The Borrower’s 10-Point Pre-Approval Checklist: How to Vet Any Online Loan Offer

In the rush to cover an urgent expense, it’s easy to click “Apply Now” on the first loan offer that appears. But that click can cost you far more than interest. Every year, borrowers lose money to fraudulent lenders, hidden fees, and unauthorized data sharing. Before you share your passport data or bank details, run through this 10-point checklist. It takes 15 minutes and could save you thousands.

Important note: This checklist does not guarantee loan approval, speed, or any government support. It is a practical tool to verify a lender’s legitimacy and protect yourself. Claims about lender registration and online services are based on general regulatory principles; always verify with official sources.

---

1. Verify the Official Domain

Why it matters: Scammers often create lookalike domains that differ by one letter (e.g., `l0anservice.com` instead of `loanservice.com`).

Checklist:

• Look at the URL in your browser’s address bar, not the link text in an email or ad.
• Confirm the domain ends with a legitimate extension (e.g., `.com`, `.ru` for Russian lenders, but verify the company’s legal registration).
• Check the domain registration date via WHOIS (free online tools). A domain registered recently is a red flag.
• Ensure the site uses HTTPS (padlock icon). Click the padlock to view the certificate details – it should match the company name.

Red flags:

• Domain registered less than 1 year ago
• Misspellings or extra characters (e.g., `sber-bank-loan.ru` instead of `sberbank.ru`)
• No HTTPS or a certificate warning

---

2. Read the Consent Text Carefully

Why it matters: When you apply for a loan, you often sign a blanket consent for the lender to access your credit history, contact your employer, and share data with third parties. Some consents allow them to sell your data or call you indefinitely.

Checklist:

• Locate the “Consent to Processing of Personal Data” document (usually a separate PDF or checkbox).
• Read the purpose of data processing. It should be limited to “loan evaluation, issuance, and servicing.”
• Check the retention period. Legitimate lenders keep data for a limited time after the loan is closed. Indefinite retention is suspicious.
• Verify you can withdraw consent at any time.
• Look for any clause allowing data transfer to “third parties” without naming them. This is a red flag.

Red flags:

• Consent is hidden in a 20-page agreement with no summary
• You cannot download or print the consent text before applying
• Consent includes “marketing” or “analytics” purposes not related to the loan

---

3. Confirm the Lender’s Legal Identity

Why it matters: You need to know exactly who you’re borrowing from. If the lender disappears, you need a legal entity to pursue.

Checklist:

• Find the full legal name (e.g., “LLC ‘FastCash'”) and registration number (e.g., OGRN or INN in Russia) on the website’s “About” or “Contacts” page.
• Search the registration number on the relevant government registry (e.g., Federal Tax Service website nalog.ru for Russia) to confirm the company is active and not in liquidation.
• Verify the legal address matches the physical address on the website (if listed). A PO Box alone is suspicious.
• For individual entrepreneurs, check their registration and ensure they are authorized to lend.

Red flags:

• No registration number displayed
• Registration number returns “entity not found” or “liquidated”
• Legal address is a residential apartment or virtual office in a different region

---

4. Check the Lender’s Registration (for Microfinance Organizations)

Why it matters: In many jurisdictions, legal microfinance organizations must be registered with the central bank or financial regulator. Unregistered lenders are often illegal.

Checklist:

• Go to the relevant financial regulator’s official website (e.g., Central Bank of Russia at cbr.ru) and navigate to the register of microfinance organizations.
• Search by the lender’s full legal name or registration number.
• Confirm the registry entry shows “Active” status and the date of inclusion.
• Check the registry for any history of fines or license revocations (if available).

Red flags:

• Lender not found in the registry
• Registry shows “Excluded” or “License revoked”
• Lender claims to be an MFO but is registered as a different type of entity

Important: This check applies only to microfinance organizations. Banks, credit unions, and foreign lenders have different regulators.

---

5. Calculate the Full Cost of the Loan

Why it matters: The interest rate is only part of the story. Fees for processing, late payment, early repayment, and insurance can double the cost.

Checklist:

• Ask for the “Full Cost of Credit” disclosure (e.g., PSK in Russia). By law, lenders must show this as an annual percentage rate (APR) including all fees.
• Calculate the total repayment amount: principal + interest + all fees.
• Check for hidden fees: “application fee,” “service fee,” “document verification fee,” “insurance” (often mandatory and expensive).
• Ask about early repayment penalties. Some lenders charge a fee if you pay off early.
• Use a loan calculator to compare offers.

Red flags:

• Full cost is not displayed or is lower than the sum of all fees
• Mandatory insurance that costs more than 10% of the loan amount
• Fees that are not disclosed until after you apply

---

6. Assess Your Repayment Ability Honestly

Why it matters: Lenders don’t always check your income thoroughly. If you borrow more than you can repay, you risk default, debt collection, and a damaged credit history.

