# Payday Loan Scam Spotter — Is This Lender Legit? 2026 | MeridianWallet > Database of known fake payday-lender domains, 7 scam red flags, and a free 'is this lender licensed?' lookup. Built on state-license rosters and FTC data. Источник: https://nimblepayday.com/tools/scam-spotter/ --- Updated weekly · 1,247 fake domains tracked # Is this lender legit? Type a lender name or domain. We check against state-license rosters and our database of known fake-lender domains. Plus: the seven red flags every borrower should know before clicking "apply." **Quick answer.** A legitimate payday lender will never demand an upfront fee before disbursement, never ask for your online-banking password, never accept payment in gift cards or crypto, and is always listed on at least one state's department of financial institutions license roster. If any of those four conditions fail, the offer is almost certainly a scam — walk away and report. ## Lender license lookup Check a name or domain against state-license rosters. Free. No data stored. Check Example match: state-licensed Licensed in TX, FL, OH License #TX-1234567 · OCCC roster · verified 2026-05-20 Example match: fake-domain DB ⚠ Likely scam Domain "fastcashloan-xyz.com" registered 2026-04-12, no state license, FTC complaint pattern. License rosters: TX OCCC · CA DFPI · FL OFR · IL DFPR · OH ODFI · MI DIFS · NV FID · TN DFI · MO DOF · AL SOS. Updated weekly. Source of truth = each state's official roster; we recommend cross-checking before any transaction. **On this page** The 7 red flags Common scam scripts How to verify a license If you already paid The fake-domain database Where to report Your legal protections FAQ OV **[Owen Vargas, JD](/authors/owen-vargas/)** · Reviewed by [Nina Brennan, AFC®](/authors/nina-brennan/) Published May 14, 2026 · Last reviewed May 24, 2026 · ~1,800 words · 8 min read You came here to find out if a loan offer is real or a trap. This tool checks the warning signs in about ten minutes and tells you what to do next. If the lender is legitimate, you'll know; if something's off, you'll have a clear path to protect yourself and report it. ### What the numbers tell us - Fake lenders commonly demand upfront fees around $187—often labeled as "processing," "insurance," or "first month's interest"—before releasing a promised $1,500 to $1,800 loan. - Real loan offers stay valid for at least 24 hours, typically 7–10 days. Scams pressure you to act in 15 minutes. - Legitimate payday lenders operate on domains registered 5–25 years ago. Fake domains are usually less than 12 months old. - MeridianWallet tracks 1,247 confirmed fake-lender domains as of May 2026. - Recovery prospects are grim: peer-to-peer scam losses are generally not recovered. - If you act fast—within 2 business days—you can get full protection on your accounts; after 60 days, only partial. ## What exactly does this tool check? It runs through the specific pressure tactics and technical footprints that separate a licensed lender from a criminal operation. The tool doesn't guess based on gut feeling. It compares what you're seeing against documented patterns: how old the website is, whether the "approval" came before any application, what payment method they want, and how quickly they demand you move. You'll answer a short series of questions about the offer you received. The tool weights each answer and produces one of three results: **Proceed with caution** (some flags, but not definitive), **High probability scam** (multiple serious violations), or **Likely legitimate** (matches licensed-lender behavior). Each result comes with specific next steps. ## Why does the 15-minute deadline matter so much? Because it's designed to override your judgment. A real lender wants you to read the terms, compare offers, maybe sleep on it. Scammers know that time pressure suppresses critical thinking. The tool flags any expiration under 24 hours as a serious warning sign. Think of it like a medical triage: the 15-minute deadline isn't a minor symptom. It's chest pain. It means stop everything else and investigate before acting. Real offers from [state-licensed lenders](/apply/) give you breathing room because they have nothing to hide. ## How do I use the domain-age check? This is the fastest technical verification you can do. The tool prompts you to visit whois.com and paste in the lender's web address. The lookup takes roughly 30 seconds. What you're looking for: - **Green light:** Domain registered 5–25 years ago. This matches the profile of established, state-licensed payday lenders. - **Red light:** Domain registered within the last 12 months, especially if the site claims decades of experience or "trusted since" language. A new domain with no business footprint—no SEC filings, no state licensing records, no physical address history—is a strong indicator of a fly-by-night operation. The tool cross-references your finding against our database of 1,247 confirmed fake-lender domains. ## What payment methods are automatic dealbreakers? Licensed lenders accept standard repayment: ACH from your bank account, debit card, or sometimes paper check. They do not require you to fund the loan before receiving it. The tool treats these payment demands as definitive scam indicators: - Wire transfer (especially Western Union or MoneyGram) - Gift cards (Walmart, iTunes, Steam, any retail brand) - Cryptocurrency (Bitcoin, Ethereum, or any coin) Here's the math scammers use against you. They promise $1,500 or $1,800, then demand $187 upfront. That $187 is pure profit for them. They never intended to send the larger amount. The tool recognizes this structure immediately and flags it. ## What if they already have some of my information? This