I. Introduction

In the Philippines, lending companies occupy an important place in consumer and commercial finance. They extend credit to individuals, microenterprises, small businesses, salaried employees, online borrowers, and other market participants who may not always have access to banks or formal financial institutions. Because lending necessarily involves money, personal information, interest charges, penalties, and collection practices, the industry is subject to regulation.

A person dealing with a lending company should not assume that a business is legitimate merely because it has a website, mobile application, office, social media page, business permit, mayor’s permit, barangay clearance, or Department of Trade and Industry name registration. The principal regulator for lending companies in the Philippines is the Securities and Exchange Commission, commonly referred to as the SEC. Verification of SEC registration is therefore a basic legal and practical safeguard before borrowing money, investing in a lending business, partnering with one, collecting for one, or accepting loan-related services from one.

This article discusses the legal framework governing lending companies in the Philippines, the importance of SEC registration, how to verify a lending company’s status, the difference between corporate registration and authority to lend, common red flags, consequences of dealing with unregistered lenders, and practical steps for borrowers, businesses, lawyers, compliance officers, and the public.

II. Governing Legal Framework

The primary law governing lending companies in the Philippines is Republic Act No. 9474, otherwise known as the Lending Company Regulation Act of 2007. It regulates the establishment, operation, and supervision of lending companies in the Philippines.

A lending company generally refers to a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than nineteen persons. It does not include banks, quasi-banks, pawnshops, financing companies, cooperatives, insurance companies, and other entities already governed by special laws and regulated by other government agencies.

The SEC supervises lending companies under the Lending Company Regulation Act and its implementing rules. A lending company must generally be organized as a corporation and must secure from the SEC the necessary authority to operate as a lending company. This means that mere incorporation is not enough. A corporation may be registered with the SEC as a juridical entity, but unless it has authority to operate as a lending company, it should not lawfully engage in the business of lending as a lending company.

Other relevant legal and regulatory sources include:

The Revised Corporation Code of the Philippines, which governs corporations generally;
SEC rules and memoranda governing lending companies;
The Truth in Lending Act, which requires disclosure of finance charges and effective interest rates in credit transactions;
The Data Privacy Act of 2012, especially for lenders collecting, processing, storing, or sharing borrower information;
Consumer protection regulations applicable to financial products and services;
Rules against unfair debt collection practices;
Penal and civil laws on fraud, threats, harassment, coercion, libel, unjust vexation, cybercrime, and related misconduct.

A complete legal assessment of a lending company should therefore not stop at the question, “Is it SEC-registered?” The better question is: “Is it duly registered, authorized, compliant, and not subject to suspension, revocation, or enforcement action?”

III. Why SEC Registration Matters

SEC registration matters because lending is a regulated activity. The registration and licensing framework protects the public from fly-by-night lenders, abusive collectors, usurious or hidden charges, identity misuse, fraudulent online applications, and entities that use corporate forms to evade liability.

For borrowers, verification helps answer several important questions:

Does the company legally exist?
Is it authorized to operate as a lending company?
Is its Certificate of Authority current and valid?
Is it using its correct registered corporate name?
Does it operate through registered branches, platforms, or business names?
Has its authority been suspended, revoked, cancelled, or otherwise affected?
Is it connected to online lending applications or collection agents that have been subject to complaints?

For counterparties, investors, advertisers, payment processors, app stores, collection service providers, and legal counsel, SEC verification is a compliance necessity. Doing business with an unauthorized lending company may expose them to reputational, contractual, regulatory, civil, and even criminal risks depending on their role and knowledge.

IV. Corporate Registration vs. Authority to Operate as a Lending Company

One of the most common mistakes is confusing ordinary SEC corporate registration with authority to lend.

A corporation may be registered with the SEC, but that only means it has legal personality as a corporation. It does not automatically mean the corporation may engage in regulated lending. For a lending company, the corporation must also have the necessary SEC authority to operate as a lending company.

The distinction may be summarized as follows:

SEC Certificate of Incorporation means that the corporation legally exists.

SEC Certificate of Authority to Operate as a Lending Company means that the corporation has authority to engage in the business of lending as a lending company, subject to compliance with applicable laws and regulations.

A borrower should therefore ask for more than a certificate of incorporation. The borrower should verify the company’s Certificate of Authority, exact corporate name, registration number, and current status.

V. What to Verify

A proper verification should cover several items.

