The 10-Step Borrower’s Checklist: How to Verify Any Loan Offer Before You Apply
In the rush to cover an unexpected expense, it’s tempting to click “Apply Now” on the first flashy ad you see. But every year, many borrowers face problems with fraudulent lenders, hidden fees, or illegal collection practices. The good news: with a 10-minute checklist, you can protect yourself before you sign anything.
This guide is a practical, step-by-step verification process. It relies on publicly available official sources—the Central Bank of Russia (CBR) registry, the Federal Tax Service (FNS), and Gosuslugi. No lender can guarantee approval, same-day funding, or government backing. If a lender claims any of those, consider it a red flag. Use this checklist to separate legitimate offers from scams.
Step 1: Verify the Domain & Website Authenticity
Why it matters: Scammers clone real lender websites, changing one letter in the URL (e.g., `sberbank-offer.ru` vs `sberbank.ru`). If you enter personal data on a fake domain, your identity is stolen.
How to check:
- Look at the URL bar. Is it `https://`? Does the domain match the official company name? (Example: `tinkoff.ru` is real; `tinkoff-loan-fast.ru` is not.)
- Use Whois or RKN domain checker. Go to `whois.ru` or the Russian Federal Service for Supervision of Communications (RKN) domain check tool. Enter the URL.
- Check the registration date. A domain created recently is suspicious.
- Check the owner. Legitimate lenders register domains under their official legal entity name.
Action: If the domain is very new, unregistered, or the owner is a private individual (not a legal entity), do not proceed.
Step 2: Read the Consent Text (Not Just Click “Agree”)
Why it matters: Fraudsters bury consent to share your data with third parties, auto-renew loans, or charge hidden fees.
How to check:
- Open the privacy policy and consent form. Do not skip. Look for:
- Purpose of data processing: It should say “for loan processing and scoring.” If it says “for marketing to any third parties,” that’s a red flag.
- Data retention period: Legitimate lenders keep data for a defined period after loan closure. “Indefinitely” is suspicious.
- Consent withdrawal: There must be a clear clause saying you can withdraw consent at any time.
- Use a text search: Ctrl+F for “third party,” “автоматическое продление,” “комиссия.”
Step 3: Identify the Lender’s Legal Identity
Why it matters: Many ads use a brand name (e.g., “FastCash24”) that is not the actual legal entity. You need the official name to check the registry.
How to check:
- Find the legal name on the website. Look at the footer, “About Us,” or “License.” It should say something like: “ООО МФК «Быстрые деньги»” (LLC MFC Fast Money).
- Cross-reference with the OGRN (Primary State Registration Number). Every legal entity in Russia has a unique OGRN. Write it down.
- Use the FNS (nalog.ru) check. Go to `egrul.nalog.ru` or the FNS website. Enter the OGRN or company name.
- Confirm the company is active (not liquidated or reorganized).
- Check the registration date. A company registered very recently can be a fly-by-night operation.
- Verify the address. If the address is a virtual office or a residential apartment, be cautious.
Step 4: Check the Lender Registry (Central Bank of Russia)
Why it matters: Only lenders listed in the CBR registry are legally allowed to issue consumer loans and microloans in Russia. Unregistered lenders are illegal.
How to check:
- Go to the Central Bank of Russia (CBR) official website: `cbr.ru`.
- Navigate to “Financial Markets” > “Registers” > “Register of Microfinance Organizations” (or “Register of Credit Institutions” for banks).
- Enter the full legal name or OGRN from Step 3.
- Confirm:
- The lender is listed (status: “действующая” – active).
- The license number matches what is on the website.
- The address and contact info match the website.
Action: If the lender is not on the CBR registry, or if the registry shows “revoked license,” do not proceed.
Step 5: Calculate the Full Cost (PSK – Full Cost of Credit)
Why it matters: Ads often show a daily rate (e.g., 0.5% per day). But the real cost includes fees, insurance, and penalties. The law requires lenders to display the PSK (Полная стоимость кредита) in a box on the first page.
How to check:
- Find the PSK box. It must be in a frame, in black text on a white background, with the percentage and ruble amount.
- Calculate yourself:
- For a 30-day loan of 10,000 ₽ at 0.5% per day: interest = 10,000 × 0.5% × 30 = 1,500 ₽. PSK = (1,500 / 10,000) × (365 / 30) × 100% = 182.5% per year.
- Add any fees: origination fee, insurance, late payment penalty.
- Check for “hidden fees” in the fine print: “service fee,” “card issuance fee,” “document processing fee.” These must be included in the PSK.
Step 6: Assess Your Repayment Ability
Why it matters: Even a legal loan can wreck your finances if you cannot repay. Lenders are not required to check your ability to pay (though they do credit scoring). You must do your own math.
How to check:
- Calculate your Debt-to-Income (DTI) ratio.
- Total monthly loan payments (including this new loan) ÷ monthly net income.
- Rule of thumb: DTI should not exceed 40%.
- Example: You earn 50,000 ₽ net. Your existing payments are 10,000 ₽. New payment is 5,000 ₽. Total = 15,000 ₽. DTI = 30%. Safe.
- Consider worst-case scenario: What if you lose your job? Do you have an emergency fund for several months of payments? If not, the loan is risky.
