Compliance Requirements for Lending Companies in the Philippines: SEC + BSP Guide

Executive Summary

Lending companies in the Philippines are regulated mainly by the Securities and Exchange Commission (SEC) under the Lending Company Regulation Act of 2007, or Republic Act No. 9474. Under this law, a lending company must be organized as a corporation and must secure a valid Certificate of Authority to Operate from the SEC before engaging in lending activities.

SEC registration alone is not enough. The law expressly states that no lending company may conduct business unless it has authority to operate from the SEC.

The Bangko Sentral ng Pilipinas (BSP) also plays an important role, but mainly in specific areas. For ordinary lending companies, the SEC is the primary regulator. However, the BSP may prescribe ceilings on interest rates and charges, and lending companies that are subsidiaries or affiliates of banks or quasi-banks may be subject to BSP supervision and examination.

For lending companies, compliance is not only about registration. It also includes capitalization, corporate governance, proper loan disclosures, fair collection practices, data privacy, anti-money laundering registration, reportorial filings, and consumer protection standards.

This guide explains the key SEC and BSP compliance requirements for lending companies in the Philippines, written in simple language for business owners, founders, directors, compliance officers, and investors.

Compliance Requirements for Lending Companies in the Philippines

A lending company is a business that grants loans using its own capital funds or funds sourced from not more than nineteen persons. It does not include banks, investment houses, savings and loan associations, financing companies, pawnshops, insurance companies, cooperatives, and other credit institutions already regulated by other laws.

This distinction matters because not all businesses that offer credit are regulated in the same way. A bank is supervised by the BSP. A cooperative is regulated under a different framework. A lending company, on the other hand, is generally supervised by the SEC.

In simple terms, if your business will lend money to borrowers for interest, and it is not a bank, cooperative, pawnshop, or other specially regulated entity, you must carefully check whether you need to register as a lending company and obtain SEC authority before operating.

Step-by-Step Guide

Step 1: Register as a corporation

A lending company cannot simply operate as a sole proprietorship or ordinary partnership. Under Republic Act No. 9474, a lending company must be established as a corporation. The same law states that no lending company may conduct business unless it has been granted authority to operate by the SEC.

This means the first step is to form a corporation with the proper corporate name, purpose clause, incorporators, directors, officers, and capital structure. The Articles of Incorporation should clearly state that the company will engage in lending activities, subject to SEC approval and licensing.

For online applications and SEC filings, applicants generally use the SEC’s online platforms. The SEC eSPARC system is used for company registration, while eSECURE is used for credentialing and identity verification. SEC’s eSECURE system uses electronic know-your-customer procedures to verify the identity of users behind company applications.

Step 2: Meet the minimum capitalization requirement

A lending company must meet the minimum paid-in capital required by law and SEC rules. Republic Act No. 9474 provides a minimum paid-in capital of ₱1,000,000.00, but it also gives the SEC authority to prescribe a higher minimum capitalization when warranted by circumstances.

This is why business owners should not assume that the statutory minimum will always be enough. Capital requirements may vary depending on the business model, scale of operations, online lending activities, regulatory updates, or special SEC requirements.

Before filing, founders should prepare proof of capital, source of funds, shareholder structure, and supporting corporate documents.

Step 3: Secure a Certificate of Authority from the SEC

The most important license for a lending company is the SEC Certificate of Authority to Operate as a Lending Company.

A Certificate of Incorporation only creates the corporation. It does not automatically authorize the company to lend money to the public. The lending company must also secure a Certificate of Authority before conducting lending operations.

Operating without authority is a serious violation. Republic Act No. 9474 penalizes any person who engages in the business of a lending company without a validly subsisting authority from the SEC. It also penalizes officers who hold themselves out as a lending company without authority.

Step 4: Understand the SEC and BSP roles

For lending companies, the SEC is the main regulator. The law authorizes the SEC to regulate and supervise lending companies, issue implementing rules, require reports, exercise visitorial powers, and impose sanctions such as fines, suspension, or revocation of authority.

The BSP’s role is more limited but still important. Under the Lending Company Regulation Act, lending companies that are subsidiaries or affiliates of banks and quasi-banks may be subject to BSP supervision and examination.

