The Borrower’s Practical Checklist: How to Vet Any Microfinance Offer Before You Apply

When you need fast cash, a microfinance organization (MFO) might seem like the obvious solution. But the convenience can come with hidden costs, confusing terms, or outright scams. Before you click “apply,” use this step-by-step checklist to protect your money, your credit, and your personal data.

This guide is built around 10 concrete checks you can perform in minutes. It relies on official sources—the Central Bank of Russia’s registry of MFOs, the Gosuslugi portal, and standard consumer protection law. We will not promise you loan approval, instant speed, or government backing for any specific offer. Instead, we give you the tools to decide for yourself.

---

1. Confirm the Official Domain

Why it matters: Scammers often create fake websites that look identical to real MFOs. They may use a slightly misspelled domain (e.g., `zaym-online.ru` vs. `zaym-online.com`) or a .ru domain when the real site uses .com.

Checklist:

• Copy the URL from the ad or email into a plain text editor. Look for typos, extra characters, or unusual top-level domains (.xyz, .top, .loan).
• Use a whois lookup (e.g., who.is) to see when the domain was registered. A domain registered just days ago is a red flag.
• Verify the domain matches the official name on the Central Bank’s MFO registry (see step 4).

What to do: If the domain looks suspicious, do not enter any personal data. Close the tab.

---

2. Read the Consent Text for Data Processing

Why it matters: By law, MFOs must get your explicit consent to collect, store, and use your personal data. Scammers bury vague consent in fine print to sell your data or use it for fraud.

Checklist:

• Look for a separate consent checkbox on the application form. It should say something like “I consent to the processing of my personal data.”
• Click the link to view the full consent text. It must list: what data is collected, for what purpose, how long it’s stored, and whether it’s shared with third parties.
• Check for boilerplate that says “data may be transferred to partners.” This is a red flag if the partners are unnamed.

What to do: If the consent is missing, pre-checked, or vague, do not proceed. You can file a complaint with Roskomnadzor later, but it’s easier to walk away now.

---

3. Identify the Lender’s Full Legal Identity

Why it matters: Many loan offers come from aggregators or “lead generators” that sell your application to multiple lenders. You have the right to know exactly who you’re dealing with.

Checklist:

• Find the legal name (not just a brand name) on the website footer, “About Us” page, or contract template.
• Look for the OGRN (primary state registration number) and INN (taxpayer identification number). These must be displayed.
• Check the address – it should be a real office location, not a P.O. box or virtual address.

What to do: Write down the full legal name and OGRN. You’ll use these in the next step to verify the lender is legitimate.

---

4. Verify the MFO in the Official Registry

Why it matters: In Russia, all MFOs must be registered with the Central Bank of Russia (CBR). If a lender is not in the registry, it is operating illegally.

Checklist:

• Go to the CBR website (cbr.ru) and navigate to the “Financial Markets” section → “Registries” → “Registry of Microfinance Organizations.”
• Search by OGRN, INN, or legal name. The registry shows the date of entry, status (active/suspended), and license number.
• If the lender is not listed – stop immediately. Do not send money or personal data.

Source note: This check uses official CBR data. If the registry is down, call the CBR hotline to verify.

---

5. Calculate the Full Cost of the Loan (PSC)

Why it matters: The interest rate alone is misleading. The Full Cost of the Loan (PSC – Polnaya Stoimost Kredita) includes all fees, insurance, and charges. By law, MFOs must show this in a box on the first page of the contract.

Checklist:

• Find the PSC expressed as an annual percentage rate (APR) and as a monetary amount (e.g., “The full cost of the loan is 28,500 RUB over 30 days”).
• Compare the PSC with the advertised rate. If the ad says “0% for 30 days” but the PSC is high, the ad is deceptive.
• Check for hidden fees: late payment penalties, early repayment fees, or “service fees” that are not included in the PSC.

What to do: Use the PSC to compare offers. Never rely on the “daily rate” or “effective rate” advertised in big letters.

---

6. Assess Your Repayment Ability

Why it matters: MFOs are known for high penalties and debt traps. You need to be honest about whether you can repay on time.