Checklist:

• Calculate your monthly income after taxes.
• Subtract all fixed expenses (rent, utilities, food, transportation, existing loan payments).
• Ensure the proposed monthly loan payment does not exceed a reasonable portion of your remaining disposable income (e.g., 30–40%).
• Consider a worst-case scenario: What if you lose your job or have a medical emergency? Can you still make payments for 3 months?
• Use a debt burden ratio calculator to see if your total debt payments exceed 50% of income. Many lenders will reject you above this threshold.

Red flags:

• Lender does not ask for proof of income (this means they expect you to default)
• You are borrowing to pay off another loan (debt spiral risk)
• The loan term is extremely short with a high payment that exceeds your income

---

7. Review Card Requirements

Why it matters: Some lenders require specific bank cards or demand access to your card details for automatic payments.

Checklist:

• Confirm the lender accepts your card type (Visa, Mastercard, Mir, etc.).
• If they require a specific card, verify the loan is from a lender that partners with the relevant payment system.
• Never share your card’s CVV or PIN. The lender only needs the card number and expiry date for repayment.
• If the lender asks for your online banking login credentials, stop immediately. This is a scam.

Red flags:

• Lender asks for your card’s CVV or PIN
• Lender demands remote access to your computer or phone
• Lender requires you to install an app that requests banking permissions (especially on Android)

---

8. Gather Required Documents in Advance

Why it matters: Legitimate lenders have a standard document list. If they ask for unusual or excessive documents, it may be a scam or identity theft attempt.

Checklist:

• Standard documents for a loan: passport (all pages with registration), second identification document, and proof of income (e.g., pay stubs or bank statements).
• For online-only lenders, you may need a verified account on a government services portal (e.g., Gosuslugi in Russia) to share your passport and income data electronically.
• For larger loans, expect a credit check and possibly collateral (car, property).
• Never send original documents or notarized copies. Scanned or photographed copies are sufficient.

Red flags:

• Lender asks for your passport’s blank pages (only the registration page is needed)
• Lender demands your work contract or employer’s phone number without explanation
• Lender requires a “deposit” or “insurance payment” before disbursing the loan

---

9. Protect Your Privacy

Why it matters: Your personal data (passport, income, address) is valuable. A data breach or sale can lead to identity theft.

Checklist:

• Ensure the website has a clear privacy policy that explains how your data is stored, who has access, and how long it is kept.
• Check if the lender is registered as a data operator with the relevant data protection authority (e.g., Roskomnadzor in Russia). You can search their registry.
• Use a separate email address and phone number for loan applications (not your primary work email).
• After the loan is repaid, request the deletion of your data (unless retention is required by law).
• Never share your data over unencrypted channels (e.g., email without HTTPS, SMS).

Red flags:

• No privacy policy or a one-sentence policy
• Lender shares data with “partners” without listing them
• Lender asks for your social media passwords or contacts

---

10. Spot Common Scam Signals

Why it matters: Scammers use urgency, fear, and promises to trick you. Knowing the patterns helps you avoid them.

Checklist:

• Watch for promises of “guaranteed approval” or “no credit check.” Legitimate lenders always check credit.
• Beware of “government support” claims. Governments generally do not directly issue personal loans through private lenders. Online portals may facilitate data sharing, not loan approval.
• Ignore calls or emails demanding an upfront fee (e.g., “processing fee,” “insurance deposit”) before the loan is disbursed. Legitimate lenders deduct fees from the loan amount, not from your pocket.
• Check for poor grammar, typos, and generic greetings (e.g., “Dear Customer” instead of your name) in communications.
• Search the lender’s name + “scam” or “reviews” on independent forums. Be cautious of fake 5-star reviews on the lender’s own site.

Red flags:

• Lender contacts you first (unsolicited offer)
• Lender pressures you to decide within minutes
• Lender asks for payment via gift cards, cryptocurrency, or wire transfer

---

11. Verify Support Contacts (Bonus Step)

Why it matters: If something goes wrong, you need a way to reach a human.

Checklist:

• Find a phone number, email, and physical address on the “Contacts” page.
• Call the number before applying. A legitimate lender will answer during business hours.
• Send a test email and check the response time (within 24 hours is good).
• Check for a callback request form or online chat (but don’t rely on chat alone).
• Verify the phone number is a landline or toll-free number, not a mobile number (though some legitimate lenders use mobile numbers).

Red flags:

• No phone number, only a contact form
• Phone number is out of service or leads to a generic voicemail
• Email address is a free service (e.g., @gmail.com, @yandex.ru) – legitimate lenders use their own domain

---

Final Word

This checklist is your shield. No legitimate lender will object to you taking 15 minutes to verify their credentials. If they pressure you to skip any step, walk away. There are thousands of legal lenders – you don’t need to risk your financial future on one that fails these checks.

Remember: No one can guarantee loan approval, speed, or government backing. If an offer sounds too good to be true, it almost certainly is. Use this checklist every time, for every loan. Your money – and your identity – are worth the effort.