Date of publication: 30.09.2026 . Author: ploan.ph
Table of ContentsA legitimate loan app in the Philippines should lead back to a real company that is legally allowed to provide loans. Seeing an SEC registration number, a professional-looking website, or an app in Google Play is not enough by itself.
Before submitting your ID, selfie, contact details, or bank information, check who is actually providing the loan, whether that company has the required authority, and whether the app or website really belongs to it.
A loan app is the digital channel you use to apply. The lender is the legal company that provides the credit.
Those are not always the same name.
For example, an app may use a short consumer brand while its loans are issued by a lending company or financing company with a completely different corporate name.
That distinction matters because it is the legal entity behind the app that must have the appropriate regulatory authority.
In the Philippines, the regulator depends on the type of institution.
| Type of provider | Where to verify it |
|---|---|
| Lending company | Securities and Exchange Commission (SEC) |
| Financing company | Securities and Exchange Commission (SEC) |
| Bank or digital bank | Bangko Sentral ng Pilipinas (BSP) |
| Other financial institution | Depends on the type of institution |
The BSP confirms that lending services may be provided by BSP-supervised financial institutions, while lending companies outside BSP supervision are regulated by the SEC.
You can use the BSP Financial Products and Services directory when checking a bank or other BSP-supervised provider.
For non-bank lending and financing companies, start with the SEC-registered lending companies.
One of the most common misunderstandings is that any company with an SEC registration number is automatically allowed to issue loans.
That is not how the system works.
A company may be registered as a corporation with the SEC, but lending companies need additional authority to conduct lending business.
The SEC explains that under the Lending Company Regulation Act, lending activities may be conducted only by a stock corporation that is registered and licensed by the Commission. The SEC registration process for a lending company includes obtaining a Certificate of Authority to engage in lending business.
A useful rule to remember is:
SEC corporate registration ≠ automatic authority to lend.
When checking a lending or financing company, look for evidence that it has a valid Certificate of Authority to Operate, not simply a corporate registration number.
The SEC's own complaints procedure makes the distinction clear: complaints handled by its Financing and Lending Companies Department concern registered lending and financing companies with Certificates of Authority.
A proper check should connect three things:
the app or website → the legal company → the company's regulatory authority.
Do not verify only one of them.
Start with the app or lender's official website and look for the full corporate name.
Possible places include:
Do not assume the brand name is the company's legal name.
For example, if an app is called “ABC Cash,” you need to know which corporation actually enters into the loan agreement with you.
If you cannot identify the lender's legal entity at all, do not provide sensitive information until you can.
If the provider is a lending company or financing company, verify it through the SEC.
If the loan is being provided by a bank or digital bank, verify the institution through the BSP.
Do not expect every legitimate provider to appear on both regulators' lists. They supervise different types of institutions.
The BSP explicitly states that lending companies not under BSP supervision are regulated by the SEC.
For an SEC-regulated lending or financing company, do not stop after finding a corporate registration.
Check whether the company has the required Certificate of Authority to operate as a lending or financing company.
The SEC maintains dedicated information for lending companies and procedures for obtaining Certificates of Authority.
When checking a company, compare:
Be careful with screenshots sent by an agent or displayed inside an app. A screenshot can be copied or altered. Check the information independently through SEC sources.
Finding a real lending company is only half the job.
Scammers sometimes use the name, registration details, branding, or regulatory credentials of a legitimate business without permission.
This is not a theoretical problem. SEC advisories repeatedly warned about unauthorized websites, Facebook pages, and online lending platforms using the identities or regulatory credentials of real financing and lending companies.
That means this situation is possible:
Real company + real SEC details + fake app = still unsafe.
Try to establish a clear connection between the legal lender and the particular app or website you are using.
Check:
The SEC has historically maintained records of online lending platforms and, in July 2026, issued updated guidance for the disclosure and recording of online lending platforms through the SEC iMessage Portal.
Because these records can change, use the SEC's current pages rather than relying on an old screenshot or an old list copied by another website.
Even if a company name looks familiar, search the SEC's current advisories before borrowing.
The SEC publishes notices concerning:
In August 2026 alone, the SEC published multiple advisories about unauthorized online lending platforms and about third parties misusing legitimate companies' identities.
Check the current SEC Advisories page before treating regulatory details shown by an app as proof.
An app being available through a major app store is useful information, but it is not regulatory approval.
Google Play and Apple's App Store are software marketplaces. They are not the Philippine regulator responsible for deciding whether a company has authority to engage in lending.