A. Exact Corporate Name

The name used by the lender must match the name registered with the SEC. Many lenders operate under trade names, app names, brand names, websites, or marketing names. The public should determine the legal entity behind the brand.

For example, a mobile application may use a short commercial name, but the actual lender may be a corporation with a longer SEC-registered name. Verification should focus on the registered corporate entity, not merely the app name or logo.

B. SEC Registration Number

The SEC registration number helps identify the corporation. However, possession of a registration number alone is not conclusive proof of authority to lend. It should be checked together with the Certificate of Authority.

C. Certificate of Authority Number

A lending company must generally have a Certificate of Authority issued by the SEC to operate as a lending company. This is the key authorization that should be verified.

D. Current Status

The company’s authority should be active and not revoked, suspended, cancelled, expired, or otherwise impaired. A lender may have been registered at one time but later lost authority because of violations, noncompliance, failure to report, abusive practices, or other regulatory action.

E. Principal Office and Branches

The address stated in documents, contracts, collection letters, websites, or apps should be consistent with the registered address or disclosed branch locations. Unclear, fake, changing, or foreign-only addresses are red flags.

F. Online Lending Applications and Platforms

Where the lender operates online or through a mobile application, the app or online platform should be connected to a duly registered and authorized lending company. A borrower should verify whether the app name appears in SEC advisories, complaint records, or public lists of registered online lending platforms where available.

G. Officers, Directors, and Contact Details

The names of officers, directors, incorporators, authorized representatives, and official contact channels may help confirm legitimacy. A refusal to disclose the legal entity, official address, or authorized representative is a warning sign.

H. Regulatory Advisories or Enforcement Actions

SEC advisories, cease-and-desist orders, revocation notices, and public warnings are important. A company may appear legitimate in advertisements but be subject to enforcement action.

VI. Practical Ways to Verify SEC Registration

Although verification methods may change over time, the following are the usual practical steps.

A. Check the SEC’s Publicly Available Records

The SEC maintains public records and may publish lists of registered lending companies, financing companies, online lending platforms, companies with revoked certificates, and advisories against unauthorized entities. These records are among the first places to check.

A person verifying a lending company should search using:

The full corporate name;
The trade name or app name;
The SEC registration number;
The Certificate of Authority number;
Names of officers or representatives;
Website, mobile application name, or advertised brand.

A single search may not be enough because a lender may use several names.

B. Request Documents Directly from the Company

A legitimate lending company should be able to provide copies of relevant documents, including:

SEC Certificate of Incorporation;
SEC Certificate of Authority to Operate as a Lending Company;
Articles of Incorporation and By-Laws, where relevant;
General Information Sheet or proof of current corporate status;
Business permits for office locations;
Official loan agreement forms;
Disclosure statement on loan or credit transaction;
Privacy notice;
Contact details for complaints and customer support.

A borrower should not rely only on screenshots or cropped images. Documents should be complete, legible, and consistent.

C. Confirm with the SEC When Necessary

Where the transaction is significant, suspicious, or involves legal risk, direct confirmation with the SEC may be advisable. Lawyers, compliance officers, financial institutions, and counterparties often need more than informal online checking.

D. Compare All Names Used

The borrower should compare the name in the loan agreement, app, privacy policy, disclosure statement, payment instructions, collection notices, and receipts. Mismatched names may suggest that the borrower is dealing with an intermediary, collector, affiliate, or unrelated entity.

E. Review Public Complaints and Advisories

Public complaints do not automatically prove illegality, but repeated reports of harassment, unauthorized contact-list access, hidden charges, defamatory messages, threats, or refusal to disclose corporate identity are significant warning signs.

VII. Red Flags of an Unregistered or Noncompliant Lending Company

A lender may be suspicious if it does any of the following:

Refuses to disclose its full corporate name;
Provides only a trade name, app name, or Facebook page;
Claims that a mayor’s permit or barangay permit is enough authority to lend;
Shows only a certificate of incorporation but no Certificate of Authority;
Uses another company’s SEC registration number;
Uses a name that does not match the loan contract;
Has no verifiable office address;
Uses personal bank accounts, e-wallets, or unrelated merchant accounts for repayment;
Charges undisclosed processing fees, service fees, penalties, or deductions;
Releases a loan amount substantially lower than the stated principal without clear disclosure;
Requires access to phone contacts, photos, messages, or social media accounts as a condition for borrowing;
Harasses borrowers or contacts third parties without lawful basis;
Threatens public shaming, barangay blotter, criminal arrest, or employer disclosure without legal basis;
Uses abusive or defamatory collection messages;
Operates only through anonymous agents or foreign phone numbers;
Claims that all borrowers can be jailed for nonpayment;
Pressures borrowers to sign blank documents or waivers;
Changes payment channels frequently;
Appears in SEC advisories or revocation lists;
Has no clear privacy policy or complaint mechanism.

