A real lender evaluates an application; a scammer sells certainty and urgency.
Stop if someone guarantees approval, says a loan is waiting when you never applied, or demands gift cards, cryptocurrency, a wire, or a payment-app transfer to release funds. Do not reply, click, or call the number in the message. Independently verify the legal company and contact it through a trusted official source. If money or personal information was sent, act immediately: contact the payment provider or bank, secure accounts, report identity theft, and file the appropriate fraud reports.
Seven personal-loan scam red flags
| Signal | Why it matters | Safe response |
|---|---|---|
| Guaranteed approval | The FTC says legitimate lenders do not guarantee credit before reviewing an application and repayment risk. | End the contact. Do not pay to make the guarantee “final.” |
| Pay first to release funds | A scammer may rename the demand as insurance, processing, taxes, security, or paperwork. | Do not send money. Verify the lender and written disclosures independently. |
| Gift card, crypto, wire, or payment app only | These methods move quickly and can be difficult or impossible to reverse. | Do not pay. A lender should not require a gift-card code or crypto transfer to unlock a loan. |
| Unexpected approval text | A message about an application you never made is designed to trigger a reply, click, or identity disclosure. | Do not reply “YES,” “NO,” or “STOP.” Use the phone’s junk-reporting function and forward the text to 7726. |
| Urgent or secret instructions | “Last step,” “today only,” and “do not call the bank” language removes time for verification. | Pause and consult a trusted person. Contact the claimed company through a number you find yourself. |
| Lookalike identity | Caller ID, logos, email display names, search ads, and web domains can be spoofed. | Type the verified domain manually; compare the legal name, license, phone, address, and web domain. |
| Requests for secrets | Passwords, one-time codes, gift-card PINs, and remote-device access can let a thief take over accounts. | Never provide them. Disconnect and secure the affected account or device. |
Advance-fee loan scams
In an advance-fee scam, the operator claims it can provide or arrange a loan regardless of credit history, then requires money before the promised credit appears. The label can change—application, verification, insurance, processing, collateral, tax, refundable deposit, or transfer charge—but there is no real loan.
The FTC draws an important distinction. A legitimate creditor can charge a disclosed application or appraisal fee before evaluating some credit requests. What a legitimate party cannot do is tell a consumer that paying the fee guarantees a loan. For an unsecured personal loan, compare the written APR, finance charge, amount financed, payment schedule, and total payments. Our origination-fee guide explains how a disclosed lender fee differs from a demand to buy a promise.
Guaranteed approval and no-credit-check language
“Bad credit does not matter,” “100% approved,” and “approval guaranteed after payment” are high-risk claims. A real unsecured lender generally reviews identity, income, existing obligations, credit history, or other ability-to-repay information before making a firm offer. A soft-pull rate check can produce a preliminary result, but it is not guaranteed approval.
Some legitimate secured products may not require a traditional credit check because the consumer’s own deposit or asset secures the debt. That does not validate an unsolicited no-check offer. Verify the product on the institution’s official site and compare it with our prequalification guide and requirements checklist.
Fake lender texts in 2026
A January 2026 FTC alert describes texts that pretend to follow up on a loan application the recipient never submitted. The message may say a large amount is preapproved, request a Social Security or bank-account number to finish, or instruct the recipient to reply to cancel. Replying confirms that the number is active and can begin a phishing exchange.
Do not click, call the embedded number, or reply. Capture the message if needed for a report, use the phone’s “report junk” feature, forward it to 7726 (SPAM), and report the event at ReportFraud.ftc.gov. If the text names a real lender, find that lender’s official site independently and contact its fraud department using the number published there.
If the text specifically mentions NexFund or “Next Loan,” compare the message with our NexFund review and verification checklist. The safest assumption is still the same: a brand name in a text does not prove the sender or creditor.
Lender impersonation and lookalike websites
A scammer can copy a real lender’s logo, use a nearly identical domain, buy a search advertisement, spoof caller ID, or send a document with a real executive’s name. A familiar brand is therefore not proof that the sender works for that company. The FBI warns that spoofed domains can use alternate spellings or a different top-level domain to imitate a trusted site.