The safer verification path is:
Regulator → legal company → official company website → official app or platform
rather than:
App store → app → assume it is legal
Be particularly cautious when a loan link arrives through:
The SEC has specifically warned the public in 2026 to exercise caution when engaging in loan transactions through Telegram and other messaging applications.
A lender's legal status does not remove the need to inspect the actual loan offer.
Before accepting, you should be able to identify:
The SEC advises online borrowers to read and understand the loan agreement, including interest, fees, charges, payments, and due dates, and to make sure they receive a copy of the agreement.
The SEC also states in its complaints guidance that a financing or lending company may violate the Truth in Lending Act if it fails to provide the borrower with a Disclosure Statement before the loan transaction is completed.
If you cannot work out how much will enter your account and how much you will ultimately have to pay, do not accept the offer yet.
Use this before entering sensitive information.
| Check | Reassuring sign | Warning sign |
|---|---|---|
| Legal company | Full corporate name is easy to identify | Only a brand or app name is shown |
| Regulator | Company can be independently checked | App only shows its own “certificate” |
| Authority to lend | Required authority can be verified | Only generic SEC registration is mentioned |
| App ownership | App/platform clearly connects to the legal lender | No clear link between app and company |
| SEC advisories | No relevant current warning found | SEC has warned about the app, website, or identity |
| Website/app source | Reached through official company channels | Link came from an unknown SMS/social account |
| Loan cost | Full terms are provided before acceptance | Fees or repayment are unclear |
| Privacy | Permissions are limited and explained | App demands broad access without a clear reason |
| Support | Official customer-service channels exist | Only a personal chat account is provided |
| Upfront payment | No payment needed to “unlock” funds | You must send money before receiving the loan |
One warning sign does not automatically prove that an app is fraudulent, but it is a reason to stop and verify further.
A common scam involves telling a borrower that a loan has already been approved but cannot be released until the borrower pays an “activation fee,” “insurance fee,” “verification fee,” “tax,” or similar amount first.
The SEC's borrower advisory specifically warns about advance-fee scams and states that lending or financing companies do not ask for an advance payment before releasing the borrowed money.
This is different from properly disclosed charges that form part of a real loan agreement. The key red flag is being instructed to send money first to obtain the promised loan, particularly to an individual's bank or e-wallet account.
A registration number can be real and the app can still be fake.
The SEC issued numerous advisories about unauthorized parties using the corporate names, registrations, or regulatory credentials of legitimate financing and lending companies.
Always compare the identity of the platform with the official company, not just the numbers displayed on the screen.
A loan agreement should not come from an anonymous app.
If the service never clearly states which company is lending the money, you cannot properly verify its regulatory status or know who would be responsible for your data and loan agreement.
Identity verification may involve an OTP in some circumstances, but a lender does not need your online banking password, e-wallet PIN, ATM PIN, or other credential that gives direct control over your financial account.
Never share those credentials with an agent.
A legitimate application can result in an offer different from what you expected—for example, a lower approved amount—but you should still be shown the actual contractual terms before accepting the loan.
Do not proceed if the lender refuses to explain the amount, deductions, fees, repayment schedule, or total payment.
Do not spend unexplained funds immediately.
Save screenshots and transaction information, identify the sender, request a copy of the alleged agreement and disclosure, and check whether the lender is legitimate.
If there is a dispute over whether you consented to the loan, having complete records will be important.
A lending app may need some phone permissions to complete a legitimate task.
For example, camera or photo access may be required to:
But permission should match a clear purpose.
In March 2026, the DICT, National Privacy Commission, and SEC issued a joint advisory on online lending platforms. It states that unnecessary processing of personal data and unnecessary app permissions are prohibited. It also says camera or photo-gallery access should be used only for specified legitimate purposes such as identity verification or KYC, and access should be revocable once that purpose has been completed.
The NPC has separately explained that lending and financing companies must not require unnecessary permissions involving personal or sensitive personal information.
Before allowing a permission, ask:
What does this feature have to do with my loan application?
If there is no reasonable answer, do not grant the permission automatically.
This issue needs a more precise answer than a simple yes or no.
The DICT-NPC-SEC advisory states that unauthorized, excessive, or disproportionate processing of borrowers' contact lists is prohibited. It also says an online lending platform may access a contact list to let the borrower select character references or guarantors, or for proportional metadata where necessary for a specified legitimate purpose—but unrestricted processing of the contact list is prohibited.
The advisory further states that lenders may not contact people from the borrower's contact list for debt collection unless they are guarantors.
This is important because three roles are different:
Borrower — the person who owes the loan.
Character reference — a person whose details may be used for identification or verification.
Guarantor — a person who has expressly consented to assume responsibility for the loan if the borrower defaults.
Giving someone's name as a reference does not automatically make that person responsible for your debt.
