Checking the Legitimacy of a Business, Service, or Online Platform

Quick answer

To check whether a business, service, or online platform is legitimate in the Philippines, verify the operator, the activity it is allowed to conduct, and the account or website you are actually dealing with. Search the appropriate government register yourself, then compare the registered name with the seller’s documents, contact details, website, and payment instructions. A registration certificate alone does not prove that a business has every permit it needs, that an investment offer is authorized, or that a social media account belongs to the registered business.

If a name, permit, or payment account does not match, pause the transaction and ask the business to explain the difference through a contact channel you obtained independently.

Check the business behind the offer

Ask for the legal name of the person or entity operating the service. A shop name, app name, or Facebook page name may differ from its registered name. Request its business address, an official contact channel, and the registration or permit details relevant to what it sells.

Use the register that fits the business:

What the business claims to be Where to check
A sole proprietor using a business name The DTI’s Business Name Search
A corporation or partnership The Securities and Exchange Commission (SEC) and its company verification services
An online seller displaying a Philippine Trustmark The DTI Trustmark verification database
A bank or other BSP-supervised financial institution The Bangko Sentral ng Pilipinas (BSP) financial institution directory

Search using the exact legal name, including distinctive spelling. Compare any result with the registration number and details the business supplied. If you cannot resolve a discrepancy, ask the issuing agency directly; a screenshot of a certificate can be copied or altered.

A DTI business name registration gives a business name legal identity, but does not by itself authorize the holder to operate. The DTI says a business or mayor’s permit is needed to operate. Depending on the activity, other permits or professional credentials may also be required. Check with the relevant local government unit or regulator when those permissions matter to your transaction. :chatgpt-content-reference{index="0"}

Check permission for the specific service

The question is more precise when a business handles money, offers credit, or sells a regulated product. A company may be registered while lacking authority for the particular activity advertised.

  • Investments: Verify the company with the SEC, then ask whether the specific investment offer and solicitation have the required SEC authority. Corporate registration alone is insufficient proof. Check the SEC’s investor advisories for warnings, while remembering that the absence of an advisory is no guarantee of safety. :chatgpt-content-reference{index="1"}
  • Loans and lending apps: For a nonbank lending or financing company, check its SEC certificate of authority and whether the particular app or website is recorded with the SEC. The SEC publishes lending information and advisories, including warnings about platforms using another company’s identity. A bank or other BSP-supervised provider should be checked through the BSP’s directory. :chatgpt-content-reference{index="2"}
  • Online shopping: A seller’s DTI or SEC registration should match the operator shown in its store details. If it displays a Philippine Trustmark, verify the business name or store URL in the DTI database; do not rely on an image of the seal alone. The Trustmark is an additional check, not a promise that every order will go smoothly. :chatgpt-content-reference{index="3"}

For health products, professional services, transport, and other regulated activities, identify the agency responsible for that specific product or service and check the applicable authorization there. A general business registration does not replace a sector-specific approval.

Make sure the page and payment destination belong to that business

Even a real company can be impersonated. Open its official website or app through a source you found independently, then compare the exact domain, app publisher, phone number, and payment instructions. A similar-looking URL, a copied logo, or a certificate posted on a page does not establish ownership of that page.

Before paying or sending an ID, check that the proposed transaction is consistent across the quotation, order confirmation, contract, and payment request. Ask why a company wants payment to an unrelated personal account or why its representative has moved the conversation to a different page or number. Do not share a one-time password, account password, or recovery code to “verify” a purchase, refund, job, or loan.

For an online purchase, look for a usable seller identity, product or service description, total price and charges, delivery terms, and a way to raise a complaint. The Internet Transactions Act, Republic Act No. 11967, sets duties for covered online merchants and platforms, but its coverage has limits: for example, it excludes consumer-to-consumer transactions as defined in the Act. The facts of the sale matter when deciding which remedy applies. :chatgpt-content-reference{index="4"}

Warning signs that call for a pause

No single warning sign proves fraud. Several together are a strong reason to stop and verify:

  • The operator refuses to give its legal name or gives registration details that belong to someone else.
  • An investment promises unusually certain returns while its seller cannot show authority for the offer.
  • A lending app claims a registered company’s name, but you cannot connect the app to that company through SEC information or an independently verified company contact.
  • The seller pressures you to pay immediately, changes payment accounts, or asks you to transact outside the platform’s normal process.
  • A page displays a permit or Trustmark that cannot be verified with the issuing agency.
  • The business asks for passwords, one-time passwords, or unnecessary access to your accounts or personal data.

A missing search result also needs care: spelling, legal names, and register coverage can differ. Ask the relevant agency before declaring a business unlawful solely because your first search failed.

What to do before paying—and if you already paid

Before paying, save the listing or offer, the seller’s stated legal name, the URL or app details, the quoted terms, and the proposed payment recipient. Check the relevant registers and use an independently found contact channel to resolve inconsistencies. Read the cancellation, refund, loan, or investment documents before committing.

If you suspect a scam after paying, contact your bank, e-wallet, or payment provider immediately through its official channel and ask what protective or recovery steps remain possible. Change affected passwords and secure accounts if you shared credentials. Preserve the original chat, URLs, screenshots, receipts, transaction references, account names and numbers, contracts, and a timeline of events. Avoid editing the only copy of a message or deleting the conversation.

For a consumer dispute, you may raise the issue with the seller or platform and use the DTI Consumer CARe system where appropriate. SEC concerns can be submitted through SEC iMessage; the SEC directs complaints involving registered lending and financing companies and their online lending platforms to that portal. If the facts suggest impersonation or online fraud, report them promptly to law enforcement as well. The right forum depends on who operated the service and what happened, so a consumer complaint and a suspected crime may require different reports. :chatgpt-content-reference{index="5"}

Seek legal help promptly if a substantial sum is at stake, someone is using your identity, you face threats or coercive collection, or you have received a formal demand or court document. Bring the records you preserved; the exact contract and transactions often determine your options.

Frequently asked questions

Does a DTI or SEC certificate mean the business is safe?

No. It helps verify a name or entity, but it does not guarantee honest conduct, product quality, delivery, or authority to perform every regulated activity. Check the permit or approval for the particular offer and confirm that the account you are dealing with belongs to the registered operator. :chatgpt-content-reference{index="6"}

Is an online seller illegitimate if it has no Philippine Trustmark?

Do not decide from the badge alone. Check the DTI’s current Trustmark rules and database, the seller’s identity, and the other facts of the transaction. A displayed badge should be verified in the DTI database. :chatgpt-content-reference{index="7"}

Is a good review score enough?

No. Reviews can help you assess service, but they do not establish legal identity, regulatory authority, or ownership of a payment account. Verify those points separately.

Can I recover money sent to a suspicious seller?

Recovery depends on the payment method, timing, available funds, evidence, and the provider’s process. Report the transaction to the payment provider immediately, preserve your records, and file the appropriate complaint or report. Do not assume a report automatically reverses a transfer.

This is general Philippine legal information, not advice on a particular transaction. Official sources and procedures were checked on 29 September 2026; verify current agency records before acting.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.