The Monetary Board may also examine a lending company if there is reasonable ground to believe it is being used as a conduit by a bank, quasi-bank, subsidiary, or affiliate to circumvent BSP rules.

The BSP also has authority to prescribe maximum interest rates for lending companies, in consultation with the SEC and the industry, when warranted by prevailing economic and social conditions.

Step 5: Follow BSP interest rate and fee ceilings for covered loans

BSP Circular No. 1133, Series of 2021, prescribed ceilings on interest rates and other fees charged by lending companies, financing companies, and their online lending platforms for certain small-value loans. The BSP issued the circular to protect borrowers from predatory lending, excessive charges, and excessive debt while maintaining access to credit.

The SEC later issued rules implementing BSP Circular No. 1133. These apply to unsecured, general-purpose loans offered by lending companies, financing companies, and online lending platforms that do not exceed ₱10,000.00 and have a loan tenor of up to four months.

For covered loans, the applicable ceilings include a nominal interest rate ceiling of 6% per month, an effective interest rate ceiling of 15% per month, a cap on late payment penalties of 5% per month on the outstanding scheduled amount due, and a total cost cap of 100% of the total amount borrowed.

This is especially important for online lending businesses and small-value consumer loans.

Step 6: Comply with truth-in-lending and disclosure rules

Lending companies must clearly disclose the true cost of borrowing. Republic Act No. 9474 requires loan agreements to comply with the Truth in Lending Act and the Consumer Act of the Philippines.

Borrowers should be able to understand the loan amount, interest rate, fees, penalties, payment schedule, and total cost. Hidden charges, confusing fee structures, or misleading advertising can expose the company to complaints and regulatory action.

A good lending compliance system should make sure that every borrower receives clear loan terms before signing or accepting the loan.

Step 7: Avoid unfair debt collection practices

Debt collection is one of the most sensitive areas for lending companies.

The SEC has issued rules against unfair debt collection practices by financing companies and lending companies. These rules were issued because of complaints involving harassment, abusive collection methods, and misuse of borrower information.

Reports on SEC Memorandum Circular No. 18, Series of 2019, state that financing companies, lending companies, and third-party service providers may no longer harass borrowers or use unfair means to collect debts.

In practical terms, lending companies should avoid threats, insults, public shaming, repeated harassment, contacting people not connected to the loan, disclosing loan details to third parties, or using collection tactics that violate privacy and dignity.

If the company uses third-party collection agencies, it should remember that outsourcing does not remove responsibility. The lending company may still be held accountable for abusive collection practices done on its behalf.

Step 8: Register and comply with AMLC requirements

Lending and financing companies are covered persons under the Anti-Money Laundering Act framework. The AMLC identifies SEC-supervised and regulated entities, including lending and financing companies, among covered persons.

Covered persons must comply with anti-money laundering and counter-terrorism financing requirements. This may include AMLC registration, customer due diligence, recordkeeping, suspicious transaction reporting, covered transaction reporting where applicable, internal controls, and designation of compliance officers.

The AMLC portal allows covered persons to register online, update registration information, and upload covered transaction reports and suspicious transaction reports.

For lending companies, AML compliance is not optional. It should be part of the company’s operating system before loans are released to borrowers.

Step 9: File SEC reportorial requirements

Lending companies must maintain proper books, records, and reports. Republic Act No. 9474 requires lending companies to maintain books of accounts and records required by the SEC, BIR, and other government agencies. If the company engages in other businesses, it must maintain separate books for those businesses.

The SEC eFAST list of reportorial requirements includes forms for lending companies, such as the Special Form for Financial Statements for Lending Companies and the Special Form of Interim Financial Statements for Lending Companies. The same list also includes Annual Financial Statements and the General Information Sheet.

Timely filings are important because late or missing reports can affect the company’s good standing, license renewals, amendments, and regulatory risk profile.

Step 10: Build a consumer protection and complaints system

Even if a lending company is not a bank, it should still follow strong consumer protection standards. The BSP’s financial consumer protection framework highlights key standards such as disclosure and transparency, protection of client information, fair treatment, effective recourse, and financial education.

These principles are useful for lending companies because lending is a consumer-facing financial service. Borrowers should receive clear information, fair treatment, privacy protection, and access to a complaints process.

