Loan scams targeting bad credit borrowers share a consistent profile: they advertise in the places where financially pressured borrowers search, they use language designed to sound like a solution to the specific fear of rejection, and they create urgency that discourages the checks that would expose them. Understanding how they operate is the most reliable protection against them, because the tactics are consistent even when the specific operator changes.
This guide covers the warning signs that identify a fraudulent or predatory loan offer, how to verify a lender using the FCA Firm Checker and Financial Services Register before sharing any personal information, the specific risk of clone firm fraud that affects bad credit borrowers in particular, and the steps to take if you have already provided information or made a payment to a suspicious operator. For background on how legitimate bad credit loans work and what genuine lenders assess, what are bad credit loans provides a useful starting point.
At a Glance
-
Six warning signs consistently identify fraudulent or predatory loan offers. Any single one is sufficient reason to stop engaging.
An upfront fee requested before any loan agreement is in place is one of the strongest indicators of fraud in unsecured lending. Guaranteed approval claims are incompatible with the affordability assessment that FCA-regulated lenders are legally required to complete. Absence from the FCA register means the operator is not authorised to lend in the UK. Unsolicited contact offering a pre-approved loan, vague or missing fee information, and artificial urgency to sign before reading the terms are each individually grounds to walk away. The presence of two or more together should be treated as near-certain evidence of fraud or serious malpractice.
› The warning signs of a bad credit loan scam · Why bad credit borrowers are targeted · Where loan scams appear
-
Clone firm fraud is a specific risk that is harder to detect, because the FCA register entry the operator provides belongs to a real company.
A clone firm copies the name, registration number, and branding of a genuine FCA-authorised lender. The register entry checks out because it is real, but the contact details and bank account the fraudulent operator provides are different from the genuine company’s. A borrower who calls the number given by the operator is speaking to the fraudster, not the real lender, and any payment goes to the fraudulent account. The only reliable protection is to verify the lender’s contact details using the FCA Firm Checker or the Financial Services Register directly — not through any link, phone number, or website the operator has provided.
› Clone firm fraud explained · How to verify a lender · What legitimate bad credit lending actually costs
-
Verification takes less than five minutes. If you have already shared information or made a payment, act immediately.
The FCA Firm Checker at fca.org.uk/consumers/fca-firm-checker confirms whether a lender is authorised and shows its registered contact details, and the FCA Warning List flags known unauthorised and clone firms. These checks should happen before any personal or financial information changes hands. If information has already been shared or a payment made, contact your bank immediately to flag the account for fraud monitoring and, if you paid by bank transfer, ask about reimbursement under the APP fraud rules. Report to Report Fraud at reportfraud.police.uk and to the FCA. If personal identifying data was provided, consider a CIFAS Protective Registration to reduce the risk of fraudulent credit applications in your name.
Why Bad Credit Borrowers Are Disproportionately Targeted
Fraudulent loan operators target bad credit borrowers for three reasons that are specific to this group. The first is that financial pressure reduces the time available for due diligence. A borrower facing an overdue bill, an eviction notice, or an urgent repair is less likely to spend time checking a lender’s credentials than one who is borrowing in a stable situation. The second is that a history of mainstream rejections makes unusual terms feel less suspicious. A borrower who has been declined five times by high-street banks is less likely to find it alarming that a lender is offering approval without the usual checks. The third is unfamiliarity with what legitimate bad credit lending actually costs and how it works, which makes fabricated terms harder to identify as unrealistic.
Scammers design their advertising to address all three conditions simultaneously. They create urgency through limited-time offers. They use the language of guaranteed approval specifically because that language is most appealing to someone who has experienced multiple rejections. And they keep the fee structure vague or buried until after the borrower is committed, precisely because a borrower unfamiliar with legitimate terms is less likely to recognise that the request is unusual. Recognising this design is itself a form of protection, because it reframes the appeal of an unusually easy offer as evidence of its fraudulent nature rather than its legitimacy.
Where Loan Scams Appear
Loan scams reach borrowers through specific channels, and knowing which ones carry the highest risk makes it easier to treat an approach with the appropriate level of caution. FCA research into fraud affecting consumers found that social media, phone calls, and text messages or messaging apps are the most common first points of contact for scam operators. The channels below are the ones most frequently used to target bad credit borrowers specifically.
