Double-click to edit...

Quick answer

To check whether a business, service, or online platform is legitimate in the Philippines, verify who operates it, whether its registration is current, whether it holds the authority required for the activity offered, and whether the person contacting you actually represents it.

A DTI certificate, SEC registration, government logo, or marketplace badge is not enough by itself. DTI business-name registration is not a business permit. SEC incorporation does not automatically authorize investment solicitation or other regulated activities. Genuine registration details can also be copied by impostors. Department of Trade and Industry Philippines

Treat verification as a series of checks before paying, investing, borrowing, signing a contract, or submitting identification documents.

What “legitimate” actually means

Several different questions are often bundled into the word “legitimate”:

Identity: Does the business or professional exist under the name supplied?
Registration: Is it registered with the appropriate government body?
Authority: Is it licensed or permitted to provide this particular product or service?
Authenticity: Does the website, app, account, or representative belong to that registered operator?
Reliability: Are the terms, payment arrangements, and actual conduct acceptable?

Passing one check does not answer the others. For example, an incorporated company may lack authority to offer an investment. A real company’s certificate may appear on a fraudulent social-media page. A licensed business may still breach its contract.

The practical aim is to establish a verifiable connection between the registered operator, the offer, the communication channel, and the intended recipient of your money.

1. Identify the actual operator

Before searching a registry, ask for:

The complete registered name, including “Inc.,” “Corporation,” or other relevant designation.
The trade name or brand used publicly.
The registration number and issuing agency.
The business address and official contact details.
The applicable licence or permit number.
The name of the contracting party and the person authorized to act for it.

For an app or website, look at its terms, privacy notice, checkout page, invoice details, and customer-service information. These should help identify the operator behind the brand.

If different names appear, ask for an explanation. A brand may belong to a differently named corporation, and a sole proprietor may receive payments under the proprietor’s personal name. Those arrangements require verification; a mismatch alone does not establish fraud.

Do not send money while the identity of the contracting party remains unclear.

2. Check registration with the correct agency

Sole proprietorships: DTI

Use the DTI Business Name Registration System search. Search the exact registered business name rather than relying on a social-media handle or abbreviated brand. DTI’s search facility uses exact-name searching. dtiwebfiles.s3-ap-southeast-1.amazonaws.com

Compare the available registry information with the certificate and details supplied by the seller.

DTI registration concerns a business name. It does not replace the Business/Mayor’s Permit needed to operate. DTI also explains that registration is required when a person conducts business using a name other than their true name. Accordingly, failure to find a brand in DTI’s registry is a reason to investigate further, not automatic proof of a scam. Frequently Asked Questions

Corporations and partnerships: SEC

Use Check with SEC, accessible through the SEC website. Check the exact company name and registration number, then examine the available status and secondary-licence information. The SEC also provides company-information services covering registration status, addresses, and secondary licences. Securities and Exchange Commission

Do not rely only on an old certificate of incorporation. Check for subsequent regulatory action, including suspension, revocation, or a cease-and-desist order, through the SEC’s advisories and orders. Securities and Exchange Commission

Cooperatives: CDA

For an entity claiming to be a cooperative, verify its registration and current status with the Cooperative Development Authority. CDA maintains cooperative registration and status systems; request confirmation if the public information does not resolve your question. cs.cda.gov.ph

Local business permits

If a business supplies a Business/Mayor’s Permit, confirm it with the issuing city or municipality’s Business Permits and Licensing Office. Check the operator, address, permitted activity, and relevant permit period.

A DTI certificate cannot substitute for this local operating permit. foi.gov.ph

What if a search returns no result?

Check spelling, punctuation, the legal name behind the brand, and whether you searched the correct registry. Save the result and ask the agency for clarification where necessary.

Neither a failed search nor the absence of a published warning conclusively determines legitimacy. An unresolved discrepancy is a sound reason to postpone payment.

3. Verify authority for the particular activity

Ordinary business registration does not establish authority to conduct every line of business.

Offer or service	Additional verification
Investments or securities	Check the SEC authority applicable to the offer and persons selling it, together with relevant advisories.
Lending or financing company, including a lending app	Verify the operator’s SEC Certificate of Authority and match the app or website against the SEC’s recorded online lending platforms.
Bank, e-wallet, or other claimed BSP-regulated financial service	Check the BSP’s directories or verifier for the operator and relevant institution category.
FDA-regulated health products or establishments	Check the applicable establishment licence and product registration, notification, or other authorization.
Service involving a PRC-regulated profession	Verify the individual professional’s licence, rather than relying only on the business’s registration.