No single red flag is always conclusive. However, the more warning signs present, the stronger the need for caution and verification.

VIII. Online Lending Companies and Mobile Lending Applications

Online lending has created additional compliance issues. Mobile lending applications may advertise fast approval, minimal documentation, instant cash, or no collateral. While online lending is not inherently unlawful, the legal entity behind the app must still be authorized.

A borrower should determine:

Who owns and operates the application;
Whether the operator is a Philippine corporation;
Whether it has a valid SEC Certificate of Authority;
Whether the app name is registered or disclosed to the SEC;
Whether the app collects excessive personal data;
Whether the loan terms are clearly disclosed before acceptance;
Whether collection practices comply with law;
Whether the privacy policy identifies the proper personal information controller or processor.

The fact that an app appears in an app store does not prove that it is SEC-authorized. App store availability is not a substitute for legal registration.

IX. Truth in Lending and Disclosure Requirements

Verification of registration should be accompanied by review of loan disclosures. The Truth in Lending Act requires creditors to disclose material loan terms so borrowers can understand the cost of credit.

Important terms include:

Principal amount;
Amount actually received by the borrower;
Interest rate;
Effective interest rate;
Finance charges;
Service fees;
Processing fees;
Penalties;
Due dates;
Total amount payable;
Consequences of default;
Security or collateral, if any.

A registered lending company may still violate the law if it hides charges, misrepresents interest, or fails to provide required disclosures.

X. Interest Rates, Penalties, and Charges

Philippine law does not treat every high interest rate as automatically void in all circumstances. However, courts may reduce interest, penalties, attorney’s fees, or charges that are unconscionable, excessive, iniquitous, or contrary to law, morals, good customs, public order, or public policy.

A borrower should not assume that SEC registration makes every charge enforceable. Registration is only one part of legality. Loan terms must still comply with applicable laws, jurisprudence, and disclosure requirements.

Common problematic practices include:

Deducting large “processing fees” before release;
Advertising a low interest rate while imposing hidden charges;
Charging daily penalties disproportionate to the loan amount;
Automatically rolling over loans with additional charges;
Imposing collection fees without contractual or legal basis;
Requiring payment to unrelated persons;
Failing to issue receipts;
Misrepresenting the amount due.

XI. Collection Practices

A registered lending company is not allowed to collect debts by unlawful means. Registration does not authorize harassment, threats, public shaming, or misuse of personal data.

Potentially unlawful collection practices may include:

Threatening violence or harm;
Using obscene, insulting, or defamatory language;
Contacting the borrower’s employer without lawful and proportionate basis;
Posting the borrower’s name or photo online;
Sending messages to the borrower’s contacts to shame the borrower;
Misrepresenting oneself as a lawyer, police officer, court employee, or government agent;
Threatening arrest for ordinary debt;
Using fake subpoenas, warrants, or court documents;
Collecting amounts not legally owed;
Continuing harassment after proper dispute or complaint.

Borrowers subjected to abusive collection may document the conduct, preserve screenshots and call logs, request a statement of account, and consider complaints before the SEC, National Privacy Commission, law enforcement authorities, or courts depending on the nature of the violation.

XII. Data Privacy Concerns

Lending companies collect sensitive and personal information, including names, addresses, identification documents, employment information, income details, bank or e-wallet information, contact numbers, and sometimes device data.

Under the Data Privacy Act, personal data processing must have a lawful basis, must be transparent, must be limited to legitimate purposes, and must be proportionate. Accessing or using a borrower’s contact list for shaming, harassment, or unauthorized collection may raise serious data privacy concerns.

A borrower should review whether the lender:

Has a privacy notice;
Identifies the personal information controller;
Explains what data is collected;
Explains why the data is collected;
States whether data is shared with collectors, affiliates, service providers, or third parties;
Provides contact information for privacy concerns;
Limits permissions requested by its mobile app;
Allows borrowers to exercise data subject rights.

Excessive app permissions are a major red flag.

XIII. Legal Consequences for Unregistered Lending

Operating as a lending company without proper SEC authority may expose the entity and responsible persons to regulatory sanctions. These may include fines, suspension, revocation, cease-and-desist orders, disqualification, and other penalties under applicable law and SEC rules.

