message relatives, employers, or friends;
collection messages containing insults or threats;
public shaming on social media;
use of fake legal documents;
false claims of criminal liability for ordinary debt;
threats of immediate arrest;
payment to personal bank accounts or e-wallets;
refusal to provide official receipts;
multiple app names using one unclear company identity;
repeated reborrowing or forced rollover schemes;
unauthorized use of borrower photos or IDs; and
collection by unknown third parties.

A legitimate lending company should be transparent, traceable, and capable of explaining its legal authority.

IX. Legal Effect of Being SEC Registered

SEC registration gives a corporation legal personality. It allows the corporation to exist as a juridical person, sue and be sued, own property, enter into contracts, and conduct lawful business within its authorized purposes.

But in the lending context, SEC registration does not automatically authorize the company to lend as a regulated lending company.

A company whose articles of incorporation mention lending or financing may still need the proper Certificate of Authority before engaging in lending operations.

Therefore, the phrase “SEC registered” should be treated carefully. It is often used in advertisements to imply legitimacy, but borrowers should ask whether the company is also licensed or authorized to operate as a lending or financing company.

X. Legal Effect of Having a Certificate of Authority

A Certificate of Authority is a stronger indicator that the company is permitted to operate as a lending or financing company.

However, even a company with a Certificate of Authority must still comply with:

lending laws;
SEC rules;
disclosure requirements;
fair collection standards;
data privacy laws;
consumer protection obligations;
tax and business permit requirements;
anti-fraud rules; and
rules on online lending platforms.

The certificate is not a license to harass borrowers, misuse personal data, impose hidden charges, or engage in deceptive advertising.

XI. Verification of the App Versus Verification of the Company

For online lending, there is a critical distinction between the company and the app.

A company may be authorized, but the app may not be properly disclosed or registered as one of its online lending platforms. Conversely, an app may claim to be connected to a licensed company, but the connection may be false, outdated, or misleading.

Verification must therefore ask:

Who is the legal lender?
Is that lender SEC registered?
Does that lender have a Certificate of Authority?
Is the app listed, disclosed, or recognized as the lender’s platform?
Are the loan documents consistent with the app’s claims?
Are payments made to accounts belonging to the lender?
Are collection agents authorized and identifiable?

A mismatch among these details can indicate regulatory risk.

XII. Debt Collection Rules and Abusive Practices

Many complaints against online lending apps in the Philippines involve debt collection.

Even if a debt is valid, the lender or collector is not allowed to use unlawful, unfair, or abusive methods.

Problematic practices may include:

threatening arrest for nonpayment of an ordinary loan;
threatening to file fabricated criminal cases;
contacting people in the borrower’s phonebook without lawful basis;
disclosing the borrower’s debt to third parties;
sending defamatory messages;
using insults, profanity, or humiliation;
posting the borrower’s photo or ID online;
pretending to be a lawyer, police officer, prosecutor, or court employee;
using fake subpoenas, warrants, or legal notices;
collecting amounts not disclosed in the loan agreement;
demanding payment to personal accounts; and
repeatedly calling or messaging at unreasonable times.

A borrower’s failure to pay a civil debt does not automatically authorize harassment. Collection must remain lawful, proportionate, truthful, and respectful of privacy rights.

XIII. Is Nonpayment of an Online Loan a Crime?

As a general rule, nonpayment of a loan is a civil matter, not automatically a criminal offense.

The Philippine Constitution prohibits imprisonment for debt. Ordinary failure to pay a loan does not by itself justify arrest or imprisonment.

However, criminal liability may arise in separate circumstances, such as fraud, falsification, use of fake identity documents, bouncing checks, or other acts that are independently punishable by law.

Online lending apps sometimes use threatening language to make borrowers believe that nonpayment alone will result in arrest. Such threats may be misleading or abusive when not legally grounded.

XIV. Data Privacy Concerns in SEC Verification

SEC verification should not be separated from data privacy concerns. Many online lending apps collect large amounts of personal data, sometimes beyond what is necessary for a small loan.

A lawful lender must process personal data according to the principles of:

transparency;
legitimate purpose;
proportionality;
security;
accuracy;
retention limitation; and
accountability.