Official checking tools include the SEC’s recorded online lending platforms, BSP directories, FDA Verification Portal, and PRC licence verification. Securities and Exchange Commission

These examples are not exhaustive. Other activities may require authorization from another regulator. Ask which agency regulates the specific service and independently confirm the answer.

Be especially careful with investment offers

Under Section 8 of the Securities Regulation Code, Republic Act No. 8799, securities generally cannot be offered or sold in the Philippines without the required SEC-approved registration statement. Sections 9 and 10 provide exemptions for certain securities and transactions. lawphil.net

Consequently, “SEC-registered” is an incomplete answer. Ask what authorization covers the actual offer. If the promoter claims an exemption, obtain its precise legal basis and supporting documents and seek independent confirmation before investing.

The SEC expressly warns that incorporation alone does not authorize investment solicitation. appointment.sec.gov.ph

4. Authenticate the website, app, and representative

A registry match establishes information about an entity. You must still connect that entity to the offer you received.

Practical checks include:

Find contact details independently. Use the regulator’s record or a separately established official channel.
Confirm the exact website and account. Check the full domain, app publisher, social-media username, email address, and telephone number.
Verify the representative. Contact the business independently to confirm the person’s authority and payment instructions.
Check the payee. Ask why payment goes to a different person or entity and obtain a documented explanation.
Recheck changed instructions. Independently confirm a last-minute change of bank account or payment destination.

A padlock or HTTPS connection does not establish government registration or authority. Followers, testimonials, celebrity images, app-store availability, and screenshots of successful withdrawals likewise do not replace official verification.

5. Verify the Philippine Trustmark for online businesses

DTI’s current rules require covered online merchants, e-retailers, e-marketplaces, and digital platforms to obtain the E-Commerce Philippine Trustmark. This requirement is reflected in Department Administrative Order No. 25-12, series of 2025, and DTI’s current guidance. Homepage

Use the official Trustmark portal and Online Business Database to verify a claimed badge:

Scan its QR code and inspect the destination carefully.
Confirm that it opens the official DTI Trustmark website.
Match the registered business, security number, and online-store URL.
Check validity and any available status information.

DTI’s guidelines provide for a unique security number and QR code linked to the database. A Trustmark is valid for one year from issuance. Homepage

A copied badge is not proof of registration. A valid Trustmark is also not a government endorsement or certification of the quality of a particular business, product, or service. Homepage

6. Read the offer before committing

Even after confirming identity and authority, obtain clear written terms covering:

The goods, deliverables, or service scope.
The total price, recurring charges, and payment schedule.
Delivery or completion dates.
Cancellation, return, refund, and warranty arrangements.
The complaint process and contact details.
The party responsible if performance fails.

The Internet Transactions Act of 2023, Republic Act No. 11967, requires price disclosure and imposes obligations concerning conformity of goods and performance of services. Section 23 also requires e-retailers to publish specified identity and contact information on their homepage. lawphil.net

Not every online transaction falls under the same rules

Section 3 covers qualifying business-to-business and business-to-consumer internet transactions within DTI’s mandate. It excludes online media content and consumer-to-consumer transactions, as legally defined. An occasional personal sale may therefore differ from selling in the ordinary course of business. Sector regulators also retain their authority. Supreme Court E-Library

A seller’s location overseas does not necessarily remove Philippine-law obligations, but identifying the responsible party and enforcing a remedy can be more difficult.

Warning signs that justify pausing

Exercise particular caution when someone:

Guarantees unusually high returns with little or no risk.
Demands additional deposits to release supposed earnings or withdrawals.
Refuses to identify the legal operator.
Supplies registration details that belong to another business.
Pressures you to pay before independent checks are complete.
Insists on moving payment outside a platform’s documented process.
Requests your OTP, password, PIN, or remote access to your device.
Repeatedly changes accounts, domains, business names, or payment recipients without a credible explanation.

These circumstances call for investigation. They do not, individually, establish every element of a criminal offence.

Evidence to preserve

Keep records before a listing disappears or an account blocks you:

The advertisement, offer, product page, and full URL.
Screenshots showing usernames, dates, and relevant statements.
Original emails, messages, attachments, and voice messages.
Contracts, quotations, invoices, receipts, and order confirmations.
Payment references, recipient details, and transaction timestamps.
Registration certificates, licence claims, badges, and verification results.
Delivery records, packaging, and photographs of what arrived.
Complaint submissions, reference numbers, and responses.