In appropriate cases, other laws may also apply, including laws on fraud, estafa, cybercrime, data privacy, harassment, threats, coercion, unfair collection, and consumer protection.

Contracts with unauthorized lenders may raise complex issues. The fact that a lender is unregistered does not always mean the borrower received free money or that no obligation can ever exist. Courts may still consider principles of unjust enrichment, civil obligations, public policy, illegality, and the specific terms and circumstances of the transaction. However, the lender’s lack of authority may significantly affect enforceability, regulatory liability, and the lender’s ability to lawfully conduct business.

Borrowers should seek legal advice before refusing payment solely on the ground of suspected non-registration.

XIV. Borrower’s Verification Checklist

Before taking a loan, a borrower should ask:

What is the lender’s full SEC-registered corporate name?
What is its SEC registration number?
What is its Certificate of Authority number?
Is its authority to operate as a lending company active?
Is the app, website, or trade name connected to the registered entity?
Is the loan agreement under the same corporate name?
Are interest, fees, penalties, and total amount payable clearly disclosed?
Will the lender issue official receipts?
Are repayments made to the company, not to personal accounts?
Does the lender have a privacy notice?
Does the app request excessive permissions?
Does the lender have a legitimate office address and customer support channel?
Has the SEC issued an advisory against it?
Are there complaints involving harassment or data misuse?
Are the loan terms fair, understandable, and documented?

If the answer to several of these questions is unclear, the borrower should not proceed until verification is complete.

XV. Compliance Checklist for Lending Companies

A lending company should maintain compliance by ensuring that it:

Is incorporated as required by law;
Has a valid SEC Certificate of Authority;
Uses its correct corporate name in loan documents;
Registers or properly discloses trade names, online platforms, and apps where required;
Maintains accurate corporate records;
Files required reports with the SEC;
Complies with capital requirements;
Discloses interest, finance charges, and fees;
Uses fair and lawful collection practices;
Trains employees and third-party collectors;
Protects borrower data;
Maintains a privacy management program;
Observes cybersecurity safeguards;
Issues proper receipts and statements of account;
Avoids misleading advertisements;
Maintains complaint-handling procedures;
Monitors outsourced service providers;
Cooperates with regulators;
Avoids abusive loan rollovers and unconscionable charges;
Keeps its authority active and in good standing.

Compliance should not be treated as a one-time registration exercise. It is a continuing obligation.

XVI. Due Diligence for Business Partners and Platforms

Payment processors, advertisers, lead generators, app stores, employers, collection agencies, and financial technology partners should conduct due diligence before working with a lending company.

Their review should include:

Corporate documents;
Certificate of Authority;
SEC status;
Beneficial ownership information where appropriate;
Compliance history;
Data privacy policies;
Consumer complaint history;
Collection scripts and procedures;
Loan product terms;
AML, fraud, and cybersecurity controls where relevant;
Outsourcing agreements;
Indemnity and regulatory compliance clauses.

A business partner that facilitates unlawful lending may face reputational and legal risk, especially if it knowingly assists an unauthorized or abusive operation.

XVII. Common Misconceptions

A. “They have a business permit, so they must be legal.”

A local business permit does not replace SEC authority to operate as a lending company. Local permits address local business operations; they do not grant authority to conduct regulated lending.

B. “They are incorporated, so they can lend.”

Incorporation alone does not equal authority to operate as a lending company. A Certificate of Authority is still necessary.

C. “The app is on an app store, so it is approved.”

App store availability is not government approval.

D. “They showed a certificate, so they are legitimate.”

Certificates can be expired, revoked, altered, incomplete, or unrelated to the entity actually lending money. Verification should be independent.

E. “A registered lender can charge anything.”

Registration does not validate hidden, unconscionable, or unlawful charges.

F. “Nonpayment of a loan is automatically a criminal case.”

Ordinary nonpayment of debt is generally civil in nature. However, fraud, bouncing checks, falsified documents, or other criminal acts may create separate liability depending on the facts.

XVIII. What to Do If You Suspect a Lending Company Is Not Registered

A borrower or concerned person may take the following steps:

Preserve evidence, including screenshots, contracts, payment records, messages, call logs, app permissions, and advertisements;
Identify the exact names used by the lender;
Search public SEC records and advisories;
Request the lender’s SEC Certificate of Authority;
Avoid giving additional personal information until legitimacy is confirmed;
Do not pay to personal accounts without verifying authority and account ownership;
Demand a written statement of account;
File a complaint with the SEC if the entity appears unauthorized or abusive;
File a complaint with the National Privacy Commission if personal data was misused;
Seek legal assistance if there are threats, harassment, defamation, identity misuse, or court documents involved.

