The Borrower’s Safety Checklist: Steps Before You Click “Apply” for an Online Loan

Online lending is fast, convenient, and often tempting when you need cash quickly. But speed comes with risk. Fraudsters and illegal lenders are experts at creating convincing websites that look exactly like legitimate microfinance organizations (MFOs) or even government services. Before you enter your passport number, bank card details, or sign an electronic consent, run through this practical checklist. It will help you verify that you are dealing with a legal, transparent lender—and avoid costly mistakes.

Important: This guide does not guarantee loan approval, faster processing, or any government support. It is a safety tool based on publicly available data, official registries, and common scam red flags. Always conduct your own due diligence.

---

1. Check the Official Domain (URL)

The first line of defense is the website address itself. Scammers rely on look-alike domains that are one or two characters off from a real lender’s site.

What to do:

• Look for the exact spelling of the company name in the domain. For example, a legitimate MFO might use `example-mfo.ru` – a scammer might use `examp1e-mfo.ru` (using the number “1” instead of the letter “l”).
• Check for the correct top-level domain (`.ru`, `.com`, `.рф`). Be wary of obscure TLDs like `.xyz`, `.top`, or `.loan` unless the lender is well-known.
• Never click on links from SMS, email, or social media ads unless you can verify the domain independently. Type the URL manually into your browser.
• Use a WHOIS lookup service (e.g., who.is) to see when the domain was registered. A domain registered recently is a major red flag for a lender claiming years of operation.

Pro tip: Legitimate MFOs and banks rarely change their domain. If you see a “new” website for a company you think you know, search for the old one and compare.

---

2. Read the Consent Text (and Understand It)

Before you submit any data, you will be asked to agree to “processing of personal data,” “consent to credit history check,” or “terms of the offer.” Do not just tick the box.

What to do:

• Open the consent document (often a PDF or a separate page). Read it fully.
• Look for specific permissions: Are they allowed to transfer your data to third parties? To call you at any hour? To automatically withdraw money from your card?
• Check that the consent is voluntary, specific, and limited in time. A blank consent that lasts “forever” is a red flag.
• Ensure the consent text names the exact lender you are dealing with, not a generic “partner” or “agent.”

Red flag: If the consent text is missing, unreadable, or written in a language you do not understand, do not proceed.

---

3. Verify the Lender’s Identity

You need to know exactly who you are borrowing from. Many online loan platforms are aggregators that pass your application to multiple lenders—some of which may be illegal.

What to do:

• Find the legal name, INN (Taxpayer Identification Number), OGRN (Primary State Registration Number), and legal address of the lender. This information must be visible on the website (usually in the footer or “About Us” section).
• Search for the INN on the relevant government tax service website to confirm the company exists and is not liquidated.
• Cross-check the legal address. If the address is a residential apartment or a virtual office, be cautious.

Red flag: A lender that hides its legal details or uses only a brand name without a legal entity is almost certainly operating illegally.

---

4. Check the MFO Registry (for Microfinance Organizations)

If you are borrowing from a microfinance organization (MFO), it must be registered in the official state registry maintained by the relevant financial authority. This is non-negotiable.

What to do:

• Go to the official financial regulator’s website and find the register of microfinance organizations.
• Search by the lender’s OGRN, INN, or full legal name.
• Verify that the registry entry is active (not suspended or excluded). Note the registration date and any history of violations.
• If the lender is not in the registry, it is illegal to issue loans. Do not proceed.

Important: This step applies only to MFOs. Banks and credit unions have separate registries. If the lender claims to be a “partner” of a bank, verify the bank’s registry status separately.

---

5. Identify the Source of Data (MFO vs. Gosuslugi)

Some loan applications ask you to log in via a state services portal or claim to be “backed by the government.” This is a common scam tactic.

What to do:

• If a lender asks for your state services login and password, stop immediately. Legitimate lenders never request your credentials. They may use the portal for identity verification via a one-time code, but they will never ask for your password.
• If the lender claims to be “affiliated with the government” or “part of a state program,” verify this claim on the official state services portal or the relevant ministry website. Do not trust the lender’s own claims.
• Use data only from official sources (regulator registry, tax service, state services portal) to confirm any government or MFO-related statements. Scammers often fabricate logos and certificates.

