The Borrower’s Safety Checklist: Steps to Verify a Microfinance Loan Before You Apply

When you need quick cash, the pressure to click “Apply Now” can be overwhelming. But in the world of microfinance organizations (MFOs) and online lenders, a moment of caution can save you from debt traps, identity theft, or worse. This step-by-step checklist is designed to help you independently verify every claim a lender makes. We will not promise approval, speed, or government support—only the tools to protect yourself. Use the official sources listed here; do not rely on third-party screenshots or “guaranteed approval” sites.

---

Step 1: Check the Official Domain (Not Just the Logo)

A legitimate lender’s website is your first line of defense. Scammers often copy logos and design but use slightly altered URLs.

• What to do: Look at the browser’s address bar. The domain should match the lender’s official name exactly (e.g., `example-mfo.ru` not `example-mfo-verify.com` or `example-mfo.net`).
• Red flags: Misspellings, extra words, or `.org`/`.info` domains for companies that should use `.ru` or `.com`. If the URL is a string of random characters, close the tab.
• Pro tip: Type the lender’s name into a search engine and look for the “Official site” label in search results (if supported by your region). Do not click ads—scammers buy ad space for fake sites.

---

Step 2: Read the Consent Text Before You Click “I Agree”

Your personal data is valuable. Every legitimate lender must clearly explain how they will use it.

• What to do: Before submitting any form, find the “Consent to data processing” or “Privacy Policy” link. Read it for specifics:
• Who exactly will have access to your data (the lender only, or third-party debt collectors?).
• How long they will keep it (e.g., “for the duration of the loan plus a specified period”).
• Whether they share data with credit bureaus (this is normal) or with marketing agencies (this is a red flag).
• Red flags: Vague language like “we may share data with affiliates” without naming them. A consent checkbox that is pre-checked. No consent text at all.
• Action: If you cannot find a clear consent statement, do not proceed. You have the right to refuse data sharing for marketing.

---

Step 3: Identify the Lender’s Legal Identity

Many online lenders operate under a brand name that is different from their registered legal entity. You need both.

• What to do: Scroll to the footer of the website. Look for:
• Full legal name (e.g., “LLC ‘Microfinance Company Example’”).
• Tax ID (INN) and primary state registration number (OGRN).
• Registered address (must match the address in the official registry).
• Why it matters: If you cannot find a legal entity, you are dealing with an unregistered operator. In many countries, lending without registration is illegal.
• Cross-check: Write down the OGRN or registration number. You will use it in Step 4.

---

Step 4: Verify the Lender in the MFO Registry (Official Source Only)

This is the most critical step. Legal MFOs must be listed in the relevant national financial regulator’s official database. For example, in Russia, this is the Central Bank of Russia’s register of microfinance organizations.

• What to do:
• Go to the official regulator’s website (e.g., `cbr.ru` for Russia).
• Navigate to the section “Financial Markets” → “Register of Microfinance Organizations.”
• Enter the lender’s OGRN or full legal name.
• What to check:
• The status: “Active” or “Excluded” (excluded means they can no longer lend).
• The date of inclusion: Older is not better, but very new entries (less than 6 months old) warrant extra caution.
• The address: It should match the website’s footer.
• Red flags: The lender is not in the registry. The registry shows “Excluded” or “Liquidation.” The name is slightly different (e.g., “Microfinance” vs. “Microcredit” – these are different categories with different rules).
• Important: Do not use third-party “MFO directories” or aggregators. Only the official regulator’s site is reliable.

---

Step 5: Calculate the Full Cost of the Loan (APR / PSK)

The interest rate you see in an ad is rarely the full story. Legitimate lenders must disclose the Total Cost of Credit (PSK in Russia, APR in other countries).

• What to do:
• Look for a document called “Individual Loan Terms” or “Full Cost Calculation.”
• This must show: the annual percentage rate (APR), the total amount you will repay (principal + all fees + interest), and the repayment schedule.
• Use a loan calculator to verify the costs. For example, a short-term loan with a daily interest rate will have a high APR when annualized. If the lender shows a low daily rate but claims a very low APR, they may be hiding fees.
• Red flags: The PSK is missing. The lender says “no interest” but charges “service fees” that are not disclosed upfront. The repayment schedule is unclear (e.g., “pay when you can”).
• Action: If the PSK exceeds your country’s legal limit (check your national regulator’s current rules), the loan may be illegal. Do not borrow.

---

Step 6: Assess Your Repayment Ability Honestly

This is not about the lender’s promise—it is about your own budget. MFOs often target people with low income, but high interest rates can make repayment impossible.

• What to do:
• Write down your monthly income after taxes.
• Subtract all fixed expenses (rent, utilities, food, transport, existing debt payments).
• The remaining amount is your “free cash.” As a general guideline, your loan payment (principal + interest + fees) should not exceed a comfortable portion of this free cash. Consider consulting a financial advisor for personalized advice.
• Why it matters: If you cannot repay on time, late fees can double or triple the debt within weeks. Many MFOs charge daily penalties (e.g., a percentage per day of the overdue amount).
• Red flags: The lender offers a loan larger than you requested. They encourage you to borrow the maximum. They do not ask about your income or expenses.
• Pro tip: Use the “cooling-off period.” In many countries, you have a set number of days to cancel a consumer loan without penalty. Read the contract for this clause.

