A lender can look professional online and still be illegal. In the Philippines, the real test is not whether the company has a Facebook page, a mobile app, a business permit, or thousands of downloads. The practical question is: is it properly registered with the Securities and Exchange Commission (SEC), does it have authority to operate as a lending or financing company, and—if it uses an app or website—is that online lending platform properly disclosed or recorded with the SEC? This guide explains how to check if a lending company is legitimate in the Philippines, what documents and red flags to look for, and what to do if you discover that a lender is unregistered, abusive, or misusing your personal data.
What Makes a Lending Company Legitimate in the Philippines?
A legitimate lending company in the Philippines should have more than a registered business name. Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, a lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. The law expressly says that a lending company must be organized as a corporation and must not conduct business unless it has been granted authority to operate by the SEC. (Supreme Court E-Library)
In practical terms, look for these four things:
| What to Check | Why It Matters |
|---|---|
| SEC corporate registration | Shows that the entity exists as a corporation. |
| Certificate of Authority or authority to operate | Shows that the SEC allowed it to engage in lending or financing. |
| Exact registered corporate name | App names and Facebook names often differ from the real legal entity. |
| Recorded or disclosed online lending platform, if applicable | If the loan is offered through an app, website, or fintech platform, the online platform should be traceable to a licensed lending or financing company. |
A common mistake is assuming that “SEC registered” automatically means “allowed to lend.” It does not. SEC registration only proves corporate existence. The lender also needs authority to operate as a lending company or financing company.
Legal Basis: Why SEC Verification Matters
Lending companies are regulated by the SEC
RA 9474 gives the SEC authority to regulate and supervise lending companies, require reports, exercise visitorial powers, and impose sanctions such as suspension, revocation of authority to operate, and fines for violations. The same law penalizes persons who engage in lending-company business without valid SEC authority or who hold themselves out as lending companies without authority. (Supreme Court E-Library)
This is why a lender’s barangay permit, mayor’s permit, DTI registration, or social media page is not enough. A city business permit may show that a business is allowed to operate in a locality, but it does not replace the SEC authority required for lending-company operations.
Financing companies are related but not identical
Some lenders are not “lending companies” under RA 9474 but financing companies under Republic Act No. 8556, the Financing Company Act of 1998. Financing companies generally extend credit facilities, including direct lending, factoring, leasing, or purchase of receivables. Like lending companies, they are regulated by the SEC and require proper authority. (Supreme Court E-Library)
For an ordinary borrower, the practical rule is simple: whether the company calls itself a lending company, financing company, loan app, cash loan provider, salary loan service, or installment-financing provider, verify its SEC authority before borrowing.
Borrowers have financial-consumer rights
Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, protects financial consumers and recognizes rights such as fair treatment, disclosure and transparency, protection against fraud and misuse of assets, data privacy, and timely complaint handling. It also gives regulators, including the SEC, enforcement powers over financial service providers under their jurisdiction. (Supreme Court E-Library)
This law matters because legitimacy is not only about registration. A lender can be registered but still violate consumer-protection rules through misleading ads, hidden charges, abusive collection, or misuse of personal data.
Loan costs must be clearly disclosed
The Truth in Lending Act, Republic Act No. 3765, requires disclosure of finance charges in credit transactions so borrowers understand the true cost of credit before entering the loan. (Lawphil) For lending apps and fast-cash loans, this means you should be able to see the principal, interest, service fees, processing fees, penalties, due dates, and total amount payable before accepting the loan.
If the app only shows “₱5,000 approved” but releases ₱3,500 after deductions and later demands ₱7,000 after seven days, that is a serious warning sign.
How to Check If a Lending Company Is Legitimate: Step-by-Step
1. Get the exact legal name, not just the app name
Before checking any list, collect these details:
- Exact corporate name of the lender.
- SEC registration number.
- Certificate of Authority number or authority-to-operate details.
- App name, website name, or platform name.
- Business address.
- Customer-service email and phone number.
- Name of the app developer shown in the app store.
- Loan contract, disclosure statement, privacy notice, and payment instructions.
Do not rely on brand names alone. “Fast Cash,” “Peso Loan,” “Easy Pera,” or similar app names may be trade names, not the actual SEC-registered corporation.
2. Check the SEC lists of registered lending and financing companies
The SEC maintains lists for lending companies, financing companies, and recorded online lending platforms. In an SEC Freedom of Information response, the agency directed the public to verify lending companies, financing companies, and online lending platforms through the SEC website lists, including the list of registered lending companies and the list of recorded online lending platforms. (www.foi.gov.ph)
When searching, try several variations:
- Full corporate name.
- Trade name.
- App name.
- SEC registration number.
- Certificate of Authority number.
