The 10-Step Borrower’s Checklist: How to Verify Any Loan Offer Before You Apply

The 10-Step Borrower’s Checklist: How to Verify Any Loan Offer Before You Apply

In the rush to cover an unexpected expense, it’s tempting to click “Apply Now” on the first flashy ad you see. But every year, many borrowers face problems with fraudulent lenders, hidden fees, or illegal collection practices. The good news: with a 10-minute checklist, you can protect yourself before you sign anything.

This guide is a practical, step-by-step verification process. It relies on publicly available official sources—the Central Bank of Russia (CBR) registry, the Federal Tax Service (FNS), and Gosuslugi. No lender can guarantee approval, same-day funding, or government backing. If a lender claims any of those, consider it a red flag. Use this checklist to separate legitimate offers from scams.


Step 1: Verify the Domain & Website Authenticity

Why it matters: Scammers clone real lender websites, changing one letter in the URL (e.g., `sberbank-offer.ru` vs `sberbank.ru`). If you enter personal data on a fake domain, your identity is stolen.

How to check:

  1. Look at the URL bar. Is it `https://`? Does the domain match the official company name? (Example: `tinkoff.ru` is real; `tinkoff-loan-fast.ru` is not.)
  2. Use Whois or RKN domain checker. Go to `whois.ru` or the Russian Federal Service for Supervision of Communications (RKN) domain check tool. Enter the URL.
  • Check the registration date. A domain created recently is suspicious.
  • Check the owner. Legitimate lenders register domains under their official legal entity name.
3. Search the domain name online with terms like “scam” or “мошенники”. If other users have reported fraud, you’ll see it.

Action: If the domain is very new, unregistered, or the owner is a private individual (not a legal entity), do not proceed.


Step 2: Read the Consent Text (Not Just Click “Agree”)

Why it matters: Fraudsters bury consent to share your data with third parties, auto-renew loans, or charge hidden fees.

How to check:

  1. Open the privacy policy and consent form. Do not skip. Look for:
  • Purpose of data processing: It should say “for loan processing and scoring.” If it says “for marketing to any third parties,” that’s a red flag.
  • Data retention period: Legitimate lenders keep data for a defined period after loan closure. “Indefinitely” is suspicious.
  • Consent withdrawal: There must be a clear clause saying you can withdraw consent at any time.
2. Check for “automatic renewal” clauses. Some lenders sneak in text that says “if you do not object, the loan is extended at a high daily rate.” This is legal only if explicitly consented.
  1. Use a text search: Ctrl+F for “third party,” “автоматическое продление,” “комиссия.”
Action: If you cannot find a clear withdrawal clause, or if consent text is in a tiny pop-up you cannot scroll through, reject the offer.


Step 3: Identify the Lender’s Legal Identity

Why it matters: Many ads use a brand name (e.g., “FastCash24”) that is not the actual legal entity. You need the official name to check the registry.

How to check:

  1. Find the legal name on the website. Look at the footer, “About Us,” or “License.” It should say something like: “ООО МФК «Быстрые деньги»” (LLC MFC Fast Money).
  2. Cross-reference with the OGRN (Primary State Registration Number). Every legal entity in Russia has a unique OGRN. Write it down.
  3. Use the FNS (nalog.ru) check. Go to `egrul.nalog.ru` or the FNS website. Enter the OGRN or company name.
  • Confirm the company is active (not liquidated or reorganized).
  • Check the registration date. A company registered very recently can be a fly-by-night operation.
  • Verify the address. If the address is a virtual office or a residential apartment, be cautious.
Action: If the legal name is missing, OGRN is invalid, or the company is not found on FNS, do not borrow.


Step 4: Check the Lender Registry (Central Bank of Russia)

Why it matters: Only lenders listed in the CBR registry are legally allowed to issue consumer loans and microloans in Russia. Unregistered lenders are illegal.

How to check:

  1. Go to the Central Bank of Russia (CBR) official website: `cbr.ru`.
  2. Navigate to “Financial Markets” > “Registers” > “Register of Microfinance Organizations” (or “Register of Credit Institutions” for banks).
  3. Enter the full legal name or OGRN from Step 3.
  4. Confirm:
  • The lender is listed (status: “действующая” – active).
  • The license number matches what is on the website.
  • The address and contact info match the website.
Important: If the lender claims to be a “bank” but is not on the CBR bank register, it is illegal.

