How to Safely Check a Microfinance Loan Offer: A 10-Point Practical Checklist

Applying for a microfinance loan (MFO) online is fast, but it also carries risks—from hidden fees to outright scams. Before you click “submit,” use this 10-point checklist to verify every offer. This guide focuses on verifiable facts and does not promise approval, speed, or government support—only a method to protect yourself.

---

1. Check the Official Domain

Why it matters: Scammers create fake websites that mimic legitimate MFOs. The domain name is your first line of defense.

How to do it:

• Look at the URL in your browser’s address bar. Legitimate MFOs usually use `.ru` or `.com` domains, but the key is consistency with their official name.
• Avoid sites with misspellings (e.g., `zaym-online.ru` vs. `zaim-online.ru`), extra characters, or unusual extensions like `.xyz` or `.top`.
• Use a WHOIS lookup tool (e.g., whois.ru) to check when the domain was registered. A domain registered very recently may be a red flag.
• Cross-check the domain against the MFO’s official name in the relevant registry (see step 4).

Practical tip: Bookmark the official site of any MFO you trust. Never click links from ads, emails, or social media—type the URL manually.

---

2. Verify the Consent Text

Why it matters: Law requires clear, explicit consent for processing personal data. Vague consent text is a sign of data misuse.

How to do it:

• Before you enter any data, read the “Consent to Processing of Personal Data” or “Политика обработки персональных данных” link. It should be a separate page, not buried in fine print.
• Look for specific purposes: “for loan application review,” “for credit history check,” “for contact.” Generic phrases like “for marketing purposes” or “for any legal purpose” are unacceptable.
• Check that the consent is voluntary and can be withdrawn at any time. If the text says “by submitting this form you automatically agree,” that’s a violation of data protection law.
• Source data only: For MFOs registered with the relevant authority, the consent must comply with applicable data protection regulations. If the text doesn’t mention your right to revoke consent, proceed with extreme caution.

Red flag: If you can’t find the consent text before filling in your phone number or passport details, leave the site immediately.

---

3. Identify the Lender

Why it matters: Some platforms are loan aggregators, not actual lenders. You need to know who will hold your contract.

How to do it:

• Look for the legal entity name (ООО, АО, etc.) and its OGRN or INN. This must be displayed on the homepage or in the “About Us” section.
• If the site says “we connect you with lenders” or “partner MFOs,” it’s an aggregator. In that case, ask for the specific lender’s name before you apply.
• Check the lender’s full legal name against the relevant MFO registry (see step 4). If the name doesn’t match exactly, it’s not a registered MFO.

Note: Aggregators are legal, but they must disclose the lender. If they refuse or give a vague answer, walk away.

---

4. Check the MFO Registry or Official Source

Why it matters: Only MFOs listed in the relevant state register are legally allowed to issue microfinance loans. Unregistered lenders are illegal.

How to do it:

• Go to the relevant official website (e.g., Central Bank of Russia at `cbr.ru`).
• Navigate to the section for microfinance organizations and find the state register.
• Search by the lender’s full name or OGRN.
• Source data only: The registry includes the MFO’s legal name, registration number, date of entry, and status (active/suspended). If the lender is not listed, do not proceed—even if they claim to be “registered.”
• For loans claiming to be backed by government services, verify on the official government services portal. Genuine programs are listed there. No legitimate MFO offers “instant state loans” via third-party sites.

Practical tip: Bookmark the relevant registry. Check it every time you consider a new lender.

---

5. Calculate the Full Cost of the Loan

Why it matters: The headline interest rate (e.g., per day) is misleading. The Full Cost of Credit (FCC) includes all fees, insurance, and penalties.

How to do it:

• The lender must display the FCC in a standardized format as required by law.
• Ask for a detailed breakdown: what fees are included? (e.g., origination fee, late payment penalty, insurance). If the lender refuses to give a written breakdown, do not proceed.
• Compare FCC across multiple MFOs. A very large difference between similar offers is a red flag.

Example: A loan of 10,000 RUB for 30 days at a daily rate may seem low, but if the FCC includes an origination fee, the true cost is higher.

---

6. Assess Your Repayment Ability

Why it matters: MFO loans have high interest rates. Missing a payment can lead to debt spirals.