is where many borrowers freeze. The caller knows your name, address, even partial Social Security number. They may reference a real debt you owe, or a real loan you took out years ago. This doesn't validate the offer—it just means your data leaked somewhere, which is unfortunately common. The tool helps you distinguish between *data availability* and *legitimate authority*. A scammer with your information is still a scammer. A real lender will: 1. Never demand your online banking username and password 2. Never threaten immediate arrest or workplace dispatch 3. Never require payment to "release" already-approved funds If you're currently managing existing debt, [our guide on handling current payday loans](/guides/already-have-a-payday-loan/) can help you assess your full picture before taking on any new obligation. ## Your immediate response checklist If the tool flags serious concerns, or if you recognize multiple warning signs before finishing, here's your step-by-step response: 1. **Stop all communication.** Do not argue, do not explain, do not "just ask one more question." Hang up, close the chat, delete the email. 2. **Document everything.** Screenshot emails, save voicemails, note phone numbers and times. This becomes evidence. 3. **Check your credit.** If you shared any personal information, request your free credit reports and consider a credit freeze. You're entitled to this in all 50 states. 4. **Report within the window.** For full account protection, act within 2 business days. After 60 days, your protections become partial. 5. **File complaints.** FTC at ReportFraud.ftc.gov or 1-877-FTC-HELP; CFPB at consumerfinance.gov/complaint or 1-855-411-CFPB; your state attorney general via NAAG.org. 6. **Review your rights.** [Our borrower's bill of rights](/guides/borrowers-bill-of-rights/) outlines what licensed lenders can and cannot do—use it as your reference standard. ## What happens after I submit a domain to your database? MeridianWallet reviews submissions within 7 business days. We verify the domain against multiple fraud indicators before adding it to our confirmed-fake list. This protects other borrowers from the same trap. Your submission also helps law enforcement. Patterns emerge from aggregated reports. A domain that seems like an isolated incident to you may be part of a coordinated campaign affecting thousands of borrowers. ## Can I recover money if I already paid? Generally, P2P scam losses are not recovered. This is harsh but necessary to understand. Wire transfers, gift cards, and cryptocurrency are designed to move value irreversibly. That's why scammers prefer them. However, you still have legal avenues. Violations of federal debt collection and consumer protection laws carry statutory damages up to $1,000 plus actual damages, attorney's fees, and costs. Under related statutes, willful violations can bring $1,500 per violation. These don't restore your $187 immediately, but they create consequences for the operation and may contribute to eventual asset recovery in enforcement actions. The more important recovery is preventive: stopping the scammer from accessing more of your accounts, preventing identity theft, and protecting your credit profile. ## Frequently asked questions They said I was "pre-approved" without me applying—how is that possible? It's not. Real pre-approval requires a soft credit pull and an application. "Pre-approved" emails or texts sent out of the blue are mass-blasted to purchased contact lists. The tool treats unsolicited approval announcements as a serious flag. If you want real offers, start with a controlled application through [our licensed-lender matching](/apply/) instead. The caller ID showed my local sheriff's office—isn't that proof they're real? Caller ID can be spoofed in seconds. A threat of immediate arrest, workplace dispatch, or any law enforcement action over an unpaid private debt is illegal under the Fair Debt Collection Practices Act. Real courts send written notices through certified mail. The tool flags any arrest threat as definitive scam behavior. They want my online banking login to "verify" the account—should I provide it? Never. Licensed lenders verify accounts through micro-deposits (sending two small amounts, asking you to confirm the amounts) or through secure, read-only third-party services that never see your password. Direct login requests are designed to drain your account. This is an automatic tool flag. I already paid the $187—what's my best move now? Follow the checklist above immediately, with emphasis on speed. The 2-business-day window for full protection still matters even after payment. File reports with all three agencies listed. If you paid by gift card, contact the retailer's fraud department; if by wire, contact the transfer company. Recovery is unlikely but not impossible, and your documentation helps build cases that protect others. How do I find a lender I can actually trust? Start with state licensing. Every legitimate payday lender holds a license from the state(s) where they operate. The MeridianWallet application takes approximately 30 seconds and only matches you with verified, state-licensed lenders. This eliminates the guesswork entirely. #### ⚠ Highest-risk red flag "Pay an upfront fee in gift cards before we release your loan." Every single instance of this is a scam. There are no exceptions in the U.S. payday-lending market. --- #### Quick database stats 1,247 Tracked fakes $1.4B Loan scam losses 2024 (FTC) 52% Of scams paid via gift card 23% Of scams use wire --- [Apply with a licensed lender](/apply/) ## Verify before you transact. Free. Three minutes. Will save you from the wrong loan — or the wrong "lender." Check a lender