Action: If the lender is not on the CBR registry, or if the registry shows “revoked license,” do not proceed.


Step 5: Calculate the Full Cost (PSK – Full Cost of Credit)

Why it matters: Ads often show a daily rate (e.g., 0.5% per day). But the real cost includes fees, insurance, and penalties. The law requires lenders to display the PSK (Полная стоимость кредита) in a box on the first page.

How to check:

  1. Find the PSK box. It must be in a frame, in black text on a white background, with the percentage and ruble amount.
  2. Calculate yourself:
  • For a 30-day loan of 10,000 ₽ at 0.5% per day: interest = 10,000 × 0.5% × 30 = 1,500 ₽. PSK = (1,500 / 10,000) × (365 / 30) × 100% = 182.5% per year.
  • Add any fees: origination fee, insurance, late payment penalty.
3. Compare to the legal cap. For lenders, there is a maximum PSK set by law. Check the current cap on the CBR website. If the PSK exceeds the legal maximum, the loan is illegal.
  1. Check for “hidden fees” in the fine print: “service fee,” “card issuance fee,” “document processing fee.” These must be included in the PSK.
Action: If the PSK is missing, or if you find hidden fees not in the PSK, reject the loan.


Step 6: Assess Your Repayment Ability

Why it matters: Even a legal loan can wreck your finances if you cannot repay. Lenders are not required to check your ability to pay (though they do credit scoring). You must do your own math.

How to check:

  1. Calculate your Debt-to-Income (DTI) ratio.
  • Total monthly loan payments (including this new loan) ÷ monthly net income.
  • Rule of thumb: DTI should not exceed 40%.
  • Example: You earn 50,000 ₽ net. Your existing payments are 10,000 ₽. New payment is 5,000 ₽. Total = 15,000 ₽. DTI = 30%. Safe.
2. Use the CBR’s “loan calculator” (available on `cbr.ru` or many bank sites) to estimate monthly payment.
  1. Consider worst-case scenario: What if you lose your job? Do you have an emergency fund for several months of payments? If not, the loan is risky.
Action: If the DTI exceeds 40%, or if you have no savings buffer, do not take the loan. Seek financial counseling instead.


Step 7: Check Card Requirements & Transfer Methods

Why it matters: Some lenders require you to have a specific bank card (e.g., only Mir cards or only Visa). Others may charge a fee for card issuance.

How to check:

  1. Read the “How to get money” section. The lender should list accepted cards (Mir, Visa, Mastercard, etc.) and transfer methods (bank transfer, card-to-card, electronic wallet).
  2. Check for “card issuance fee.” Legitimate lenders do not charge to issue a card. If they ask you to pay for a “virtual card” or “plastic card,” it is a scam.
  3. Verify the transfer time. Most lenders transfer within a reasonable timeframe. If they promise “instant” but require you to pay a “verification fee” first, it’s a scam.
Action: If the lender asks for a card payment fee or requires a specific card that you do not have and must pay to get, do not proceed.


Step 8: Gather Required Documents (and Verify What’s Legitimate)

Why it matters: Legitimate lenders ask for a passport, SNILS (insurance number), and sometimes INN (tax ID). Scammers ask for copies of your passport, bank card PIN, or a “security deposit.”

How to check:

  1. List of standard documents:
  • Passport (Russian internal passport or foreign passport with registration).
  • SNILS (green card) – for credit scoring.
  • INN (optional, but often used).
  • For online lenders: selfie with passport or a video call (be cautious—only provide such information if you have verified the lender is legitimate).
2. Red flag documents:
  • Bank card PIN or CVV code.
  • Login/password for online banking.
  • Copies of all pages of your passport (only the main page is needed).
  • “Security deposit” or “insurance premium” paid upfront.
3. Check if the lender uses Gosuslugi for identity verification. Some lenders offer verification via Gosuslugi (using ESIA). This can be safe, but only if done through the official Gosuslugi portal (gosuslugi.ru), not a third-party site. However, verify directly with Gosuslugi which lenders are authorized to use this service—do not assume all lenders offering it are legitimate.

