The Complete Borrower's Checklist: Steps to Verify a Microfinance Loan Before You Apply

In the world of online microfinance (MFO) lending, the line between a legitimate service and a predatory scheme can be razor-thin. While the promise of quick cash is tempting, the consequences of borrowing from an unverified source—identity theft, hidden fees, illegal debt collection, or even losing your personal data—are far more severe. This practical checklist will guide you through the essential steps to vet any MFO before you share your passport, bank card, or consent. Important: No legitimate lender can guarantee approval or instant speed, and no MFO is affiliated with government social support programs like Gosuslugi unless explicitly stated in official registry data. Use this guide to protect yourself.

---

Step 1: Verify the Official Domain (Not a Lookalike)

Why it matters: Scammers create fake websites that mimic real MFOs or use generic names to lure victims.

How to do it:

• Check the URL carefully. Look for misspellings (e.g., "vash-zaim.ru" vs. "vash-zaym.ru"), extra hyphens, or unusual top-level domains (e.g., `.xyz` instead of `.ru` or `.com`).
• Use official registry sources. For Russian MFOs, the Central Bank of Russia (CBR) maintains a public register. Cross-reference the domain listed in the CBR registry with the site you're on.
• Look for HTTPS – but note that a padlock alone means nothing. Scammers use free SSL certificates too.
• Search for the company's official website via independent sources (e.g., Yandex or Google search for their official name + "official site").

Red flags: The domain was registered less than 6 months ago; the site uses a free email address (e.g., @gmail.com) instead of a company domain; the URL redirects to a different page after you click.

---

Step 2: Read the Consent Text (Don't Just Click "Agree")

Why it matters: Hidden in the fine print, you may give permission for the MFO to sell your data, call your employer, or use aggressive collection methods.

How to do it:

• Open the consent form or user agreement (usually a separate page or pop-up). Look for sections titled "Consent to Processing of Personal Data," "Loan Agreement," or "Terms of Service."
• Check for specific permissions:
• Does it allow the MFO to share your data with third parties (collection agencies, marketing partners)?
• Does it allow them to call your contacts or employer?
• Does it permit automated decision-making (e.g., AI scoring) without your knowledge?
• Look for a withdrawal clause. You must have the right to revoke consent at any time, without penalty.
• If you cannot find the consent text before submitting an application, do not proceed.

Red flags: The consent text is hidden behind a tiny link, written in a language you don't understand, or contains blanket permission to "use your data for any lawful purpose."

---

Step 3: Confirm the Lender's Identity (Legal Name and License)

Why it matters: You need to know exactly who you're borrowing from—not just a brand name.

How to do it:

• Find the full legal name of the MFO (e.g., "LLC 'Fast Finance'" not just "Fast Finance").
• Check the license number. Legitimate MFOs are registered with the CBR and have a unique license number.
• Search the CBR's official register (available on their website) using the legal name or license number. The register will show:
• Current status (active/suspended/revoked).
• Date of registration.
• Address and contact details.
• Verify the address matches the one on the website. If the MFO claims to be in Moscow but the address is a virtual office or a residential building, be cautious.

Red flags: No legal name or license number displayed; the license number doesn't match CBR records; the MFO is not listed in the CBR register at all (illegal lending is a criminal offense in Russia).

---

Step 4: Check the MFO Registry and Source Data

Why it matters: The CBR registry is the only authoritative source for verifying an MFO's legality. Claims about government affiliation or special programs are often false.

How to do it:

• Visit the CBR's official website and go to the "Register of Microfinance Organizations" section.
• Enter the MFO's full legal name or OGRN (Primary State Registration Number).
• Check the following fields:
• Status: Must be "Active." If "Suspended" or "Revoked," the MFO cannot legally issue loans.
• Date of inclusion: Older registrations (2+ years) are more trustworthy.
• Address and contact info: Compare with the website.
• Look for any history of violations. The CBR may publish warnings or fines against MFOs. Search the MFO's name + "CBR warning" or "CBR fine."

Important: No MFO is officially linked to Gosuslugi (the government services portal). Any claim of "Gosuslugi-backed loans" or "government support" is a scam. The only exception is if the MFO is a partner of a state program (rare and clearly documented on official government sites).

Red flags: The MFO is not in the registry; the registry shows a different legal name or address; the MFO has been fined for violations.

---

Step 5: Calculate the Full Cost of the Loan (APR and Total Repayment)

Why it matters: The headline interest rate is misleading. You need the Annual Percentage Rate (APR) and the total amount you'll repay.

How to do it:

• Find the "Full Cost of Credit" (FCC) disclosure. MFOs must show this in a standardized format (usually in a table or box) before you sign.
• Look for:
• APR (APR): The annualized rate including all fees (interest, service charges, insurance, etc.). In Russia, the maximum APR for MFOs is capped by law.
• Total repayment amount: The exact sum you must pay back (principal + all fees) by the due date.
• Late payment penalties: The fees for missing a payment.
• Use an online loan calculator to double-check the figures. Enter the loan amount, term, and interest rate to see if the MFO's numbers match.

Red flags: The APR is not displayed; the total repayment is hidden or unclear; the APR exceeds the legal maximum; the MFO charges "hidden" fees (e.g., for "account maintenance" or "processing").

---

Step 6: Assess Your Repayment Ability (Realistically)

Why it matters: Even a legitimate loan can ruin your finances if you can't repay it. MFOs often lend to people with low credit scores, but that doesn't mean you should borrow.