A lending company should have a written complaints policy, customer service channel, escalation procedure, complaint log, and response timeline. This helps prevent disputes and shows regulators that the company takes consumer protection seriously.

Risks and Penalties

The biggest risk is operating without SEC authority. Under Republic Act No. 9474, engaging in lending without a valid SEC authority may result in fines, imprisonment, or both. The law also covers officers who knowingly hold the business out as a lending company without authority.

The SEC may also impose administrative sanctions. These may include fines, suspension, or revocation of the lending company’s authority to operate. The SEC has authority to require reports, inspect records, and supervise lending companies.

There are also risks from excessive interest, hidden charges, unfair collection practices, data privacy violations, AML violations, and failure to file reportorial requirements. For online lending platforms, reputational risk is especially high because borrower complaints can quickly lead to SEC, NPC, AMLC, or public scrutiny.

A lending company that does not build compliance into its operations may face penalties, license issues, borrower complaints, regulatory investigations, and difficulty securing business partnerships.

Common Mistakes Lending Companies Should Avoid

One common mistake is assuming that SEC incorporation is enough. A lending company needs a separate SEC authority to operate. Without it, the company may be treated as operating illegally.

Another mistake is failing to check whether the loan product is covered by BSP interest and fee ceilings. This is especially relevant for small-value, short-term, unsecured loans offered online or offline.

Many lending companies also fail to invest in proper loan documentation. Loan agreements should clearly show the principal amount, interest, fees, penalties, payment schedule, and total cost of credit.

A serious mistake is using abusive collection methods. Even if the borrower is in default, the lender must still follow fair, lawful, and ethical collection practices.

Some lending companies also forget AMLC registration and AML compliance. Since lending and financing companies are covered persons under the AMLA framework, they must treat AML compliance as a core obligation, not an afterthought.

FAQ

What is a lending company in the Philippines?

A lending company is a corporation engaged in granting loans using its own capital funds or funds sourced from not more than nineteen persons. It does not include banks, financing companies, pawnshops, cooperatives, and other credit institutions already regulated by other laws.

Is SEC registration enough to operate a lending company?

No. A Certificate of Incorporation is not enough. A lending company must also obtain a valid SEC Certificate of Authority to Operate before conducting lending business.

Who regulates lending companies in the Philippines?

The SEC is the primary regulator of lending companies. The BSP may become involved in specific areas, such as interest rate ceilings, or where the lending company is a subsidiary or affiliate of a bank or quasi-bank.

What is the minimum capital for a lending company?

Republic Act No. 9474 provides a minimum paid-in capital of ₱1,000,000.00, but the SEC may prescribe a higher minimum capitalization when warranted by circumstances.

Are lending companies subject to BSP interest rate caps?

For covered small-value loans, yes. BSP Circular No. 1133 and the SEC implementing circular apply to unsecured, general-purpose loans offered by lending companies,

financing companies, and online lending platforms that do not exceed ₱10,000.00 and have a loan tenor of up to four months.

Are online lending platforms regulated?

Yes. Online lending platforms used by lending companies and financing companies are subject to SEC supervision and applicable BSP interest and fee ceilings for covered loans. The SEC implementing circular defines online lending platforms as mobile lending applications, websites, and other fintech-enabled programs or systems where the services and products of financing and lending companies are made available.

Do lending companies need AMLC registration?

Yes. Lending and financing companies are covered persons under the AMLA framework. They should register with the AMLC and comply with customer due diligence, recordkeeping, and reporting obligations.

What happens if a lending company violates SEC rules?

Possible consequences include fines, suspension, revocation of authority,

administrative sanctions, criminal exposure for certain violations, and reputational damage. Republic Act No. 9474 authorizes the SEC to impose sanctions, including suspension or revocation of authority and fines.

Call-to-Action

Starting a lending company in the Philippines requires more than capital and borrowers. It requires a proper corporate structure, SEC authority, compliant loan documents, fair collection practices, AML registration, reportorial filings, and awareness of BSP rules on interest and fees.

Before launching a lending business or online lending platform, review the company’s ownership, capitalization, loan products, disclosures, collection policies, data privacy practices, and AML compliance system.

A well-prepared compliance framework can help protect the business, reduce regulatory risk, and build borrower trust from the start.