How to Check if a Loan App Is Legit: Step-by-Step

How to Check a Loan App: 12 Red Flags
Contents

How to check if a loan app is legit in the Philippines comes down to one test: the app must belong to a company registered with the Securities and Exchange Commission (SEC) and holding a Certificate of Authority (CA) to lend. The full check takes about five minutes. The registry is only the first gate. This guide covers all five, with the registry links, the numbers that should match, and the red flags that end the test. Registry status last verified on September 16, 2026.

The 5 Checks at a Glance

Run these five checks in order before you send any loan application. Each closes a different hole. Total time: about five minutes.

# Check Where you do it Time Pass looks like
1 SEC registry search SEC registry + recorded OLP list 2 min Corporate name found with a registration number
2 CA number Site footer, app About screen, store listing 1 min CA number exists and belongs to that company
3 Corporate name match App Terms vs. registry record 1 min The brand maps to a registered company
4 Full cost disclosure Offer screen, before you apply 30 sec Finance charge, total repayment, and annual rate shown
5 App permissions Permission prompts + privacy policy 30 sec No forced access to contacts or gallery

One trap beats more borrowers than any other: the brand on the app icon is not the company that must be registered. Cashalo is run by Paloo Financing Inc. Atome belongs to Neuroncredit Financing Company Inc. Verify the name, not the logo.

Checks 1 to 3 verify that the lender exists legally. Checks 4 and 5 verify that it behaves legally. An app can pass the first group and still fail the second. Run all five.

Check 1: Search the SEC Registry

Two SEC records settle the registration question. The first is the public registry of financing companies, roughly 780 rows with four columns: company name, registration number, CA number, and date. The second is the list of recorded online lending platforms (OLP), kept under Memorandum Circular 19, series of 2019. Its latest public release, dated January 26, 2026, lists 117 companies and around 178 platforms.

The lookup sequence I run for every app:

  1. Find the corporate name behind the app. Check the website footer, the About screen, the Terms of Service, or the store description. Search this name, not the brand.
  2. Search that name in the SEC's financing-company registry at appointment.sec.gov.ph. Look for an exact name match, then note the registration number, CA number, and date.
  3. Check the recorded OLP list on the SEC website. The platform name should appear there under its operating company.
  4. If anything stays unclear, ask the SEC directly. Use the Check with SEC tool at checkwithsec.sec.gov.ph or call hotline 1-4SEC for a manual check.
  5. Or take the maintained shortcut. We keep a verified list of SEC registered lending apps with a source and check date on every row.

Honest limitation: the registry is not real-time. Digido Finance Corp. still appears there under CA 1272 even though the SEC revoked its licenses in 2025 and issued a final cease-and-desist order in March 2026. Registry pages lag behind enforcement orders. That is why the registry is Check 1, not the whole answer.

Check 2: Find the CA Number

A Certificate of Authority is the SEC license to run a lending or financing business. No CA, no lending business. Full stop.

Look for it in three places: the website footer, the app's About or Legal screen, and the store description. Then verify it. For financing companies, the CA sits in a dedicated column of the SEC's public registry, so the check takes seconds. Six verified examples from September 16, 2026: Home Credit 1071, Tala 1132, Cashalo 1162, Atome 1178, MoneyCat 1254, Mabilis Cash 1327.

Lending companies need more care. The SEC's subdomains carry no current public CA list for them. Their numbers usually come from the company's own footer or from secondary records. Treat such numbers as claims. Confirm them through Check with SEC or hotline 1-4SEC.

What the formats mean, and how a CA differs from a CS registration number, is in our CA number explainer.

Check 3: Match the Company Name

The brand on your screen and the company in the registry are often two different names. The corporate name is the one with legal standing. This is the step where clone apps get caught.

Real examples from SEC records, verified September 16, 2026:

Brand you see in the store Corporate name in SEC records
Cashalo Paloo Financing Inc.
Tala Tala Financing Philippines Inc.
Atome Neuroncredit Financing Company Inc.
JuanHand Wefund Lending Corp.
BillEase First Digital Finance Corporation

To find any app's corporate name, check the website footer, the Terms of Service, and the store listing. If none of them names a company, that is your answer already.

The opposite fraud exists too: fake apps wearing the names of real brands. In June 2026 the SEC warned about Tala clones such as Tala-Cash Loan Philippines, Tala AISI-loan app quickly, and Tala Shuk Lending Inc., plus fakes riding the name of Mabilis Cash Financing Corp. A March 2026 advisory listed fake clones inside the App Store itself: Atome Loan, Tala Peso, Tala CashPro. A fake "Fuse Lending, Inc." impersonated the old name of GCash's lending arm. The SEC shut it down with a cease-and-desist order dated July 31, 2025. A matching corporate name separates the real thing from a clone. Our tracker files every clone name. It keeps growing.