Social media adverts are a primary channel. Fraudsters pay for sponsored posts on platforms where financially pressured borrowers are likely to search, and the adverts link to professional-looking websites that may be clones of genuine lenders. Sponsored search engine results carry a similar risk: a clone firm can bid on the genuine lender’s name and appear above the real company in search results, which is why the FCA advises using only the contact details shown on the Firm Checker, and never clicking links in emails or on company websites to reach it.
Text messages, WhatsApp messages, and cold calls are used for unsolicited contact. A text claiming pre-approval or a call offering a special rate should be treated as a warning sign by default, particularly if you have not made a recent loan enquiry. Fake comparison sites and lead generators also operate in this space: a borrower submits an enquiry on what appears to be a legitimate comparison service, and their details are then sold to multiple operators, some of which may not be authorised. If you begin receiving unsolicited loan offers shortly after submitting an enquiry elsewhere, that is a signal your data has been passed on.
The Warning Signs of a Bad Credit Loan Scam
The table below sets out the six most reliable warning signs of a fraudulent or predatory loan offer, alongside what a legitimate lender does in each case. These signs apply regardless of how professional the website appears or how familiar the branding looks. The presence of any single indicator is sufficient reason to stop engaging. The presence of two or more should be treated as near-certain evidence of fraud or serious malpractice.
| Warning sign | What a fraudulent or predatory operator does | What a legitimate lender does instead |
|---|---|---|
| Upfront fee before any agreement is in place | Requests payment described as a processing fee, broker fee, insurance, or security deposit before any loan is released | Does not request payment before any loan agreement is in place. Legitimate broker fees exist but must be disclosed in writing before payment details are taken, and the borrower has a right to a refund under s.155 of the Consumer Credit Act if no agreement is entered within six months |
| Guaranteed approval or no credit check claims | Uses phrases such as “100% accepted”, “no credit check required”, or “guaranteed regardless of history” | Describes acceptance criteria honestly, confirms that an affordability assessment is required, and uses soft search tools to indicate likelihood without a guarantee |
| FCA authorisation cannot be confirmed | Cannot provide a valid FCA reference number, or the number does not match the company name and address on the FCA Firm Checker or Financial Services Register | Is listed on the FCA register with full details that match what the company presents to borrowers. Provides the reference number without hesitation and does not appear on the FCA Warning List |
| Unsolicited contact | Contacts you by phone, text, email, or social media without you having made an enquiry, claiming you have been pre-approved or selected for a special offer | Contacts you only where you have an existing relationship or have given consent to marketing. Does not claim pre-approval before conducting an affordability assessment |
| Vague or absent cost information | Does not provide a clear APR, total amount repayable, or fee breakdown before asking you to proceed or pay anything | Provides a complete key facts document including APR, total amount repayable, monthly payment, and all fees before any agreement is signed |
| Artificial urgency or pressure | Claims the offer expires imminently, discourages you from taking time to read terms, or asks you to keep the offer confidential | Allows you adequate time to review the agreement, confirms your right to a cooling-off period after signing, and does not apply time pressure of any kind |
For the errors most commonly made by borrowers under financial pressure that result in engaging with predatory operators, top mistakes to avoid when applying for bad credit loans covers each one in detail.
Clone Firm Fraud: A Specific Risk Worth Understanding
Clone firm fraud is a form of loan scam that is more difficult to detect than straightforward fraudulent operators, because it uses the identity of a real, FCA-authorised company. A clone firm copies the name, registration number, FCA reference, and sometimes the branding and website design of a genuine lender. When a borrower searches the FCA register for the name or reference number provided by the clone firm, the entry they find is real, because it belongs to the legitimate company whose identity has been copied.
The fraudulent element is in the contact details. The clone firm provides its own phone number, email address, and bank account details, which differ from those of the genuine company. A borrower who calls the number provided by the operator is speaking to the fraudulent actor, not the real company. The payment they make goes to the fraudulent bank account, not the legitimate lender. The only reliable way to detect a clone firm is to verify the lender’s contact details using the FCA Firm Checker or the Financial Services Register directly, rather than using any contact details the operator has provided. Take the company name or FCA reference number, look it up on the Firm Checker at fca.org.uk/consumers/fca-firm-checker, and contact the company using only the phone number and website shown there. Also check the FCA Warning List (search for it from fca.org.uk), which lists unauthorised and clone firms the FCA is aware of. A firm that is not on the list may still be unauthorised, so treat the list as one check among several rather than a clearance.
