Our Scam Spotter tool helps you identify fraudulent loan offers before you lose money. Run any suspicious message, website, or demand through the checks below to separate legitimate lenders from criminals. The entire verification process takes under two minutes.
"If They Approved Me, the Money Must Be Real" — Why Pre-Approval Means Nothing
Pre-approval emails are the most common entry point for loan scams. Criminals purchase mailing lists and blast messages claiming you've been "confirmed" for amounts like $1,800. The message feels personal because it includes your name, but this data comes from breaches, not from any legitimate credit check.
Real lenders do not approve loans without verifying income, identity, and state residency. The SB Loan application connects you to vetted, state-licensed lenders whose process requires roughly 30 seconds to begin—but that is only the start of their verification workflow. Approval follows documentation, not precedes it.
Scam pre-approval messages share a structure. They name a specific loan amount, cite an urgent deadline, and demand payment to "trigger" the transfer. One typical message reads: "Pre-approval for a $1,800 loan from [Fake Lender Name] is confirmed. To trigger the transfer, remit one month of interest—$187—using a Walmart gift card or wire transfer. Funds will arrive within 30 minutes of payment confirmation." The math reveals the trap: $187 on $1,800 for one month implies an annual cost structure no licensed lender uses, and legitimate lenders never accept gift cards or wire transfers to individual recipients as loan conditions.
"They Sound Official—They Must Be Regulated" — How Criminals Forge Authority
Scammers exploit the vocabulary of federal power. Messages arrive claiming to represent the "Federal Court," a "Sheriff's Department," or a state regulatory agency. They cite specific dollar amounts and impossible deadlines: "Payment of $487 is required by 5:00 PM today to prevent officer dispatch to your employment location."
No law enforcement agency or court demands payment via phone to prevent arrest. Debt collection for legitimate loans follows statutory notice periods, written documentation, and court filings you can verify. The threatening tone and compressed timeline—hours, not days—exist solely to prevent you from checking the claim.
Verify any official-sounding contact independently. Look up the agency's published number and call directly. Search court records through your county's online system. Real legal processes leave paper trails; scams leave only phone numbers that disconnect when pressed.
"I Need to Prove I Can Repay—So They Need My Login" — The Account Takeover Trap
Modern scams have moved beyond simple fee fraud. Criminals now request online banking usernames and passwords under the guise of "pre-disbursement account verification." They claim this confirms your account can receive deposits and demonstrates repayment capacity.
This request is never legitimate. Lenders verify accounts through micro-deposit confirmation—sending two small amounts, typically under $1.00, which you report back. They never need your login credentials. Once criminals possess your banking login, they can initiate unauthorized transfers, change account settings, and lock you out while draining funds.
The same principle applies to requests for Social Security numbers, copies of ID, or photographs holding your driver's license. Legitimate lenders collect this data through encrypted portals with visible security certificates, not through email attachments or text message responses.
"The Website Looks Professional" — Why Design Deceives
Fraudulent lender websites invest heavily in appearance. They copy color schemes, layout structures, and even loan calculators from established brands. The difference lies in history and footprint, not aesthetics.
Check domain age before proceeding. Established lenders maintain domains aged 5–25 years, supported by LinkedIn profiles for staff, Better Business Bureau pages, consumer reviews, and news coverage. Fraudulent domains typically register within the last 12 months and show no business footprint beyond the website itself.
Verification takes approximately 30 seconds at whois.com. Enter the domain, scroll to creation date, and compare against the lender's claims. A site claiming "15 years of trusted service" with a domain registered three months ago is fraudulent. Cross-reference staff names on LinkedIn—real lenders employ people with verifiable histories; fake sites use stock photos with invented names.
SB Loan maintains a registry of counterfeit web domains. As of May 2026, our surveillance includes 1,247 confirmed fraudulent-lender domains. Review cycles complete within 7 business days as new threats emerge.
"I Already Paid—It's Too Late" — Recovery Windows and Your Rights
Payment to a scammer is not automatically permanent. Federal and state laws create recovery pathways with specific deadlines.