No.
Regulatory legitimacy and affordability are different questions.
A provider can be legally operating and still offer a loan that is expensive for your situation. Another legitimate lender may have a lower rate, longer repayment period, or more suitable fees.
Checking legitimacy answers:
“Is this provider and platform properly connected to an authorized financial company?”
Comparing the loan answers:
“Is this particular offer suitable and affordable for me?”
After verifying the provider, compare:
You can compare current loan apps in the Philippines before choosing an offer.
No.
A legitimate provider may offer loans through a website or another properly disclosed online platform.
Likewise, finding an app in Google Play or Apple's App Store does not replace regulatory verification.
The app store can help you confirm details such as the developer name, update history, website, and privacy-policy link, but you should still verify the lender separately.
Do not treat download count, star rating, or app-store placement as proof of authority to lend.
Reviews can be useful, but they answer a different question.
They may tell you about users' experiences with:
They cannot prove that the company is currently authorized by the SEC or supervised by the BSP.
Reviews can also be fake, outdated, or written about a different app with a similar name.
Use reviews after, not instead of, regulatory verification.
Before completing a loan, you should have enough information to understand the financial obligation.
At minimum, make sure you can identify:
The SEC's borrower guidance tells borrowers to read all these terms and to retain a copy of the loan agreement.
Never rely only on an advertisement saying “0%,” “low interest,” or “instant approval.” The actual contract and disclosure matter.
Owing money does not remove a borrower's privacy or consumer rights.
The March 2026 DICT-NPC-SEC advisory was issued after reports involving harassment, intimidation, public shaming, and unlawful use of personal data in online lending collection practices.
The advisory reiterates that excessive processing of contact lists is prohibited and specifically identifies processing that leads to harassment or unfair debt collection as unacceptable.
Warning signs include:
A real debt can still be collected only within applicable laws and rules.
If you become concerned after installing an app, do not panic and do not destroy useful evidence.
Do not send another ID, selfie, password, PIN, OTP, or payment until you understand who you are dealing with.
Check which permissions the app currently has.
Where appropriate, revoke permissions that are unnecessary or whose original purpose has already been completed.
The 2026 government advisory states that once the purpose of an application permission has been achieved, users should be able to turn off or revoke that permission.
Before deleting anything, save:
Follow the verification process above.
A suspicious app may be impersonating a real company, so search both the app name and the legal entity.
Do not assume that installing an app automatically means you owe money.
Check whether you accepted a loan agreement and whether funds were actually disbursed.
If money appeared in your account unexpectedly, document it and seek clarification before using it.
The correct place depends on the type of provider and the problem.
| Problem | Where to start |
|---|---|
| Complaint against a registered lending or financing company | SEC Financing and Lending Companies Department |
| Lending activity by a company without a Certificate of Authority | SEC Enforcement and Investor Protection |
| Unfair debt collection by lending/financing company | SEC |
| Misuse of personal data or privacy rights | National Privacy Commission |
| Complaint against BSP-supervised bank or institution | Institution first, then BSP Consumer Assistance if unresolved |
| Online fraud, threats, or cybercrime | Appropriate cybercrime/law-enforcement authority |
The SEC states that inquiries and complaints against financing and lending companies and their online lending platforms are filed through the SEC iMessage Portal. Its current complaint instructions also say borrowers should generally first exhaust available remedies with the company and keep supporting evidence.
You can access the SEC iMessage Portal.
For lending activities involving companies without the required Certificate of Authority, the SEC directs reports to its Enforcement and Investor Protection Department.
Concerns involving misuse of personal information, excessive data access, or other privacy issues may be reported to the National Privacy Commission.
The NPC publishes its current complaint contact information on its official contact page.
If the provider is a BSP-supervised financial institution, contact the institution through its consumer-assistance channel first.
If the matter remains unresolved, the BSP's Consumer Assistance Management System provides a channel for escalating complaints involving BSP-supervised institutions.
Before accepting a loan, make sure all of these statements are true:
If you cannot verify the provider, do not treat a registration number displayed inside the app as sufficient proof.
First identify the legal company providing the loan. Then verify it with the appropriate regulator: generally the SEC for lending and financing companies and the BSP for banks and other BSP-supervised institutions.
For an SEC-regulated lender, check its authority to operate and confirm that the particular app or website is actually associated with that company. Also check current SEC advisories before applying.
No. A company's corporate registration shows that the corporation exists, but a lending company must also obtain a Certificate of Authority to engage in lending business. The SEC explains this distinction in its official lending-company guidance.
You must also verify that the app itself genuinely belongs to the authorized company.
