eKYC for Online Lending Apps: A Philippines Guide
eKYC for online lending in the Philippines means verifying each borrower remotely before money leaves the account: reading their ID, checking it against a government record, and matching their live selfie to the ID photo. Lenders need it for two reasons. SEC rules expect them to know who they lend to, and fraud rings target fast-approval lenders with borrowed and fake identities. Done well, eKYC approves genuine borrowers in minutes and stops most identity fraud before the first loan.
Why Online Lenders Need eKYC
Online lenders compete on speed. Borrowers expect a decision within minutes, so manual document checks no longer fit the business model. At the same time, speed attracts fraud, because a lender that approves quickly also pays out quickly.
In fact, this tension shapes every lending onboarding flow. On one hand, too many checks and genuine borrowers give up. On the other hand, too few checks and the lender funds loans that will never be repaid, often under a stolen name. eKYC resolves the tension by doing strong checks fast, rather than choosing between strong and fast.
For wider context on fintech onboarding rules, see our guide to KYC for Philippine fintech.
SEC and BSP Rules That Shape Lender Onboarding
In the Philippines, lending and financing companies fall under the Securities and Exchange Commission, while banks and their lending arms fall under the Bangko Sentral ng Pilipinas. So the rulebook depends on what kind of lender you are.
| Lender type | Main regulator | Key rules to know |
|---|---|---|
| Lending companies | SEC | Lending Company Regulation Act of 2007 (RA 9474) and SEC circulars |
| Financing companies | SEC | Financing Company Act (RA 8556) and SEC circulars |
| Online lending platforms of the above | SEC | Disclosure of each online platform to the SEC; rules on fair debt collection |
| Banks and digital banks | BSP | BSP KYC and anti-money laundering rules, including tiered due diligence |
The SEC has tightened its oversight of online lending over the past few years, including a long moratorium on new online lending platforms. In 2026, the SEC moved to lift that moratorium under a new framework, which brings fresh applicants and fresh scrutiny. Meanwhile, the SEC’s anti-money laundering guidelines expect covered institutions to identify and verify customers on a risk basis. Bank lenders, by contrast, follow BSP rules, which our article on BSP KYC requirements covers in detail.
The Fraud Lenders Face
In practice, lending fraud in the Philippines rarely looks dramatic. Instead, it looks like ordinary applications that later turn out to be fake. Below are the patterns lenders see most often.
- Borrowed identities. A borrower uses a relative’s or friend’s ID, often with their reluctant consent, to take a loan they never plan to repay.
- Stolen IDs and selfies. Fraudsters reuse ID photos and selfies harvested from data leaks or fake job posts.
- Synthetic identities. Real ID numbers combined with invented details create a borrower who does not exist.
- Loan stacking. One person takes loans from many apps at once, sometimes under slightly different names.
- Deepfake and replay attacks. For example, fraudsters hold up a photo or play a video to pass a weak selfie check.
Most of these share one weakness: the applicant and the ID owner are two different people. Therefore, the core of lender eKYC is tying the applicant’s live selfie to a verified identity. These schemes also appear well beyond lending, as our look at Philippine identity fraud shows.
The eKYC Stack for Lenders
Typically, a lender’s onboarding flow combines four checks. Each one, in turn, closes a different gap.
- ID capture and OCR. First, the borrower photographs an accepted ID, for instance a PhilID or a driver’s license, and OCR prefills the form. This cuts typing errors and drop-off.
- Government record check. Next, the ID details are compared with an official source, for example the national ID registry or LTO records. This catches invented and synthetic identities.
- Liveness detection. Then the selfie must come from a real person at the moment of capture. This blocks photos, replays, and many deepfakes.
- Face match. Finally, the system compares the live selfie with the ID portrait. This catches borrowed and stolen identities.