How to Verify a Lender Before Sharing Any Information
The verification process takes fewer than five minutes and should happen before any personal or financial information is provided. The starting point is the FCA Firm Checker at fca.org.uk/consumers/fca-firm-checker, which is designed for consumers and shows at a glance whether a firm is authorised and what it has permission to do. The full Financial Services Register at register.fca.org.uk provides additional detail, including historical records. Search for the lender by name or by the FCA reference number they have provided. Confirm that the company name matches what the operator has presented, that the address and contact details match what the operator has provided, and that the authorisation status is shown as “Authorised” rather than “Registered” or any other status. Consumer credit lenders must be authorised, not merely registered. Note that an appointed representative operating under an authorised principal is legitimate but will show a different status on the register; the key check in that case is that the principal firm is authorised. If no contact details are shown for a firm, or the firm tells you the listed details are out of date, call the FCA consumer helpline on 0800 111 6768 rather than relying on what the operator provides.
If the FCA register entry matches and the operator appears genuine, also check independent reviews on platforms such as Trustpilot or Google before submitting a full application. A legitimate lender will have a review history that reflects genuine customer experiences. A pattern of reviews that are all five stars with generic wording, all submitted within a short period, or that have no responses to complaints, is worth treating with caution. For more detailed guidance on what to look for in a legitimate lender, how to choose a reputable bad credit loan provider covers the full assessment process. Finally, before submitting a full application to any bad credit lender, confirm that a soft search eligibility tool is available. This allows you to see an indicative rate and likelihood of acceptance without a hard search on your credit file, which is standard practice for legitimate bad credit lenders. For more on what legitimate bad credit lending looks like in practice, instant decision bad credit loans covers the common misleading claims in that specific area and how to identify genuine alternatives.
What Legitimate Bad Credit Lending Actually Costs
One of the most effective protections against loan scams is understanding what a legitimate bad credit loan offer actually looks like, including the rate range. A fraudulent operator may offer an unusually low rate to attract applications, or an unusually high rate that is buried in terms the borrower is pressured not to read. Understanding the realistic rate range for your credit profile helps identify both types of manipulation. The explainer below covers how representative APR works and why the rate actually offered to a bad credit borrower is likely to differ from the headline figure in advertising. All figures are illustrative.
What does “representative APR” actually mean?
When a lender advertises a rate, it does not mean everyone gets that rate
At least
51%
of the agreements resulting from the promotion are expected to be at or below the advertised rate
Up to
49%
may receive a rate above the advertised figure, based on individual risk assessment
Out of every 100 agreements resulting from the promotion:
51 out of 100 agreements are expected to be at or below the advertised rate. Up to 49 may be at a higher rate.
A legitimate lender’s advertised rate is a regulated figure with a defined meaning. A fraudulent operator’s advertised rate is a marketing claim with no regulatory basis. If a rate sounds significantly lower than what legitimate soft search tools are returning for your profile, that discrepancy is worth treating as a warning sign rather than a windfall.
What to Do If You Have Already Been Targeted
The speed of response matters if you have already shared information or made a payment to a suspicious operator. What you should do first depends on what has been shared. The table below routes you to the right steps for your situation.