How to do it:

• Calculate your monthly disposable income: income minus all fixed expenses (rent, utilities, food, transport, existing loan payments).
• The monthly loan payment (principal + interest + fees) should be manageable within your budget.
• Use a loan calculator (e.g., on banki.ru) to simulate different scenarios: what if you repay late by a few days? What if you lose your income?
• Check the lender’s late payment policy. Ask for the penalty clause in writing.

Self-check: If you cannot repay the loan within a reasonable period without borrowing from another MFO, do not take it.

---

7. Verify Card Requirements

Why it matters: Some MFOs require a specific bank or card type to issue funds. Others may ask for a “virtual card” that you must create—this can be a phishing tactic.

How to do it:

• Check the lender’s FAQ: “What cards do you support?” Legitimate MFOs typically support common bank cards.
• If they ask you to open a new card through a third-party link, do not proceed. This is often a scam to collect your card details.
• Never share your card’s CVV or PIN. The lender only needs the card number and expiry date for repayment—if they ask for CVV, it’s a scam.
• For loans disbursed via card, verify that the transaction appears on your bank statement with the lender’s legal name, not a random company.

---

8. Review Document Requirements

Why it matters: MFOs need your passport and SNILS (or INN) for identity verification. Legitimate lenders will not ask for unnecessary documents.

How to do it:

• Standard documents: passport (main page + registration page), SNILS or INN, and sometimes a second ID (e.g., driver’s license).
• Red flags: requests for bank statement screenshots (with balance), copies of your employment contract, or “proof of income” via screenshots of your bank app. These can be used for identity theft.
• Never upload your passport or SNILS to a site without HTTPS (look for the padlock icon in the address bar). Check the site’s SSL certificate by clicking the padlock.
• Source data only: Government-based verification is legitimate only if the site redirects you to the official government services portal for authentication. If the site asks you to enter your government login directly on their page, it’s a phishing attempt.

---

9. Understand Privacy Protections

Why it matters: Your personal data (passport, SNILS, bank card) is valuable. A breach can lead to fraud.

How to do it:

• Read the privacy policy (Политика конфиденциальности). It must state:
• What data is collected.
• How it is stored (encrypted? on servers in Russia?).
• Who it is shared with (third-party credit bureaus, collection agencies, etc.).
• Your right to access, correct, and delete your data.
• Check if the MFO is registered with the relevant data protection authority as a data processor. You can verify on the authority’s website.
• If the privacy policy says “we may transfer data to any third party without notice,” leave the site.

Practical step: After you apply, request a copy of your data from the MFO. If they don’t respond within a reasonable period, file a complaint with the data protection authority.

---

10. Identify Scam Signals

Why it matters: Scammers use urgency, fake promises, and social engineering to trick you.

How to do it:

• No upfront fees: Legitimate MFOs never ask for payment before disbursing a loan (e.g., “insurance fee,” “registration fee”). This is the #1 scam signal.
• Guaranteed approval: No lender guarantees approval without a credit check. If they say “100% approval” or “no credit check,” it’s a scam.
• Pressure tactics: “Limited time offer,” “only a few loans left,” “approve now or lose this rate.” Legitimate lenders give you time to read the contract.
• Fake reviews: Check reviews on independent sites (e.g., banki.ru, otzovik.com) rather than the lender’s own site. Look for patterns: many 5-star reviews with identical text, or many 1-star reviews about hidden fees.
• Unprofessional website: Typos, broken links, missing legal info, or a design that looks like a template are red flags.

Test: Call the lender’s support number listed on the site. If it’s disconnected or goes to a voicemail with a generic greeting, be cautious.

---

Bonus: Check Support Contacts

Why it matters: Real MFOs have working phone numbers, email, and physical addresses.

How to do it:

• Find the “Contacts” page. It should list:
• Legal address (should match the address in the relevant registry).
• Phone number (with a regional code).
• Email address (e.g., info@company.ru, not a free email service).
• Call the number before you apply. A real person should answer. If you get an automated system that only offers a callback request, be cautious.
• Check the physical address on mapping services. If it’s a residential building or a virtual office, be cautious.

---

Final Checklist Summary

Remember: This checklist does not guarantee loan approval or speed. It does not imply government support for any lender. Use it to make an informed, safe decision. If an offer fails any single check, reject it. Your financial safety is worth the extra time.