How to Check If a Loan App Is Legit (SEC, CA)

Last updated: September 30, 2026 · By Andrea Villareal

Key Takeaways: To check if a loan app is legit, find the company that owns it, confirm that company is registered and authorized by the SEC to lend, and confirm the exact app name appears in the SEC's list of recorded online lending platforms. Then read the cost disclosure and review the permissions. If you cannot verify a lender, do not borrow from it.

"Is this loan app legit?" is one of the most common questions borrowers ask, and it deserves a careful answer. A polished app, a friendly ad, and a quick payout tell you nothing about whether a lender has the authority to lend, treats borrowers fairly, or protects your data.

This guide walks you through the checks in order. It is a practical routine, not a guarantee. For the wider picture of borrower safety, see our loan app safety guide.

What "Legit" Means for a Lender

The word "legit" is used loosely. For a lender in the Philippines, it usually covers three separate things.

SEC Registration

Lending and financing companies are corporations registered with the Securities and Exchange Commission (SEC). A certificate of incorporation shows that a company exists as a legal entity. It does not, by itself, allow the company to lend money to the public.

Certificate of Authority

To operate as a lending or financing company, a company needs a Certificate of Authority (CA) from the SEC. This is the document that matters most for a lender. Under the SEC's latest circular for financing and lending companies (SEC Memorandum Circular No. 20, Series of 2026), each company is issued a single Certificate of Authority covering its lending or financing activities, including the online lending platforms it operates.

Recorded Online Lending Platform

If a lender works through an app or website, that borrower-facing platform must be disclosed to the SEC. This is why you should check the app name as well as the company name.

A note on banks and e-wallets. Banks and other institutions supervised by the Bangko Sentral ng Pilipinas (BSP) are regulated differently from SEC-authorized lending and financing companies. If the lender behind an app is a bank or an e-wallet provider, confirm its status through the BSP's official website instead.

An important limit. Passing these checks means a lender is authorized. It does not mean its loans are cheap, suitable for you, or free of problems. Always read the terms too.

Step 1: Find the Company Name Behind the App

Apps often use brand names that differ from the legal company name. Your first job is to find the company.

Look in these places:

• The app's store page, including the developer name and any "About" or "Legal" information.
• The app's settings, "About Us", or terms and conditions screens.
• The lender's official website, usually in the footer or the legal pages.
• The loan agreement or disclosure statement you receive.

Write down three things: the company's full legal name, its SEC registration details, and its Certificate of Authority number if it is displayed. Lenders are expected to disclose this kind of information on their platforms and advertisements. If you cannot find a company name at all, treat that as a serious warning sign.

Step 2: Check the SEC Records

With the company name in hand, check it against official sources.

1. Use the SEC's company verification tool. The SEC directs the public to check companies at checkwithsec.sec.gov.ph. Search the exact legal name and confirm that the company exists and its status is in good standing.
2. Open the SEC's lending and financing pages at sec.gov.ph. The SEC publishes lists of registered lending companies and registered financing companies with a Certificate of Authority. Look for the company name.
3. Check the revoked and suspended list. The SEC also publishes a list of lending companies whose authority has been revoked or suspended. A company on that list should not be lending.
4. Match the details. The company name, registration number, and CA number should match what the lender shows you. Small differences in spelling can signal an impostor.

The SEC has also warned the public about websites and apps that copy the names, branding, and credentials of real companies. So finding a real company's name is not enough. You must make sure the app you are using truly belongs to that company.

Step 3: Check the Certificate of Authority and the App Record

This step ties the app to the company.

1. Confirm the CA. The company should appear in the SEC's list of lending or financing companies with a Certificate of Authority.
2. Search the app name. Go to the SEC's list of recorded online lending platforms and search the exact app name. Make sure the app is linked to the same company you verified in Step 2.
3. Compare the official contact details. Use the phone number, email, or website shown in the SEC records or on the company's official site. Do not rely on numbers from a random ad or a chat message.
4. Watch for look-alikes. Similar names, slightly different logos, or apps that appear only outside official app stores are common tricks.

If the company has a Certificate of Authority but the app is not recorded under it, or the details do not match, stop and ask the lender to explain through an official channel. When in doubt, do not proceed.

Step 4: Read the Terms and Total Cost

An authorized lender can still offer an expensive loan. Before you accept, ask for the loan cost in writing.

Under the Truth in Lending Act (Republic Act No. 3765), a lender should give you a clear written statement before the transaction is finalized, showing the amount financed, the finance charge in pesos, and the applicable rates. Check these points:

• The amount you will actually receive after any deductions.
• The interest, service fee, processing fee, and any other charges.
• The due date, the repayment schedule, and the total you will pay.
• The penalty for late payment.

If the app shows only a vague "daily rate" or hides the total, ask for clarification, or walk away. Our guide on loan interest and service fees explains how to read these numbers.

Step 5: Review App Permissions

A joint advisory from the DICT, National Privacy Commission, and SEC states that unnecessary processing of personal data through mobile apps, including requiring unnecessary permissions, is prohibited. The advisory also says lenders may not access your contact list in an excessive way, and that contacts other than your named guarantors may not be used for collection.

Check the permission requests carefully:

• Camera and photos: acceptable for identity verification, and they should be switched off once that purpose is finished.
• Contacts: should only be used for choosing references or guarantors, not for scanning your whole phone book.
• Anything unrelated to a loan: question it.

Read the privacy notice, look out for pre-ticked boxes, and decline what you do not need to give. Our overview of loan app scam warning signs lists more red flags.

What to Do If You Cannot Verify

If a step fails, do not talk yourself into it.

• Pause the application. Do not upload more documents or send money.
• Ask the lender for its company name and CA number through its official channel, then check again.
• Uninstall the app and revoke permissions if you already installed it and feel unsure.
• Watch your accounts and messages for unusual activity if you already shared your ID or details.
• Report the app to the SEC through imessage.sec.gov.ph if you suspect it is unauthorized or misusing a real company's name. If you are already being harassed by a lender, read how to report abusive loan app collectors.

Once you have confirmed a lender is properly authorized, you can compare a fast loan in 15 minutes philippines guide alongside the official terms, and only borrow what you can repay. A quick payout claim is never a substitute for the checks above.

FAQs

Is an SEC registration number enough to prove a loan app is legit?

No. A registration shows a company exists. A lender also needs a Certificate of Authority, and an app should be recorded under the company. Check both.

What is the difference between a Certificate of Authority and a Certificate of Incorporation?

A certificate of incorporation shows that a company is a registered corporation. A Certificate of Authority shows that the SEC has authorized the company to engage in lending or financing.

Can a real company's name be used by a fake app?

Yes. The SEC has warned about platforms that copy the names, branding, and credentials of legitimate companies. Always verify that the exact app and its contact details match the real company.

Where can I check an SEC-registered lending company?

Use the SEC's official website at sec.gov.ph and its company verification tool at checkwithsec.sec.gov.ph. Confirm the names on the official pages yourself, as the SEC may reorganize its site.

Are e-wallet and bank loans checked the same way?

No. Banks and other BSP-supervised institutions are regulated by the BSP, so you should check their status on the BSP's official website instead of the SEC lending lists.

Sources and Disclaimer

Sources reviewed: Public information and advisories from the Securities and Exchange Commission; SEC Memorandum Circular No. 20, Series of 2026; the joint DICT-NPC-SEC public advisory on online lending platforms (18 March 2026); Republic Act No. 3765 (Truth in Lending Act).

This page is general information, not legal or financial advice. Official lists and website sections change, so always confirm on the SEC and BSP websites before you decide.