How to Safely Choose a Microfinance Loan: A 10-Point Practical Checklist

Before you apply for any microfinance loan—whether from an MFO (Microfinance Organization) or a traditional lender—you need to verify its legitimacy. Scams and predatory lending are real, and the consequences of a bad choice can include identity theft, inflated debt, and ruined credit. This checklist walks you through the essential steps to vet any loan offer. Use it before you share personal data or sign anything.

Important: This guide does not guarantee loan approval, faster processing, or any special government support. It is a practical tool to help you identify safe, transparent lenders. Always verify data using official sources only.

---

1. Check the Official Domain Name

Many scam websites use lookalike domains to trick borrowers. For example, a fake site might use "gosuslugi-credit.ru" instead of the real "gosuslugi.ru."

What to do:

• Type the lender's URL manually into a browser—never click links from emails, SMS, or ads.
• Check the domain name for subtle misspellings, extra hyphens, or unusual top-level domains (e.g., .org, .biz, .loan instead of .ru or .com).
• For MFOs in Russia, the official domain should match the one listed in the Central Bank of Russia (CBR) register (see step 4).
• Use a domain lookup tool (like Whois) to see when the domain was registered. Scam sites are often less than a year old. Note that domain age alone is not a guarantee of legitimacy.

Red flags:

• The domain name includes "gosuslugi," "government," or "state" but isn't the official .ru site.
• The URL uses numbers instead of letters (e.g., g0suslugi.ru).
• The site has no SSL certificate (look for "https://" and a padlock icon in the address bar).

---

2. Read the Consent and Privacy Policy

Legitimate lenders must clearly explain how they collect, store, and share your personal data. Scammers often bury vague consent clauses in fine print.

What to do:

• Locate the "Privacy Policy" or "Personal Data Processing Consent" link—usually at the bottom of the homepage.
• Read the document carefully. It should state:
• What data is collected (name, passport, phone, IP address, etc.).
• How data is used (only for loan processing, not sold to third parties).
• How long data is retained (typically until the loan is repaid plus a legal retention period).
• Whether your data is transferred abroad (if so, to which countries).
• Look for a checkbox or button that asks for your explicit consent—this should be separate from general terms.

Red flags:

• No privacy policy at all, or a generic one copied from another site.
• Consent is bundled with other agreements (e.g., "By applying, you agree to our privacy policy and terms of service" without a separate checkbox).
• The policy says your data may be shared with "partners" without listing them.
• The policy is in a language you don't understand, or it's impossible to download/save.

---

3. Verify the Lender's Identity

You need to know exactly who you're dealing with. A legitimate lender will provide its full legal name, registration number, and physical address.

What to do:

• Find the "About Us" or "Company Details" page.
• Write down the full legal name (e.g., "LLC Microfinance Company 'Example'").
• Look for the OGRN (Primary State Registration Number) and INN (Taxpayer Identification Number). These are mandatory for Russian legal entities.
• Verify the company's registration on the Federal Tax Service website (nalog.ru) using the OGRN or INN.
• Check that the physical address matches the one on the website—use Yandex Maps or Google Maps to confirm it's a real office, not a residential address.

Red flags:

• No legal name or registration numbers provided.
• The company claims to be "registered abroad" but offers loans in Russia without a local license.
• The address is a P.O. box or a virtual office.
• The OGRN/INN returns no results on nalog.ru.

---

4. Check the MFO Registry (Official Source Only)

For microfinance loans in Russia, only organizations listed in the Central Bank of Russia's (CBR) register are allowed to operate legally. This is your most reliable source.

What to do:

• Go to the official CBR website: cbr.ru.
• Navigate to the "Financial Markets" section, then "Register of Microfinance Organizations" (Реестр микрофинансовых организаций).
• Search by the lender's name, OGRN, or INN.
• Confirm the company's status is "active" (действующая) and that it holds a valid MFO license.
• Note the register entry number and date of inclusion.

Important: Do not use third-party websites that claim to "list MFOs." Only the CBR register is authoritative. Scammers sometimes create fake "official" registries.

Red flags:

• The lender is not in the CBR register.
• The register shows the company's status as "liquidated," "reorganized," or "suspended."
• The lender claims to be "exempt" from registration (there are no legal exemptions for consumer MFOs).

---

5. Calculate the Full Cost of the Loan

The "full cost of credit" (FCC) must be disclosed clearly. This includes the interest rate, all fees, and any additional charges. Do not rely on the advertised rate alone.

What to do:

• Look for the "Full Cost of Credit" section in the loan agreement or on the website's main page.
• The FCC is expressed as an annual percentage rate (APR) and as a specific amount in rubles.
• Calculate the total repayment amount: principal + interest + all fees (e.g., origination, service, insurance if mandatory).
• Use an online loan calculator to double-check: multiply the daily interest rate by the loan term, then add any fixed fees.
• Ask the lender: "What is the exact amount I will repay if I pay on time? What if I am late?"

Red flags:

• The FCC is not shown, or it's hidden in fine print.
• The advertised rate is extremely low (e.g., 0.1% per day) but fees make the total much higher.
• The lender charges fees for "processing," "document review," or "insurance" that you didn't agree to.
• The APR exceeds the legal maximum in your country (check current regulations for applicable limits).