---

Step 7: Know the Card Requirements

Most online MFOs require a debit card for disbursement and repayment. Some cards have restrictions.

• What to do: Check the lender’s list of accepted cards. Many MFOs do not work with certain card types (e.g., Maestro or Visa Electron in some regions).
• Red flags: The lender asks for your card’s CVV code or PIN. Legitimate lenders only need the card number, expiry date, and cardholder name to deposit money. They never need your PIN or CVV.
• Action: If the lender asks for your CVV, stop immediately. This is a phishing attempt.

---

Step 8: Gather the Required Documents (And Avoid Over-Sharing)

Legitimate MFOs require minimal documents for small loans (usually passport and a second ID). For larger amounts, they may ask for income proof.

• What to do: Prepare a clear scan or photo of your passport (main page and registration page). Some lenders also ask for a national identification number (e.g., SNILS in Russia) or a driver’s license.
• Red flags: The lender asks for your entire passport (all pages), your bank account login credentials, your social media passwords, or your biometric data (fingerprint, face scan) without a clear legal basis. Note that biometric data may be legally required for certain identity verification processes (e.g., under some government systems); check local regulations.
• Action: Only provide what is legally required. If they ask for unnecessary documents, refuse. Legitimate lenders do not need your social media passwords.

---

Step 9: Protect Your Privacy (Data Sharing and Storage)

Your data enters the lender’s system the moment you fill out an application. Understand how it is protected.

• What to do:
• Check the website for an SSL certificate (padlock icon in the address bar). This encrypts data in transit.
• Read the “Data Processing Policy” (not just the consent text). Look for statements like “data is stored on secure servers in the [country]” or “data is not transferred to third parties without your explicit consent.”
• Ask yourself: Does the lender have a DPO (Data Protection Officer) contact? Legitimate MFOs often list a privacy email.
• Red flags: No SSL (http:// not https://). The privacy policy is copied from another site (check for generic phrases). The lender says they will sell your data to “partners” without your opt-in.
• Pro tip: Use a separate email address for loan applications if possible, but be aware that lenders may require your primary contact details for verification. Do not use your primary work email.

---

Step 10: Detect Scam Signals (The Final Check)

Even if all the above steps pass, watch for these common scam patterns:

• Upfront fees: No legitimate MFO asks for a “processing fee,” “insurance fee,” or “deposit” before disbursing the loan. If they demand payment to “release” funds, it is a scam.
• Pressure tactics: “This offer expires in 2 hours” or “Only 5 loans left at this rate.” Legitimate lenders do not create artificial urgency.
• No physical address: The website lists only a P.O. box or a virtual office. Use Google Maps to verify the address (e.g., is it a real building?).
• Poor grammar/spelling: Scam sites often have broken language, mismatched fonts, or copied text from legitimate sites.
• No customer support: No phone number, no live chat, only a contact form that never replies. Legitimate MFOs offer at least a phone line during business hours.

---

Step 11: Verify Support Contacts (And Test Them)

Before you apply, try to contact the lender.

• What to do: Call the phone number listed on the website. If it is a landline, does it work? If it is a mobile number, is it answered professionally? Send an email and see if you get an automated reply within a reasonable time (e.g., 24 hours).
• Red flags: The phone number is disconnected. The email bounces back. The live chat is answered by a bot that only repeats “apply now.” The support staff cannot answer basic questions about interest rates or repayment terms.
• Action: If you cannot reach a human being before applying, do not apply. A lender that is hard to contact before the loan will be impossible to contact when you need help.

---

Final Checklist Summary (Print or Save This)

Before you click “Submit,” confirm each item:

1. Domain: Official, no misspellings.
2. Consent text: Clear, specific, no pre-checked boxes.
3. Legal identity: Full name, OGRN, address in footer.
4. Registry: Found in official MFO register (e.g., cbr.ru). Status: Active.
5. Full cost: PSK/APR disclosed, matches legal limit.
6. Repayment ability: Payment fits your budget (consider consulting a financial advisor).
7. Card requirements: No CVV/PIN requested.
8. Documents: Only required IDs. No over-sharing (note: biometric data may be legally required in some cases).
9. Privacy: SSL, data policy, no data selling without consent.
10. Scam signals: No upfront fees, no pressure, real address.
11. Support: Phone/email works, human answers.

Remember: A legitimate lender will never rush you. They will welcome your questions. If something feels off, trust your instinct and walk away. There is always another option—even if it means waiting a few more days for a different solution.

This checklist is based on publicly available regulations and common fraud patterns. Always consult your country’s financial regulator for the most current rules. This content is for informational purposes only and does not constitute professional financial or legal advice.