The 10-Step Borrower’s Safety Checklist: How to Verify a Microfinance Loan Before You Apply

Applying for a microfinance loan (MFO) online can be fast, but it also opens the door to scams, hidden fees, and identity theft. Before you click “Submit,” use this practical checklist to verify every critical detail. This guide relies only on official sources—such as the Central Bank of Russia’s MFO registry, Gosuslugi, and lender documentation—and does not promise loan approval, speed, or government support. Follow each step to protect your money and personal data.

---

Step 1: Verify the Official Domain Name

Why it matters: Scammers often create fake websites that look identical to real MFOs. A misspelled domain or a `.ru` vs. `.рф` trick can cost you dearly.

How to check:

• Look at the URL in your browser’s address bar. The official domain should match the company’s legal name exactly.
• Use a WHOIS lookup service (e.g., whois.ru) to see when the domain was registered.
• Check for a padlock icon (HTTPS) – but note that scammers can also get SSL certificates, so this is not a guarantee.
• Cross-check the domain against the official website listed in the Central Bank of Russia’s MFO registry (see Step 4).

Red flags:

• Domain includes extra words like “-loan” or “-fast”.
• Uses a free subdomain (e.g., mfo.example.wordpress.com).
• Domain registered very recently.

---

Step 2: Read the Consent Text Carefully

Why it matters: By applying, you may be agreeing to share your data with third parties, receive spam, or even be charged fees.

How to check:

• Find the “Consent to Processing of Personal Data” checkbox or link. Read the full text, not just the summary.
• Look for specific language about:
• Who will process your data (the MFO only, or also partners/collectors).
• How long the data will be stored (should be limited, e.g., a reasonable period after loan closure).
• Whether your data will be transferred outside Russia (requires explicit consent under 152-FZ).
• If the consent text is missing, vague, or uses “etc.” to describe purposes, do not proceed.

Practical tip: Take a screenshot of the consent text before clicking. If the MFO later changes terms, you have proof.

---

Step 3: Confirm the Lender’s Legal Identity

Why it matters: You need to know exactly who you’re borrowing from. Many scams use generic names like “QuickCash” or “EasyLoan.”

How to check:

• Find the lender’s full legal name (e.g., “OOO Microfinance Company ‘Example’”). This must be on the website’s footer or “About Us” page.
• Verify the OGRN (Primary State Registration Number) and INN (Taxpayer Identification Number). These are required by law.
• Search the OGRN on the Federal Tax Service website (egrul.nalog.ru) to confirm the company is active and not in liquidation.

Red flags:

• No legal name or registration numbers displayed.
• The company is registered in a different country (e.g., Cyprus or Belize) – this is a major scam signal.
• The name on the website differs from the name on the loan agreement.

---

Step 4: Check the MFO Registry (Official Source Only)

Why it matters: Only MFOs listed in the Central Bank of Russia’s state register are allowed to issue microfinance loans legally.

How to check:

• Go to the Central Bank of Russia’s official website (cbr.ru) → “Financial Markets” → “Registers” → “Register of Microfinance Organizations”.
• Search by the company’s INN or OGRN. If it’s not listed, the lender is illegal.
• Note the register number and date of entry.

Important: Do not use third-party websites that claim to show the registry. Only cbr.ru is authoritative.

---

Step 5: Calculate the Full Cost of the Loan (FCC)

Why it matters: The interest rate alone doesn’t tell you the total cost. Hidden fees for “processing,” “insurance,” or “early repayment” can increase your debt.

How to check:

• Look for the “Full Cost of Consumer Credit” (FCC) box on the loan application page. By law, it must be displayed in a clear, square format.
• The FCC includes: interest rate, fees, insurance, and any mandatory services. It is expressed as an annual percentage rate (APR).
• Compare the FCC across multiple MFOs. If one is significantly higher than others, reconsider.
• Also check the “effective interest rate” – this should match the FCC.

Red flags:

• The FCC is not shown until after you submit personal data.
• The lender offers a “0% interest” loan but charges a “service fee” that exceeds typical interest.
• The FCC exceeds the maximum allowed by law (check current limits on cbr.ru).

---

Step 6: Assess Your Repayment Ability Honestly

Why it matters: Borrowers who cannot repay may face debt collection and credit score damage.