| What happened | Immediate action | Follow-up steps |
|---|---|---|
| Paid by bank transfer (Faster Payments or CHAPS) | Contact your bank immediately. Ask for reimbursement under the mandatory APP fraud rules — your bank must reimburse up to £85,000 for in-scope Faster Payments and CHAPS transfers, subject to a £100 excess (waived for vulnerable customers). You have up to 13 months from the payment to claim. | Report to Report Fraud at reportfraud.police.uk (0300 123 2040). Report to the FCA if the operator claimed authorisation. Check your credit file for unauthorised searches. |
| Paid by debit or credit card | Contact your card provider and ask for a chargeback (available on debit and credit cards). If you paid by credit card and the amount was over £100, ask whether a Section 75 claim applies — although whether a payment to a fraudulent operator qualifies depends on the circumstances. Ask for compromised cards to be replaced. | Report to Report Fraud and the FCA as above. Monitor your account for further unauthorised transactions. |
| Shared card details, online banking credentials, or login information | Contact your bank immediately. Ask them to flag the account for fraud monitoring, replace any compromised cards, and reset online banking credentials. | Report to Report Fraud and the FCA. Check your credit file. Change passwords on any accounts that share the same credentials. |
| Shared personal identifying information (name, date of birth, address, National Insurance number) | Apply for a CIFAS Protective Registration at cifas.org.uk (£30 for two years). This flags your details so that participating organisations are prompted to carry out additional checks before processing applications in your name — though not all applications are checked, even with the registration in place. | Report to Report Fraud and the FCA. Check your credit file with all three agencies (Experian, Equifax, TransUnion) for hard searches or applications you do not recognise, and dispute any that appear. Continue to monitor your credit file regularly. |
| Engaged but not yet shared information or made a payment | Stop all contact with the operator. Do not click any further links, call any numbers they have provided, or respond to follow-up messages. | Report the operator to Report Fraud and the FCA. If the approach was by text, forward the message to 7726 (free). If by email, forward to [email protected]. |
If you paid by bank transfer and your bank declines reimbursement, you can escalate to the Financial Ombudsman Service. The APP fraud reimbursement regime (in force since October 2024) requires in-scope payment service providers to reimburse victims in most cases, and the Ombudsman can review whether your bank applied the rules correctly. For broader guidance on alternatives that avoid high-risk lenders entirely, alternatives to bad credit loans covers the options available to bad credit borrowers who need funding without engaging with the higher-risk parts of the market.
Tools that may help
Credit profile classifier
Understand how lenders are likely to categorise your credit profile before you approach any lender. Knowing what rate range to expect makes it easier to identify when an offer is unrealistically attractive and therefore suspicious. Use the tool
Representative APR reality checker
See how a representative APR translates into the rate you are actually likely to be offered based on your credit band. Useful for checking whether a rate quoted by an operator is realistic or designed to mislead. Use the tool
Not sure what to look at next?
All of our bad credit loan guides and tools in one placeFrequently Asked Questions
A lender is on the FCA register but the offer still feels suspicious. Is the register entry always reliable?
The FCA register entry is reliable for the company whose details it contains. The risk with clone firm fraud is that the entry belongs to a legitimate company but the operator approaching you is not that company. They are using the legitimate company’s name and FCA reference number while providing their own contact details and bank account. The register entry appears correct because it is correct, but for the genuine company rather than the fraudulent one.
The test is whether the contact details provided by the operator match the contact details in the register. If the phone number, email address, or website URL differs from what appears on the FCA Firm Checker or Financial Services Register, or if the operator cannot be found through the official website shown on the register, treat this as a serious warning. Contact the genuine company directly using the contact details on the Firm Checker or Register, not the details provided by the operator, and ask them to confirm whether they have made you an offer. If they have no record of the application, you are dealing with a clone firm.
I received a text message saying I have been pre-approved for a bad credit loan. Is this legitimate?
Pre-approval claims made through unsolicited text messages are a reliable indicator of a scam or a lead generator rather than a legitimate lender. A genuine FCA-regulated lender cannot approve or pre-approve a loan before completing an affordability assessment, and they cannot conduct that assessment without you having submitted an application. An unsolicited text claiming pre-approval has therefore either fabricated the approval, or the text is from a lead generator that has obtained your contact details from a data broker or a previous enquiry you made elsewhere.
Do not click any link in an unsolicited loan text message. If the message names a specific lender, look up that lender on the FCA Firm Checker at fca.org.uk/consumers/fca-firm-checker, and contact them directly using the phone number shown there to ask whether they sent the message. In most cases, the genuine lender will confirm they did not. Report the text to 7726, which is the UK’s spam reporting service, and report to Report Fraud at reportfraud.police.uk if you believe it is part of a fraud campaign. The FCA also accepts reports of misleading financial promotions at their website.