Action: If the lender asks for your bank card PIN, CVV, or an upfront payment, it is 100% a scam. Close the site immediately.


Step 9: Review Privacy & Data Security

Why it matters: Your personal data (passport, SNILS, bank details) is valuable. If the lender has weak security, your data can be sold or used for identity theft.

How to check:

  1. Look for a privacy policy link (usually in the footer). It should describe how data is stored, encrypted, and shared.
  2. Check for “data transfer to third parties.” Legitimate lenders share data only with credit bureaus (e.g., NBKI, OKB) and collection agencies (if you default). If they list many third parties, be cautious.
  3. Verify SSL certificate. The URL must start with `https://`. Click the padlock icon in the browser bar. The certificate should be issued to the legal entity name, not a generic name.
  4. Check for “Roskomnadzor registration.” Lenders that process personal data must be registered with Roskomnadzor (the data protection authority). You can check on `rkn.gov.ru` under “Register of Operators.” However, note that registration alone does not guarantee data safety—it is one factor among many.
Action: If the privacy policy is missing, the SSL certificate is invalid, or the lender is not registered with Roskomnadzor, do not share your data.


Step 10: Identify Scam Signals & Verify Support Contacts

Why it matters: Scammers often disappear after you send money. Legitimate lenders have verifiable contact information and responsive support.

How to check:

  1. Common scam signals:
  • “Guaranteed approval” or “no credit check.” (Most legal lenders check your credit.)
  • “Government loan” or “loan from the state.” (The Russian government does not issue consumer loans directly.)
  • “Pay only the first installment and get the rest free.”
  • “You must pay a processing fee before the loan is disbursed.”
  • “Loan without interest” or “0% for first month.” (Often hides high fees later.)
2. Verify support contacts:
  • Phone number: Call it. Does a real person answer? Is it a Moscow or regional number? (8-800 numbers are common for legitimate lenders.)
  • Email address: It should be from the same domain (e.g., `support@fastcash.ru`, not `fastcash@gmail.com`).
  • Physical address: Check on Yandex Maps or Google Maps. Does it exist? Is it an office building, not a residential apartment?
  • Live chat: Test it. Ask a simple question. If the bot replies with generic answers, it’s a red flag.
3. Check the “Contact us” page. Legitimate lenders list a legal address, phone, email, and working hours.

Action: If the phone number is a mobile number, the address is a P.O. box, or the support is non-existent, do not borrow.


Final Step: The 10-Minute Quick Scan

If you are short on time, run this condensed check:

  1. Domain: Check `whois.ru` – domain age is reasonable, owner is legal entity.
  2. Registry: Check `cbr.ru` – lender is listed.
  3. PSK: Find the PSK box – must be within the legal maximum.
  4. Consent: Look for “withdrawal of consent” clause.
  5. Scam test: “Pay fee first” = scam. “Guaranteed approval” = scam.
If any of these fail, walk away. There are many legitimate lenders. One bad loan can cost you years of debt and identity theft.


Summary Checklist (Printable)

StepCheckPass/Fail
1Domain is official, reasonable age, legal entity owner
2Consent text has withdrawal clause, no auto-renewal
3Legal name + OGRN found on FNS (nalog.ru)
4Lender listed on CBR registry (active)
5PSK within legal limits, no hidden fees
6DTI ≤ 40%, emergency fund exists
7No card issuance fee, accepted cards listed
8No request for PIN/CVV/upfront payment
9Privacy policy present, SSL valid, RKN registered
10Support contacts verified, no scam signals

If all boxes are checked: The offer is likely legitimate. Proceed with caution.

If any box fails: Reject the offer. Report the site to the Central Bank or Roskomnadzor.


This checklist is based on publicly available data from the Central Bank of Russia (cbr.ru), the Federal Tax Service (nalog.ru), Roskomnadzor (rkn.gov.ru), and Gosuslugi (gosuslugi.ru). No lender can guarantee approval, speed, or government support. Always verify independently. This information is for educational purposes and does not constitute financial or legal advice. Consult a qualified professional for specific situations.

Дарья Соловьёва

Дарья Соловьёва

Identity-Verification Explainer

Anna breaks down ESIA and Gosuslugi processes for everyday users. She ensures readers understand each step of digital identification.

Комментарии (0)

Оставить комментарий