Critical deadlines apply: 2 business days provides full protection, while the 60-day window offers partial protection only. These windows govern disputes with your bank or payment provider, not with the scammer directly. Contact your financial institution immediately upon suspicion. The longer you wait, the narrower your recovery options become.
Beyond recovery, you possess reporting rights that carry financial penalties for violators. Federal violations bring statutory damages of $500 each, increasing to $1,500 per incident when the violation is willful. State-level violations carry statutory damages of up to $1,000 plus your actual damages, attorney's fees, and costs. You maintain the right to a free credit-report freeze, available in all 50 states, preventing new account fraud even after information exposure.
If you have existing loan obligations, our guide for borrowers with current payday loans explains how to prioritize legitimate debts while addressing fraud losses.
Your Two-Minute Verification Checklist
Before responding to any loan offer, complete these steps in order:
- Check the deadline. Genuine loan offers remain valid for a minimum of 24 hours. Any offer expiring in 15 minutes or demanding immediate action is suspect.
- Verify the domain. Visit whois.com and confirm registration age. Domains under one year with no staff presence on LinkedIn indicate fraud.
- Identify the fee structure. Legitimate lenders deduct fees from loan proceeds or add them to repayment schedules. They never demand upfront payment via gift card, wire transfer, or cryptocurrency to "release" funds.
- Test the contact. Call the number on the lender's website—not the number in the email or text. If the representative cannot locate your application, the original contact was fraudulent.
- Confirm licensing. State-licensed lenders appear in your state banking regulator's database. Unlicensed operations cannot legally lend in your state regardless of their claims.
- Document everything. Screenshot messages, save emails, and record phone numbers. This evidence supports recovery claims and fraud reports.
Where to Report and Recover
Reporting serves two purposes: it protects others and creates documentation for your own recovery efforts. File complaints without delay through these channels:
FTC: ReportFraud.ftc.gov · 1-877-FTC-HELP — The federal consumer protection agency tracks patterns and initiates enforcement. CFPB: consumerfinance.gov/complaint · 1-855-411-CFPB — For financial product complaints, particularly when a scammer impersonated a regulated entity. Your state attorney general: state-specific consumer protection offices pursue local fraud operations and can assist with recovery in some jurisdictions.
For peer-to-peer payment losses, understand that P2P scam losses are generally permanent. These platforms treat authorized transfers as final, emphasizing prevention over recovery. Bank transfers and credit card payments retain stronger dispute rights—use them when possible.
FAQ: Real Questions from Real Borrowers
I got a text saying I was pre-approved. I never applied anywhere. How did they get my number?
Data breaches, marketing list sales, and number-generating software provide criminals with contact information. Pre-approval without application is always fraudulent—no legitimate lender approves unknown applicants.
The caller knew my Social Security number. Doesn't that prove they're legitimate?
No. Social Security numbers appear in hundreds of documented breaches. Knowledge of this number demonstrates access to stolen data, not official status. Legitimate lenders verify identity through questions you answer, not information they recite.
I paid the $187 fee. The money never came. What do I do now?
Contact your bank or payment provider immediately. The 2 business day window for full protection starts from when you discovered or should have discovered the fraud, not from payment. File reports with the FTC and CFPB using the channels above. Document all communication for potential legal action.
Can I get my money back if I paid by gift card?
Gift card payments are extremely difficult to recover. The cards are drained and resold within hours. Report to the gift card issuer immediately—some maintain fraud departments—and to law enforcement. Prevention remains your strongest protection.
How do I know SB Loan itself is legitimate?
Verify our domain age through whois.com. Review our borrower's bill of rights. We do not lend directly; we connect applicants to state-licensed lenders with published licensing information. We never request upfront fees, banking passwords, or payment to release funds.
To begin an application with vetted, state-licensed lenders, complete the SB Loan application—the process requires roughly 30 seconds to start, with full verification following transparent, documented steps.