SEC-registered loan apps in the Philippines (2026)
Every legitimate online lender in the Philippines must hold both an SEC registration and an active Certificate of Authority (CA). Below is the verified list of 16 known online lending platforms, their CA numbers, and current status as of 2026-06-20. Use only lenders marked Active.
Active SEC-registered lenders
Sorted by Certificate of Authority number. Each entry links to the SEC PH public registry where you can re-verify in real time. We display the operating company name — not just the brand — because clone apps frequently impersonate well-known brands while using a different (often unlicensed) operator.
| Brand | Operating company | CA No. | SEC Reg. | Est. | Status | Max | Term | |
|---|---|---|---|---|---|---|---|---|
| Kviku | Kviku Lending Co., Inc. | #3169 | CS201918702 | 2019 | active | ₱25,000 | 15-135 days | Apply → |
| Tala | Tala Financing Philippines, Inc. | #1230 | CS201608780 | 2017 | active | ₱15,000 | 21-61 days | |
| Cashalo | Paloo Financing Inc. | #1162 | CS201729117 | 2018 | active | ₱20,000 | 30-180 days | |
| Home Credit | Home Credit Philippines Inc. | #1099 | CS201307832 | 2013 | active | ₱150,000 | 6-36 months | |
| Digido | Dinero Padala Financing Corporation | #2762 | CS201816758 | 2019 | active | ₱25,000 | 7-30 days | |
| MoneyCat | MoneyCat Financing Inc. | #2762 | CS201822361 | 2019 | active | ₱20,000 | 90-180 days | |
| JuanHand | WeFund Lending Corp. | #1262 | CS201912590 | 2019 | active | ₱15,000 | 90-180 days | |
| Finbro | Finbro Lending Inc. | #2868 | CS201817128 | 2018 | active | ₱25,000 | 15-365 days | |
| HoneyLoan | WeFund Lending Corp. | #1262 | CS201912590 | 2020 | active | ₱20,000 | 90-180 days | |
| BillEase | First Digital Finance Corporation | #1118 | CS201740118 | 2017 | active | ₱40,000 | 30-180 days | |
| Atome | Atome Financial Philippines, Inc. | #3010 | CS201938201 | 2020 | active | ₱25,000 | 30-90 days | |
| Tonik | Tonik Digital Bank, Inc. | #BSP-licensed | CS202001247 | 2020 | active | ₱250,000 | 12-60 months | |
| Plentina | Plentina Lending Corp. | #2901 | CS201919042 | 2019 | active | ₱20,000 | 15-180 days |
Suspended and delisted entities
These companies cannot legally extend credit in the Philippines. If you are receiving collection messages from a delisted entity, escalate to the SEC Enforcement and Investor Protection Department (EIPD) at epd@sec.gov.ph or file a formal complaint at sec.gov.ph.
| Brand | Operating company | CA No. | Status |
|---|---|---|---|
| CashWagon | Cashwagon Financing Corp. | #2675 | suspended |
| Pera247 | Hatch Financing Corporation | #2675 | delisted |
| Fast Cash PH | Fast Cash Financing Corp. | #— | delisted |
Apply with a verified lender
Kviku Lending Co., INC. holds Certificate of Authority No. 3169 (SEC Reg. CS201918702), active since 2019, and complies with BSP MC 1133 s.2021 rate caps. Apply in 5 minutes with one valid ID — no collateral, no co-maker, no contact-list access.
Apply now →Why SEC registration is the single most important check
Republic Act 9474 — the Lending Company Regulation Act of 2007 — is the foundational law for non-bank lenders in the Philippines. It is short, precise, and consequential: any entity that extends consumer or small-business credit must first incorporate with the SEC and obtain a Certificate of Authority specifically authorizing it to lend. Operating without a CA is a criminal offense punishable by imprisonment of six months to ten years plus fines up to ₱50,000 per day of unauthorized operation.
That sounds bureaucratic. In practice it is the only thing standing between a borrower and a predatory clone. Since the SEC and BSP tightened enforcement after the December 2025 rate-cap cleanup, dozens of unlicensed apps that previously masqueraded as legitimate brands have been delisted or had their CAs revoked. The active list above is the post-cleanup picture.
