What to Do After an Online Loan Scam

If you believe an online lender, loan broker, financing platform, or credit service may be fraudulent, the immediate priorities are to stop further payments, preserve the available evidence, and secure any personal or financial information that was shared.

• Stop additional payments
• Do not pay another loan release or approval fee
• Preserve the loan application and communications
• Save contracts and payment instructions
• Record every transaction
• Contact the financial providers involved
• Secure compromised accounts
• Review possible identity misuse

Online loan scams often promise fast approval or guaranteed financing and then require the applicant to make one or more payments before receiving any loan funds.

• Guaranteed approval regardless of credit history
• Approval before meaningful financial review
• Advance payment required before loan disbursement
• Security or insurance deposits
• Credit repair fees
• Account activation fees
• Processing charges paid to unrelated accounts
• Requests for cryptocurrency or gift cards
• Repeated new fees after earlier fees were paid
• Pressure to pay immediately

Fraudulent lenders may continue inventing new charges after the victim has already paid an initial fee.

• Do not pay another approval fee
• Do not pay a loan release fee
• Do not pay a security deposit without independent verification
• Do not pay a credit score upgrade charge
• Do not pay a tax directly to the supposed lender
• Do not pay a cancellation fee solely to recover earlier payments
• Do not borrow more money to satisfy additional demands

Save every document and message connected to the loan application because fraudulent websites or accounts may disappear later.

• Loan application
• Loan amount requested
• Approval message
• Interest rate claimed
• Repayment schedule
• Loan agreement
• Lender name
• Broker name
• Website URL
• Application or reference number
• Account dashboard
• Loan status messages

Fraudulent lenders may provide professional-looking contracts, approval certificates, insurance documents, payment schedules, or company registration materials.

• Loan contracts
• Approval certificates
• Insurance documents
• Payment schedules
• Company registration claims
• Licensing claims
• Signed documents
• Digital signatures
• Terms and conditions

Communications can show how the loan was advertised, what approval claims were made, and why each payment was requested.

• Emails
• WhatsApp messages
• Telegram conversations
• SMS messages
• Social media messages
• Phone numbers
• Loan officer names
• Broker names
• Voice messages
• Payment instructions
• Approval promises
• Fee demands

Create a separate record of every fee requested before or after the supposed loan approval.

• Application fee
• Processing fee
• Approval fee
• Security deposit
• Insurance fee
• Credit repair fee
• Account activation fee
• Tax payment
• Transfer charge
• Loan release fee
• Cancellation fee

Record whether each fee was paid, who received it, how it was paid, and what the lender claimed would happen afterward.

Every payment connected to the loan scam should be documented individually.

• Transaction date
• Amount
• Currency
• Payment method
• Sending account
• Beneficiary name
• Receiving account
• Receiving bank
• Merchant descriptor
• Payment provider
• Transaction reference
• Reason given for the payment

Contact the sending bank promptly and explain that the transfer was connected to suspected online loan fraud.

• Identify every affected transfer
• Provide beneficiary details
• Provide transaction references
• Explain what the payment was supposedly for
• Ask about available fraud review procedures
• Ask whether a recall may be possible
• Ask whether transaction tracing can be requested
• Keep all bank case numbers

If loan fees were paid by credit or debit card, contact the card issuer and identify each relevant transaction.

• Transaction date
• Amount
• Merchant descriptor
• Payment receipt
• Website used
• Reason the payment was requested
• Whether you personally approved the payment
• Card issuer fraud or dispute reference

Ask the issuer which fraud or transaction dispute procedures may apply to the circumstances.

Contact the payment provider promptly and identify the affected transaction.

• Recipient account
• Transaction ID
• Payment date
• Payment amount
• Linked bank or card
• Messages containing payment instructions
• Provider support reference

Some fraudulent lenders request cryptocurrency for approval fees, insurance payments, taxes, or loan release charges.

• Save the sending wallet
• Save each destination wallet
• Save transaction hashes
• Record the blockchain network
• Record the cryptocurrency type
• Record each amount and date
• Download exchange records
• Preserve messages containing wallet instructions

A request to pay loan fees using gift cards is a significant warning sign.

