This tool shows you exactly how much a fake lender will try to steal before you lose a dime. Run any offer through our checker—it takes 10 minutes and costs nothing.
How does the scam-spotter tool work?
You paste in what they told you. The tool flags the red lines.
Here's what you do. Copy the email, text, or website pitch. Drop it into the checker. The tool scans for the five phrases that show up in 1,247 confirmed fake-lender domains we track. It highlights any demand for upfront payment. It checks if the domain was registered in the last 12 months. It tells you if the "offer" expires faster than a real lender would ever move.
The whole thing takes 10 minutes. You get a yes/no verdict plus a breakdown of which warning signs fired.
What does "upfront fee" actually cost me?
Every dollar you send is a dollar you never see again.
Run the numbers. A fake lender says you've been approved for $1,500. They need $187 first—called a "processing fee," "insurance premium," or "first month's interest." You pay. They disappear. Your net position: negative $187, with no loan, no recourse, and no way to reverse a wire transfer or gift card.
Compare that to a real loan. Legitimate lenders deduct fees from the disbursement or roll them into repayment. They never ask you to pay first. The $187 demand is the entire scam. Everything after—promises of 30-minute funding, fake tracking numbers—is theater to keep you from hanging up.
Why does the 15-minute deadline matter?
Real loans don't expire in 15 minutes. That pressure is a trap.
A legitimate offer is good for at least 24 hours and usually 7–10 days. You have time to compare, to sleep on it, to check the lender's license. The fake lender knows this. The 15-minute window exists so you act before you think.
If someone says the rate "expires in 15 minutes," that's not urgency. That's a countdown to you making a mistake.
How do I check if the lender is real?
Two free checks take under a minute.
- Domain age: Go to whois.com. Paste in the lender's web address. Legitimate payday lenders have been around for years; their domains are 5–25 years old. A domain registered in the last 12 months with no business footprint is a dead giveaway. The check takes 30 seconds.
- License lookup: Your state's department of financial regulation lists licensed lenders. Real lenders appear. Fake ones don't.
Our tool automates the domain check against our database of 1,247 confirmed fake-lender domains as of May 2026. If the domain matches, we flag it immediately. We review new submissions within 7 business days.
What happens if I already paid?
Move fast. Recovery is hard, but limits matter.
Contact your bank or card issuer the same day. Report the fraud to the FTC at ReportFraud.ftc.gov or 1-877-FTC-HELP. File with the CFPB at consumerfinance.gov/complaint or 1-855-411-CFPB. Your state attorney general can take action too—NAAG.org has the directory.
Time limits matter: 2 business days for full protection, 60 days for partial. Generally, P2P scam losses are not recovered. The $187 or $487 you sent is likely gone. But reporting helps stop the next person.
Freeze your credit. You're entitled to a free credit-report freeze in all 50 states. Do it now. If you're juggling existing debt, we have guidance on prioritizing payments without falling for rescue scams.
Can I sue or get damages?
Maybe. The law provides specific amounts.
Fair Debt Collection Practices Act violations carry statutory damages up to $1,000 plus actual damages, attorney's fees, and costs. Telephone Consumer Protection Act violations run $500 per violation, $1,500 if willful. These aren't guesses—they're the figures written into the statutes.
But lawsuits take years. Prevention takes 10 minutes. Use the tool first.
FAQ: what borrowers actually ask
They said I was pre-approved for $1,800. Is that real?
Pre-approval without a hard credit pull is common marketing. But if they follow up demanding $187 via Walmart gift card or wire to "release the funds," it's fake. Real lenders don't take payment in gift cards. Real lenders don't ask for passwords. Know what real lenders can and cannot do.
The caller said they were from the sheriff's department. Do I have to pay $487 by 5 PM?
No. Law enforcement doesn't call to collect debts. They don't threaten to dispatch officers to your workplace. This is a common script: fake authority, fake deadline, fake consequence. Hang up. Call your local sheriff's office directly if you're worried. Don't use the number they gave you.
They want my online banking username and password to "verify" my account. Is that normal?
Never. Legitimate lenders use secure, read-only verification services like Plaid. They never ask for your password. Giving your login credentials lets them drain your account. If you've already shared them, change your password immediately and alert your bank.
I found a lender with a 6-month-old domain. Could they still be legitimate?
Unlikely. Legitimate payday lenders have been around for years. Their domains are 5–25 years old. A 6-month-old domain with no business footprint is a major red flag. Check whois.com to confirm. Our tool flags domains registered in the last 12 months automatically.
How long does the tool take, and what do I get?
Free, online, takes 10 minutes total. You get a pass/fail verdict on your lender, specific red flags triggered, domain age, and next steps. If the lender fails, we point you to reporting options. If they pass, we can connect you to verified, state-licensed lenders through our 30-second application.