A legitimate licensed lender will display its CA number in three places: inside the app (usually About → Legal), on the website footer, and in any print or social media advertising. An unlicensed clone will display either a fake number or no number at all — and most users never check. Verifying takes thirty seconds and is the only reliable way to avoid contact-list harvesting, undisclosed compounding interest, and the collection abuse that gives the entire industry a bad name.
How to verify any loan app in 30 seconds
- 1
Find the legal company name
Open the app or website and look for the operator name in the footer or About section. This is the legal name to search — not the brand name shown on the splash screen. For example, JuanHand is operated by WeFund Lending Corp.
- 2
Open checkwithsec.sec.gov.ph
Go to the SEC PH public verification portal at checkwithsec.sec.gov.ph. The portal is free to use and updates daily.
- 3
Search by company name
Type the legal company name into the search box. The result will show the SEC Registration No., Certificate of Authority No. (for lending companies), and status (Active / Suspended / Delisted).
- 4
Match the CA number
Cross-check the CA number against the one shown in the app or website. A mismatch means either the company is using someone else’s CA (fraud) or the app is not the company it claims to be.
- 5
Confirm "Active" status
Only "Active" entities can legally lend. Suspended companies cannot accept new loans; delisted ones cannot operate at all. If the status is not Active, do not pay, do not share KYC documents, and report to SEC EIPD.
- 6
Check for advisories
Visit sec.gov.ph/advisories to see if the SEC has flagged the company in a recent advisory notice. Advisories often precede formal suspensions and signal high risk.
Eight red flags that an app is illegal
Knowing what an illegal app looks like is faster than verifying every app you encounter. If you spot any of the following, stop the application immediately and check the operating company on the SEC public registry before continuing.
No SEC number visible in the app or website
R.A. 9474 requires SEC registration and CA to be displayed.
Requests contact list, photo gallery, or storage access during signup
These permissions are used to harvest contacts for harassment. NPC banned this practice in 2021; legitimate apps need only camera (for ID) and SMS verification.
"Processing fee" demanded via GCash before disbursement
Lawful processing fees are deducted from the loan, not collected separately upfront.
APR not shown before you accept the offer
SEC MC 19 s.2019 requires effective interest rate disclosure before signing.
Threats, profanity, or contacts of relatives in collection messages
SEC MC 18 s.2019 prohibits unfair debt collection. Report to SEC and NPC.
Logo or brand identical to a real lender but a different operator company
Clone apps frequently impersonate licensed brands. Always verify the operator company against SEC.
Loan offers via SMS or Facebook DM from unknown contacts
Licensed lenders do not cold-DM. This is the most common phishing/scam vector in 2025-2026.
Asks for OTP or password "to verify your account"
No legitimate lender ever asks for an OTP outside their own app flow. Sharing one signs you up for SIM swap and account takeover.
What you should pay — BSP MC 1133 rate caps explained
Even among licensed lenders, the cost of borrowing varies dramatically. Bangko Sentral ng Pilipinas Memorandum Circular 1133 s.2021, issued in November 2021 and tightened in 2025, sets the regulatory ceiling on short-term unsecured small-ticket loans:
- Nominal interest rate: max 6% per month
- Effective interest rate (EIR), including fees: max 15% per month
- Total cost of credit (TCC): max 100% of principal across the life of the loan
- Penalty on missed payments: max 5% per month of the overdue amount
These caps apply to loans of ₱10,000 or less with terms up to one year. For larger or longer-term loans, SEC MC 3 s.2022 still requires the lender to disclose the APR before signing — so you can always ask for the number and walk away if it is missing or refused.
An app that charges anything above these caps is either operating outside the law, gambling that the borrower will not file a complaint, or both. Filing a complaint is straightforward: epd@sec.gov.ph for SEC matters and complaints@privacy.gov.ph for Data Privacy Act violations such as contact-list scraping.
What to do if you are being harassed by a collector
SEC MC 18 s.2019 — the unfair debt collection rule — prohibits collectors from using profanity, threats of violence, contacts of relatives or employers, or any communication outside lawful hours (8am to 9pm). Many of the worst online-lending stories in the Philippines stem from collectors who ignore these limits and use the contact list harvested at signup.
