If you're wondering whether a loan offer is legitimate, this tool walks you through the warning signs and gives you a clear yes-or-no readout—plus what to do next if something smells off. Think of it as a 90-second triage session: we'll help you sort real opportunities from expensive mistakes.

How does the Scam Spotter actually work?

The tool runs your situation through five verification checkpoints, each weighted by how often that specific red flag appears in confirmed fraud cases. You answer simple questions about the offer you received. The tool returns a risk score and a plain-English recommendation.

Here's what happens behind the scenes. The tool checks whether the "lender" asked for upfront payment (the $187 pattern), whether they imposed artificial deadlines (15 minutes versus the legitimate 7–10 day window), and whether their web presence checks out against our archive of 1,247 confirmed fake domains. It also flags requests for your online banking credentials—a move no legitimate lender makes.

The output is designed for action, not anxiety. If the tool flags high risk, it generates a ready-to-send report for your rights under federal lending law. If the tool clears an offer, it still reminds you to compare terms through licensed channels rather than accepting the first "yes."

What should I do if the tool says "Likely Scam"?

Stop all contact immediately. Do not send money. Do not provide additional personal information. Then document everything.

Scammers rely on momentum—your fear, your urgency, your hope that this loan solves a pressing problem. The tool's "Likely Scam" readout is designed to break that momentum with a concrete pause. Take screenshots of emails, texts, and websites. Note phone numbers and the exact wording of demands. This documentation becomes evidence if you report later.

Next, run through the reporting options. Each serves a different purpose:

  1. IC3 (ic3.gov) — FBI-run, no cost to file. Flag here if the fraud happened online. They aggregate data to identify patterns and pursue organized rings.
  2. CFPB (1-855-411-CFPB or consumerfinance.gov/complaint) — They forward to the lender and track patterns across the industry. Useful even if the "lender" is fake, because it builds the public record.
  3. FTC (1-877-FTC-HELP) — The primary consumer protection agency. They cannot resolve individual cases but enforcement actions start with their data.

If you already sent money, contact your bank or payment provider immediately. Regulation E gives you 2 business days for full protection on unauthorized electronic transfers, and 60 days for partial protection. After that window, recovery becomes difficult. Generally, P2P scam losses don't come back.

Why do scammers keep using the same playbook?

Because it works just often enough. The $187 upfront fee, the 15-minute deadline, the Walmart gift card or wire transfer—these aren't creative flourishes. They're tested pressure points that exploit specific financial desperation.

Consider the math from the victim's side. Someone facing a $400 rent shortfall sees a $1,500 approval and thinks: even if I lose $187, I'll still clear $1,313. The scammer never intends to deliver the $1,500. The $187 is the entire point. If one in ten targets pays, the operation is profitable.

The tool accounts for this psychology. It doesn't just flag "upfront fee bad"—it explains why the structure is impossible for legitimate lenders. Real payday lenders build costs into the loan itself, recovered through scheduled repayments. They don't need $187 in gift cards to "release" anything.

Can I recover money if I already paid?

Sometimes, but speed matters more than hope. Your recovery path depends entirely on how you paid and how quickly you act.

Wire transfers: Contact your bank's fraud department within hours. Wires are difficult to reverse but not impossible if caught early.

Gift cards: Call the card issuer immediately. Some can freeze unused balances. If the scammer already spent the funds, recovery is unlikely.

Cryptocurrency: Generally irreversible. Report to IC3 anyway—patterns help investigations even when individual recovery fails.

If a debt collector later contacts you claiming you owe on a fake loan, know your rights. Under the Fair Debt Collection Practices Act, you can collect statutory damages up to $1,000 plus actual losses, attorney fees, and costs from collectors who break the rules. Some violations carry $500 per violation, tripled to $1,500 for willful conduct. Document everything. The borrower's bill of rights outlines what collectors can and cannot do.

How do I protect myself going forward?

Build verification habits that outlast any single loan search. The tool helps in the moment, but lasting protection comes from systematic checks.

Before applying anywhere, verify state licensing. Legitimate payday lenders register with state regulators. Search "[your state] payday loan license lookup" and confirm the company appears. Cross-check the domain age—established lenders show 5–25 years of history, not months.

Use the Fenix Loans application as a comparison baseline. It clocks ~30 seconds and pairs you only with state-licensed options. If an outside offer claims faster approval or better terms, that speed itself becomes a data point: legitimate lenders don't need to rush you past verification steps.

Finally, freeze your credit reports. All 50 states must provide this free. A freeze won't stop all fraud, but it blocks new account openings in your name—useful if a scammer harvested your information during contact.

FAQ: Real Questions from Real Borrowers

The lender said I was "pre-approved" for $1,800. Isn't that a good sign?

Pre-approval without a hard credit check is meaningless. Scammers use it to create false confidence. Real pre-approval requires verification. If the message came unsolicited and demands $187 to "release" funds, it's the classic pattern from our 1,247-domain archive. Run it through the tool.

They said officers would come to my workplace if I didn't pay $487 by 5 PM. Can they do that?

No. This is a common intimidation tactic. Real law enforcement doesn't dispatch officers for civil debt, and they don't demand immediate wire transfers. The "Fake Sheriff's Department" script appears repeatedly in fraud reports. Hang up, document the call, and report to IC3.

The lender needs my online banking username and password to "verify" the account. Is this normal?

Never. Legitimate lenders use secure, read-only verification services like Plaid or Yodlee that don't require your credentials. Direct requests for usernames and passwords are an immediate, unambiguous red flag. Close the conversation and report the domain.

I already have a payday loan and now I'm getting offers to "consolidate" it. Should I trust these?

Be extra cautious. Scammers target existing borrowers knowing you're already in a payment cycle. Our guide for existing borrowers explains how to evaluate consolidation offers and spot the difference between legitimate help and advance-fee fraud.

The tool gave me a "low risk" score. Does that mean the loan is safe?

It means the specific red flags we track didn't appear. You still need to verify state licensing, read the full terms, and compare costs. The tool identifies scams, not bargains. A "low risk" offer might still carry high costs—just honest ones. Always compare through licensed channels before committing.