A familiar logo or urgent message is not enough to trust an online loan offer. Check the legal business, the destination of the application and any payment request before sharing documents.
Information checked on 11 October 2026.
Identify the lender and any intermediary
A website may provide credit itself, compare products or forward an enquiry to another business. These are different roles. Locate the name of the organisation that would enter the credit agreement and compare it with the application destination. If a matching service introduces a lender, verify that lender separately. Do not assume that registration information belonging to one business covers every website displaying its name. Keep the business name and official contact route with the quotation so you can identify who is responsible later.
Check registration independently
The National Credit Regulator advises consumers to check the credit provider’s NCRCP registration details against its register. Use a route you find independently, rather than a verification button supplied only by the person making the offer. Compare the business name as well as the number. A copied registration number is not proof that a message or domain belongs to that provider. Registration checks also do not establish that the product suits your budget or that you will receive approval. You still need the actual terms.
Treat a payment to release a loan as a warning
The NCR warns about demands for advance payments before the promised loan is provided and about deceptive guaranteed or no-check advertising. If someone asks for a release, clearance or verification payment, pause. Contact the named business using independently obtained details and ask whether the request is genuine. Do not send a second payment because the first supposedly uncovered another obstacle. Distinguish the disclosed costs in a genuine written quotation from a stranger’s demand to unlock money that has not arrived.
Share documents through the intended channel
Before uploading identity or income documents, confirm the website address and read the recipient’s privacy information. Send only what is required through the provider’s stated process. Do not give another person a banking password, PIN or one-time login code to complete an application. A secure connection is useful, but it does not establish who operates the site. If a link arrives unexpectedly, open the organisation’s known website separately rather than using the message as both the request and its proof.
Keep evidence if something goes wrong
Save the website address, sender details, messages and payment references without circulating personal documents publicly. Contact your bank promptly if account access or a payment may be affected, and follow its official security process. Report the relevant facts to the appropriate organisation through a verified route. If an application merely fails, ask the legitimate provider what happened before paying someone who claims to repair it. A promise of guaranteed recovery or a guaranteed replacement loan deserves the same checks as the original offer.
Questions and answers
Does an NCR number prove a message is genuine?
No. Check that the number belongs to the named business and establish whether the actual domain or message is authorised by that business.
Should a comparison service receive my banking password?
No. Do not share passwords, PINs or login codes with a person offering to complete an application. Use the organisation’s official process and independently verify an unexpected request.
