Skip to content
MoneyNow.ph

Counterfeit loan apps, and how to spot one

By MoneyNow editorial deskEvery rate on this page is taken from the issuing authority — SSS, PhilHealth, Pag-IBIG, the BIR, the NWPC or the SEC — and carries the date it took effect. Where a figure cannot be sourced we say so rather than estimate.

Two near-identical shell panels side by side. The left bears a crisp green wax seal; the right bears a blurred red imitation of the same seal.

The Finbro case

In an advisory dated 30 June 2026, the SEC warned the public about two apps trading on the Finbro name — “Finbro: Financial Focus” and “Finbro PH – Personal Finance” — and, in the same breath, stated that records of the Commission show Finbro.PH to be the online lending platform recorded as operated by SOFI Financing, Inc. Read carefully, the advisory does two things at once: it names the counterfeits, and it confirms the real operator. That makes Finbro one of the few apps in the market whose legitimacy rests on a regulator statement rather than on its own footer — and it makes the same name, for a while, the most dangerous thing to search for in an app store.

Why impersonation works

A counterfeit loan app is not trying to fool the SEC. It is trying to fool a borrower who has been told to “check if it’s SEC-registered” and will do so by searching the brand name. Searched that way, the counterfeit passes: the brand is on the recorded-platforms list, the Certificate of Authority number it displays is real, the news articles about the lender are real. Everything checks out except the one thing the borrower did not check, which is which company published this particular app.

The tell is always in the developer line. A licensed platform is published by its licensed operator. An app bearing the same name under a developer you cannot match to the SEC list — a personal name, a generic studio, a company in another jurisdiction — is not that platform, whatever its icon looks like.

What the counterfeits do once installed

  • The advance fee. An approval screen, then a request for a “processing”, “insurance” or “verification” fee to release the loan. A licensed lender deducts its fees from the proceeds or bills them in the schedule; it never asks you to send money first. This is the single most reliable scam signal in Philippine lending.
  • The permissions grab. Contacts, gallery, SMS. Harvested at install, used later: if any money is released, or even if it is not, the collection “campaign” runs against your phonebook.
  • The phantom debt. A loan you never received, followed by demands for repayment with penalties that exist only in the app. Without a released loan there is no debt, and without a licence there is no lawful penalty on any loan — what happens if you don’t pay an online loan sets out what even a licensed lender cannot do.
  • The sideload. An APK link sent by message, bypassing the app store entirely. There is no legitimate reason for a licensed lender to distribute its app this way.

The thirty-second check before installing

  1. Developer name on the store listing. Match it to the licensed company — for Finbro, SOFI Financing, Inc.; for MoneyCat, MoneyCat Financing Inc. Not similar. The same.
  2. Permissions list on the store listing. Camera and, commonly, location. If contacts or storage appear, walk away.
  3. The SEC advisories page, searched for the brand. The Finbro advisory is a recent example; there will be others.
  4. The company against the SEC lists. The full three-list check is in is this loan app legit?, with our findings on the apps people ask about most.

What to do if you have already installed one

Uninstall it. Revoke the permissions it held, which on Android persist for some apps until you do so explicitly. Change the passwords of anything whose credentials you typed into it. If you paid an advance fee, keep every receipt and screenshot, and report the app to the SEC through its complaint channels; if it took your contacts or gallery, report it to the National Privacy Commission as well. Tell the people in your phonebook, plainly, that they may receive messages about a debt that does not exist. Then, if you still need the loan, apply through the process that starts with the registration check rather than through a search for the brand.

Where the real lenders stand

The counterfeit problem is a measure of which lenders are worth impersonating. Finbro’s and MoneyCat’s registrations are confirmed by SEC statements, their published terms are on their review pages with sources, and Finbro versus MoneyCat compares them on everything they publish. The online loan comparison shows the registration status of every provider we list beside its name, which is the information a counterfeit depends on you not having.

Questions people ask

Which is the real Finbro app?

The one whose developer is SOFI Financing, Inc. — the company the SEC's 30 June 2026 advisory names as the operator of the recorded platform Finbro.PH. Two apps using the Finbro name, 'Finbro: Financial Focus' and 'Finbro PH – Personal Finance', were the subject of that advisory. Check the developer line on the store listing before installing anything.

How do fake loan apps work?

Three ways, often combined: they borrow a licensed lender's name and Certificate of Authority number so a casual search looks clean; they charge an 'advance fee' or 'verification fee' before any loan is released and then vanish; and they harvest your contacts and gallery at install so that collection, if a loan is ever released, becomes harassment of everyone you know.

I installed a fake loan app. What now?

Uninstall it and revoke every permission it held. If you paid any fee, keep the receipts and report the app to the SEC; if it took your contacts or photos, report it to the National Privacy Commission as well. Warn the people in your phonebook that messages about your 'debt' may arrive. If no loan was released, there is no debt, whatever the messages say.

Does the SEC publish a list of fake loan apps?

It publishes advisories naming unregistered operators and, as in the Finbro case, counterfeit apps impersonating registered ones. There is no single exhaustive list, which is why the positive check — company name against the lists of licensed companies and recorded platforms — matters more than searching for the app on a blacklist.

Sources

Last updated 2026-08-21.