Before borrowing money, paying “processing fees,” or giving an online lending app access to your phone, it is worth checking whether the lending company is truly authorized by the Securities and Exchange Commission (SEC) Philippines. Many lenders advertise themselves as “SEC-registered,” but that phrase can be misleading. A lawful lending company in the Philippines needs more than a corporate registration certificate. It must also have a valid SEC Certificate of Authority to operate as a lending company, and if it lends through an app or website, the online lending platform should also be recorded with the SEC.

What “SEC-registered lending company” really means

In ordinary conversation, people say “SEC-registered” to mean “legitimate.” Under Philippine law, it is more specific.

There are usually three different things to check:

What to check	What it means	Why it matters
SEC corporate registration	The company exists as a corporation registered with the SEC.	This only proves corporate existence. It does not automatically authorize lending.
Certificate of Authority (CA)	The SEC has authorized the corporation to operate as a lending company.	This is the key license for lending companies under Republic Act No. 9474.
Recorded online lending platform (OLP)	The app, website, or digital platform used for lending has been reported/recorded with the SEC.	An app name may be different from the corporate name, so both must match.

Republic Act No. 9474, or the Lending Company Regulation Act of 2007, defines a lending company as a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. The law expressly says that a lending company must be a corporation and that no lending company shall conduct business unless granted authority to operate by the SEC. (Supreme Court E-Library)

This is why a screenshot of an SEC Certificate of Incorporation is not enough. A company may be incorporated for a lawful purpose but still lack the required secondary authority to lend.

Legal basis: why lending companies need SEC authority

The main legal bases are:

Republic Act No. 9474, Lending Company Regulation Act of 2007

RA 9474 governs lending companies in the Philippines. It gives the SEC authority to regulate and supervise lending companies, require reports, exercise visitorial powers, and impose administrative sanctions such as fines, suspension, or revocation of authority. (Supreme Court E-Library)

Under Section 12 of RA 9474, operating as a lending company without a validly subsisting SEC authority may expose the responsible persons to a fine of ₱10,000 to ₱50,000, imprisonment of six months to 10 years, or both, at the court’s discretion. The same section also covers officers who hold themselves out as a lending company or use trade names that give the public the impression that they are engaged in lending without authority. (Supreme Court E-Library)

Implementing Rules and Regulations of RA 9474

The IRR explains that a Certificate of Authority (CA) is the certificate issued by the SEC allowing a lending company to engage in the business of lending regulated by RA 9474 and its IRR. It also requires a lending company to be organized as a stock corporation and to include “Lending Company,” “Lending Investor,” or similar descriptive words in its corporate or trade name. (Lawphil)

The IRR also shows why branches matter. A branch, extension office, unit, or satellite office of a lending company must be connected to a lending company with a CA, and the authority of a branch is tied to the head office’s authority. (Lawphil)

Republic Act No. 3765, Truth in Lending Act

Even if a lending company is SEC-authorized, it must still disclose the true cost of credit. RA 3765 requires creditors to provide a clear written statement before the transaction is completed, including the amount financed, finance charges, and the simple annual rate.

In practical terms, a borrower should receive a disclosure statement showing:

principal loan amount;
interest rate;
processing or service fees;
penalties;
total amount to be financed;
amount and schedule of payments;
annual percentage or simple annual rate.

If the lender hides fees until after approval, deducts unexplained charges from the released amount, or refuses to give a written breakdown, that is a serious warning sign.

Republic Act No. 11765, Financial Products and Services Consumer Protection Act

RA 11765 applies to financial products and services, including credit and digital financial services. It gives regulators such as the SEC authority to enforce consumer protection standards, monitor market conduct, restrict excessive or unreasonable interests and fees, impose penalties, issue cease-and-desist orders, and protect consumers’ data and complaint rights. (Supreme Court E-Library)

This law is especially relevant to online lending because financial consumers have rights to fair treatment, disclosure, complaint handling, protection of client information, and non-waiver of legal rights.

Step-by-step guide to verify if a lending company is SEC-registered

1. Get the lender’s exact legal details

Before searching, collect the lender’s exact identifiers. Do not rely only on the brand name.

Ask or look for:

full corporate name;
trade name or “doing business as” name;
SEC registration number;
Certificate of Authority number;
business address;
branch address, if any;
app name, website, Google Play link, or App Store link;
customer service email and phone number;
name appearing on the loan contract or disclosure statement.