For a lending or financing company, a Certificate of Authority is the SEC authorization relevant to operating the lending or financing business.
It is different from ordinary corporate registration.
The SEC maintains formal application procedures for Certificates of Authority for lending and financing companies.
Compare the app with official information from the lender.
Check the lender's official website, legal documents, developer details, contact information, regulatory disclosures, and relevant SEC records.
Do not rely only on an SEC number displayed by the app. In 2026, the SEC issued repeated warnings about unauthorized platforms using real companies' names and regulatory credentials.
No. Google Play is an app distribution platform, not the Philippine lending regulator. An app-store listing can provide useful information but does not by itself prove that the lender is authorized.
Verify the legal company and its regulatory status independently.
No. The same principle applies. Availability through an official app store should not replace SEC or BSP verification.
Make sure the app genuinely belongs to the company whose lending authority you checked.
Yes. The SEC published multiple advisories concerning fake websites, Facebook pages, and online lending platforms using legitimate companies' corporate identities or regulatory credentials without authorization.
That is why you need to verify the relationship between the app and the company, not simply whether the company's details exist.
Treat it as information to verify, not final proof.
Search the company independently and check whether the certificate belongs to the same company. Then confirm that the app or website is genuinely operated by or authorized by that company.
A screenshot inside an app can be copied from another source.
Yes. Banks and other BSP-supervised financial institutions fall under BSP supervision, while lending companies outside BSP supervision are regulated by the SEC.
Do not assume that a legitimate lending company must appear in the BSP's bank directory.
Contact access is subject to important limits.
The DICT-NPC-SEC advisory says online lending platforms may access a contact list for limited legitimate purposes, such as allowing users to select character references or guarantors, but unrestricted processing of contact lists is prohibited.
An app asking for broad contact access without a clear purpose deserves additional scrutiny.
The government advisory states that lenders may not contact people on a borrower's contact list for debt collection unless those people are guarantors.
A character reference is not automatically a guarantor. A guarantor must expressly consent to that role.
Be very cautious if you are told to send money first to “activate,” “unlock,” “insure,” or “release” an approved loan.
The SEC's online borrower advisory warns against advance-fee scams and states that lending and financing companies do not ask borrowers for advance payment before providing the borrowed money.
A loan may include properly disclosed fees or charges, depending on the product and applicable rules.
What matters is that you are told the relevant costs before accepting the loan and can identify both the principal and the net amount you will actually receive.
If ₱10,000 is described as your loan but less will be disbursed, check exactly why and how that affects the total cost.
Do not immediately spend the money.
Save your transaction records and communications, ask the provider for the loan agreement and disclosure showing how and when you supposedly accepted the loan, and verify the company behind the app.
If the issue cannot be resolved directly, use the appropriate regulatory or complaint channel.
No. Cost and regulatory legitimacy are separate issues. Different products can be subject to different interest-rate or fee rules.
Instead of deciding legitimacy from the advertised rate alone, verify the provider first and then check whether the specific loan terms comply with the rules applicable to that product.
No lender's authority to collect a genuine debt gives it unlimited rights to threaten, publicly shame, or misuse personal information.
The DICT-NPC-SEC advisory specifically addresses harassment, intimidation, public shaming, excessive use of personal data, and unfair debt collection practices.
Keep evidence and report abusive conduct through the appropriate authority.
For lending or financing companies, start with the Securities and Exchange Commission. Privacy-related concerns may be reported to the National Privacy Commission.
For a BSP-supervised financial institution, raise the issue with the institution first and use the BSP Consumer Assistance mechanism if necessary.
Cyber scams, threats, or fraud may also need to be reported to the appropriate cybercrime or law-enforcement authority.
Do not rely on one static list indefinitely because regulatory status, platforms, and products can change.
Use current SEC or BSP information to verify the provider and check current advisories before borrowing.
You can also compare loan apps currently available in the Philippines on Ploan, then independently review the lender's latest terms before submitting an application.
Interest |
Loan amount |
Term |
Borrower age |
SEC registered |
||
|---|---|---|---|---|---|---|
|
APR 145%
|
₱500 — ₱20,000
|
from 3 to 6 months
|
22+ years
|
SEC Registration number: CS201953073., Certificate of Authority №1254
|
|
|
APR 182%
|
₱1,000 — ₱30,000
|
from 61 to 364 days
|
21 — 70 years
|
SEC Registration No. 2021030009095-02 Certificate of Authority No. 3427
|
|
|
from 0%
|
₱1,000 — ₱50,000
|
up to 12 months
|
20 — 70 years
|
SEC Registration No. CS201908275 SEC Certificate of Authority No. 1324
|
|
