1. Verify the Official Domain and Website

Before you click "submit" on any online microloan application, you need to verify the lender and the loan terms. This checklist walks you through ten practical steps to protect yourself from scams, hidden fees, and identity theft. Use it every time you consider borrowing from an MFO (microfinance organization).

1. Verify the Official Domain and Website

What to do: Check the website URL carefully. Legitimate MFOs use official domains—usually a registered company domain. Look for:

  • The exact spelling of the company name in the URL (no extra letters or hyphens).
  • A padlock icon in the browser address bar (HTTPS encryption).
  • Contact information on the website: a physical address, phone number, and email that match official records.
Red flags: Domains that are misspelled or use unusual extensions. Sites that redirect to unknown pages or show "not secure" warnings.

Why it matters: Scammers create fake sites that look identical to real lenders to steal your personal data and payment information.

2. Check the Consent Text for Data Processing

What to do: Before you fill out any form, find the "Consent to Processing of Personal Data" checkbox or link. Read it carefully. Legitimate consent text must:

  • State exactly what data will be collected (passport number, address, phone, email, bank card details).
  • Explain how the data will be used (loan processing, credit checks, debt collection).
  • Specify the retention period (usually until the loan is repaid plus a few years).
  • Include your right to withdraw consent at any time.
Red flags: Consent text buried in tiny font, vague language like "we may use your data for marketing," or no consent checkbox at all before submitting.

Why it matters: Under applicable data protection laws, your data cannot be processed without explicit consent. A missing or improper consent form is a major red flag.

3. Confirm the Lender's Legal Identity

What to do: Find the lender's full legal name, registration number, and tax identification number. These must be displayed on the website, usually in the footer or "About Us" section. Write them down.

How to verify:

  • Use the appropriate government registry website (e.g., nalog.ru in Russia) and use the "Check Yourself and Counterparty" service.
  • Enter the registration or tax number to confirm the company is registered and active.
  • Check that the company's name matches exactly what you see on the loan site.
Red flags: No registration or tax numbers displayed. Numbers that don't match any registered entity. A company listed as "liquidated" or "inactive."

Why it matters: You need to know exactly who you're borrowing from. If the lender isn't a registered legal entity, you have no legal recourse if something goes wrong.

4. Verify the MFO in the Official Registry

What to do: Check whether the lender is listed in the relevant financial regulator's register of microfinance organizations. This is mandatory for all legal MFOs in many jurisdictions.

How to verify:

  • Go to the regulator's website (e.g., cbr.ru in Russia) and navigate to the "Registers" section.
  • Search for the lender's name or registration number.
  • Confirm the entry shows an active status and the correct legal name.
Red flags: The lender is not in the registry. The registry shows a different legal name or a "revoked license" status. The lender claims to be "exempt" from registration (they are not—all MFOs must be registered where required).

Why it matters: Borrowing from an unregistered MFO may be illegal in your jurisdiction. You have limited protection, and the lender may not be able to legally collect debts.

5. Calculate the Full Cost of the Loan (FCC)

What to do: Every MFO is required by law in many places to display the Full Cost of Credit (FCC) in a clear box on the loan offer page. This includes:

  • Interest rate (usually per day for microloans).
  • All fees (service fees, insurance, processing charges).
  • Penalty rates for late payment.
  • Total repayment amount if paid on time.
Calculate the true cost:
  • For a 30-day loan of 10,000 rubles at a daily interest rate: multiply the loan amount by the daily rate and the number of days.
  • Compare this to the lender's stated FCC. It must match.
Red flags: FCC not displayed. FCC shown only in tiny print. FCC exceeds the legal maximum (if applicable in your jurisdiction). Hidden fees not included in the FCC.

Why it matters: The FCC is your only reliable way to compare loan offers. A lender hiding the FCC is almost certainly overcharging you.

6. Assess Your Repayment Ability

What to do: Before you borrow, do the math honestly:

  • List your monthly income (salary, benefits, freelance earnings).
  • Subtract all fixed expenses (rent, utilities, food, transportation, existing loan payments).
  • See how much you can realistically set aside for this loan payment.
The 30% rule: Your total monthly debt payments (including this loan) should not exceed 30% of your monthly income. For example, if you earn 50,000 rubles, your total payments should be under 15,000 rubles. This is a general guideline, not a legal requirement.

Red flags: The lender offers you more than you asked for without checking your income. The repayment date falls exactly on a day you know you can't pay (e.g., before your salary arrives).

