In the Philippine financial landscape, the rise of digital credit and traditional lending has necessitated stringent oversight to protect consumers from predatory practices and "fly-by-night" operations. The primary regulatory body tasked with this oversight is the Securities and Exchange Commission (SEC). Under the Lending Company Regulation Act of 2007 (Republic Act No. 9474) and the Financing Company Act of 1998 (Republic Act No. 8556), no entity may engage in the business of lending or financing without valid incorporation and specific authorization from the Commission.

To ensure a transaction is legal and protected by Philippine law, borrowers and stakeholders must perform due diligence through the following verification protocols.

1. The Two-Step Verification Requirement

A common misconception is that a "Certificate of Incorporation" is sufficient to operate a lending business. Legally, a legitimate lending or financing company must possess two distinct sets of credentials:

Certificate of Incorporation: This proves the entity is registered as a corporation. However, it does not grant the authority to lend money to the public.
Certificate of Authority (CA): This is the specific license required to operate as a lending or financing company. Engaging in lending without a CA is a criminal offense under R.A. 9474.

2. Official Methods of Verification

A. The SEC Website’s Formal Lists

The most reliable method for verification is consulting the SEC’s official database. The Commission maintains updated lists of entities with revoked or suspended licenses, as well as those in good standing.

Navigate to the SEC Philippines official website (sec.gov.ph).
Locate the "Public Information" or "Lending & Financing Companies" section.
Download the latest list of Lending Companies with Certificates of Authority or Financing Companies with Certificates of Authority.
Cross-reference the company’s registered name and its CA Number.

B. Verification of Online Lending Platforms (OLPs)

Due to the proliferation of mobile lending apps, the SEC requires all registered lending corporations to report their Online Lending Platforms.

Registered companies must disclose their "App Name" to the SEC.
If an app is lending money but its name does not appear as a registered OLP under a licensed corporation, it is operating illegally.

C. Physical Inspection of Credentials

Under SEC regulations, lending companies are mandated to display their Certificate of Authority prominently in their principal place of business. For digital platforms, the CA number and Corporate Registration number are typically found in the "About Us" or legal disclosure sections of the app or website.

3. Red Flags of Unregistered Entities

Potential borrowers should be wary of entities that exhibit the following characteristics, which often indicate a lack of SEC standing:

Absence of a CA Number: Failure to provide a Certificate of Authority number upon request.
Requirement of "Uptront" Fees: Legitimate lenders deduct processing fees from the loan proceeds rather than demanding payment before the loan is released.
Excessive Interest and Harassment: While the SEC and the Bangko Sentral ng Pilipinas (BSP) have set caps on interest rates for certain short-term loans, illegal lenders often ignore these and employ "debt-shaming" tactics, which are prohibited under SEC Memorandum Circular No. 18, s. 2019.

4. Legal Consequences of Non-Registration

Operating a lending company without the proper Certificate of Authority is a violation of Philippine law. Under Section 12 of R.A. 9474, individuals found performing such acts may face:

Fines ranging from PhP 10,000 to PhP 50,000.
Imprisonment of six months to ten years, or both.

For corporations, the SEC has the power to revoke the primary registration (Certificate of Incorporation) of any company found to be engaging in "ultra vires" acts (acting beyond its legal power), such as lending without a CA.

5. Reporting Unlicensed Lenders

If an entity is found to be operating without a license or is engaging in unfair debt collection practices, the public is encouraged to file a formal complaint with the SEC Enforcement and Investor Protection Department (EIPD).

The complaint should include:

The full name/brand of the lending company or app.
The company’s address or website.
A brief description of the violation (e.g., unlicensed lending, harassment).
Supporting evidence (screenshots, loan contracts, or demand letters).

Conclusion

In the Philippine jurisdiction, the burden of verification lies with the consumer. By ensuring that a lending company possesses both a Certificate of Incorporation and a valid Certificate of Authority, citizens can protect themselves from the legal and financial risks associated with the informal and often predatory lending sector. The SEC’s digital database remains the definitive "source of truth" for the status of any financial entity in the country.