Check 4: Full Cost Disclosed Before You Apply

Philippine law wants the full price of a loan on the table before you accept it. The Truth in Lending Act (RA 3765) has required written disclosure since June 22, 1963. Before the transaction closes, the lender must show the finance charge in pesos and centavos and the equivalent simple annual rate.

The rules tightened for apps in August 2026. Memorandum Circular 20, series of 2026, took effect on August 1, 2026. It obliges every borrower-facing platform to show the loan amount, the interest rate, all fees, and the payment schedule before loan confirmation.

Before you tap apply, the offer screen must show four figures:

"You will see your rate after approval" is a red flag, not a sales pitch. A legit app shows the math first, because the law tells it to. Screenshot the offer. I mean it. For the peso arithmetic behind daily rates, our guide to loan app interest and fees does the numbers.

Check 5: App Permissions and Privacy

The Data Privacy Act of 2012 (RA 10173) gives you rights over your personal data. The National Privacy Commission enforces them. A legit app asks only for what it needs. Its privacy policy says why.

Loan apps commonly ask for contacts, SMS, or photo gallery access. Registered lenders state in their privacy policy why they collect that data, and MC 20 binds them to fair collection practices. Illegal operators abuse the same permissions. In February 2026 the SEC issued a cease-and-desist order against Umeta Credit Lending Corp. The grounds: unrecorded platforms and collection violations.

Two practical moves before you apply:

If an app already grabbed your contacts and is using them, our guide on loan apps accessing your contacts lays out the complaint path.

Red Flags That Mean "Stop"

Any single flag below ends the check. Do not apply. If money already changed hands, do not send more.

The full catalog with examples lives in our loan app red flags guide. Names the SEC has already banned are on the illegal loan apps page.

Frequently asked questions

How do I check if a loan app is legit in the Philippines?

Find the corporate name behind the app, then search it in the SEC's financing-company registry and the recorded online lending platforms list. Confirm the CA number belongs to that company, check the cost disclosure, and review the app permissions. Five checks, about five minutes.

Are loan apps regulated in the Philippines?

Yes. The SEC regulates lending companies under RA 9474. Each must hold a Certificate of Authority, with at least ₱1,000,000 in paid-in capital. Operating without one carries fines and imprisonment. Platforms must also be recorded as online lending platforms under MC 19, series of 2019. The moratorium on new platforms imposed in November 2021 was lifted on August 1, 2026 by MC 20, series of 2026. Bank-run credit products sit under the Bangko Sentral ng Pilipinas.

Is it enough that the app is on Google Play or the App Store?

No. App stores screen for malware and store policy, not for SEC registration. Between late December 2025 and January 2026, 22 illegal loan app names were found live on Google Play, 21 unique apps, one of them listed twice. A March 2026 advisory named fake clones on the App Store, including Atome Loan. In Q1 2026 the SEC worked with Google and Apple to remove more than 50 unregistered apps. A store listing proves nothing about licensing.

Ano ang dapat tingnan bago mag-apply?

The same five checks: SEC registry, CA number, corporate name match, full cost on the offer screen, and app permissions. Kung may hindi pumasa kahit isa, huwag mag-apply. Registration is the hard gate. The other four protect your money and your contacts.

What is a CA number?

A CA number identifies a company's Certificate of Authority, its SEC license to lend. Financing-company CAs sit in a public SEC registry column. Lending-company CAs usually need manual confirmation with the SEC. Formats and examples are covered in our CA number explainer.

The app is not in the SEC list. Can I still borrow?

No. A company absent from the registry and the OLP list is operating outside RA 9474. Borrowing from it means there is no regulator to complain to when the terms turn abusive. Our illegal loan apps page tracks the names the SEC has banned or ordered to stop.

The Bottom Line for Borrowers

The decision tree has three branches. If the app passes all five checks, compare price among registered lenders. Our low interest loan apps ranking and the loan calculator do that part. Fail checks 1, 2, or 3? Stop. The registry, the CA, and the corporate name are the legal floor. There is no borrowing safely below it. If it passes the registry but hides its cost or demands your contacts, walk away anyway. Registered apps that behave do exist. Checks 4 and 5 exist precisely for this case.

I have run this exact sequence on every app this site lists. The rule that overrides all three branches: if the company is not in the SEC records, there is no loan. Five minutes of checking beats months of collection calls.

Sources used for this review

Registry and enforcement facts on this page come from the records below, all verified on September 16, 2026.