Read the domain character by character. Do not trust the display name in an email, the caller-ID label, or a link shortened in a text. Navigate through a verified regulator or type the known official address yourself. Then call the official fraud or customer-service number and ask whether the offer, representative, application number, and email domain are genuine.
Payment-method red flags
Gift cards, cryptocurrency, wire services, and instant payment apps are useful in legitimate contexts, but they are dangerous when a stranger dictates them as the only way to release credit. Gift-card numbers let the recipient drain value without possessing the card. Crypto transfers are typically irreversible. Wires and app payments can leave before the victim recognizes the fraud.
A fake lender may also send a counterfeit check, show a pending deposit, and ask the consumer to return part of it for fees. A bank can make funds appear available before discovering that the check is fake; the account holder can still owe the bank when the check is reversed. Do not send money back from a deposit until the bank independently confirms the item is final and legitimate.
How to verify a lender before sharing information
- Find the legal name. Request the company name, physical address, license or NMLS number, and the creditor that would fund the loan.
- Use the state regulator. Confirm that the company is authorized for your state. NMLS Consumer Access is a free tool for participating regulated companies and professionals, but also check the state banking or financial-services regulator.
- Verify an institution. Use FDIC BankFind for an FDIC-insured bank name or website and NCUA’s Credit Union Locator or Research a Credit Union for a credit union.
- Match identifiers. Compare the official domain, phone, address, trade names, and license number with the message. One matching logo is not enough.
- Contact independently. Type the official domain or use a regulator’s link. Do not use the phone number, email, or link supplied in the suspicious message.
- Read disclosures. Confirm the creditor, APR, finance charge, amount financed, payment schedule, total of payments, and loan agreement before accepting.
- Inspect the application sequence. A rate check is not approval. Know when identity, income, and credit will be verified.
- Reject payment pressure. Do not buy gift cards, send crypto, wire funds, or use a payment app to unlock loan proceeds.
Our lender-reviews hub links only to independently researched public terms, and the personal-loan comparison explains how to build a shortlist without submitting an application through NexaLoan. No review replaces regulator verification.
Information a scammer may be trying to steal
A fake application can collect a Social Security number, date of birth, driver’s license, employer details, bank routing and account numbers, card information, login credentials, one-time security codes, selfies, or identity documents. Those details can be used for account takeover, new-account fraud, tax fraud, or more convincing impersonation.
A real application can also require sensitive data, so context matters. Submit it only after independently verifying the creditor and secure domain, understanding why the information is needed, and intentionally beginning the application. The income-verification guide describes common documentation without asking visitors to upload it to NexaLoan.
If you paid a fake lender
Act immediately. Save the message, payment receipt, transfer number, wallet address, email headers, website address, phone number, and any document. Do not continue negotiating with the scammer and do not pay a supposed recovery agent.
| Payment method | Immediate action | Evidence to preserve |
|---|---|---|
| Credit or debit card | Call the issuer’s fraud department, report a fraudulent charge, and request reversal and account protection. | Statement entry, merchant descriptor, receipt, and messages. |
| Bank debit or bank wire | Contact the bank’s fraud team, report the unauthorized or fraudulent transfer, and request recall or reversal. | Account activity, routing details, confirmation, and recipient information. |
| Gift card | Contact the card issuer, report scam use, and ask for a refund or freeze. Keep the physical card and purchase receipt. | Card number, PIN exposure, card, receipt, and communication. |
| Payment app | Report the transaction inside the app and request reversal; also contact the linked bank or card issuer. | Profile name, transaction ID, linked funding source, and messages. |
| Cryptocurrency | Notify the exchange or service used and request help, understanding that transfers are typically not reversible. | Wallet addresses, transaction hash, exchange record, and solicitation. |
| Money-transfer service | Call the service’s fraud line immediately and request cancellation or reversal before collection if possible. | Transfer control number, recipient, amount, location, and receipt. |
If you shared personal or account information
- Contact the affected bank, card issuer, email provider, or other account through its official channel.
- Change exposed passwords and PINs; replace reused passwords and enable multi-factor authentication.
- Tell the institution if a one-time code, remote access, bank credentials, check image, or identity document was exposed.
- Visit IdentityTheft.gov to report identity theft and create a recovery plan tailored to the information lost.
