10-Point Checklist for Safe Online Loans: How to Verify a Lender Before You Borrow

10-Point Checklist for Safe Online Loans: How to Verify a Lender Before You Borrow

The promise of fast cash online is tempting, but the digital lending space can contain hidden fees, aggressive collection practices, and scams. Before you click “Apply,” take the time to run through this practical checklist. It focuses on verifiable facts—not promises of approval or government support—so you can make an informed decision. Use this guide to assess any online lender.


1. Check the Official Domain and Website

What to do:

  • Look at the website URL. Legitimate lenders use official domains (e.g., `example.ru`, `example.com`) with HTTPS (padlock icon in the browser bar). Avoid sites with misspelled names, extra characters, or unusual top-level domains like `.xyz`, `.top`, `.loan`.
  • Verify the domain registration date using a WHOIS lookup tool (e.g., whois.ru). New domains (registered less than 6 months ago) may be a red flag for fly-by-night operators.
  • Check if the site has a working “Contacts” page with a physical address, phone number, and email. Call the number or send an email to confirm it’s real.
Why it matters: Scammers often use domain names that mimic legitimate lenders (e.g., `sber-bank-loan.ru` instead of `sberbank.ru`). A verified domain helps ensure you’re dealing with the real entity.


2. Read the Consent Text Carefully

What to do:

  • Before you submit any personal data, find the “Consent to Processing of Personal Data” document. It must be a separate, clear agreement—not hidden in fine print.
  • Look for:
  • Specific purposes for data use (e.g., credit scoring, loan servicing).
  • A list of third parties the lender shares data with (e.g., credit bureaus, collection agencies).
  • Your right to withdraw consent at any time.
  • A valid legal basis (e.g., relevant data protection laws).
  • If the consent text is vague, overly broad, or says you “agree to all future changes,” do not proceed.
Why it matters: Some lenders may bury consent to sell your data to multiple parties without your knowledge. A clear consent text protects your privacy.


3. Verify the Lender’s Legal Identity

What to do:

  • Every legitimate lender must have a registered legal entity (OGRN, INN, or equivalent). Find this number on the website (usually in the footer or “About Us” page).
  • Cross-check the OGRN/INN on the official website of the Federal Tax Service (nalog.ru) or the Unified State Register of Legal Entities (EGRUL). Confirm:
  • The company name matches.
  • The status is “active” (not liquidated or reorganized).
  • The registered address matches the website’s address.
  • If the lender is a microfinance organization (MFO), also check its registration number in the relevant official register (see step 4).
Why it matters: Fake lenders may use stolen or fake OGRN numbers. A mismatch means the company may not legally exist.


4. Check the MFO Registry or Official Source

What to do (for MFOs):

  • MFOs: Go to the relevant financial regulator’s official website (e.g., the Central Bank of Russia at cbr.ru) and navigate to the register of microfinance organizations. Search by company name, OGRN, or registration number. The lender must be listed as active. If not found, it may be operating illegally.
  • Source data only: Do not rely on the lender’s own claims. Use only official sources (regulator, tax service) for verification.
Why it matters: Unregistered MFOs may operate illegally and cannot legally enforce loan agreements.


5. Calculate the Full Cost of the Loan

What to do:

  • Request a full cost breakdown before signing. The lender must provide the “Full Cost of the Loan” (PSK in Russia) in a standardized format. This includes:
  • Principal amount.
  • Interest rate (annualized).
  • All fees (origination, late payment, early repayment).
  • Total repayment amount and schedule.
  • Use an online loan calculator to verify the numbers. For example, if the loan is 10,000 RUB for 30 days at 0.5% daily, the total interest is 1,500 RUB, not “just 0.5%.”
  • Watch for hidden fees: “processing fee,” “insurance,” “account maintenance.” These may be added without clear disclosure.
Why it matters: Some lenders advertise “0% interest” but bury high fees. The PSK helps you see the true annual percentage rate (APR).


6. Assess Your Repayment Ability

What to do:

  • Calculate your monthly income after taxes and essential expenses (rent, utilities, food, transport).
  • The loan repayment (including interest and fees) should not exceed a reasonable percentage of your disposable income.
  • Use the lender’s repayment schedule to simulate worst-case scenarios: what if you lose your job or face an emergency? Can you still pay?
  • Avoid “rollover” loans—extending the loan term by paying only interest. This can trap you in a debt cycle.
Why it matters: Defaulting on a loan can lead to debt collection, credit score damage, and legal action. Only borrow what you can realistically repay.


