How to Check if a Loan App Is Legit: Step-by-Step
Contents
How to check if a loan app is legit in the Philippines comes down to one test: the app must belong to a company registered with the Securities and Exchange Commission (SEC) and holding a Certificate of Authority (CA) to lend. The full check takes about five minutes. The registry is only the first gate. This guide covers all five, with the registry links, the numbers that should match, and the red flags that end the test. Registry status last verified on September 16, 2026.
The 5 Checks at a Glance
Run these five checks in order before you send any loan application. Each closes a different hole. Total time: about five minutes.
| # | Check | Where you do it | Time | Pass looks like |
|---|---|---|---|---|
| 1 | SEC registry search | SEC registry + recorded OLP list | 2 min | Corporate name found with a registration number |
| 2 | CA number | Site footer, app About screen, store listing | 1 min | CA number exists and belongs to that company |
| 3 | Corporate name match | App Terms vs. registry record | 1 min | The brand maps to a registered company |
| 4 | Full cost disclosure | Offer screen, before you apply | 30 sec | Finance charge, total repayment, and annual rate shown |
| 5 | App permissions | Permission prompts + privacy policy | 30 sec | No forced access to contacts or gallery |
One trap beats more borrowers than any other: the brand on the app icon is not the company that must be registered. Cashalo is run by Paloo Financing Inc. Atome belongs to Neuroncredit Financing Company Inc. Verify the name, not the logo.
Checks 1 to 3 verify that the lender exists legally. Checks 4 and 5 verify that it behaves legally. An app can pass the first group and still fail the second. Run all five.
Check 1: Search the SEC Registry
Two SEC records settle the registration question. The first is the public registry of financing companies, roughly 780 rows with four columns: company name, registration number, CA number, and date. The second is the list of recorded online lending platforms (OLP), kept under Memorandum Circular 19, series of 2019. Its latest public release, dated January 26, 2026, lists 117 companies and around 178 platforms.
The lookup sequence I run for every app:
- Find the corporate name behind the app. Check the website footer, the About screen, the Terms of Service, or the store description. Search this name, not the brand.
- Search that name in the SEC's financing-company registry at appointment.sec.gov.ph. Look for an exact name match, then note the registration number, CA number, and date.
- Check the recorded OLP list on the SEC website. The platform name should appear there under its operating company.
- If anything stays unclear, ask the SEC directly. Use the Check with SEC tool at checkwithsec.sec.gov.ph or call hotline 1-4SEC for a manual check.
- Or take the maintained shortcut. We keep a verified list of SEC registered lending apps with a source and check date on every row.
Honest limitation: the registry is not real-time. Digido Finance Corp. still appears there under CA 1272 even though the SEC revoked its licenses in 2025 and issued a final cease-and-desist order in March 2026. Registry pages lag behind enforcement orders. That is why the registry is Check 1, not the whole answer.
Check 2: Find the CA Number
A Certificate of Authority is the SEC license to run a lending or financing business. No CA, no lending business. Full stop.
Look for it in three places: the website footer, the app's About or Legal screen, and the store description. Then verify it. For financing companies, the CA sits in a dedicated column of the SEC's public registry, so the check takes seconds. Six verified examples from September 16, 2026: Home Credit 1071, Tala 1132, Cashalo 1162, Atome 1178, MoneyCat 1254, Mabilis Cash 1327.
Lending companies need more care. The SEC's subdomains carry no current public CA list for them. Their numbers usually come from the company's own footer or from secondary records. Treat such numbers as claims. Confirm them through Check with SEC or hotline 1-4SEC.
What the formats mean, and how a CA differs from a CS registration number, is in our CA number explainer.
Check 3: Match the Company Name
The brand on your screen and the company in the registry are often two different names. The corporate name is the one with legal standing. This is the step where clone apps get caught.
Real examples from SEC records, verified September 16, 2026:
| Brand you see in the store | Corporate name in SEC records |
|---|---|
| Cashalo | Paloo Financing Inc. |
| Tala | Tala Financing Philippines Inc. |
| Atome | Neuroncredit Financing Company Inc. |
| JuanHand | Wefund Lending Corp. |
| BillEase | First Digital Finance Corporation |
To find any app's corporate name, check the website footer, the Terms of Service, and the store listing. If none of them names a company, that is your answer already.