- Place a free credit freeze with Equifax, Experian, and TransUnion if new-account fraud is possible. A freeze lasts until lifted and does not affect the credit score.
- Consider a free fraud alert. Contacting one nationwide bureau for an initial alert requires that bureau to notify the other two.
- Review credit reports and bank activity for accounts, inquiries, address changes, or transactions you do not recognize.
- Dispute inaccurate information with the credit-reporting company and the furnisher. Follow our credit-report dispute steps and keep copies.
If a thief gained remote access to a computer or phone, disconnect it from networks, remove unauthorized access software, update security software, and have the device checked before using it for banking. Account recovery should use a known-clean device when possible.
Where to report a personal-loan scam
- FTC: ReportFraud.ftc.gov for fraud patterns and IdentityTheft.gov when personal information was misused or exposed.
- FBI IC3: IC3.gov for internet-enabled crime, including phishing sites, online impersonation, and payment fraud. Preserve URLs and transaction details.
- State authorities: the state attorney general and banking or financial-services regulator for license and consumer-protection issues.
- Payment provider: the bank, card issuer, wire company, gift-card issuer, app, or crypto platform used. This contact should happen first when a transaction may still be stopped.
- Claimed lender: contact the real lender’s fraud department through its official website so it can investigate impersonation.
- Local police: file a report when money, identity documents, threats, or local evidence are involved, especially if another institution requests the report.
- CFPB: use the CFPB complaint process for a problem with an identifiable consumer-finance company after first using the company’s official support process when appropriate. It is not a substitute for immediate fraud reporting.
Reporting does not guarantee recovery, but fast payment-provider contact can improve the chance of stopping a transaction. Reports also give agencies evidence to connect victims, domains, phone numbers, accounts, and payment routes.
Safer borrowing alternatives to an urgent offer
Urgency is a scammer’s advantage. Pause and calculate whether borrowing solves the problem. Review current ranges in our personal-loan rate guide and contact known institutions directly. For a small short-term need, an eligible federal credit union’s PAL may provide a regulated alternative; see the payday-alternative loan guide.
If existing payments are already unaffordable, another loan may deepen the problem. Contact creditors through statement numbers and compare nonprofit counseling with consolidation using our DMP comparison. A safe provider will not require secrecy or payment by gift card to discuss options.
Frequently asked questions
Is every upfront loan fee a scam?
No. The FTC notes that a real creditor may require a disclosed application or appraisal fee before evaluating some requests. The red flag is a fee tied to guaranteed credit or demanded through an unusual, hard-to-reverse payment method. Verify the creditor and written disclosures independently.
Can caller ID prove that a lender called?
No. Caller ID can be spoofed. End the call and contact the lender through the number on its verified official website, statement, or regulator record.
Should I reply “STOP” to a fake loan text?
Not when the message is an unexpected loan solicitation from an unverified sender. The FTC’s 2026 alert says not to reply or click. Use the device’s junk-reporting tool, forward the text to 7726, and report it to the FTC.
Can a legitimate lender ask for my Social Security number?
A verified lender may need identity and credit information during an application. Do not provide it in response to an unsolicited message. First confirm the legal lender and secure official domain, then intentionally start the application.
What if the scammer used a real lender’s name?
Treat the sender and the real institution as separate until verified. Contact the real lender’s fraud department through its official channel, preserve the impersonation evidence, and report the fraud.
Primary sources
- FTC: advance-fee loan scams, guaranteed approval, and reporting
- FTC: 2026 fake loan text scam alert
- FTC: payment-specific recovery steps after a scam
- FTC: caller-ID spoofing and payment-method warnings
- FTC: free credit freezes and fraud alerts
- IdentityTheft.gov: identity-theft report and recovery plan
- FBI IC3: spoofed domains and independent domain verification
- FBI Internet Crime Complaint Center: online crime reporting
- NMLS Consumer Access: company and professional authorization search
- FDIC: BankFind verification for unfamiliar banks and websites
- NCUA: Credit Union Locator and Research a Credit Union
- CFPB: credit-freeze rights and fraud alerts
- CFPB: consumer-finance complaint process
Sources checked July 17, 2026. Scam tactics and reporting channels can change. Report a material error through our corrections policy. For ordinary application planning after verification, use the personal-loans hub.