Learn to recognise advance fee fraud, clone firm scams, and fake lenders before sharing any personal or financial data online.
5 min read • Cash Train editorial team
Loan scams target people at their most financially vulnerable. When someone urgently needs money — to cover a bill, repair a car, or manage an unexpected expense — they are more likely to overlook warning signs that would otherwise raise immediate suspicion. Fraudsters know this, and they design their tactics accordingly.
UK Finance reported over £580 million lost to authorised push payment (APP) fraud in 2023, with loan-related fraud accounting for a significant share of cases reported to Action Fraud, the UK's national fraud and cybercrime reporting centre. The scams themselves range from crude social media adverts to sophisticated operations that convincingly impersonate real, FCA-authorised firms.
Understanding the most common types of lending fraud is the single most effective way to protect yourself. Once you can recognise the mechanics of each scam, the red flags become obvious and hard to ignore.
Advance fee fraud — sometimes called a "loan fee scam" — is the most common type of lending fraud in the UK. The scammer poses as a lender and tells the victim they have been approved for a loan. Before the funds are released, they ask the victim to pay an upfront fee. Common pretexts include an "insurance fee," "processing charge," "security deposit," or "transfer tax." The fee is paid, but the loan never arrives. The fraudster then either disappears entirely or continues to extract money with additional invented charges.
Marcus sees a Facebook advert for a £2,000 personal loan with "guaranteed approval, no credit check." He fills in a simple online form. Within an hour, someone calls him to confirm he has been approved. They ask him to pay a £99 "insurance fee" via bank transfer to secure the loan before it is released. Marcus pays. The caller then explains there is a further £49 "HMRC compliance fee." Marcus pays again. The caller's number is then disconnected.
The rule: No legitimate FCA-authorised lender will ask for money upfront before releasing funds. If any fee is requested before you receive a loan, stop all contact immediately.
The phrase "no credit check" is itself a significant red flag. Every responsible lender regulated by the FCA is required to carry out a creditworthiness and affordability assessment before approving a loan. A lender offering to skip this check entirely is either operating outside the rules or does not exist at all.
Clone firm fraud is more sophisticated and therefore more dangerous. Criminals copy the name, branding, FCA firm reference number, and sometimes the website design of a real, authorised financial firm to create a convincing fake. They then use this fake identity to solicit applications and steal money or personal data.
The FCA publishes a regularly updated list of clone firms on its website at fca.org.uk/consumers/clone-firms. Because criminals can register near-identical domain names (for example, replacing a hyphen, adding "uk" or "ltd," or using a slightly different spelling), the firm's website URL is not a reliable indicator of legitimacy on its own.
Priya searches online for a personal loan and finds a website that looks professional and quotes a real FCA registration number. The site even has the correct company name and registered address. She applies, submits her bank details for the "income verification," and receives a convincing-looking loan agreement. She is then asked to pay a £150 "arrangement fee" before drawdown. Only when she searches the FCA Register directly and calls the phone number listed there — not the one on the website — does she discover the real firm has no record of her application.
The rule: Always look up the firm's contact details on the FCA Register independently. Never use contact details provided by the firm itself — a clone will give you their own fraudulent numbers.
A growing category of loan fraud operates entirely through social media platforms — primarily Facebook, Instagram, TikTok, and WhatsApp. Advertisements promise fast, easy cash with minimal checks. Some use stolen testimonials or fabricated five-star reviews. When a victim makes contact, the "lender" operates entirely via messaging apps, never directing them to a legitimate website or providing verifiable business details.
These operations frequently target younger borrowers and those with poor credit histories who have been declined by mainstream lenders. The informal tone of the communication — chatting via WhatsApp rather than a formal application process — is designed to lower the victim's guard.
Legitimate lenders operate through verifiable websites, registered business addresses, and regulated contact channels — not just instant messaging apps.
No regulated lender can guarantee approval before assessing your creditworthiness and affordability. This phrase is a hallmark of fraud.
FCA rules require lenders to assess whether a loan is affordable. Any lender skipping this step is either unlicensed or does not intend to lend at all.
Whether called insurance, processing, security, or anything else — paying money to receive money is the core mechanism of advance fee fraud.
Pressure to decide immediately or risk losing the offer is a classic manipulation tactic designed to prevent you from doing due diligence.
You did not apply, yet someone has contacted you to offer a loan. Legitimate lenders do not approach people out of the blue with personalised loan offers.
Most personal loan providers are authorised by the FCA — the FCA Financial Services Register is the definitive, free-to-use public record of every authorised firm. Some lenders operate legally without FCA authorisation where their activities fall outside the regulated consumer credit perimeter. In either case, you should verify the lender is a genuine, registered UK company before sharing any personal or financial data.
If you suspect you have been approached by a fraudster — or have already paid money or shared personal data — act quickly.
If you transferred money, call your bank's fraud line right away. Under the Payment Systems Regulator's APP fraud reimbursement rules (effective October 2024), banks are required to reimburse victims of authorised push payment fraud in most circumstances.
Call 0300 123 2040 or report online at actionfraud.police.uk. This creates a formal crime reference number and feeds into national intelligence to help disrupt fraud networks.
Use the FCA's online reporting form at fca.org.uk/consumers/reporting-scam to notify the regulator. You can also call the FCA Consumer Helpline on 0800 111 6768.
If you shared bank details or other sensitive data, contact your bank, check your credit report for unfamiliar accounts, and consider placing a CIFAS protective registration (cifas.org.uk) to flag that your identity may be at risk.
Cash Train is an unregulated lender. We will never ask you to pay any fee — upfront or otherwise — before releasing loan funds. You can verify our company registration (CM Beyer Limited, no. 17009212) at Companies House. We will always identify ourselves clearly, explain our contact details, and give you time to make a considered decision. If something feels wrong, check the Register before proceeding.
If you receive an approach from someone claiming to be Cash Train that does not match the details on the Register, do not engage — report it to us directly and to Action Fraud.
Apply online with Cash Train — transparent about costs upfront, no advance fees, ever. We are an unregulated lender not on the FCA Register. Pre-launch — register your interest today.
Apply now →Warning: Late repayment can cause you serious money problems. For help, go to moneyhelper.org.uk