This matters because many online lenders use catchy app names that do not match their SEC-registered corporate names. For example, an app may be called “Fast Peso Loan,” but the actual operator may be a corporation with a completely different name. Verification must connect the app, the corporation, and the Certificate of Authority.

2. Check the SEC list of lending and financing companies

Go to the SEC’s official lending and financing company resources. The SEC has identified official pages for:

The SEC itself referred the public to these pages in a 2025 FOI response involving registered lending and microfinance institutions. (www.foi.gov.ph)

Use the list carefully:

Open the latest list or searchable page.
Press Ctrl + F or use the page search function.
Search the corporate name, not only the app name.
Search alternative spellings, abbreviations, and trade names.
Check the CA number and SEC registration number.
Check whether the list is current or marked as subject to updates.
Look for separate lists of suspended, revoked, or delinquent entities if available.

If the company is not listed, do not assume it is illegal immediately. Spelling differences and trade names can cause missed results. But if the company refuses to provide its corporate name and CA number, treat that as a major red flag.

3. If it is an app or website, check the recorded online lending platform list

Online lending apps require extra caution because the borrower often deals only with the app name.

For an online lending platform, verify all of these:

Item	What should match
App name	The name shown in the SEC recorded OLP list
Corporate operator	The SEC-registered lending or financing company behind the app
CA number	The Certificate of Authority number of the operator
Website/app link	The app or domain should match what the SEC record identifies
Loan documents	The company name in the contract should match the operator, not an unknown third party

SEC Memorandum Circular No. 10, Series of 2021 imposed a moratorium on new online lending platforms, and only recorded lending and financing companies with OLPs as of 2 November 2021 were allowed to operate under that framework, subject to SEC monitoring. (Scribd)

Because SEC policy on online lending has been evolving, always use the latest SEC list rather than old screenshots circulating on Facebook, Telegram, or loan app ads.

4. Use SEC Check, SEC Express, or direct SEC channels when the result is unclear

The SEC Check App is the SEC Philippines’ official mobile app for updates, alerts, and public information. (Google Play) It can help you check SEC-related information and advisories, especially if you are using your phone.

For official corporate documents, the SEC Express System allows online requests for plain or authenticated SEC documents. According to SEC Express, users can search using the company’s registered name or SEC registration number, pay online or through available channels, and receive documents by delivery within 3 to 5 working days from release by the SEC. (SEC Express)

This is useful when:

the lender shows you a suspicious certificate;
the SEC list has a similar but not identical name;
the lender claims it recently changed its name;
you need proof for a complaint, employer reimbursement, immigration file, or court-related record;
you are outside the Philippines and need documentary confirmation.

The SEC also has an iMessage ticketing system for submitting concerns and complaints. The SEC iMessage page identifies the SEC headquarters at 7907 Makati Avenue, Salcedo Village, Bel-Air, Makati City, and provides the main telephone number (02) 5322-7696. (Securities and Exchange Commission)

5. Compare the loan contract with the SEC record

A common mistake is checking only the lender’s advertisement. The more important document is the loan agreement or promissory note.

Compare:

the lender’s name in the loan contract;
the name in the disclosure statement;
the name collecting payment;
the GCash, Maya, bank, or payment channel name;
the SEC corporate name and CA number;
the app or website name.

Be careful if payment is being collected by a personal account, unrelated company, or “agent” whose authority is not explained. Legitimate companies may use payment partners, but the loan documents should still clearly identify the creditor.

Quick verification checklist

Question	Safe answer
Does the lender have an SEC registration number?	Yes, but this alone is not enough.
Does it have a Certificate of Authority to operate as a lending company?	It should have one, and the CA should match the corporation.
Is the app or website listed as a recorded OLP?	It should be listed if lending is done online.
Is the corporate name the same across ads, contracts, disclosures, and payment instructions?	It should be consistent or clearly explained.
Does it give a Truth in Lending disclosure before release?	It should provide a written breakdown before consummation.
Does it threaten borrowers or contact their phonebook?	That is a warning sign and may violate SEC and privacy rules.
Does it demand an advance “processing fee” before releasing any loan?	High-risk. Verify first and keep proof.