Is a broker fee always a sign of a scam?
No. Legitimate credit brokers, including those regulated by the FCA, can charge a fee for their services. The distinction is in when and how the fee is charged and whether it is properly disclosed. Under FCA rules (CONC 4.4), a fee-charging credit broker must disclose any fee in writing before taking payment details, send the borrower an information notice, and receive a customer confirmation before requesting or using any payment details. The borrower also has a statutory right to a refund (less £5) under s.155 of the Consumer Credit Act if no credit agreement is entered into within six months of an introduction. A broker fee collected after a loan has been arranged and funds disbursed, or deducted from the loan advance, is a common and legitimate structure.
A broker fee that is requested before any loan has been arranged, particularly where the fee is presented as a condition of accessing the offer rather than payment for a service already rendered, is a strong indicator of a scam. The critical test is timing and disclosure: was the fee clearly disclosed in writing upfront, and is it being collected after a genuine service has been provided? If a payment is being demanded before you have received anything of value, and particularly if the fee request is accompanied by urgency or secrecy, it is a scam fee rather than a legitimate broker charge. FCA-regulated brokers are listed on the register in the same way as lenders and can be verified by the same process.
How do I know if my personal data has already been shared with fraudulent operators without my knowledge?
The most common indicator is receiving unsolicited loan offers, particularly by phone, text, or email, when you have not made recent loan enquiries. If your contact details and basic financial information are circulating among lead generators or data brokers, you may begin receiving contacts from multiple operators you have never engaged with. A significant increase in unsolicited financial marketing contact following a period when you did submit loan applications online is a signal that your data has been passed to third parties.
Checking your credit file is also useful. Any hard searches you do not recognise may indicate that someone has submitted a credit application using your information without your knowledge. You can dispute unauthorised hard searches with each credit reference agency, Experian, Equifax, and TransUnion, directly through their online dispute processes. If you find applications you did not make, report this to Report Fraud at reportfraud.police.uk and to the lender that conducted the search. Placing a CIFAS Protective Registration (£30 for two years, applied for online at cifas.org.uk) flags your details with participating organisations so that additional checks are prompted before processing applications in your name, though not all applications will be checked even with the registration in place.
What is the difference between a scam lender and a legal but predatory lender?
A scam lender has no intention of providing a loan. Its goal is to collect upfront fees, personal data, or banking credentials. It operates outside the regulatory framework entirely, either by falsely claiming FCA authorisation or by not claiming it at all. A predatory lender is FCA-authorised and does provide loans, but structures its products, marketing, or contact practices in ways that exploit borrower vulnerability. Examples include lenders that use advertising language designed to obscure the true cost, or that apply excessive penalty charges that make a manageable debt unmanageable. Note that some of the most harmful historic practices, such as unlimited rollovers on high-cost short-term credit, have since been restricted: FCA rules limit rollovers to two per loan (since July 2014), and a price cap (since January 2015) means the total cost of credit on high-cost short-term products cannot exceed the original loan amount.
Both cause harm, but through different mechanisms and with different remedies available. A scam lender leaves no loan and limited recourse through the normal regulatory system, though your bank may owe you reimbursement under the APP fraud rules if the payment was made via Faster Payments or CHAPS. A predatory lender leaves a loan agreement that may be challengeable if the lender has breached FCA conduct rules. If you believe a legitimate lender has treated you unfairly, the Financial Ombudsman Service handles complaints against FCA-regulated lenders. For broader guidance on assessing whether any bad credit lending is appropriate for your circumstances, are bad credit loans a good idea provides a useful framework for the decision.
I paid a scammer by bank transfer. Can I get my money back?
If the payment was made via Faster Payments or CHAPS, you are likely covered by the mandatory APP (Authorised Push Payment) fraud reimbursement rules, which have been in force since 7 October 2024. Under these rules, your bank (the sending payment service provider) must reimburse you up to £85,000 per claim in most cases. The bank may deduct an excess of up to £100, but this excess cannot be applied if you are a vulnerable customer. You have up to 13 months from the date of the final payment in the claim to submit it.