Checklist:

• Calculate your debt-to-income ratio: total monthly payments (including this loan) divided by your net monthly income. Aim for under 30%.
• Check the late payment penalty in the contract. The maximum legal penalty may vary; calculate the worst-case scenario.
• Ask yourself: “Can I repay this loan in full by the due date without borrowing more?” If the answer is no, do not take the loan.

What to do: If you have any doubt, consider alternatives: negotiate with your landlord, ask family, or use a credit card with a lower APR.

---

7. Check Card Requirements (No Virtual or Prepaid)

Why it matters: Legitimate MFOs require a real bank card (debit or credit) issued in your name. Scammers often ask for virtual cards, prepaid cards, or cards from other people.

Checklist:

• The MFO should only ask for your own card issued by a Russian bank (e.g., Sberbank, Tinkoff, VTB). They should not ask for a card number from a foreign bank.
• Do not give a virtual card (e.g., from Qiwi, Yandex.Money, or other e-wallets) unless the MFO specifically states this is for the loan itself (rare).
• If they ask for a card that is not yours – for example, “send money to your friend’s card” – it’s a scam.

What to do: Only provide your own debit/credit card. If the MFO insists on a different card, walk away.

---

8. Prepare the Required Documents (Minimal List)

Why it matters: MFOs typically require fewer documents than banks, but they must be real and valid. Scammers may ask for unnecessary documents to steal your identity.

Checklist:

• Standard documents: Passport (main page and registration page), SNILS (pension insurance number), and sometimes a second ID (driver’s license or military ID).
• Never provide: Your bank card CVV, PIN, online banking password, or copies of your passport for “verification” outside the loan process.
• Check the MFO’s document policy – they should not ask for your work certificate or tax returns (that’s for banks).

What to do: If the MFO asks for more than the standard documents, call their official support line (see step 10) to confirm.

---

9. Evaluate Privacy and Data Security

Why it matters: Your personal data (passport, SNILS, bank card) is gold for identity thieves. The MFO must handle it securely.

Checklist:

• Look for a privacy policy page on the website. It should explain how data is stored, encrypted, and who has access.
• Check for a secure connection: the URL must start with `https://` (the padlock icon in your browser).
• Avoid MFOs that store your data on third-party platforms (e.g., Google Forms) or ask you to email documents.

What to do: If the privacy policy is missing or says “data may be sold to third parties,” do not submit. You can check the MFO’s data processing status on the Roskomnadzor website (if you’re already registered there).

---

10. Identify Scam Signals and Verify Support Contacts

Why it matters: Scammers often use pressure tactics, fake reviews, and non-working support numbers.

Checklist:

• Check for pressure: “Act now – this offer expires in 30 minutes!” Legitimate MFOs give you time to decide.
• Search for the MFO name + “scam” or “fraud” on Google. Read recent reviews from independent sites (not the MFO’s own testimonials).
• Verify support contacts: Call the official phone number listed on the CBR registry (step 4). If the number is disconnected or goes to voicemail, it’s a red flag.
• Check for physical address: A real office location should be findable on Yandex Maps or 2GIS. If the address is a residential apartment or a virtual office, be cautious.

What to do: If you encounter any of these signals, report the MFO to the Central Bank and Roskomnadzor. Do not send money.

---

Putting It All Together: A 5-Minute Quick Check

If you’re short on time, run through this mini-checklist:

1. Domain – no typos, registered >30 days ago.
2. Consent – separate checkbox, clear text.
3. Legal identity – OGRN and INN visible.
4. CBR registry – yes, active.
5. PSC – shown on first page, realistic.
6. Repayment ability – you can pay on time.
7. Card – your own bank card only.
8. Documents – passport + SNILS only.
9. Privacy – https:// and a privacy policy.
10. Support – working phone, no pressure.

If you can check all 10 boxes, the offer is likely legitimate. If even one fails, walk away. Your financial safety is worth more than any loan.

---

Final Word

This checklist is based on Russian law and official sources (CBR registry, Federal Law 151-FZ on Microfinance Activities, and Federal Law 152-FZ on Personal Data). It does not guarantee that a loan is approved, fast, or backed by the government. Use it as a tool to make an informed decision. If you ever feel unsure, consult a financial advisor or a free legal aid service.

Stay safe, borrow smart.