Red flags that a lender may not be legitimate

Be extra cautious if you notice any of the following:

The lender says “SEC-registered” but refuses to give its Certificate of Authority number.
The company name on the app is different from the name on the contract.
The lender uses only a Facebook page, Telegram account, Viber number, or personal mobile number.
The app asks for unnecessary access to contacts, photos, SMS, or social media accounts.
The lender deducts large fees but does not give a written Truth in Lending disclosure.
The lender pressures you to sign immediately because the “approval will expire.”
The lender tells you not to check with the SEC.
The lender asks you to pay a fee first before loan release.
The lender threatens public shaming, barangay complaints, arrest, immigration blacklisting, or employer reports.
The collector refuses to identify their full name or company.

Under SEC Memorandum Circular No. 18, Series of 2019, financing and lending companies and their third-party service providers must observe good faith and reasonable conduct in collection. The circular treats as unfair collection practices acts such as threats of violence, threats of illegal action, insults or profane language, disclosure of borrower information, false representations, contacting at unreasonable hours, and contacting persons in the borrower’s contact list other than guarantors or co-makers.

The National Privacy Commission has also warned that online lenders are prohibited from harvesting phone and social media contact lists to harass borrowers, and it issued Circular No. 20-01 after complaints involving misuse of borrower and contact-list data. (National Privacy Commission)

What if the company is registered but the loan terms are abusive?

SEC registration does not mean every loan term is automatically fair.

A registered lending company may still violate the law if it:

hides the real cost of credit;
imposes charges not disclosed before the loan;
uses misleading advertising;
collects through harassment;
mishandles personal data;
imposes unconscionable interest or penalties.

Philippine courts recognize that parties may agree on interest, but the rate must still be reasonable and fair. In a 2023 Supreme Court decision involving Manila Credit Corporation, the Court reiterated that interest rates and penalties may be nullified when they are excessive and unconscionable, especially when they effectively bloat the borrower’s obligation. (Supreme Court of the Philippines)

This means verification is only the first step. You should also read the disclosure statement, payment schedule, penalties, collection terms, and privacy consent before accepting the loan.

Where to complain if the lender appears unregistered or abusive

Different agencies handle different issues.

Problem	Office or agency commonly involved	Evidence to prepare
No SEC CA, fake SEC certificate, unrecorded online lending app	SEC	Screenshots, app link, corporate name, loan contract, payment demands
Harassment, threats, abusive collection	SEC; possibly PNP/NBI/prosecutor depending on facts	Call logs, messages, recordings where lawful, screenshots, names of collectors
Misuse of contacts, public shaming, data harvesting	National Privacy Commission	App permissions, screenshots, messages to contacts, privacy policy, proof of access
Excessive interest or penalties in an actual dispute	Court, depending on amount and relief sought	Loan agreement, disclosure statement, payment history, statement of account
Barangay-level harassment by collectors	Barangay may document the incident, but SEC still handles regulatory violations	Blotter details, IDs if available, messages, witness names

For SEC complaints, prepare a short written narrative with dates and attach proof. Avoid sending only emotional statements without documents. Regulators act faster when the complaint shows the company name, app name, CA number if claimed, transaction date, loan amount, screenshots, and specific acts complained of.

Practical realities and common bottlenecks

The app name may not be the legal name

This is the most common verification problem. Borrowers often remember only the app name. The SEC list may use the corporate operator’s name. Always search both.

Old screenshots are unreliable

Some companies show old certificates, old app approvals, or outdated SEC list screenshots. A lending company may have been registered before but later suspended, revoked, or ordered to stop certain operations. Use the latest SEC source.

“Registered corporation” is not the same as “authorized lender”

A corporation can be SEC-registered but not authorized to lend. The key document is the Certificate of Authority to operate as a lending company or financing company.

Some lenders are regulated by other agencies

Not all credit providers are SEC lending companies. For example:

banks and many credit card issuers are supervised by the BSP;
cooperatives are generally under the Cooperative Development Authority;
pawnshops are BSP-supervised;
financing companies are SEC-regulated but under a different law, Republic Act No. 8556;
microfinance NGOs have separate accreditation rules.

If the entity is not on the SEC lending company list, check whether it belongs to another regulated category before concluding that it is illegal.

Foreigners should verify the same documents

Foreign borrowers, expats, and overseas Filipinos can use the same verification process. The loan documents should still identify the Philippine corporate lender and its SEC authority.

