10-Step Checklist for Safe Online Lending: How to Verify a Lender Before You Borrow

Before you click “Apply Now” on any online lending offer, take time to run through this practical checklist. These steps are designed to help you verify the lender’s legitimacy, understand the true cost of borrowing, and protect your personal data. This is not a guarantee of approval, speed, or government support—it is a tool to help you make an informed decision. Information about registry checks is based on publicly available regulatory data.

---

Step 1: Verify the Official Domain

What to do: Check the website’s URL carefully. Legitimate lenders use official, registered domains (e.g., `.ru`, `.com`, `.org`). Avoid domains with misspellings, extra characters, or unusual top-level domains like `.xyz`, `.top`, or `.loan`.

How to check:

• Look for a padlock icon in the browser bar (HTTPS) – but note that scammers can also get SSL certificates, so this is not a guarantee.
• Use WHOIS lookup services (e.g., whois.ru) to see when the domain was registered. A very recently registered domain can be a red flag.
• Search for the company name + “official site” to confirm the correct URL.

Red flags:

• Domain registered very recently.
• URL uses numbers instead of letters (e.g., l0an.ru instead of loan.ru).
• Multiple domains redirect to the same site.

---

Step 2: Read the Consent Text Carefully

What to do: Before you submit any personal data, look for a checkbox or a separate page titled “Consent to Processing of Personal Data.” This is required by law in many jurisdictions.

How to check:

• The consent text must specify what data is collected, for what purpose, and for how long it will be stored.
• It should state that you can withdraw consent at any time.
• If the consent text is missing, vague, or buried in fine print, do not proceed.

Red flags:

• No consent checkbox at all.
• Consent text says “by submitting this form you agree to everything” without specifics.
• The consent is bundled with other agreements (e.g., loan terms) and cannot be unchecked separately.

---

Step 3: Identify the Lender’s Legal Identity

What to do: Find the full legal name of the lender, their OGRN (Primary State Registration Number), and INN (Taxpayer Identification Number). This information must be displayed on the website, usually in the footer or on an “About Us” page.

How to check:

• Look for “Company details,” “Legal information,” or “Requisites.”
• Cross-check the OGRN and INN on the relevant tax authority website (e.g., nalog.ru) to confirm the company is registered and active.
• Ensure the company name matches the one on the loan agreement.

Red flags:

• No legal details displayed.
• The OGRN/INN leads to a different company or a dormant entity.
• The company is registered in a different country than where it claims to operate.

---

Step 4: Check the Relevant Registry (If Applicable)

What to do: If the lender is a Microfinance Organization (MFO), it must be listed in the official state registry maintained by the relevant financial authority. This is a legal requirement in many jurisdictions.

How to check:

• Go to the relevant financial authority’s website (e.g., cbr.ru) and navigate to the appropriate register section.
• Search by the company’s OGRN, INN, or full name.
• Verify that the registry entry is current (not suspended or revoked).

Important: Not all lenders are MFOs. Banks, credit unions, and private lenders may not be in this registry. Use this step only if the lender explicitly identifies as an MFO.

Red flags:

• The lender claims to be an MFO but is not in the registry.
• The registry entry shows a different activity status (e.g., “liquidated”).
• The lender refuses to provide their registry number.

---

Step 5: Calculate the Full Cost of the Loan

What to do: Before signing, calculate the Total Cost of Credit (TCC), which includes the principal, interest, fees, and insurance. In many jurisdictions, the TCC must be displayed as a percentage and in monetary terms in the loan agreement.

How to check:

• Look for the “Full cost of credit” field in the agreement.
• Use an online loan calculator to verify the numbers: multiply the monthly payment by the number of months, then subtract the principal.
• If the lender offers a “0% interest” loan, ask about hidden fees (service fees, insurance, etc.).

Red flags:

• The TCC is not displayed or is impossible to calculate from the terms.
• The interest rate seems too good to be true.
• Fees are described vaguely (e.g., “additional service charges” without amounts).

---

Step 6: Assess Your Repayment Ability

What to do: Be honest about your monthly income and expenses. A loan should not exceed a reasonable portion of your disposable income. General budgeting guidelines suggest allocating portions of income to needs, wants, and savings or debt repayment.

How to check:

• Create a simple budget: list all income and fixed expenses (rent, utilities, food).
• Subtract the loan payment from the remaining amount.
• If the payment leaves you with very little for emergencies, reconsider.