How to do it:

• Calculate your monthly income (after taxes and essential expenses like rent, utilities, food).
• Subtract your existing debts (credit cards, other loans, installments).
• Determine the maximum monthly payment you can afford without skipping essentials. A safe rule: total debt payments should not exceed a reasonable percentage of your income.
• Compare this with the MFO's repayment schedule. If the monthly payment is more than you can afford, do not take the loan.
• Consider the loan term. Shorter terms mean higher monthly payments. If you need a longer term, look for installment loans (though these are rare in MFOs).

Red flags: The MFO encourages you to borrow the maximum amount; they don't ask about your income or expenses; they promise "no credit check" (which often means high interest and predatory terms).

---

Step 7: Verify Card Requirements (What You Must Provide)

Why it matters: Some MFOs ask for unnecessary card details (e.g., CVV/CVC code, expiration date) that can be used for unauthorized transactions.

How to do it:

• Standard requirements: Legitimate MFOs typically ask for:
• Card number (16 digits).
• Cardholder name.
• Bank name (optional).
• Do NOT provide:
• CVV/CVC code (3-digit security code on the back).
• Card expiration date.
• PIN code.
• Online banking login/password.
• Use a virtual card (if your bank offers it) with a limited balance for the loan amount. This protects your main account.
• Check if the MFO allows repayment via bank transfer instead of card details. This is safer.

Red flags: The MFO asks for CVV or PIN; they request access to your online banking; they ask for a "security deposit" or "activation fee" via card.

---

Step 8: Review Documents Required (What's Normal vs. Suspicious)

Why it matters: Legitimate MFOs need basic identification and verification, but they should not ask for excessive or sensitive documents.

How to do it:

• Normal documents:
• Passport (Russian internal passport or foreign passport for non-Russians).
• Second ID (e.g., driver's license, SNILS, INN) – optional for some MFOs.
• Selfie with passport (for verification).
• Suspicious requests:
• Copies of your employment contract.
• Bank statements showing all transactions.
• Social media login credentials.
• Notarized documents (unusual for small loans).
• Documents proving marital status or children (unless for a specific state program, which is rare).
• Check the privacy policy to see how long documents are stored and whether they are encrypted. Legitimate MFOs will delete your data after the loan is repaid (or within a legal retention period).

Red flags: The MFO asks for documents that go beyond basic ID; they request your work schedule or family details; they want you to email documents to a personal address instead of uploading through a secure portal.

---

Step 9: Evaluate Privacy and Data Protection

Why it matters: Your personal data (passport, card, address) is valuable. A data breach or misuse can lead to identity theft.

How to do it:

• Find the Privacy Policy (usually a separate page or link in the footer). Look for:
• Data controller: The legal entity responsible for your data.
• Data processing purposes: Only loan processing and legal compliance (no marketing unless you opt-in).
• Data retention period: Typically a limited period after loan repayment, then deletion.
• Third-party sharing: Only with collection agencies (if you default) or legal authorities. No sharing with "partners" without your consent.
• Security measures: Mention of encryption (SSL/TLS), access controls, and data breach notification procedures.
• Check if the MFO is registered with Roskomnadzor (Russian data protection authority) as a data processor.
• Look for a Data Protection Officer (DPO) contact – a legitimate MFO should have one.

Red flags: No privacy policy; the policy is vague or allows unlimited data sharing; the MFO stores your data indefinitely; they don't respond to data deletion requests.

---

Step 10: Identify Scam Signals (Final Check)

Why it matters: Some red flags are universal across all MFOs, regardless of registry status.

How to do it:

• Check for these scam signals:
• No physical address – only a P.O. box or virtual office.
• No phone number – only email or a chatbot.
• Pressure tactics – "limited time offer," "only 5 loans left," "apply now or lose the rate."
• Upfront fees – "processing fee," "insurance deposit," "activation fee" before loan disbursement. Legitimate MFOs deduct fees from the loan amount, not charge upfront.
• Guaranteed approval – no legitimate lender approves everyone, especially without a credit check.
• Fake testimonials – stock photos or overly positive reviews on their site. Check independent review sites.
• No contact for support – no email, phone, or live chat that actually responds.
• Do a quick online search – type the MFO's name + "scam" or "fraud" or "complaints." Check forums and social media.

Red flags: Any of the above signals should make you walk away immediately.

---

Bonus: Check Support Contacts (Before You Need Them)

Why it matters: If something goes wrong (late payment, technical issue, fraud), you need a way to reach the MFO.

How to do it:

• Find multiple contact methods:
• Phone number (preferably a toll-free or local line).
• Email address (with a response time stated, e.g., "within 24 hours").
• Live chat (available during business hours).
• Physical address (for official correspondence).
• Test the support before applying. Send an email or call with a simple question (e.g., "What documents do I need for a loan?"). If you get no response or an automated reply that doesn't answer, be cautious.
• Check the MFO's social media (if they have it) – are they responsive to customer complaints?

Red flags: No phone number; email bounces back; live chat is a bot that can't answer specific questions; the physical address is a residential building or a non-existent location.

---

Final Checklist Summary

---

Remember: No legitimate MFO will promise "instant approval" or "government support" (especially not via Gosuslugi). Always verify through official registry data, not the MFO's claims. If something feels off, trust your instincts and walk away. Your financial safety is worth more than any loan.