For serious threats or extortion, law enforcement assistance may be appropriate.

XIX. Evidence to Preserve for Complaints

A strong complaint should include:

Full name of the lending company, app, or agent;
SEC registration number or claimed authority number, if any;
Screenshots of advertisements and app pages;
Loan agreement;
Disclosure statement;
Proof of amount received;
Statement of account;
Payment receipts;
Bank or e-wallet transaction records;
Collection messages;
Names and numbers of collectors;
Screenshots of public shaming or third-party messages;
Privacy policy and app permissions;
Timeline of events;
Copies of identification documents submitted, if relevant.

Organized evidence helps regulators and lawyers evaluate the matter efficiently.

XX. Legal Remedies and Forums

Depending on the facts, possible remedies may include:

SEC complaint for unauthorized lending or violation of lending company regulations;
National Privacy Commission complaint for data privacy violations;
Civil action to question excessive interest, penalties, or damages;
Criminal complaint for threats, coercion, unjust vexation, libel, cybercrime, fraud, or other offenses where applicable;
Complaint to consumer protection authorities where appropriate;
Injunctive or protective relief in serious cases;
Negotiated settlement or restructuring of legitimate obligations.

The proper remedy depends on the evidence, amount involved, parties, location, and nature of the misconduct.

XXI. Role of Lawyers and Compliance Professionals

Lawyers advising borrowers should not stop at emotional or anecdotal claims of harassment. They should verify documents, identify the legal entity, analyze the loan terms, check registration status, preserve evidence, and select the proper forum.

Lawyers advising lending companies should ensure that the client is not merely registered as a corporation but is duly authorized, compliant, properly disclosing charges, observing privacy rules, training collectors, and monitoring third-party service providers.

Compliance professionals should build verification and monitoring systems that cover corporate status, authority, product terms, advertising, data privacy, complaints, and collection practices.

XXII. Special Issues Involving Foreign or Offshore Operators

Some online lenders may appear to operate in the Philippines while using foreign technology providers, foreign beneficial owners, offshore call centers, or overseas payment channels. This does not remove the need to comply with Philippine law if the lending business targets Philippine borrowers or operates through a Philippine lending company.

Borrowers should be cautious when the lender:

Has no Philippine corporate identity;
Uses foreign-only contact details;
Requires repayment through unrelated channels;
Refuses to identify the creditor;
Uses collectors who cannot provide company authorization;
Claims Philippine regulators have no jurisdiction.

Foreign involvement may complicate enforcement, but it does not excuse unlawful lending activity.

XXIII. Best Practices Before Signing or Accepting a Loan

A borrower should take the following precautions before accepting a loan:

Verify the lender’s SEC authority;
Read the full loan agreement;
Compute the total cost of borrowing;
Check the amount to be released after deductions;
Confirm the due date and penalties;
Avoid blank or incomplete documents;
Save copies of all disclosures;
Limit personal data shared;
Review app permissions;
Use official payment channels only;
Demand receipts;
Avoid repeated rollovers;
Compare alternatives;
Ask for clarification in writing;
Do not borrow under pressure.

Fast loans are often expensive. The faster the approval, the more carefully the borrower should check the terms.

XXIV. Conclusion

Verifying SEC registration of lending companies in the Philippines is not a mere formality. It is a necessary step in protecting borrowers, maintaining market integrity, and ensuring that lending is conducted under the rule of law.

A legitimate lending company should be able to identify its full corporate name, SEC registration number, Certificate of Authority, office address, loan terms, disclosure documents, privacy policy, and official payment channels. A borrower should independently verify these details and remain alert to red flags such as hidden charges, mismatched names, harassment, excessive app permissions, personal repayment accounts, and refusal to disclose authority.

SEC registration is important, but it is not the entire story. A lending company must also comply with disclosure rules, data privacy law, fair collection standards, consumer protection principles, and general civil and criminal law. Verification should therefore be practical, documentary, and continuous.

In Philippine lending transactions, the safest rule is simple: know the legal entity, verify its authority, read the loan terms, protect your data, document everything, and seek legal help when the facts suggest fraud, harassment, or unlawful lending.