Red flags:

• The lender does not ask about your income or expenses.
• They approve a loan amount that is obviously beyond your means.
• They pressure you to borrow more than you asked for.

---

Step 7: Review Card Requirements

What to do: Legitimate lenders may require a bank card for disbursement and repayment, but they should never ask for your card’s CVV code or PIN.

How to check:

• The lender should ask only for the card number, expiry date, and cardholder name.
• For repayment, they should use a secure payment gateway.
• If they ask for remote access to your bank account or card details via phone, stop immediately.

Red flags:

• Request for CVV or PIN.
• Request for a screenshot of your online banking page.
• Request for a “test transaction” to verify the card.

---

Step 8: Verify Document Requirements

What to do: Legitimate lenders ask for standard identification documents: passport, second ID (e.g., driver’s license), and sometimes proof of income. They should never ask for original documents or notarized copies upfront.

How to check:

• The lender’s website should list the required documents clearly.
• For online verification, they may use official state services portals to confirm your identity. This can be a legitimate method—but only if you initiate the login yourself.
• Never send documents via email or messaging apps unless the connection is encrypted.

Red flags:

• Request for original passport or other irreplaceable documents.
• Request for documents that are not relevant to the loan (e.g., marriage certificate for a small personal loan).
• Request for your login credentials to any service (you should only use official login methods, never share credentials).

---

Step 9: Protect Your Privacy

What to do: Understand how your data will be stored and shared. By law, the lender must have a data protection policy (Privacy Policy) that explains data processing, storage duration, and third-party sharing.

How to check:

• Read the Privacy Policy—it should be easy to find and written in plain language.
• Look for a clause that says data will not be transferred to third parties without your consent (except as required by law).
• If the lender is an MFO, check if they are listed on the relevant data operator register.

Red flags:

• No Privacy Policy or a policy that is copied from another site (check for generic language).
• The policy says data may be shared with “partners” without naming them.
• The policy allows data retention for an indefinite period.

---

Step 10: Identify Common Scam Signals

What to do: Train yourself to spot the most common red flags used by fraudulent lenders.

Common scam signals:

• Upfront fees: The lender asks for a “processing fee,” “insurance deposit,” or “guarantee payment” before disbursing the loan. Legitimate lenders typically deduct fees from the loan amount, not from your pocket.
• Pressure tactics: “Apply now or the offer expires soon!” or “Limited time offer – act fast!”
• No physical address: The website lists only a P.O. box or no address at all.
• Poor website quality: Typos, broken links, generic stock photos, and missing pages.
• Unrealistic promises: “Approval guaranteed regardless of credit history” or “No credit check required.”
• Suspicious payment methods: Request for payment via cryptocurrency, gift cards, or wire transfer to an individual.
• Fake reviews: Check for reviews on independent sites. If all reviews are extremely positive and posted on the same date, they are likely fake.

What to do if you suspect a scam:

• Do not provide any more information.
• Report the website to the relevant financial authority.
• Block the caller/email sender.
• If you have already sent money, contact your bank immediately to attempt a chargeback.

---

Step 11 (Bonus): Verify Support Contacts

What to do: A legitimate lender provides multiple ways to contact them: phone, email, and physical address. Test the contact information before applying.

How to check:

• Call the phone number listed. A real person (not an automated system) should answer during business hours.
• Send an email and see if you get a response within a reasonable time.
• Search for the physical address on maps. If it leads to a residential building or a virtual office, be cautious.

Red flags:

• The only contact method is a web form.
• The phone number is disconnected or goes to voicemail only.
• The email address uses a free service (e.g., @gmail.com, @yandex.ru) instead of the company domain.

---

Final Summary Checklist

Before you apply, confirm that:

• Domain is official and has been registered for a reasonable period.
• Consent text is clear and specific.
• Lender’s legal identity (OGRN/INN) is verifiable.
• Relevant registry check (if applicable) shows active status.
• Full cost of credit is displayed and understood.
• Repayment is within your budget.
• Card requirements are standard (no CVV/PIN).
• Document requests are reasonable (no originals, no credentials).
• Privacy policy meets legal standards.
• No scam signals present.
• Support contacts are responsive and legitimate.

If you check all these boxes, you can proceed with more confidence. If any step raises a red flag, walk away. There are many legitimate lenders—don’t risk your money and identity on a questionable one.

Important: This checklist is for informational purposes only and does not constitute financial or legal advice. It does not guarantee lender legitimacy, loan approval, or data security. Always exercise caution and consider consulting a financial advisor when making borrowing decisions.