The opposite fraud exists too: fake apps wearing the names of real brands. In June 2026 the SEC warned about Tala clones such as Tala-Cash Loan Philippines, Tala AISI-loan app quickly, and Tala Shuk Lending Inc., plus fakes riding the name of Mabilis Cash Financing Corp. A March 2026 advisory listed fake clones inside the App Store itself: Atome Loan, Tala Peso, Tala CashPro. A fake "Fuse Lending, Inc." impersonated the old name of GCash's lending arm. The SEC shut it down with a cease-and-desist order dated July 31, 2025. A matching corporate name separates the real thing from a clone. Our tracker files every clone name. It keeps growing.
Check 4: Full Cost Disclosed Before You Apply
Philippine law wants the full price of a loan on the table before you accept it. The Truth in Lending Act (RA 3765) has required written disclosure since June 22, 1963. Before the transaction closes, the lender must show the finance charge in pesos and centavos and the equivalent simple annual rate.
The rules tightened for apps in August 2026. Memorandum Circular 20, series of 2026, took effect on August 1, 2026. It obliges every borrower-facing platform to show the loan amount, the interest rate, all fees, and the payment schedule before loan confirmation.
Before you tap apply, the offer screen must show four figures:
- The net amount reaching your wallet after any deducted fee
- The interest and every fee, itemized
- The total you must repay on the due date
- The payment schedule and the exact due date
"You will see your rate after approval" is a red flag, not a sales pitch. A legit app shows the math first, because the law tells it to. Screenshot the offer. I mean it. For the peso arithmetic behind daily rates, our guide to loan app interest and fees does the numbers.
Check 5: App Permissions and Privacy
The Data Privacy Act of 2012 (RA 10173) gives you rights over your personal data. The National Privacy Commission enforces them. A legit app asks only for what it needs. Its privacy policy says why.
Loan apps commonly ask for contacts, SMS, or photo gallery access. Registered lenders state in their privacy policy why they collect that data, and MC 20 binds them to fair collection practices. Illegal operators abuse the same permissions. In February 2026 the SEC issued a cease-and-desist order against Umeta Credit Lending Corp. The grounds: unrecorded platforms and collection violations.
Two practical moves before you apply:
- Read the permission prompts and refuse anything the loan does not need. A cash loan has no business reading your photo gallery.
- If the app blocks your application unless you hand over your contact list, that is a red flag.
If an app already grabbed your contacts and is using them, our guide on loan apps accessing your contacts lays out the complaint path.
Red Flags That Mean "Stop"
Any single flag below ends the check. Do not apply. If money already changed hands, do not send more.
- Payment before release. "Activation fees" or "insurance deposits" demanded before you receive money. Real lenders deduct charges from the proceeds, never collect cash first.
- "100% approval" promises. No legitimate lender approves everyone. Guaranteed approval with zero requirements is bait.
- Threats from support. Jail threats, public shaming, or contact-blasting. The 1987 Constitution bars imprisonment for debt, and a collector who threatens it is telling you who they are.
- A cloned famous brand. The confirmed 2025-2026 examples: Tala, Atome, and Mabilis Cash clones, plus the fake Fuse.
- No corporate name, no CA number, no office address. A lender that cannot say who it is has answered your question.
- Absent from the SEC registry and the OLP list. Registration is the floor, not a bonus.
- Revoked registration. Digido lost its licenses and drew a ₱600,000 fine; Delisha Lending Corp. had its registration and license revoked in June 2026.
- Cost hidden until after approval. An app that hides its price hides the worst part of it.
- Forced contacts or gallery access as a condition of applying.
- A fresh clone of an app that just disappeared. In Q1 2026 the SEC worked with Google and Apple to take down more than 50 unregistered lending apps; the vacuum fills fast.
The full catalog with examples lives in our loan app red flags guide. Names the SEC has already banned are on the illegal loan apps page.