Borrowers should be cautious when an app requests access to phone contacts, photos, media files, SMS messages, location data, or social media accounts. The mere act of clicking “allow” does not necessarily justify abusive processing or disclosure of personal data.

For lending purposes, the lender may collect information needed to assess the loan and collect payment. But mass harvesting of contact lists and using those contacts for shame-based collection can violate privacy rights.

XV. Required Disclosures in Online Lending

A compliant online lending app should clearly disclose the terms of the loan before the borrower accepts it.

Important disclosures include:

amount borrowed;
amount actually disbursed;
deductions from proceeds;
interest rate;
fees;
penalties;
maturity date;
payment channels;
consequences of late payment;
identity of lender;
customer service channels;
collection process;
data privacy policy; and
complaint mechanisms.

The borrower should not be surprised by hidden deductions or undisclosed charges after disbursement.

XVI. Interest Rates, Fees, and Penalties

Philippine law generally allows parties to agree on interest, but interest, penalties, and charges may be questioned when they are unconscionable, excessive, misleading, or not properly disclosed.

Online lending apps sometimes advertise low rates but impose heavy processing fees, platform fees, service fees, or penalty charges. A loan may appear small but become expensive because of short repayment terms and multiple deductions.

For example, an app may advertise a loan amount of ₱5,000 but disburse only ₱3,500 after deductions while still requiring repayment based on ₱5,000 plus charges. If this is not clearly disclosed, it may raise issues under truth-in-lending and consumer protection principles.

XVII. Payment Channels and Proof of Payment

Borrowers should ensure that payments are made only through official channels. Payment to personal accounts is risky unless clearly authorized and officially receipted by the lender.

A borrower should keep:

screenshots of loan terms;
copies of disclosure statements;
proof of disbursement;
proof of payment;
receipts;
collection messages;
call logs;
emails;
app notifications; and
screenshots of abusive or threatening conduct.

These records may be important in disputes, complaints, or legal proceedings.

XVIII. The Role of App Stores

An online lending app’s presence on Google Play, the Apple App Store, or another platform does not prove that it is legally authorized by the SEC.

App stores may have their own policies, but they do not replace Philippine regulatory approval. An app may pass technical or platform requirements while still lacking SEC authority.

Likewise, removal from an app store does not necessarily erase the borrower’s existing contractual obligations, but it may indicate regulatory or compliance issues.

XIX. Foreign-Owned or Foreign-Operated Lending Apps

Some online lending apps may be connected to foreign operators, foreign investors, foreign technology providers, or foreign-based collection systems.

Foreign participation does not automatically make an app illegal, but the entity conducting lending in the Philippines must still comply with Philippine law, SEC rules, data privacy law, and applicable foreign ownership restrictions.

Foreign-operated apps that lend to Philippine residents without proper domestic authority may face regulatory action.

XX. Common Misleading Claims

Online lending apps or their agents may use statements that sound official but are legally incomplete.

Examples include:

“We are SEC registered.”

This may only mean the corporation exists. Ask whether it has a Certificate of Authority to operate as a lending or financing company.

“We are legal because we are on the app store.”

App store availability is not SEC authorization.

“You will be arrested if you do not pay today.”

Ordinary nonpayment of debt is generally civil, not criminal.

“We can message all your contacts because you allowed app permissions.”

App permissions do not override data privacy law.

“We can post your photo because you owe money.”

Debt collection does not justify public shaming or unlawful disclosure.

“You cannot complain because you accepted the terms.”

Contract terms cannot legalize unlawful conduct.

XXI. Borrower Rights

Borrowers dealing with online lending apps have rights, including:

the right to know the true lender;
the right to clear loan disclosures;
the right to fair collection practices;
the right to privacy;
the right to data protection;
the right to complain to regulators;
the right to dispute unauthorized charges;
the right to receive proof of payment;
the right not to be harassed;
the right not to be defamed or publicly shamed;
the right not to be threatened with false criminal charges; and
the right to seek legal remedies.

Borrowers should still pay valid debts, but lenders must collect lawfully.