- Names shown in the privacy policy or loan agreement.
If only the app name appears online but no SEC-registered company is shown behind it, treat that as a red flag.
3. Confirm the Certificate of Authority, not just corporate registration
A corporation may be registered with the SEC for many purposes: trading, consulting, holding company operations, marketing, or software development. That does not automatically authorize lending.
For a lending company, look for proof that the SEC granted it authority to operate as a lending company. For a financing company, look for authority to operate as a financing company. RA 9474 specifically says no lending company may conduct business unless granted authority to operate by the SEC. (Supreme Court E-Library)
Ask the company for a copy of its Certificate of Authority or the exact CA number. Then compare the details against SEC records.
4. For lending apps, check whether the online lending platform is recorded or disclosed
Online lending platforms include mobile apps, websites, and fintech-enabled systems where lending or financing products are offered. SEC issuances require lending and financing companies operating online to disclose their corporate name, SEC registration number, and Certificate of Authority number in advertisements and online lending platforms. (Philippine News Agency)
Check whether the app or website clearly displays:
- Corporate name of the lending or financing company.
- SEC registration number.
- Certificate of Authority number.
- Physical office address.
- Contact details for complaints.
- Privacy notice.
- Loan terms and disclosure statement.
If the app hides the company name, uses only a logo, or gives only a Gmail/Yahoo address, be cautious.
5. Search SEC advisories, revocation notices, and complaint channels
A company may have been registered before but later suspended, revoked, or flagged. Search the SEC website, SEC advisories, and official announcements for:
- “revoked”
- “suspended”
- “cease and desist”
- “unauthorized lending”
- “unrecorded online lending platform”
- the company name
- the app name
The SEC’s iMessage system is also the central online portal for public inquiries, complaints, incidents, and requests, and it allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)
6. Compare all names and numbers
Many questionable lenders use confusing combinations of names. For example:
| Document or Screen | What You Might See | What to Check |
|---|---|---|
| App store listing | “Quick Peso Loan” | Who is the developer? |
| Privacy policy | “ABC Tech Pte. Ltd.” | Is it the same as the Philippine lender? |
| Loan agreement | “XYZ Lending Corp.” | Is this company on the SEC list? |
| Payment instruction | Personal GCash number | Why is payment not to the company? |
| Collection message | Different company name | Is it a third-party collector or a fake collector? |
If the names do not match, pause. Legitimate lenders should be able to explain the relationship among the app, corporate lender, platform operator, and collection agent.
7. Review the loan disclosure before accepting
Before you tap “accept,” check whether the lender clearly discloses:
- Principal amount.
- Net proceeds to be released.
- Interest rate.
- Service fee or processing fee.
- Other charges.
- Due date.
- Penalties for late payment.
- Total amount payable.
- Collection process.
- Whether there is a cooling-off or cancellation policy, if applicable.
- Customer assistance or complaint mechanism.
RA 11765 requires transparency, disclosure, responsible pricing, and fair treatment by financial service providers. It also prohibits abusive collection or debt-recovery practices. (Supreme Court E-Library)
Red Flags That a Lending Company May Not Be Legitimate
1. It says “SEC registered” but cannot show authority to lend
This is one of the most common misleading claims. Ask: registered as what? A corporation? A lending company? A financing company? A platform?
A legitimate lender should not object to giving its corporate name, SEC registration number, and authority-to-operate details.
2. The loan app is not connected to any listed company
An app store listing is not government approval. A high rating or thousands of downloads does not prove SEC authority. Always connect the app to a licensed Philippine company.
3. It asks for unnecessary phone permissions
The 2026 public advisory of the DICT, National Privacy Commission, and SEC warns that unnecessary app permissions, excessive access to contact lists, and contacting persons other than named guarantors are prohibited. The advisory also says online lending platforms should only access contacts for specific legitimate purposes, such as selecting character references or guarantors, and that unbridled processing of contact lists is prohibited.
Be careful if an app requires access to:
- Your full contact list.
- SMS inbox.
- Call logs.
- Photos unrelated to identity verification.
- Social media accounts.
- Location when not needed.
- Microphone or files unrelated to the loan.
4. It contacts your relatives, employer, or friends who are not guarantors
Under SEC Memorandum Circular No. 18, Series of 2019, contacting persons in the borrower’s contact list other than those named as guarantors or co-makers is an unfair debt collection practice. The same circular also treats threats, insults, false representations, and contact at unreasonable hours as unfair collection practices.
5. It threatens public shaming or criminal arrest for nonpayment
A borrower may be civilly liable for a valid unpaid loan, but a collector cannot simply threaten arrest, public humiliation, or harm. MC 18 prohibits threats of violence or other criminal means, threats to take actions that cannot legally be taken, use of insults or profane language, and false representations to collect debt.
