How to Spot Fake Lenders and Loan Scams

If you're looking for a loan online, you'll see offers from lenders you've never heard of - some are legitimate, some are not. This page covers the most common scams targeting borrowers, how to verify whether a lender or collector is real, and what to do if you've already been targeted. For real debt collectors and your rights with them, see the debt management guide.

Advance-fee fraud

Someone posing as a lender says you're approved for a loan - but you need to pay a fee first. They call it "processing," "insurance," "verification," or "activation." You pay the fee. The loan never arrives. They may ask for more fees.

Scammers typically ask for payment by wire transfer, prepaid debit card, gift card, cryptocurrency, or payment app - all methods that are difficult or impossible to reverse. The payment method itself is a red flag.

Fake lender websites

A website that looks like a real lender - professional design, fake reviews, sometimes copying the branding of a real company. You fill out an application, give personal information (SSN, bank account, employer), and either get asked for an advance fee or your information gets used for identity theft.

How to recognize it:

• Check the URL: look for misspellings, unusual domains, or slight variations on real company names.
• Check for a state license: legitimate lenders are licensed in the states where they operate. Your state's regulator has a license lookup directory that can verify this.
• Check the contact information: a real lender has a verifiable physical address and phone number. A website with only a contact form and no other details is a red flag.
• Look for a full agreement before commitment: the complete loan terms - amount, fee, total repayment, payment schedule, APR - should be available for review before you sign or pay anything.

Phishing texts and emails

You receive a text or email saying you're "pre-approved" for a loan, or that there's a problem with a loan you applied for. It includes a link to a fake website that collects your personal information.

How to recognize it:

• An unexpected loan text from a company you don't recognize or never contacted is a major red flag.
• Links that ask for SSN, bank account numbers, or login credentials: no legitimate lender requests these through text or email.
• Urgency language: "respond immediately," "your approval expires today," "verify your identity within 24 hours." Legitimate lenders don't create artificial deadlines via text.
• Don't click links in unexpected messages. If you think the message might be real, go directly to the lender's website by typing the URL yourself or searching for it.

Debt collector impersonation

Someone calls claiming you owe a debt and demands immediate payment. They may threaten arrest, wage garnishment, or legal action. They may have some of your personal information (from a data breach or purchased list) which makes them sound credible.

How to recognize it:

• Real collectors must provide validation information - what you owe, who you owe it to, and the original creditor. This is generally provided in the initial communication or within five days. Fake collectors often refuse to provide documentation, rush you to pay immediately, or threaten consequences if you don't pay on the spot.
• Threats of arrest for consumer debt are a major red flag. You cannot be arrested for failing to pay an ordinary consumer debt. If someone threatens arrest, it's almost certainly a scam.
• Demands for payment by gift card, wire transfer, or cryptocurrency are a clear sign of fraud. No legitimate collector uses these payment methods.
• Claims to be from a government agency (IRS, court, police) calling to collect a debt - government agencies don't collect consumer debts this way. Hang up.

If you're not sure whether a collector is real, don't pay anything. Request written validation first. For your rights with legitimate collectors, see the debt management guide.

Before giving any personal information or agreeing to any offer, check these five things:

• Check state licensing: every legitimate lender operating in your state should be licensed there. Your state's regulator has a license lookup directory. If the lender isn't in the directory, your state's fee caps and consumer protections may not apply to them.
• Verify company identity and address: a legitimate lender has a verifiable physical business address and phone number. Search the company name and look for a real business presence - not just their own website.
• Read the full agreement before signing: the complete loan terms should be available for review before you commit. The agreement should clearly show the loan amount, the fee or rate, the total repayment amount, the payment schedule, and the APR. If any of these are missing or unclear, don't sign.
• Be wary of upfront payment requests: if you're told you're approved or guaranteed a loan and then asked to pay a fee before receiving funds - especially by wire, gift card, crypto, or payment app - treat it as a scam. Real lenders may charge application fees in some cases, but they don't guarantee approval and then demand payment before disbursing.
• Check CFPB's complaint database: search for the company name in CFPB's public complaint database. While complaints alone don't prove a company is illegitimate, a pattern of similar complaints can be a warning sign.

When you apply for a loan online, you're entering sensitive information - SSN, bank account, employer, income. These steps help you do it safely:

• Check for HTTPS - but don't stop there: look for "https://" in the URL and a lock icon in the browser. This means the connection is encrypted, but it doesn't guarantee the site is legitimate - many scam sites also use HTTPS. Always verify licensing, company identity, and offer terms separately.
• Don't apply through links in texts or emails: go directly to the lender's website by typing the URL or searching for it. Links in messages can lead to fake sites that look identical to real ones.
• Use your own device and network: don't apply for a loan on a public computer or on public WiFi. Your information could be captured on shared devices or unsecured networks.
• Watch for unnecessary information requests: a loan application may legitimately ask for your SSN, income, bank account number, and employer. It should NOT ask for your full bank login credentials, your debit card PIN, or payment before the loan is funded.
• Save confirmation and correspondence: screenshot or save your application confirmation, any loan agreement, and all emails or texts. If something goes wrong, you need a record of what was communicated.

If you paid money to a scammer

• Contact your bank or payment provider immediately: if you paid by debit card, bank transfer, or payment app, your bank may be able to reverse or freeze the transaction. The sooner you act, the better the odds.
• If you paid by wire transfer: contact the wire service (Western Union, MoneyGram) and request a reversal. This may not work if the money has already been collected, but it's worth trying immediately.
• If you paid by gift card: recovery is difficult, but contact the gift card company immediately and report the fraud - sometimes funds can still be frozen or returned if the card hasn't been fully drained yet.

If you gave personal information to a scammer

• Place a fraud alert on your credit reports: contact one of the three credit bureaus and request a fraud alert. They'll notify the other two. This tells lenders to verify your identity before opening new accounts.
• Consider a security freeze: a freeze blocks new-credit access to your file until you lift it. You'll need to contact each bureau individually. See the credit guide for details on fraud alerts and freezes.
• Monitor your accounts: watch your bank account, credit cards, and credit reports for unauthorized activity. Set up alerts if you haven't already.
• Change passwords: if you used the same email and password on the scam site that you use elsewhere, change those passwords immediately.

How to report the scam

• FTC - ReportFraud.ftc.gov: the primary federal reporting tool for fraud and scams. Start here.
• CFPB - consumerfinance.gov/complaint: if the scam involved a company presenting itself as a lender or financial service.
• Your state attorney general: your state AG's consumer protection office handles state-level fraud complaints. Search "[your state] attorney general consumer complaint."
• Local police: file a police report if you lost money. You may need the report number for bank disputes or insurance claims.
• IC3 - ic3.gov: the FBI's Internet Crime Complaint Center, for internet-based fraud.