XXII. Duties of Online Lending Companies

A lawful online lending company should:

maintain valid SEC registration;
maintain a valid Certificate of Authority;
disclose its online lending platforms;
comply with SEC rules;
provide accurate loan disclosures;
avoid hidden charges;
process personal data lawfully;
use lawful collection methods;
train collection agents;
supervise third-party service providers;
maintain complaint channels;
issue receipts;
keep proper records; and
cooperate with regulators.

A lender may be liable not only for its own direct acts but also for abusive practices committed by agents, collectors, outsourced service providers, or platform operators acting on its behalf.

XXIII. Complaints and Remedies

A borrower who suspects that an online lending app is unauthorized or abusive may consider filing complaints with the appropriate agencies.

1. Securities and Exchange Commission

The SEC is the primary agency for complaints involving unauthorized lending companies, financing companies, and online lending platforms.

Complaints may involve:

operating without authority;
using unregistered online lending platforms;
unfair debt collection;
misleading representations;
excessive or undisclosed charges;
violations of SEC circulars; and
continued operation despite suspension or revocation.

2. National Privacy Commission

The National Privacy Commission may handle complaints involving misuse of personal data, unauthorized access to contacts, disclosure of debt to third parties, public shaming, unlawful processing of photos or IDs, and similar privacy violations.

3. Department of Trade and Industry

The DTI may be relevant for general consumer protection concerns, depending on the nature of the complaint and the entity involved.

4. Bangko Sentral ng Pilipinas

The BSP generally regulates banks, quasi-banks, electronic money issuers, payment system operators, and other BSP-supervised financial institutions. If the lending service involves a BSP-supervised entity, e-wallet, payment operator, bank, or financial product under BSP supervision, BSP rules may become relevant.

However, ordinary lending companies and financing companies are generally under SEC supervision.

5. Philippine National Police or National Bureau of Investigation

Law enforcement may become relevant when there are threats, extortion, identity theft, cyber harassment, libel, fake warrants, unauthorized account access, or other possible crimes.

6. Courts

Civil or criminal remedies may be pursued in court depending on the facts. A borrower may also raise defenses or counterclaims if sued by a lender.

XXIV. Evidence to Preserve Before Filing a Complaint

A strong complaint should be supported by documentation. Borrowers should preserve:

screenshots of the app profile;
screenshots of the app permissions requested;
loan agreement;
disclosure statement;
privacy policy;
terms and conditions;
disbursement record;
repayment schedule;
proof of payments;
receipts;
collection messages;
call logs;
recordings, where legally obtained;
messages sent to third parties;
social media posts;
emails from the lender;
identity of collectors;
payment account details;
app store listing; and
SEC registration or authority claims.

The complaint should clearly identify the app name, company name, loan dates, amounts, collection conduct, and specific harm suffered.

XXV. Legal Consequences for Unauthorized Lending Apps

An online lending app operating without proper authority may face serious consequences, including:

SEC cease-and-desist orders;
suspension or revocation of corporate registration;
revocation of Certificate of Authority;
administrative fines;
disqualification of responsible officers;
public advisories;
referral for criminal investigation;
app takedown or removal;
data privacy penalties;
civil liability; and
reputational harm.

The responsible corporation, directors, officers, agents, and service providers may be examined depending on the violation.

XXVI. Does an Unauthorized Lender Lose the Right to Collect?

This question requires careful legal analysis.

The fact that a lender is unauthorized may expose it to regulatory penalties. However, it does not automatically mean that every borrower may keep the money without consequence.

Courts may still examine whether money was received, whether a contract existed, whether the contract or charges are enforceable, and whether public policy or illegality affects recovery.

Borrowers should avoid assuming that unauthorized status automatically cancels all obligations. At the same time, lenders cannot rely on a debt to justify illegal collection practices, hidden charges, privacy violations, or harassment.

The better legal position is that borrowers should challenge unlawful charges and abusive conduct while preserving records and seeking regulatory or legal remedies.

XXVII. Verification Checklist for Borrowers

Before using an online lending app, check the following:

exact app name;
exact company name;
SEC registration number;
Certificate of Authority number;
whether the authority is for lending or financing;
whether the app is connected to the authorized company;
physical office address;
official email address;
privacy policy;
loan agreement;
disclosure statement;
interest and fees;
penalties;
repayment period;
payment channels;
collection policy;
app permissions requested;
complaints or advisories against the app;
consistency of company details; and
whether the lender provides receipts.