6. It requires payment to a personal account
Be cautious if the lender asks you to pay to:
- A personal GCash or Maya account.
- A random bank account under an individual’s name.
- Cryptocurrency wallet.
- Informal remittance recipient.
- Different company from the lender in the loan agreement.
Legitimate companies usually maintain traceable corporate payment channels.
7. It deducts large fees before releasing the loan
Some illegal or abusive lenders advertise “zero interest” but deduct large service fees, platform fees, verification fees, or membership fees before releasing the money. Always compute based on the net amount received and the total amount payable.
Example:
| Advertised Loan | Net Released | Amount Due | Term | Practical Effect |
|---|---|---|---|---|
| ₱5,000 | ₱3,500 | ₱5,500 | 7 days | The real cost is much higher than it appears. |
Even if a borrower agreed electronically, hidden or unclear charges may raise Truth in Lending, consumer-protection, and responsible-pricing issues.
Required Information to Verify a Lending Company
| Information | Where to Find It | Why It Helps |
|---|---|---|
| Corporate name | Loan agreement, privacy policy, SEC list | Identifies the real legal entity. |
| SEC registration number | App, website, contract, SEC records | Shows corporate registration. |
| Certificate of Authority number | App, website, contract, SEC records | Shows authority to lend or finance. |
| Platform or app name | App store, website, loan documents | Helps verify whether the online platform is recorded or disclosed. |
| Business address | SEC records, website, disclosure statement | Helps detect fake or offshore-only operations. |
| Disclosure statement | Before loan acceptance | Shows true cost of credit. |
| Privacy notice | App or website | Shows how your data will be collected and used. |
| Complaint mechanism | Contract, app, website | Required for responsible financial-consumer handling. |
What If the Lender Is Not on the SEC List?
If you cannot verify the lender, do not automatically assume that every obligation disappears. If money was actually released to you, there may still be a civil-law issue about repayment of the amount received. However, operating without proper authority, failing to disclose charges, using abusive collection methods, or misusing personal data can expose the lender to regulatory, civil, or criminal consequences depending on the facts.
The Civil Code also matters. Article 1956 provides that no interest is due unless expressly stipulated in writing, and Philippine jurisprudence recognizes that courts may reduce or nullify unconscionable interest or penalties in proper cases. (Supreme Court E-Library) (Supreme Court E-Library)
If you already borrowed from a questionable lender, preserve evidence immediately:
- Screenshot the app store page.
- Screenshot the app permissions.
- Save the loan agreement and disclosure statement.
- Save all text messages, call logs, emails, and chat messages.
- Screenshot threats, insults, public posts, or messages to third parties.
- Keep proof of disbursement and payments.
- Record the names, numbers, and account details used for collection.
- Note dates and times, especially calls before 6:00 a.m. or after 10:00 p.m.
For unfair debt collection practices involving lending or financing companies, the 2026 DICT-NPC-SEC advisory identifies the SEC Financing and Lending Companies Department as the proper authority and points borrowers to the SEC iMessage portal and SEC hotline 1-4732 or 1-4SEC. For other harassment, threats, fraud, or scams, the advisory also identifies the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.
Where to Report Problems
| Problem | Possible Office |
|---|---|
| Unregistered lending company or financing company | SEC |
| Abusive collection by lending or financing company | SEC Financing and Lending Companies Department |
| Misuse of contacts, photos, IDs, or personal data | National Privacy Commission |
| Cyber threats, online harassment, scams, identity misuse | NBI Cybercrime Division or PNP Anti-Cybercrime Group |
| Immediate physical threat | Local police station or emergency authorities |
| Dispute over repayment, interest, or contract enforcement | Proper court or regulator depending on amount and issue |
For data privacy complaints, the National Privacy Commission provides a formal complaint process and requires complaints to follow a specific format. (National Privacy Commission)
Special Notes for Foreigners and OFWs
Foreigners sometimes assume that a Philippine lender is illegal because it has foreign shareholders, offshore investors, or foreign-sounding app developers. That is not always correct. Republic Act No. 10881 amended investment restrictions and allows lending companies and financing companies to be owned up to 100% by foreign nationals, subject to legal conditions and constitutional limits involving land. (Supreme Court E-Library)
For borrowers, the key question is still the same: Is the Philippine entity properly registered and authorized by the SEC?
For OFWs and Filipinos abroad, be extra careful with lenders that:
- Offer loans only through chat apps.
- Require passport photos or overseas employment documents before showing loan terms.
- Use relatives in the Philippines as pressure points.
- Demand payment through personal remittance channels.