• Keep purchase receipts
• Preserve the card information where appropriate
• Record the card issuer
• Record the purchase date
• Record the amount
• Preserve messages requesting the cards
• Contact the issuer promptly

A fraudulent website may display a loan balance, approved amount, transfer status, or pending disbursement even when no real loan funds exist.

• Preserve screenshots of the account dashboard
• Preserve the claimed approval amount
• Save transfer status messages
• Record every condition added before release
• Compare the displayed information with actual bank records

Loan applications often require personal data, which means online loan scams can create both financial-loss and identity-risk concerns.

• Identity document copies
• Passport information
• Driver license information
• Bank statements
• Employment information
• Address information
• Tax information
• Selfies or verification photographs
• Phone numbers
• Email addresses

If login details, banking information, authentication codes, or device access were shared, additional account security measures may be necessary.

• Change compromised passwords
• Enable multi-factor authentication
• Review bank activity
• Review card activity
• Secure the primary email account
• Review active devices and sessions
• Remove suspicious remote-access software where appropriate
• Monitor for new unauthorized transactions

If the supposed lender received bank statements, account numbers, routing information, or online banking access, notify the relevant financial institution where appropriate.

• Explain what information was shared
• Review recent transactions
• Review saved beneficiaries
• Review linked payment services
• Change compromised credentials
• Preserve any unauthorized transaction evidence

After the victim realizes the loan may be fraudulent, the scammer may claim that previous fees can be refunded only after another payment.

• Cancellation fee
• Refund processing fee
• Tax before refund
• Account closure fee
• Compliance charge
• Refund insurance payment

Fraudulent lenders may copy the identity of legitimate lending companies or present fabricated business information.

• Company name
• Website domain
• Claimed registration number
• Claimed license number
• Office address
• Telephone numbers
• Email addresses
• Employee names
• Company documents
• Professional profiles

A chronological timeline helps connect loan promises, fee requests, transactions, and later demands.

• Date the lender was first discovered
• Date the loan application was submitted
• Date approval was claimed
• Date the first fee was requested
• Dates and amounts of all payments
• New fees requested after payment
• Loan release promises
• Refund or cancellation promises
• Date fraud was suspected
• Date financial providers were contacted

Depending on the country and circumstances, suspected online loan fraud may involve financial, lending, fraud, cybercrime, consumer, or law-enforcement reporting procedures.

• Prepare a factual case summary
• Provide lender and website information
• Include loan documents
• Provide transaction records
• Include identity information that was shared
• Preserve complaint numbers
• Keep confirmation emails and responses

GFKC country guides provide jurisdiction-specific recovery and reporting information for supported countries.

An online lender may claim to operate in one country while payments are directed to bank accounts, companies, payment providers, or cryptocurrency wallets in another jurisdiction.

• Victim's country
• Claimed lender country
• Claimed company location
• Receiving bank country
• Payment processor location
• Cryptocurrency exchange involvement
• Wallet transaction destinations
• Claimed licensing jurisdiction

The real transaction path should be distinguished from locations claimed by the suspected lender.

There is no single recovery process for online loan fraud. Possible actions depend on how the payments were made and where the funds went.

• Bank transfer recall or tracing
• Card dispute procedures
• Payment-provider fraud review
• Gift card issuer contact
• Cryptocurrency exchange notification
• Blockchain transaction analysis
• Fraud or financial complaints
• Legal or cross-border recovery assessment

Organize the loan, financial, identity, and communication records into a structured case file.

• Case summary
• Chronological timeline
• Complete transaction table
• Loan application
• Loan agreement and approval documents
• Fee requests
• Bank records
• Card records
• Payment-provider records
• Cryptocurrency records where relevant
• Communications
• Company and licensing claims
• Reports already submitted
• Financial-provider responses

• Payment method
• How quickly financial providers were contacted
• Transaction destination
• Whether recipient accounts can be identified
• Whether funds remain available
• Quality of the available evidence
• Countries and jurisdictions involved
• Available financial or legal procedures

The promised loan amount is not normally the confirmed financial loss. Recovery assessment should focus on actual money or assets transferred because of the scam.