Foreigners looking at ownership or investment in a lending company should note that RA 9474 has citizenship rules: at least a majority of voting capital stock must be owned by Filipino citizens, and foreign nationals may own stock only if their country gives reciprocal rights to Filipinos. (Supreme Court E-Library) For an ordinary borrower, this is usually not the main issue, but it is useful context when evaluating whether a claimed lending business structure makes sense.

If evidence is coming from abroad, ordinary screenshots and emails are usually enough for an initial online complaint. For court filings, notarized affidavits or foreign-executed documents may require Philippine consular acknowledgment or apostille, depending on where they were signed and how they will be used.

Documents and information to keep before borrowing

Keep copies of:

loan application confirmation;
loan agreement or promissory note;
Truth in Lending disclosure statement;
amortization schedule;
screenshots of the app page and permissions requested;
screenshots of the lender’s advertised SEC registration and CA number;
payment instructions;
receipts and transaction reference numbers;
collector messages;
privacy policy and terms of use;
customer service tickets or emails.

Do not rely on the app remaining available. Some problematic apps disappear, change names, or become inaccessible after complaints.

Frequently Asked Questions

How do I know if a lending company is legit in the Philippines?

Check whether it is a corporation registered with the SEC and whether it has a valid SEC Certificate of Authority to operate as a lending company. If it lends through an app or website, check whether the online lending platform is also recorded with the SEC. Do not rely only on advertisements or screenshots sent by the lender.

Is SEC registration enough for a lending company?

No. SEC corporate registration only means the company exists as a corporation. A lending company must also have a Certificate of Authority from the SEC before it can lawfully conduct lending business under RA 9474.

Where can I check SEC-registered lending companies?

Use the SEC’s official lending and financing company pages, especially the list of lending companies with Certificate of Authority and the list of recorded online lending platforms. For unclear cases, use SEC Check, SEC Express, or the SEC iMessage ticketing system.

What is a Certificate of Authority?

A Certificate of Authority, often called a CA, is the SEC-issued authority allowing a lending company to engage in lending regulated by RA 9474 and its IRR. It is different from a Certificate of Incorporation.

How do I check if an online lending app is registered with the SEC?

Search the SEC list of recorded online lending platforms. Then match the app name with the corporate operator, SEC registration number, and CA number. The name in the loan agreement should match the SEC record or clearly identify the authorized operator.

Can a lending app contact my phone contacts if I miss payment?

Generally, contacting people in your phone contacts who are not guarantors or co-makers is a serious red flag. SEC MC No. 18, Series of 2019 treats certain contact-list collection practices as unfair, and the National Privacy Commission has warned online lenders against harvesting contact lists for harassment.

What if the lender is registered but charges very high interest?

Registration does not automatically make all charges valid. The lender must comply with the Truth in Lending Act, financial consumer protection rules, and court doctrines against unconscionable interest and penalties. Philippine courts may reduce or nullify excessive charges depending on the facts.

Can I ignore a loan if the lender is not SEC-registered?

Do not assume the debt automatically disappears. The lender’s lack of authority may create regulatory and legal consequences, but the facts of the transaction still matter. Keep records, verify the lender, and use the proper complaint channels if the lender is unauthorized or abusive.

What should I do if the lender shows a fake SEC certificate?

Save a copy of the certificate, screenshots of the conversation, the app or website link, payment demands, and the loan documents. Compare the details with SEC records. If the certificate appears false or the CA cannot be verified, report the matter to the SEC with complete evidence.

Can foreigners borrow from SEC-registered lending companies in the Philippines?

Yes, foreigners may enter into loan transactions in the Philippines, subject to the lender’s policies, immigration or residency documentation, credit checks, and applicable law. The verification process is the same: check the company’s SEC registration, Certificate of Authority, and online platform record if applicable.

Key Takeaways

SEC-registered does not automatically mean authorized to lend.
A lawful lending company needs a valid SEC Certificate of Authority under RA 9474.
For loan apps and websites, verify the recorded online lending platform, not just the corporate name.
Match the app name, company name, CA number, contract, and payment instructions.
A registered lender must still comply with the Truth in Lending Act, financial consumer protection rules, data privacy rules, and fair collection standards.
Threats, public shaming, contact-list harassment, fake legal claims, and hidden fees are serious red flags.
Keep screenshots, contracts, disclosures, receipts, and collector messages before filing any complaint.
Use official SEC sources, SEC Check, SEC Express, and SEC iMessage when the lender’s status is unclear.