Why it matters: Microloans often have high penalties for late payment—often a percentage of the overdue amount per day, plus the original interest continues. A single missed payment can quickly increase your debt.

7. Check Card Requirements for Repayment

What to do: Look at the repayment methods the lender accepts. Legitimate MFOs offer multiple options:

  • Bank transfer from any bank card.
  • Online wallets.
  • Cash at partner terminals.
  • Automatic debit from your card (with your consent).
Red flags: The lender only accepts prepaid cards or cryptocurrency. They ask for your card's CVV code or PIN (you should only provide card number, expiry date, and holder name). They require you to install a remote access app (like TeamViewer) to "verify" your card.

Why it matters: Scammers use fake repayment requirements to drain your card. Never share your CVV or give anyone remote access to your device.

8. Gather Required Documents in Advance

What to do: Most MFOs require only:

  • A valid government-issued ID.
  • Your social security or tax identification number.
  • A mobile phone number (for SMS verification).
  • An email address.
What they typically cannot ask for:
  • Your military ID or employment history (unless for a specific loan product).
  • Your social media passwords.
  • Copies of your work contract (for standard microloans).
Red flags: The lender asks for documents unrelated to loan verification, such as your marriage certificate, property deeds, or medical records. They demand notarized copies (which cost money) before approving a loan.

Why it matters: Excessive document requests are a sign the lender is collecting data for identity theft or selling it to third parties.

9. Review the Privacy Policy and Data Handling

What to do: Find the "Privacy Policy" or "Personal Data Processing Policy" page. It must explain:

  • How your data is collected (forms, cookies, third-party sources).
  • How it is stored (encrypted servers, access controls).
  • Who has access (employees, partners, debt collectors, credit bureaus).
  • How long it is kept (usually a set period after loan repayment).
  • Your rights to access, correct, and delete your data.
Red flags: No privacy policy page. Policy says your data may be shared with "affiliates" without naming them. Policy does not mention your right to delete data. Policy is written in a language you don't understand.

Why it matters: Your personal data is valuable. A shady lender may sell it to spammers, scammers, or other MFOs. Under applicable law, you have the right to know exactly how your data is used.

10. Identify Common Scam Signals

What to look for: These are universal red flags that should make you walk away immediately:

  • Upfront fees: The lender asks you to pay a "registration fee," "insurance premium," or "processing charge" before you receive the loan. Legitimate MFOs deduct fees from the loan amount or add them to the total—they never ask for payment before disbursement.
  • Guaranteed approval: No legitimate lender promises approval regardless of your credit history. All MFOs must check your credit report through credit bureaus.
  • Pressure to act fast: "Limited time offer! Apply in the next 10 minutes!" Scammers create urgency to prevent you from thinking or verifying.
  • No physical address: The website lists only a P.O. box or a residential address that doesn't match the company registration.
  • Poor website quality: Typos, broken links, stock photos of "happy customers," missing legal pages.
  • Requests for remote access: Any lender asking you to install AnyDesk, TeamViewer, or similar software is trying to steal your data or money.
  • No contact phone number: Only an email form or a chatbot. Legitimate MFOs have a working phone line and respond to calls during business hours.

Before You Submit: Final Quick Check

  1. Domain: Legit official company domain? ☐
  2. Consent: Clear data processing consent? ☐
  3. Identity: Registration/tax numbers match official register? ☐
  4. Registry: Listed in relevant MFO register? ☐
  5. FCC: Full cost displayed and within legal limits? ☐
  6. Repayment: Can you realistically pay on time? ☐
  7. Card: No CVV/PIN requests, multiple payment options? ☐
  8. Documents: Only basic ID required? ☐
  9. Privacy: Policy explains data handling and your rights? ☐
  10. Scam signals: No upfront fees, guaranteed approval, or pressure? ☐
If you checked "no" to any of these, stop. Do not proceed with the application. Find a different lender, or consider alternatives like borrowing from friends, family, or a credit union. Your financial safety is worth the extra 15 minutes it takes to verify.

Remember: No legitimate lender will ever guarantee approval, promise government support, or ask for money upfront. If it sounds too good to be true, it is.

Disclaimer: This checklist is for informational purposes only and does not constitute legal or financial advice. Always consult official sources and a qualified professional for guidance specific to your situation.

Полина Козлова

Полина Козлова

Legal-Source Monitor

Irina tracks changes in Russian legislation related to microloans and digital identification. She curates official sources.

Комментарии (0)

Оставить комментарий