Contact your bank as soon as possible and specifically ask for reimbursement under the APP fraud reimbursement requirement. Your bank must reimburse within five business days of a valid claim, or reach an outcome within 35 business days if it pauses the clock to investigate. Report promptly and cooperate with any information requests: the rules allow a bank to decline a claim where a non-vulnerable customer acted with gross negligence, which includes failing to report promptly or refusing to report to the police. If your bank declines the claim, ask for the reason in writing and escalate to the Financial Ombudsman Service, which can review whether the bank applied the rules correctly. You should also report to Report Fraud at reportfraud.police.uk, as this creates an intelligence record even if it does not directly recover funds. The reimbursement regime is under review, with findings due in 2026/27, so check current guidance if reading this later.
I live in Scotland. Where do I report a loan scam?
Report Fraud at reportfraud.police.uk currently covers England, Wales, and Northern Ireland. If you live in Scotland, report fraud to Police Scotland by calling 101. The FCA Firm Checker, the Financial Services Register, and the FCA Warning List all work UK-wide regardless of location, so the verification steps in this guide apply equally in Scotland. If you have lost money, contact your bank using the same process described above — the APP fraud reimbursement rules apply to UK payment service providers regardless of where in the UK you are based.
Squaring Up
Loan scams targeting bad credit borrowers are consistent in their tactics even when the specific operator changes. Upfront fee requests, guaranteed approval claims, the absence of verifiable FCA authorisation, unsolicited contact, vague fee information, and artificial urgency are the six indicators that identify a fraudulent or predatory offer. Any one of them is sufficient reason to stop engaging. The FCA Firm Checker and the Financial Services Register provide the verification mechanism, and the additional step of confirming contact details against the register entry — rather than using any details the operator has provided — is the protection against clone firm fraud specifically.
If you have already been targeted, speed matters. Contact your bank immediately if financial information was shared or a payment was made — and if you paid by bank transfer, ask specifically about reimbursement under the APP fraud rules. Report to Report Fraud at reportfraud.police.uk (or Police Scotland on 101 if you are in Scotland) and to the FCA, and consider a CIFAS Protective Registration if personal identifying data was provided. Legitimate bad credit lending exists and is accessible without engaging with the high-risk parts of the market. The verification steps described in this guide take minutes and are the most reliable protection available.
Continue your research
Guides, calculators, and comparators covering every aspect of bad credit finance Explore guides and toolsUpdate log: September 2026
What changed in this update
All fraud reporting references updated to reflect the replacement of Action Fraud by Report Fraud (reportfraud.police.uk), which launched in December 2025. The representative APR explainer refreshed to reflect the FCA Handbook definition — the advertised rate is the rate at or below which at least 51% of resulting agreements are expected to fall. A note added that the FCA is consulting on whether the representative APR metric remains the most effective cost disclosure. FCA Firm Checker and FCA Warning List added throughout as verification tools alongside the Financial Services Register.
The mandatory APP fraud reimbursement scheme (in force since October 2024) now covered in the response steps and a new FAQ, including the £85,000 cap, the 13-month claim window, and the vulnerability exception. Response steps restructured into a table routing readers by situation — bank transfer, card payment, shared credentials, shared ID, or no information shared yet. New section on where loan scams appear, covering social media, search results, messaging apps, fake comparison sites, and cold calls. Two new FAQs added: bank transfer recovery and Scotland-specific reporting. Scotland coverage gap noted for Report Fraud.
Broker fee guidance refined with specific FCA rules (CONC 4.4) and the s.155 refund right. Clone firm verification advice aligned with the FCA’s own guidance to use register contact details rather than search engines. CIFAS Protective Registration description expanded with current cost and scope. Predatory lender FAQ updated with regulatory context on rollover limits and the price cap. Tool cards updated to include the representative APR reality checker. Cross-links expanded to include the sister scam guides for debt consolidation and home improvement loans, and the reputable provider guide. Accessibility improvements applied to the APR explainer.
This article is for informational purposes only and does not constitute financial advice. If you believe you have been targeted by a loan scam, report to Report Fraud at reportfraud.police.uk (or Police Scotland on 101 if you are in Scotland) and contact your bank immediately. If you have concerns about a financial promotion, report to the FCA at fca.org.uk. Actual loan outcomes will depend on your individual circumstances and the specific product.