Step 7: Check Card Requirements & Transfer Methods
Why it matters: Some lenders require you to have a specific bank card (e.g., only Mir cards or only Visa). Others may charge a fee for card issuance.
How to check:
- Read the “How to get money” section. The lender should list accepted cards (Mir, Visa, Mastercard, etc.) and transfer methods (bank transfer, card-to-card, electronic wallet).
- Check for “card issuance fee.” Legitimate lenders do not charge to issue a card. If they ask you to pay for a “virtual card” or “plastic card,” it is a scam.
- Verify the transfer time. Most lenders transfer within a reasonable timeframe. If they promise “instant” but require you to pay a “verification fee” first, it’s a scam.
Step 8: Gather Required Documents (and Verify What’s Legitimate)
Why it matters: Legitimate lenders ask for a passport, SNILS (insurance number), and sometimes INN (tax ID). Scammers ask for copies of your passport, bank card PIN, or a “security deposit.”
How to check:
- List of standard documents:
- Passport (Russian internal passport or foreign passport with registration).
- SNILS (green card) – for credit scoring.
- INN (optional, but often used).
- For online lenders: selfie with passport or a video call (be cautious—only provide such information if you have verified the lender is legitimate).
- Bank card PIN or CVV code.
- Login/password for online banking.
- Copies of all pages of your passport (only the main page is needed).
- “Security deposit” or “insurance premium” paid upfront.
Action: If the lender asks for your bank card PIN, CVV, or an upfront payment, it is 100% a scam. Close the site immediately.
Step 9: Review Privacy & Data Security
Why it matters: Your personal data (passport, SNILS, bank details) is valuable. If the lender has weak security, your data can be sold or used for identity theft.
How to check:
- Look for a privacy policy link (usually in the footer). It should describe how data is stored, encrypted, and shared.
- Check for “data transfer to third parties.” Legitimate lenders share data only with credit bureaus (e.g., NBKI, OKB) and collection agencies (if you default). If they list many third parties, be cautious.
- Verify SSL certificate. The URL must start with `https://`. Click the padlock icon in the browser bar. The certificate should be issued to the legal entity name, not a generic name.
- Check for “Roskomnadzor registration.” Lenders that process personal data must be registered with Roskomnadzor (the data protection authority). You can check on `rkn.gov.ru` under “Register of Operators.” However, note that registration alone does not guarantee data safety—it is one factor among many.
Step 10: Identify Scam Signals & Verify Support Contacts
Why it matters: Scammers often disappear after you send money. Legitimate lenders have verifiable contact information and responsive support.
How to check:
- Common scam signals:
- “Guaranteed approval” or “no credit check.” (Most legal lenders check your credit.)
- “Government loan” or “loan from the state.” (The Russian government does not issue consumer loans directly.)
- “Pay only the first installment and get the rest free.”
- “You must pay a processing fee before the loan is disbursed.”
- “Loan without interest” or “0% for first month.” (Often hides high fees later.)
- Phone number: Call it. Does a real person answer? Is it a Moscow or regional number? (8-800 numbers are common for legitimate lenders.)
- Email address: It should be from the same domain (e.g., `support@fastcash.ru`, not `fastcash@gmail.com`).
- Physical address: Check on Yandex Maps or Google Maps. Does it exist? Is it an office building, not a residential apartment?
- Live chat: Test it. Ask a simple question. If the bot replies with generic answers, it’s a red flag.
Action: If the phone number is a mobile number, the address is a P.O. box, or the support is non-existent, do not borrow.
Final Step: The 10-Minute Quick Scan
If you are short on time, run this condensed check:
- Domain: Check `whois.ru` – domain age is reasonable, owner is legal entity.
- Registry: Check `cbr.ru` – lender is listed.
- PSK: Find the PSK box – must be within the legal maximum.
- Consent: Look for “withdrawal of consent” clause.
- Scam test: “Pay fee first” = scam. “Guaranteed approval” = scam.
Summary Checklist (Printable)
| Step | Check | Pass/Fail |
|---|---|---|
| 1 | Domain is official, reasonable age, legal entity owner | ☐ |
| 2 | Consent text has withdrawal clause, no auto-renewal | ☐ |
| 3 | Legal name + OGRN found on FNS (nalog.ru) | ☐ |
| 4 | Lender listed on CBR registry (active) | ☐ |
| 5 | PSK within legal limits, no hidden fees | ☐ |
| 6 | DTI ≤ 40%, emergency fund exists | ☐ |
| 7 | No card issuance fee, accepted cards listed | ☐ |
| 8 | No request for PIN/CVV/upfront payment | ☐ |
| 9 | Privacy policy present, SSL valid, RKN registered | ☐ |
| 10 | Support contacts verified, no scam signals | ☐ |
If all boxes are checked: The offer is likely legitimate. Proceed with caution.
If any box fails: Reject the offer. Report the site to the Central Bank or Roskomnadzor.
This checklist is based on publicly available data from the Central Bank of Russia (cbr.ru), the Federal Tax Service (nalog.ru), Roskomnadzor (rkn.gov.ru), and Gosuslugi (gosuslugi.ru). No lender can guarantee approval, speed, or government support. Always verify independently. This information is for educational purposes and does not constitute financial or legal advice. Consult a qualified professional for specific situations.

Комментарии (0)