Prepare a short chronology identifying what was promised, what you paid, what happened, and what remedy you seek. Preserve original files alongside screenshots. Submit sensitive records through verified official channels and redact unnecessary personal information from public posts.

What to do if you already paid or shared information

Contact your payment provider immediately

Report suspected fraud or an unauthorized transaction through the bank or e-wallet’s verified channel. Ask what protective measures, dispute procedures, or recovery options are available. Obtain a reference number.

A recall, reversal, or refund is not guaranteed. Do not make further payments merely because someone promises they will unlock the original funds.

For complaints against BSP-supervised institutions, first use the institution’s consumer-assistance mechanism. If unresolved or its response is unsatisfactory, follow the BSP Consumer Assistance Mechanism, including BSP Online Buddy or the published alternative procedure. Consumer Protection

Use the applicable complaint process

For disputes covered by the Internet Transactions Act, Section 24 requires using the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency or pursuing alternative dispute resolution. It is deemed exhausted if the complaint remains unresolved seven calendar days after filing. Keep proof of submission. Supreme Court E-Library

That seven-day rule is not a reason to postpone urgent account protection or reporting suspected criminal activity.

Depending on the issue:

Ordinary consumer disputes within DTI’s jurisdiction: use the DTI Consumer CARe System or the complaint channels published by its Fair Trade Enforcement Bureau. consumercare.dti.gov.ph
Lending or financing companies and their online platforms: follow the SEC’s complaint instructions, which direct these complaints to SEC iMessage. Securities and Exchange Commission
Other regulated services: approach the regulator responsible for that activity.
Suspected fraud, identity theft, or threats: report to law enforcement and preserve the supporting records.

Regulatory reporting, recovering money, and pursuing criminal liability involve different processes. Filing a report does not itself secure repayment.

When help is urgent

Seek prompt assistance if money is still leaving your account, you disclosed security credentials, your identity is being used, you face threats, or a legal notice contains a deadline.

Change compromised credentials through a trusted device and contact the affected provider. Obtain legal advice promptly where substantial money, an investment scheme, disputed contractual obligations, or possible court proceedings are involved. Different remedies have different deadlines; do not assume a customer-service complaint suspends them.

Common mistakes to avoid

Treating DTI registration or SEC incorporation as approval of every activity.
Checking only the brand instead of the legal operator.
Accepting a certificate screenshot without independent confirmation.
Relying on an old registry list or licence.
Assuming that no published advisory means an offer is approved.
Paying before resolving identity or account discrepancies.
Deleting messages after reporting the account.
Paying an unverified “recovery agent” who promises guaranteed reimbursement.

Frequently asked questions

Is a DTI-registered seller automatically safe?

No. DTI business-name registration is one identity check. It does not replace operating permits, activity-specific authorizations, or verification of the account you are dealing with. foi.gov.ph

Does SEC registration mean an investment is approved?

No. Verify the authority for the actual offer. Securities-registration requirements and any claimed exemptions must be assessed separately from incorporation. appointment.sec.gov.ph

Does a Trustmark guarantee that I will receive a refund?

No. It indicates compliance with applicable standards; DTI says it does not endorse or certify the quality of a specific business, product, or service. A disputed refund still depends on the facts and applicable remedies. Homepage

Is a business fraudulent if I cannot find it online?

Not necessarily. You may have the wrong name, registry, or spelling, or the available record may not resolve its status. Ask the issuing agency to confirm. Postpone payment while material questions remain unanswered.

Is the marketplace automatically responsible for the seller’s wrongdoing?

No. Under Sections 25–27 of the Internet Transactions Act, the merchant or e-retailer has primary liability, while platform liability depends on the statutory conditions and facts. Preserve both the seller’s conduct and the platform’s responses. Supreme Court E-Library

Can I verify a business without sending it my ID?

Start with public registries and official agency inquiries. If a provider requests identification for a regulated service, independently authenticate the provider and its submission channel before sending documents. Never disclose an OTP, PIN, or password as part of business verification.

This article provides general Philippine legal information, not advice on a particular business or transaction. Registration, licensing, liability, and available remedies depend on the relevant records and facts. Sources checked: 15 October 2026.