How to check:

• Calculate your monthly income after taxes and essential expenses (rent, utilities, food, transport).
• Use a guideline: Maximum monthly payment = (Income – Essential expenses) × a reasonable fraction (e.g., 0.3 as a common rule of thumb).
• Compare this to the loan’s monthly payment (including FCC). If the payment is too high relative to your disposable income, do not take the loan.
• Use the Central Bank’s debt load indicator (PTI – Payment-to-Income ratio) if available.

Practical tip: Most MFOs offer loan calculators. Use them, but also do your own math with a spreadsheet.

---

Step 7: Check Card Requirements and Fees

Why it matters: Some MFOs charge fees for issuing or servicing a virtual card, or they require a specific bank card that you may not have.

How to check:

• Read the “How to Get Money” section. Common options: bank transfer to any Russian card (Visa/Mastercard/Mir), e-wallets (YooMoney, QIWI), or cash at partner points.
• Check if there is a fee for card issuance or for each withdrawal.
• Verify that the MFO supports your specific bank. Some only work with certain banks.
• If the MFO asks for your card’s CVV or PIN, stop immediately – this is a scam.

---

Step 8: Review the Required Documents

Why it matters: Legitimate MFOs need minimal documents for small loans. Excessive requests may indicate a data harvesting scam.

How to check:

• For smaller loans, only a passport and SNILS (or INN) are usually required.
• For larger loans, you may need: a second ID (driver’s license), proof of income (2-NDFL certificate), or employment verification.
• The MFO must not ask for: your bank account login/password, your credit card PIN, copies of your passport pages beyond the main spread, or your social media passwords.

Red flags:

• The MFO asks for documents that are not legally required (e.g., marriage certificate, medical records).
• You must upload documents via a non-secure form (no HTTPS).
• The MFO demands a “deposit” or “insurance fee” before disbursing the loan.

---

Step 9: Understand the Privacy Policy

Why it matters: Your personal data (passport, phone, bank details) is valuable. A weak privacy policy can lead to leaks or unauthorized sharing.

How to check:

• Find the “Privacy Policy” or “Personal Data Processing Policy” link. It must be a separate page, not hidden in terms of service.
• Look for:
• The legal basis for processing (usually “consent” under 152-FZ).
• A list of third parties that receive your data (e.g., credit bureaus, collection agencies, IT providers).
• Your rights: access, correction, deletion, and withdrawal of consent.
• If the policy says your data may be transferred to “any third party” or “affiliates” without specifics, do not proceed.

Practical tip: Consider using a secondary email address or phone number for initial contact to protect your primary contact information. Be aware that providing false information may affect the legitimacy of your application.

---

Step 10: Recognize Scam Signals and Verify Support Contacts

Why it matters: Scammers often disappear after collecting your data. Real MFOs have verifiable support channels.

How to check:

• Look for a physical address (not just a P.O. box) on the “Contacts” page. Verify it via mapping services.
• Check for a working phone number and email. Call the number – if no one answers or it goes to a generic voicemail, be suspicious.
• Look for a “Feedback” or “Complaints” section. Legitimate MFOs must have a process for handling complaints.
• Search the MFO’s name + “отзывы” (reviews) on independent sites like Banki.ru, Irecommend, or Pravda. Be wary of 5-star-only reviews – they are likely fake.

Red flags:

• No physical address or phone number.
• Support email is a free service (e.g., @gmail.com, @yandex.ru).
• The website has no “Privacy Policy” or “Terms of Service” pages.
• The MFO promises “guaranteed approval” or “no credit check” – this is often a scam signal.
• You are asked to pay a “processing fee” before receiving the loan.

---

Final Safety Check: Before You Click “Submit”

1. Cross-check the domain against the Central Bank registry.
2. Read the consent text – if it’s vague, don’t consent.
3. Confirm the legal name and OGRN on the tax service.
4. Verify the MFO is in the cbr.ru registry – no exceptions.
5. Calculate the FCC – if it’s significantly higher than typical rates, walk away.
6. Assess your repayment ability – use a reasonable guideline like the 30% rule.
7. Check card fees – no CVV or PIN requests.
8. Review required documents – only passport and SNILS for small loans.
9. Read the privacy policy – no “any third party” clauses.
10. Test support contacts – call or email before applying.

Remember: No legitimate MFO can guarantee approval, offer government-backed loans, or promise instant funding without verification. If an offer sounds too good to be true, it’s a scam. Use this checklist every time you apply, and protect your financial safety. Always borrow responsibly and only what you can afford to repay.