Verihubs, for its part, covers this whole stack for Philippine lenders. Verihubs ID Verification confirms PhilSys, driver’s license, SSS, and NBI details with official sources, while its face recognition and liveness layer links the record to the actual applicant. With both in one flow, a lender can approve most genuine borrowers automatically and send only unclear cases to review.
Choosing KYC Software for a Lending Company
Many vendors sell eKYC. However, lenders have specific needs, so use this checklist when you compare them.
- Philippine ID coverage. Does the tool read the IDs your borrowers actually carry, including older and worn cards?
- Government record checks. Can it verify against PhilSys and other official sources, not just read the card?
- Liveness that works on budget phones. After all, many borrowers use entry-level Android devices with modest cameras.
- Duplicate detection. Can it flag the same face across several applications to catch loan stacking?
- Speed. Check end-to-end time, not just API latency.
- Audit trail. Also, every decision should be logged for SEC or BSP examination.
- Pricing. Compare the cost of a complete onboarding, including retries.
Duplicate detection deserves extra attention in lending. After all, one face behind five applications is a strong fraud signal, and only a search of each new selfie against all past applicants catches it reliably. Our guide to biometric deduplication explains how it works.
Speed vs Risk: Approving Good Borrowers in Minutes
The goal is not to check everyone as hard as possible. Rather, it is to scale verification effort with the size and risk of each loan.
| Loan profile | Suggested checks |
|---|---|
| First small loan | ID OCR, government record check, liveness, face match |
| Repeat borrower, good history | Quick face re-check at login or disbursement |
| Larger loan or limit increase | Full checks plus income or employment verification |
| Signals of fraud or stacking | Manual review before any payout |
This tiered approach keeps the first experience fast while saving the heavier checks for higher-risk moments. Besides protecting the lender, it also shields real identity owners, whose details fraudsters would otherwise exploit freely.
Onboarding Metrics Lenders Should Track
Once eKYC is live, a few numbers tell you whether it is working. Review them weekly at first, then monthly.
- Completion rate. The share of applicants who finish verification. A sudden drop usually points to a capture or device problem.
- Auto-approval rate. The share of verified applicants approved without manual review. Higher is better, as long as fraud stays low.
- Manual review rate and time. How many cases reach a reviewer, and how long each one waits.
- Face mismatch rate. Mismatches between selfie and ID often signal borrowed identities, so a spike deserves investigation.
- First-payment default rate. Loans that miss the very first payment are often fraud, not credit risk. So compare this rate before and after eKYC changes.
Together, these metrics show whether you have the balance right. For instance, a high completion rate with rising first-payment defaults means checks are too loose, whereas a low completion rate with almost no fraud means they may be too strict.
Frequently Asked Questions
Do online lending apps in the Philippines need eKYC?
Lenders must know who they lend to, and SEC and BSP rules expect customer identification and verification. Therefore, eKYC is the practical way to meet that duty when every application arrives online.
Which regulator covers online lenders in the Philippines?
Lending and financing companies, including their online platforms, fall under the SEC. By contrast, banks and digital banks that lend fall under the BSP.
What is the most common fraud in online lending?
Borrowed and stolen identities are the most common, followed by synthetic identities and loan stacking. Fortunately, a selfie match plus liveness stops most of them.
How fast can eKYC approve a borrower?
A well-built flow can verify most genuine borrowers within minutes. Then only unclear cases, such as partial matches, need manual review.
What should lenders look for in KYC software?
Look for Philippine ID coverage, government record checks, liveness that works on budget phones, duplicate face detection, a full audit trail, and clear pricing per completed onboarding.
Fast Approvals Only Work When the Borrower Is Real
Online lending lives on speed, and fraud lives on speed too. So the lenders that grow safely check the human being, not merely the documents: a government record check to prove the identity exists, liveness to prove someone is there, and a face match to prove they own the ID. With those three in place, fast approvals stop being a risk and become an advantage.
Building or upgrading a lending onboarding flow? Speak with Verihubs and map the right checks to each loan product.