Frequently asked questions
How do I check if a loan app is legit in the Philippines?
Find the corporate name behind the app, then search it in the SEC's financing-company registry and the recorded online lending platforms list. Confirm the CA number belongs to that company, check the cost disclosure, and review the app permissions. Five checks, about five minutes.
Are loan apps regulated in the Philippines?
Yes. The SEC regulates lending companies under RA 9474. Each must hold a Certificate of Authority, with at least ₱1,000,000 in paid-in capital. Operating without one carries fines and imprisonment. Platforms must also be recorded as online lending platforms under MC 19, series of 2019. The moratorium on new platforms imposed in November 2021 was lifted on August 1, 2026 by MC 20, series of 2026. Bank-run credit products sit under the Bangko Sentral ng Pilipinas.
Is it enough that the app is on Google Play or the App Store?
No. App stores screen for malware and store policy, not for SEC registration. Between late December 2025 and January 2026, 22 illegal loan app names were found live on Google Play, 21 unique apps, one of them listed twice. A March 2026 advisory named fake clones on the App Store, including Atome Loan. In Q1 2026 the SEC worked with Google and Apple to remove more than 50 unregistered apps. A store listing proves nothing about licensing.
Ano ang dapat tingnan bago mag-apply?
The same five checks: SEC registry, CA number, corporate name match, full cost on the offer screen, and app permissions. Kung may hindi pumasa kahit isa, huwag mag-apply. Registration is the hard gate. The other four protect your money and your contacts.
What is a CA number?
A CA number identifies a company's Certificate of Authority, its SEC license to lend. Financing-company CAs sit in a public SEC registry column. Lending-company CAs usually need manual confirmation with the SEC. Formats and examples are covered in our CA number explainer.
The app is not in the SEC list. Can I still borrow?
No. A company absent from the registry and the OLP list is operating outside RA 9474. Borrowing from it means there is no regulator to complain to when the terms turn abusive. Our illegal loan apps page tracks the names the SEC has banned or ordered to stop.
The Bottom Line for Borrowers
The decision tree has three branches. If the app passes all five checks, compare price among registered lenders. Our low interest loan apps ranking and the loan calculator do that part. Fail checks 1, 2, or 3? Stop. The registry, the CA, and the corporate name are the legal floor. There is no borrowing safely below it. If it passes the registry but hides its cost or demands your contacts, walk away anyway. Registered apps that behave do exist. Checks 4 and 5 exist precisely for this case.
I have run this exact sequence on every app this site lists. The rule that overrides all three branches: if the company is not in the SEC records, there is no loan. Five minutes of checking beats months of collection calls.
Sources used for this review
Registry and enforcement facts on this page come from the records below, all verified on September 16, 2026.
- SEC registry of financing companies, appointment.sec.gov.ph, checked September 16, 2026
- SEC list of recorded online lending platforms (MC 19, s. 2019); latest public release January 26, 2026: 117 companies, around 178 platforms; reprinted by newspress.ph, February 6, 2026
- SEC Check with SEC tool, checkwithsec.sec.gov.ph, checked September 16, 2026
- Statutes via LawPhil: RA 3765, Truth in Lending Act (June 22, 1963); RA 9474, Lending Company Regulation Act (May 22, 2007); RA 10173, Data Privacy Act (August 15, 2012); NPC enforcement via privacy.gov.ph
- SEC Memorandum Circular 20, s. 2026, signed July 7, 2026, effective August 1, 2026, via FintechNews PH (July 17, 2026)
- Inquirer Business, June 13, 2026: SEC warnings on Tala clones, Mabilis Cash fakes, and Finpine
- GMA advisory, March 12, 2026: unrecorded platforms and App Store clones; reprinted by loanappreviewphilippines.com, June 12, 2026
- Rappler and tribunal.net.ph, August 2025: cease-and-desist order of July 31, 2025 against the fake "Fuse Lending, Inc."
- Enforcement: fintechphil.com, November 18, 2025 (Digido revocation); tribunal.net.ph and mb.com.ph, February 21, 2026 (Umeta Credit order); tribunal.net.ph, June 23, 2026 (Delisha revocation)