- Threaten to contact employers, recruitment agencies, or family members abroad.
If documents will be used in a formal complaint from abroad, keep clean digital copies. If an affidavit is required for a Philippine proceeding, it may need notarization abroad and, depending on the country, apostille or consular authentication for use in the Philippines.
Common Scenarios
“The lender has a mayor’s permit. Is that enough?”
No. A mayor’s permit is not the same as SEC authority to operate as a lending company. RA 9474 requires lending companies to be corporations and prohibits them from conducting business without SEC authority. (Supreme Court E-Library)
“The app is on Google Play or the App Store. Does that mean it is legal?”
No. App-store availability is not SEC approval. You still need to verify the company, Certificate of Authority, and online lending platform.
“The lender says it is a private individual, not a company. Is that allowed?”
A one-time private loan between individuals is different from someone regularly holding themselves out to the public as a lending business. If a person or group is operating like a lending company, advertising loans to the public, using a trade name, and collecting from many borrowers, SEC licensing issues may arise.
“The company is SEC registered but not on the lending-company list.”
Ask for its Certificate of Authority. If it cannot provide one, treat it as unverified. Corporate registration alone is not enough.
“Can a legitimate lender still have high interest?”
Yes, but the interest and charges must be disclosed, agreed in writing where required, and not unconscionable. RA 11765 also allows financial regulators to address unreasonable interest, fees, and charges within their authority. (Supreme Court E-Library)
“Can a lender access my contacts if I consented?”
Consent is not a blank check. The 2026 DICT-NPC-SEC advisory warns against excessive or disproportionate personal-data processing and prohibits contacting persons in the borrower’s contact list other than guarantors for debt collection.
Frequently Asked Questions
How do I know if a lending company is SEC registered in the Philippines?
Check the exact corporate name, SEC registration number, and Certificate of Authority against SEC records and SEC lists of lending or financing companies. Do not rely only on an app name, Facebook page, or business permit.
Is SEC registration enough for a lending company to be legitimate?
No. A company must not only be SEC registered as a corporation; it must also have authority to operate as a lending company or financing company.
How do I check if an online lending app is legal in the Philippines?
Identify the company behind the app, then verify its SEC registration, Certificate of Authority, and whether the online lending platform is listed, recorded, or properly disclosed with the SEC. Check that the app displays the corporate name, SEC registration number, CA number, loan disclosures, and privacy notice.
What if the lending app does not show its company name?
That is a red flag. A borrower should be able to identify the legal entity granting the loan. If the app hides the company name or only uses a brand name, avoid submitting IDs, selfies, contacts, or bank details until it is verified.
Can a lending company contact my family or employer?
A lender may contact a co-maker or guarantor in proper cases. But contacting people in your phonebook who were not named as guarantors or co-makers can constitute an unfair debt collection practice under SEC rules.
Can I be arrested for not paying an online loan?
Nonpayment of a loan is generally a civil matter. However, separate criminal issues may arise if there is fraud, falsified documents, threats, identity misuse, or other criminal acts. A collector who falsely threatens arrest may itself be engaging in an unfair or abusive practice.
Where can I complain about online lending harassment?
For unfair collection by lending or financing companies, file with the SEC through its complaint channels. For misuse of personal data, file with the National Privacy Commission. For cyber threats, scams, or identity-related online offenses, report to the NBI Cybercrime Division or PNP Anti-Cybercrime Group, depending on the facts.
What should I screenshot before deleting a lending app?
Screenshot the app page, developer name, permissions, privacy notice, loan agreement, disclosure statement, repayment schedule, collection messages, payment accounts, and any threats or messages sent to third parties. Deleting the app too early may erase useful evidence.
Is a foreign-owned lending company illegal in the Philippines?
Not automatically. Philippine law now allows up to 100% foreign ownership of lending and financing companies, subject to legal conditions. The company must still comply with SEC registration, authority-to-operate, consumer-protection, and data-privacy rules. (Supreme Court E-Library)
Key Takeaways
- A legitimate Philippine lending company should be an SEC-registered corporation with authority to operate as a lending company or financing company.
- SEC registration alone is not enough. Always check the Certificate of Authority.
- For lending apps, verify both the company and the online lending platform.
- App-store availability, Facebook ads, business permits, and testimonials do not prove legality.
- A legitimate lender should clearly disclose the loan amount, interest, fees, penalties, due date, total amount payable, and complaint channels.
- Excessive contact-list access, public shaming, threats, insults, and contacting non-guarantors are major red flags.
- Keep screenshots and documents before filing any complaint or deleting the app.
- Report unfair debt collection to the SEC, data misuse to the National Privacy Commission, and cyber threats or scams to the proper cybercrime authorities.