7. Review Card Requirements

What to do:

  • Legitimate lenders usually require a bank card (debit or credit) issued in your name. They may ask for card details for repayment (e.g., automatic withdrawal).
  • Do not give your card’s CVV code, PIN, or online banking password. The lender only needs the card number, expiry date, and cardholder name for repayment.
  • If the lender asks for full card details (including CVV) before loan approval, this is a strong warning sign. They may use them for unauthorized transactions.
  • Check if the lender supports secure payment systems. Avoid lenders that only accept cash or untraceable methods.
Why it matters: Scammers may use card details to steal money. Legitimate lenders only need card info for repayment, not for verification.


8. Prepare the Required Documents

What to do:

  • Legitimate lenders typically require:
  • Valid passport (or equivalent ID).
  • Second ID (e.g., driver’s license, SNILS).
  • Proof of income (e.g., bank statement, salary certificate).
  • Sometimes, a consent to credit check.
  • If the lender asks for copies of your passport, tax returns, or bank statements, ensure they are sent through a secure portal (not email).
  • Do not provide documents that are not legally required (e.g., your marriage certificate, medical records, or social media passwords).
  • Keep copies of all documents you submit.
Why it matters: Illegal lenders may use your documents for identity theft or fraud. Only provide what is necessary for a legitimate credit check.


9. Protect Your Privacy

What to do:

  • Before you submit any data, read the lender’s Privacy Policy. It must state:
  • How your data is stored (encrypted, on secure servers).
  • How long it is retained (usually a limited period after loan closure).
  • Your rights under data protection laws (e.g., to access, correct, or delete data).
  • Check if the lender uses third-party data processors (e.g., credit bureaus, cloud storage). These must also comply with privacy laws.
  • Never share your online banking password or one-time SMS codes with the lender. Legitimate verification is done through secure APIs, not manual sharing.
  • If the lender contacts you via unsolicited SMS or social media, exercise caution.
Why it matters: Data breaches can expose your identity. A clear privacy policy shows the lender takes security seriously.


10. Identify Scam Signals

What to do: Watch for these red flags:

  • Promises of guaranteed approval without a credit check. No legitimate lender guarantees approval.
  • Pressure to act fast (“Limited offer,” “Apply in 5 minutes”). Scammers may create urgency to bypass your caution.
  • Requests for upfront fees (e.g., “processing fee,” “insurance deposit”) before loan disbursement. Real lenders typically deduct fees from the loan amount.
  • No physical address or phone number.
  • Poor website design (typos, broken links, stock photos).
  • Claims of government support (e.g., “This loan is backed by the state”). Legitimate lenders generally do not make such claims.
  • Unsolicited loan offers via email, SMS, or social media.
  • Negative reviews on independent sites. Search the lender’s name + “scam” or “complaints.”
What to do if you suspect a scam:
  • Do not engage further.
  • Report the lender to the relevant financial regulator and the police (if you lost money).
  • Monitor your bank accounts for unauthorized transactions.

Final Step: Contact Support Before You Apply

What to do:

  • Legitimate lenders have responsive customer support. Call the phone number or use the live chat. Ask specific questions:
  • “What is your OGRN?”
  • “Are you listed in the official register?”
  • “Can you send me the full loan agreement in advance?”
  • “How do you protect my data?”
  • If the support team is evasive, rude, or cannot answer basic questions, walk away.
  • Save screenshots or recordings of your interactions for your records.
Why it matters: Scammers often avoid direct questions. A real lender should provide transparent answers.


Summary Checklist (Print or Save)

StepActionStatus
1Verify domain (WHOIS, HTTPS)
2Read consent text for data use
3Check OGRN/INN on nalog.ru
4Check official register (for MFOs)
5Calculate full cost (PSK)
6Assess repayment ability
7Review card requirements (no CVV/PIN)
8Prepare only required documents
9Check privacy policy
10Identify scam signals

Remember: No legitimate lender will promise instant approval, government backing, or “no credit check.” If it sounds too good to be true, exercise caution. Use this checklist every time you consider an online loan—your financial safety depends on it.

Дарья Соловьёва

Дарья Соловьёва

Identity-Verification Explainer

Anna breaks down ESIA and Gosuslugi processes for everyday users. She ensures readers understand each step of digital identification.

Комментарии (0)

Оставить комментарий