---

6. Assess Your Repayment Ability Honestly

Lenders may not check your income thoroughly, but you must. Taking a loan you cannot repay leads to debt spirals, penalties, and collection actions.

What to do:

• Calculate your monthly income after taxes (salary, benefits, freelance, etc.).
• List all mandatory expenses: rent, utilities, food, transportation, existing loan payments.
• Subtract expenses from income. The remainder is your "disposable income."
• As a general guideline, ensure the monthly loan payment (principal + interest + fees) does not exceed 30% of your disposable income. This is a suggestion, not a fixed rule.
• Consider worst-case scenarios: what if you lose your job or have an emergency? Do you have savings to cover 2–3 months of payments?

Red flags:

• You are borrowing to pay off another loan (debt consolidation without a clear plan).
• The lender offers you more than you asked for without checking your ability to repay.
• The loan term is very short (e.g., 7 days) and you know you cannot repay that quickly.

---

7. Check Card Requirements and Payment Methods

Legitimate lenders will ask for a bank card in your name. Scammers often ask for unusual payment methods or prepaid cards.

What to do:

• Confirm that the lender transfers money only to a card issued in your name (debit or credit).
• Check that the lender uses standard payment systems (Visa, Mastercard, Mir) and not cryptocurrency, gift cards, or wire transfers to unknown accounts.
• If the lender asks for your card's CVV/CVC code or PIN, stop immediately—legitimate lenders never need these for a loan disbursement.

Red flags:

• The lender asks for payment via Qiwi, YooMoney, or other e-wallet accounts you don't control.
• You are required to "deposit" money to a third-party account before receiving the loan (this is always a scam).
• The lender demands a prepaid card (e.g., "PayPal prepaid," "Google Play card") as "security deposit."

---

8. Review Required Documents

A legitimate MFO will request minimal documents—typically your passport and a second ID (SNILS, INN, or driver's license). They will not ask for unnecessary personal information.

What to do:

• List the documents the lender requires. Standard requests: passport (main page + registration), a second ID, and possibly a bank statement or proof of income.
• Verify that the lender does not ask for:
• Your social media passwords.
• Access to your email or phone contacts.
• Copies of your credit card (front and back).
• Your full bank account login credentials.
• Ensure the lender provides a secure upload portal (HTTPS) and does not ask you to email documents.

Red flags:

• The lender asks for documents that are not relevant to loan processing (e.g., photos of your family, your work schedule).
• You are required to "verify" your identity by sending money to a specific account.
• The lender refuses to accept documents in a standard format (PDF, JPEG) and insists on a specific app or software.

---

9. Understand Your Privacy Rights

Your data is valuable. A trustworthy lender will protect it and allow you to control how it's used.

What to do:

• Confirm that the lender has a clear data deletion policy: you can request removal of your data after the loan is repaid.
• Check if the lender shares data with credit bureaus (this is common for MFOs in Russia—they typically report to credit history bureaus; verify current legal requirements).
• Look for a "Right to Withdraw Consent" clause: you should be able to revoke consent at any time (though the lender may still retain data for legal reasons).
• Ensure the lender uses encryption (SSL/TLS) for data transmission.

Red flags:

• The privacy policy says your data can be sold to "marketing partners" without your explicit opt-in.
• The lender does not provide a contact for data protection inquiries (e.g., email or phone).
• You cannot download or print your loan agreement or privacy policy.

---

10. Identify Scam Signals and Check Support Contacts

Scammers often mimic legitimate lenders but skip customer service. A real lender will have accessible, responsive support.

What to do:

• Look for a "Contact Us" page with:
• A working phone number (with a local area code, not a premium-rate number).
• A physical address (not a P.O. box).
• An email address (not a free service like Gmail or Yandex—should be the company's domain).
• Working hours and response time commitments.
• Call the support number before applying. Ask a simple question (e.g., "What documents do I need?"). A real agent should answer clearly.
• Check online reviews on independent platforms (e.g., Banki.ru, Sravni.ru). Be wary of reviews that sound fake or are all 5-star.
• Search for the lender's name + "scam" or "мошенники" in Yandex or Google. If multiple complaints appear, avoid the lender.

Common scam signals:

• No working phone number, only a chat bot or email.
• Support responds only during odd hours or never.
• The website has broken links, poor grammar, or low-quality design.
• The lender promises "approval without checking your credit history" or "loans for bad credit with no questions asked."
• You are pressured to apply immediately with a countdown timer or "limited offer."

---

Final Checklist Summary

Before you apply, run through these 10 points:

1. Domain: Official, no misspellings, HTTPS.
2. Consent: Clear policy, separate checkbox.
3. Identity: Full legal name, OGRN/INN, verified on nalog.ru.
4. Registry: Listed in CBR register (for MFOs).
5. Full Cost: APR and total repayment amount disclosed.
6. Repayment Ability: Loan payment ≤ 30% of disposable income (guideline only).
7. Card Requirements: Your own card, no CVV/PIN needed.
8. Documents: Only passport + second ID, no passwords.
9. Privacy: Data deletion option, no unauthorized sharing.
10. Support: Working phone, physical address, real reviews.

If any point fails, walk away. There are thousands of legitimate lenders—you don't need to take a risk. Your financial safety is worth the extra 15 minutes of verification.