If a collector contacts you or anyone in your contacts using these methods, take three steps in order:
- Document. Screenshot every message and call log with timestamps. Save voicemails.
- Demand cease-and-desist in writing. Reply once on the same channel: "Please limit contact to me, on this number only, between 8am and 9pm, in compliance with SEC MC 18 s.2019."
- Escalate. File at epd@sec.gov.ph for SEC and complaints@privacy.gov.ph for NPC. Include the company name, your loan reference, and the documented evidence.
Frequently asked questions
What does "SEC-registered" actually mean for a loan app?+
Under Republic Act 9474 (the Lending Company Regulation Act of 2007), every entity offering loans in the Philippines must (1) register as a corporation with the Securities and Exchange Commission and (2) obtain a separate Certificate of Authority (CA) authorizing it to operate as a lending company. A CA is a numbered certificate displayed prominently in the app and marketing materials. SEC registration alone is not enough — without a CA, the company can incorporate but cannot legally lend.
How do I check a Certificate of Authority number?+
Visit the SEC PH public check at checkwithsec.sec.gov.ph or the lending company list at sec.gov.ph/lending-companies-and-financing-companies-2/. Search by the legal company name (not the brand name shown in app stores). Match the CA number and confirm the status is "Active". Suspended and delisted entities cannot legally extend credit; if you are paying a delisted lender, escalate to SEC Enforcement and Investor Protection Department immediately.
What rate caps apply to SEC-registered apps?+
BSP Memorandum Circular 1133 s.2021 caps short-term unsecured small-ticket loans at 6% nominal monthly interest, 15% effective monthly interest rate (EIR), and 100% total cost of credit (TCC). These caps apply to loans of ₱10,000 or less with terms up to 365 days. Loans above ₱10,000 follow SEC MC 3 s.2022 disclosure rules — APR must be presented before signing.
Why are some apps marked "delisted"?+
The SEC has actively removed lending companies that breached BSP rate caps, the Data Privacy Act (R.A. 10173), or SEC MC 18 s.2019 on debt collection. A delisted company may continue operating in violation of the law, often via clone apps or rebranded fronts — borrowers should not pay or share documents with a delisted entity. Report sightings to SEC EIPD or call (632) 8818-5476.
Can a foreign company offer loans in the Philippines?+
No. R.A. 9474 explicitly requires the lending company to be incorporated under Philippine law. Foreign-owned subsidiaries (Tala, Cashalo, Digido, etc.) operate via Philippine-incorporated entities that hold the CA. If a "foreign" app cannot show a Philippine SEC registration plus CA, it is operating illegally.
What if the app charges fees before the loan is disbursed?+
Charging "processing fees" or "release fees" upfront before disbursement is a strong red flag. SEC MC 19 s.2019 requires all fees to be disclosed in the loan agreement and deducted from the disbursement, not collected separately before approval. Demands for upfront payment via GCash to an individual account (not the company) are a hallmark of scam clones.
How often is this list updated?+
We re-verify each entry against the SEC PH public registry monthly. Major status changes (new suspensions, delistings, freshly issued CAs) are reflected within 7 days. The "Last updated" date at the top of this page shows the most recent re-verification.
Does Kviku Lending Co., INC. have an active CA?+
Yes. Kviku Lending Co., INC. holds SEC Registration No. CS201918702 and Certificate of Authority No. 3169, active since 2019 and compliant with BSP MC 1133 s.2021 rate caps and SEC MC 19 s.2019 disclosure rules. This site (kvikuloan.ph) is operated by Virix Labs (UK Co. No. 16325097) as a disclosed Marketing and Technology Service Provider for Kviku Lending Co., INC.
Compare Kviku to other SEC-licensed lenders
Data sources: SEC PH public lending registry (checkwithsec.sec.gov.ph and sec.gov.ph/lending-companies-and-financing-companies-2/), BSP Memorandum Circulars 1133 s.2021 and 3 s.2022, NPC Circular 2022-02. Verified manually by Virix Labs editorial team on 2026-06-20. This page is informational; nothing here constitutes legal or financial advice. Apply only with lenders whose CA you have personally verified.