Do not rely only on logos, app store ratings, advertisements, influencer promotions, or claims of “SEC registration.”

XXVIII. Verification Checklist for Lawyers, Compliance Officers, and Businesses

For lawyers, compliance officers, fintech partners, advertisers, payment processors, and investors, due diligence should include:

SEC certificate of incorporation;
articles of incorporation and by-laws;
latest general information sheet;
Certificate of Authority;
status of authority;
list of approved or disclosed online lending platforms;
SEC advisories or pending enforcement actions;
lending terms and disclosure templates;
collection scripts;
outsourcing agreements;
data processing agreements;
privacy impact assessment;
app permission review;
cybersecurity review;
complaint logs;
customer support process;
payment flow;
data retention policy;
third-party collector accreditation or contracts;
consumer protection controls; and
board and officer accountability.

For commercial partners, failure to conduct due diligence may create reputational, contractual, regulatory, and consumer protection risks.

XXIX. Best Practices for Online Lending Companies

A compliant online lending company should adopt the following practices:

display the legal company name clearly in the app;
display SEC registration and authority details accurately;
identify all online lending platforms used;
avoid misleading “instant cash” advertising;
disclose total loan cost before acceptance;
give borrowers access to the loan agreement;
avoid excessive app permissions;
collect only necessary personal data;
prohibit contact-list harassment;
train collectors on lawful practices;
monitor third-party collectors;
provide official receipts;
maintain a responsive complaints system;
regularly update SEC filings;
conduct data privacy compliance audits;
secure borrower data;
maintain transparent payment channels;
avoid threats of arrest for ordinary debt;
document borrower consent properly; and
cooperate with regulators.

The legal standard is not merely registration. The standard is continuous compliance.

XXX. Practical Scenarios

Scenario 1: The app is SEC registered but has no Certificate of Authority

This is a major problem. Corporate registration alone does not authorize lending operations. The company may be exposed to SEC enforcement.

Scenario 2: The company has a Certificate of Authority, but the app name is not disclosed

This may raise compliance concerns. The borrower should verify whether the app is actually operated by the authorized company.

Scenario 3: The app threatens to contact the borrower’s employer

This may raise debt collection and data privacy issues, especially if the employer is not a guarantor or authorized contact.

Scenario 4: The collector sends the borrower’s ID to friends

This may be a serious privacy violation and may also expose the sender to other legal claims.

Scenario 5: The app says nonpayment will result in arrest

This is often misleading when the issue is ordinary nonpayment of debt. The borrower should distinguish between civil debt and separate criminal acts such as fraud or falsification.

Scenario 6: The app deducts large fees before disbursement

This may be lawful only if properly disclosed and not unconscionable. Lack of disclosure may raise truth-in-lending and consumer protection issues.

Scenario 7: The payment account is under an individual’s name

This is a red flag. Borrowers should ask for official payment channels and receipts.

XXXI. Legal Importance of Transparency

Transparency is the core issue in SEC registration verification.

The borrower must know:

who the lender is;
whether the lender is authorized;
how much the loan costs;
what data is collected;
how repayment works;
who may collect;
where complaints may be filed; and
what legal remedies are available.

An online lending app that conceals its operator, charges, authority, or collection practices creates legal and regulatory risk.

XXXII. Conclusion

SEC registration verification is a necessary first step in evaluating online lending apps in the Philippines, but it must be done correctly.

The key point is that SEC registration alone is not enough. A legitimate lending or financing company must generally have the proper SEC authority to operate, and an online lending app should be traceable to that authorized entity. Borrowers, lawyers, partners, and regulators should verify not only the corporate registration but also the Certificate of Authority, the status of that authority, the app’s connection to the company, and the company’s compliance with disclosure, collection, consumer protection, and data privacy rules.

Online lending is not illegal by itself. It can be a lawful and useful financial service when properly licensed, transparent, fair, and privacy-compliant. The legal problem arises when apps operate without authority, conceal their true operators, impose undisclosed charges, misuse personal data, or collect debts through threats and public humiliation.

In the Philippine context, the safest rule is simple: verify the company, verify the authority, verify the app, verify the loan terms, and preserve evidence.