Skip to content
Scam signals · before signing

The Payday Loan Scam Checklist: 12 Signals Before You Sign

Most fast-cash fraud repeats the same twelve patterns. The checklist: what each signal looks like, what it means, and the one move that disarms it.

Fast-cash fraud is not creative. The same dozen patterns repeat across gift cards, wires, ghost lenders, and rented charters, which is exactly why a checklist works on them. Run these twelve signals against any offer before you sign or fund anything. Each comes with the one move that disarms it, and every tool referenced here is free and public. The list is written for offers of every footing, because the licensed, the sovereign, and the outright fake all arrive through the same search box wearing the same language.

The Twelve Signals

1. Approval guaranteed before review. No lender can approve anyone before verifying income and identity, so a guaranteed-approval promise is bait or fraud by definition. Do this instead: treat the promise itself as the disqualifier and close the tab.

2. Upfront fees by gift card, wire, or crypto. Real lenders deduct fees from the proceeds or put them in the written schedule; none demand untraceable payment first. Do this instead: any pre-funding fee request ends the conversation immediately.

3. The lender is missing from all six regulator lookups. A state-license claim that fails every lookup in the six-regulator guide is a false claim. Do this instead: search by the legal entity name in the footer, never by the brand on the logo.

4. No tribe or charter named on a sovereign site. Genuine tribal lenders name the tribe and the charter in one sentence; absence fits the rent-a-charter pattern. Do this instead: require both names in writing, as covered in the internet lending rules.

5. The schedule stays hidden until after e-signature. Federal TILA requires the APR and total of payments in writing before you commit. Do this instead: no schedule, no signature, and treat the inverted order as the answer about the price.

6. Pressure timers. Rates that expire in 60 minutes are theater; real underwritten offers survive an hour of verification. Do this instead: let the timer run out and watch whether the offer changes, which it usually does not.

7. Generic sender domains. A bank-scale lender sending from a free mail domain is wearing a costume. Do this instead: match the email domain to the website domain, character for character, before replying to anything.

8. Requests for bank login credentials. A lender needs a routing and account number to fund a loan, never your password. Do this instead: a credentials request means account takeover; end it and change the password from your own device.

9. Unlicensed collection threats. Collectors must hold a Maryland collection license under the Collection Agency Licensing Board, and debts pursued by unlicensed agencies are challengeable. Do this instead: demand the license number in writing before discussing the debt at all.

10. Offered more than you asked for. Upsizing is how 400% to 800% APR products turn a survivable schedule into a trap. Do this instead: decline the extra, because the cheapest loan is the smallest one that closes the actual gap.

11. No physical mailing address. Regulated entities have one, and so do genuine chartered lenders; an absent address means no regulator to write to later. Do this instead: treat the missing address as a failed check, not a technicality.

12. Terms change between offer and contract. The numbers you verified are the numbers you agreed to, and any drift voids the vetting you did. Do this instead: compare the two documents line by line before signing, and walk on any changed figure.

Reading the Signals Together

One signal is noise; two are a pattern. Signal 5, the hidden schedule, is the load-bearing one, because nearly every other deception needs the price out of sight to work. Signals 2 and 8 are the two that move money out of your account directly, and both end the relationship the moment they appear. The license signals, 3 and 4, take the least time to check and disqualify the most offers, which is why the routine below leads with them. Signals 10 through 12 are contract-stage problems: they only surface after a lender has passed the lookups, which is why the checklist does not end when verification starts looking clean.

The 60-Second Verification Routine

Four moves cover nearly every pattern above. First, the lookup: a state regulator search for state-license claims, or tribe, charter, and OLA or NAFSA membership for sovereign claims. Second, the CFPB complaint database, searched for the exact entity name. Third, the written schedule, TILA box and all, before any signature. Fourth, the line-by-line comparison of offer against contract. Do it in that order: the first two moves cost seconds and eliminate most offers before the reading starts. The routine costs about a minute and catches every signal on the list except the live-pressure ones, which you catch by refusing to hurry. The state-law background for Maryland borrowers is in the Maryland laws guide.

One more habit worth keeping: keep the paperwork. Screenshots of the offer, the schedule, and the signed contract make every lever on this page stronger, from a regulator complaint to a challenge to an unlicensed collector. Fraud relies on borrowers having nothing in writing. Deny it that, and most of it folds before money ever moves.

Ready to price your request?

One short form reaches several lenders at once, and every page on this site shows the real cost of borrowing before you commit to anything. The form up top takes about two minutes, and walking away costs nothing.

Check My Eligibility →

Keep reading

Line items: common questions, answered straight

What is the most common payday loan scam?
The advance fee. A fee is demanded before funding, often by gift card, wire, or crypto, and the loan never arrives. Legitimate lenders deduct fees from the proceeds or put them in the written schedule. The tell is the direction of the money: real lending moves money toward you first, and any request for untraceable payment up front ends the conversation on the spot.
Can a legitimate lender ask for my bank password?
Never. A lender needs a routing and account number to fund a loan or debit a payment, and nothing more. A password request is account takeover, not underwriting. If it happens during an application, stop, close the session, change the password from a device you control, and warn the bank that credentials were shared with a third party.
How do I verify a tribal lender before signing?
On the sovereign track, since state lookups will not list these lenders by design. Require the tribe and charter by name, check OLA or NAFSA membership, and search the CFPB complaint database for the exact entity name. Then require the TILA disclosure with the full schedule before the e-signature. A lender that fails any of those steps has failed all of them in practice.
A collector is threatening me over a small loan. What lever do I have in Maryland?
The Collection Agency Licensing Board. Collectors must hold a Maryland collection license, and a debt pursued by an unlicensed agency is challengeable on that ground. Demand the license number in writing before discussing anything. Threats about arrest or employer contact from an unverifiable agency are reportable to the Office of the Commissioner of Financial Regulation as well.
What should I do if I already paid a scammer?
Move fast in this order. Contact the bank about the transfers and ask about recall or dispute options. Change any credentials the scammer saw. Report the entity to the CFPB and to the state regulator whose lookup it failed, with screenshots attached. Then stop all further payment; a second payment is the pattern fraud counts on, and no refund ever requires one.

Free · No obligation · Decision in minutes

Apply Now →