10-Point Checklist for Safe Online Loans: How to Verify a Lender Before You Borrow
The promise of fast cash online is tempting, but the digital lending space can contain hidden fees, aggressive collection practices, and scams. Before you click “Apply,” take the time to run through this practical checklist. It focuses on verifiable facts—not promises of approval or government support—so you can make an informed decision. Use this guide to assess any online lender.
1. Check the Official Domain and Website
What to do:
- Look at the website URL. Legitimate lenders use official domains (e.g., `example.ru`, `example.com`) with HTTPS (padlock icon in the browser bar). Avoid sites with misspelled names, extra characters, or unusual top-level domains like `.xyz`, `.top`, `.loan`.
- Verify the domain registration date using a WHOIS lookup tool (e.g., whois.ru). New domains (registered less than 6 months ago) may be a red flag for fly-by-night operators.
- Check if the site has a working “Contacts” page with a physical address, phone number, and email. Call the number or send an email to confirm it’s real.
2. Read the Consent Text Carefully
What to do:
- Before you submit any personal data, find the “Consent to Processing of Personal Data” document. It must be a separate, clear agreement—not hidden in fine print.
- Look for:
- Specific purposes for data use (e.g., credit scoring, loan servicing).
- A list of third parties the lender shares data with (e.g., credit bureaus, collection agencies).
- Your right to withdraw consent at any time.
- A valid legal basis (e.g., relevant data protection laws).
- If the consent text is vague, overly broad, or says you “agree to all future changes,” do not proceed.
3. Verify the Lender’s Legal Identity
What to do:
- Every legitimate lender must have a registered legal entity (OGRN, INN, or equivalent). Find this number on the website (usually in the footer or “About Us” page).
- Cross-check the OGRN/INN on the official website of the Federal Tax Service (nalog.ru) or the Unified State Register of Legal Entities (EGRUL). Confirm:
- The company name matches.
- The status is “active” (not liquidated or reorganized).
- The registered address matches the website’s address.
- If the lender is a microfinance organization (MFO), also check its registration number in the relevant official register (see step 4).
4. Check the MFO Registry or Official Source
What to do (for MFOs):
- MFOs: Go to the relevant financial regulator’s official website (e.g., the Central Bank of Russia at cbr.ru) and navigate to the register of microfinance organizations. Search by company name, OGRN, or registration number. The lender must be listed as active. If not found, it may be operating illegally.
- Source data only: Do not rely on the lender’s own claims. Use only official sources (regulator, tax service) for verification.
5. Calculate the Full Cost of the Loan
What to do:
- Request a full cost breakdown before signing. The lender must provide the “Full Cost of the Loan” (PSK in Russia) in a standardized format. This includes:
- Principal amount.
- Interest rate (annualized).
- All fees (origination, late payment, early repayment).
- Total repayment amount and schedule.
- Use an online loan calculator to verify the numbers. For example, if the loan is 10,000 RUB for 30 days at 0.5% daily, the total interest is 1,500 RUB, not “just 0.5%.”
- Watch for hidden fees: “processing fee,” “insurance,” “account maintenance.” These may be added without clear disclosure.
6. Assess Your Repayment Ability
What to do:
- Calculate your monthly income after taxes and essential expenses (rent, utilities, food, transport).
- The loan repayment (including interest and fees) should not exceed a reasonable percentage of your disposable income.
- Use the lender’s repayment schedule to simulate worst-case scenarios: what if you lose your job or face an emergency? Can you still pay?
- Avoid “rollover” loans—extending the loan term by paying only interest. This can trap you in a debt cycle.
7. Review Card Requirements
What to do:
- Legitimate lenders usually require a bank card (debit or credit) issued in your name. They may ask for card details for repayment (e.g., automatic withdrawal).
- Do not give your card’s CVV code, PIN, or online banking password. The lender only needs the card number, expiry date, and cardholder name for repayment.
- If the lender asks for full card details (including CVV) before loan approval, this is a strong warning sign. They may use them for unauthorized transactions.
- Check if the lender supports secure payment systems. Avoid lenders that only accept cash or untraceable methods.
8. Prepare the Required Documents
What to do:
- Legitimate lenders typically require:
- Valid passport (or equivalent ID).
- Second ID (e.g., driver’s license, SNILS).
- Proof of income (e.g., bank statement, salary certificate).
- Sometimes, a consent to credit check.
- If the lender asks for copies of your passport, tax returns, or bank statements, ensure they are sent through a secure portal (not email).
- Do not provide documents that are not legally required (e.g., your marriage certificate, medical records, or social media passwords).
- Keep copies of all documents you submit.
9. Protect Your Privacy
What to do:
- Before you submit any data, read the lender’s Privacy Policy. It must state:
- How your data is stored (encrypted, on secure servers).
- How long it is retained (usually a limited period after loan closure).
- Your rights under data protection laws (e.g., to access, correct, or delete data).
- Check if the lender uses third-party data processors (e.g., credit bureaus, cloud storage). These must also comply with privacy laws.
- Never share your online banking password or one-time SMS codes with the lender. Legitimate verification is done through secure APIs, not manual sharing.
- If the lender contacts you via unsolicited SMS or social media, exercise caution.
10. Identify Scam Signals
What to do: Watch for these red flags:
- Promises of guaranteed approval without a credit check. No legitimate lender guarantees approval.
- Pressure to act fast (“Limited offer,” “Apply in 5 minutes”). Scammers may create urgency to bypass your caution.
- Requests for upfront fees (e.g., “processing fee,” “insurance deposit”) before loan disbursement. Real lenders typically deduct fees from the loan amount.
- No physical address or phone number.
- Poor website design (typos, broken links, stock photos).
- Claims of government support (e.g., “This loan is backed by the state”). Legitimate lenders generally do not make such claims.
- Unsolicited loan offers via email, SMS, or social media.
- Negative reviews on independent sites. Search the lender’s name + “scam” or “complaints.”
- Do not engage further.
- Report the lender to the relevant financial regulator and the police (if you lost money).
- Monitor your bank accounts for unauthorized transactions.
Final Step: Contact Support Before You Apply
What to do:
- Legitimate lenders have responsive customer support. Call the phone number or use the live chat. Ask specific questions:
- “What is your OGRN?”
- “Are you listed in the official register?”
- “Can you send me the full loan agreement in advance?”
- “How do you protect my data?”
- If the support team is evasive, rude, or cannot answer basic questions, walk away.
- Save screenshots or recordings of your interactions for your records.
Summary Checklist (Print or Save)
| Step | Action | Status |
|---|---|---|
| 1 | Verify domain (WHOIS, HTTPS) | ☐ |
| 2 | Read consent text for data use | ☐ |
| 3 | Check OGRN/INN on nalog.ru | ☐ |
| 4 | Check official register (for MFOs) | ☐ |
| 5 | Calculate full cost (PSK) | ☐ |
| 6 | Assess repayment ability | ☐ |
| 7 | Review card requirements (no CVV/PIN) | ☐ |
| 8 | Prepare only required documents | ☐ |
| 9 | Check privacy policy | ☐ |
| 10 | Identify scam signals | ☐ |
Remember: No legitimate lender will promise instant approval, government backing, or “no credit check.” If it sounds too good to be true, exercise caution. Use this checklist every time you consider an online loan—your financial safety depends on it.

Комментарии (0)