Red flag: Any website that asks for your state services password is a phishing attempt. Report it.

---

6. Understand the Full Cost of the Loan

The interest rate is only part of the story. You must know the total amount you will repay, including all fees, insurance, and penalties.

What to do:

• Look for the “Full Cost of Credit” on the loan offer. In many jurisdictions, this is legally required to be displayed in a box on the first page of the contract.
• The full cost includes interest, service fees, insurance premiums (if mandatory), and any other charges. It is expressed as an annual percentage and in currency.
• Use an online loan calculator to double-check the numbers. Enter the loan amount, term, and interest rate to see if the lender’s total matches.
• Ask about early repayment fees, late payment penalties, and extension costs. These are often hidden.

Red flag: If the lender cannot provide a clear total cost or if the cost seems excessive, do not borrow.

---

7. Assess Your Repayment Ability

This is the most personal step. A loan is only safe if you can repay it without falling into a debt trap.

What to do:

• List your monthly income and all essential expenses (rent, utilities, food, transportation, existing loan payments).
• Calculate the maximum monthly payment you can afford. Do not rely on “optimistic” projections or overtime pay.
• Use the lender’s repayment schedule to see the exact payment dates and amounts. Add a buffer for unexpected costs.
• Consider what happens if your income drops or an emergency arises. Do you have savings to cover at least one payment?

Red flag: If the monthly payment is a significant portion of your disposable income, the loan is too risky. Do not take it.

---

8. Review Card Requirements

Many online lenders require a debit or credit card to receive funds and make repayments. This can be a vector for fraud.

What to do:

• Check which card types are accepted (Visa, Mastercard, MIR). Some lenders only work with specific banks.
• Never give your card’s CVV/CVC code or expiration date unless you are on a secure payment page (HTTPS, padlock icon). Even then, be cautious.
• Understand the repayment method: Will the lender automatically debit your card on the due date? If so, ensure you have sufficient funds to avoid overdraft fees.
• Ask if you can repay via bank transfer or other methods to avoid automatic debits.

Red flag: If the lender asks for your online banking login or password (not just card details), it is a scam.

---

9. Prepare Your Documents (and Verify Privacy)

You will need to provide identity documents, proof of income, and possibly a second ID. Protect your data.

What to do:

• Prepare a clear scan or photo of your passport (main page and registration page), and proof of income (e.g., tax certificate, bank statement, or pension certificate).
• Check the website’s privacy policy. It should explain how your data is stored, who has access, and how long it is kept.
• Look for a data processing agreement that limits the lender’s use of your information to the loan application only.
• Never upload documents to a website that does not use HTTPS (look for the padlock icon in the address bar).

Red flag: If the privacy policy is missing, vague, or allows unlimited data sharing, do not submit your documents.

---

10. Identify Scam Signals (and Verify Support Contacts)

Finally, look for the telltale signs of a fraudulent loan site.

What to do:

• Check for multiple contact methods: a physical address, a working phone number, and an email address. Call the number to see if anyone answers.
• Search for the lender’s name + “scam” or “fraud” (in your local language) on search engines or social media. Read user reviews on independent forums.
• Look for fake social proof: dozens of 5-star reviews that all sound the same, or “guaranteed approval” claims.
• Check the website’s design: broken links, bad grammar, or missing pages are red flags.
• Verify the support contacts. A legitimate lender will have a professional support team reachable during business hours. Scammers often use free email services (e.g., @gmail.com, @yandex.ru) instead of a company domain.

Red flag: If the lender promises “instant approval without checking your credit history” or “guaranteed approval regardless of your situation,” it is almost certainly a scam. No legitimate lender operates that way.

---

Final Step: When in Doubt, Walk Away

This checklist is not exhaustive, but it covers the most critical areas. If any step raises a red flag, do not proceed. There are always other, safer options—even if they take a little longer. Your financial and personal data security is worth far more than the convenience of a quick loan.

Remember: You have the right to ask questions, demand clear answers, and refuse to sign anything you do not fully understand. A legitimate lender will respect that. A scammer will pressure you to hurry. Trust your instincts.