To vet an online loan company safely, confirm five things before you send a single document: the company has a verifiable legal name and address, it never asks for an upfront fee to "release" or "insure" your funds, it discloses cost and repayment terms in writing, it uses secure bank-data tools instead of asking you to email a login, and its offer matches what your revenue can actually carry. If any one of those fails, stop. Legitimate online lenders and revenue-based funding marketplaces are transparent by default; scammers rely on urgency, secrecy, and money moving toward them before anything moves toward you. This checklist walks through each safety layer the way an underwriter reviews a file, so you can move fast on a real offer and walk away from a fake one.
Key takeaways
- Legitimate online business funders never require an upfront fee to "release," "insure," or "activate" your funds — fees come out of the advance or payback.
- "Guaranteed approval" is a reliable red flag; real funders underwrite every file based on revenue and bank deposits.
- Revenue-based / MCA marketplace approvals typically weight bank deposits and revenue over credit, with FICO around 500+ and minimums near $10,000.
- Reputable funders use read-only bank verification or PDF statements — never an emailed banking username and password.
- Funding through a legitimate marketplace commonly lands in about 24–48 hours, but speed never means skipping written terms.
- Verify any lender in the state Secretary of State registry and read the negative reviews before sharing bank data.
- Right-size the amount to what your deposits can carry in the payment rhythm offered (daily/weekly vs. monthly), not just the headline rate.
The 10-Point Safety Checklist (Run This Before You Apply)
Work through these in order. A trustworthy online funder passes all ten without friction. Treat any hard stop as a reason to close the tab.
- Verifiable identity. A real legal entity name, a physical US address (not just a P.O. box), and a working support line or email on the domain. Search the business name plus the word "complaint."
- No upfront fees to receive money. Real funders deduct fees from the advance or the payback stream. Nobody legitimate asks you to wire money, buy gift cards, or pay an "insurance," "activation," or "tax" fee to unlock funds.
- Written terms before commitment. You should see the funding amount, the fee/factor or rate, the repayment structure, and the payment frequency in writing before you sign.
- Secure bank connection. Reputable funders use read-only bank-verification tools (Plaid-style) or ask for PDF statements. Be cautious if anyone wants your live online-banking username and password by email or phone.
- Realistic promises. "Fast" and "high approval rate" are fine. "Guaranteed approval" is a red flag — no legitimate funder guarantees approval sight-unseen.
- Secure website. HTTPS, a real privacy policy, and a real terms page. Check that the domain isn't a near-copy of a well-known brand.
- Clear product naming. They tell you whether it's a term loan, a line of credit, or revenue-based financing / a merchant cash advance — and how repayment works for that product.
- A named contact. You can reach a specific person or team, and they answer questions instead of only pushing you to sign.
- Reasonable data requests. Bank statements, a voided check, and ID are normal. A demand for your full SSN, banking password, and a signed blank ACH form all at once, on first contact, is not.
- An offer that fits your cash flow. The daily or weekly payment leaves enough working capital to run the business. If it doesn't, it's the wrong offer even if the company is legitimate.
Red Flags vs. Green Flags at a Glance
Most fraud shows the same tells. Use this as a fast triage while you're on the phone or reading an email.
| Signal | Red flag (walk away) | Green flag (proceed carefully) |
|---|---|---|
| Fees | Pay upfront to "release," "insure," or "activate" funds | Fees disclosed in writing, deducted from funding or payback |
| Approval language | "Guaranteed approval, no matter your credit" | "Approval based on your revenue and bank deposits" |
| Pressure | "Offer expires in one hour — sign now" | Time to read terms and ask questions |
| Bank access | Emails or calls asking for your banking password | Read-only bank link or you upload PDF statements |
| Contact | Gmail/Yahoo address, no company domain, no address | Domain email, listed address, reachable support |
| Payment method | Wire, crypto, gift cards, Zelle to a person | Standard ACH tied to the funding agreement |
| Contract | No written agreement, or blank fields to fill later | Complete agreement with all terms filled in |
One red flag can be an honest sloppiness; two or more together is a pattern. Underwriters trust patterns, not single data points.
How to Verify a Lender Is Real (Step by Step)
Verification takes about ten minutes and is worth it before you expose any personal or bank data.
- Confirm the entity. Look up the legal business name in the state's Secretary of State business registry where the company claims to operate. A funder with no findable registration anywhere is a problem.
- Cross-check the domain age and match. A brand-new domain that closely mimics a known lender's name is a classic impersonation move. Type the URL yourself rather than clicking a link in an unsolicited text or email.
- Read independent reviews. Look at more than one source and read the negative reviews specifically. Patterns of "they took a fee and disappeared" are decisive.
- Call the number on the official site — not the one in the message. Scammers spoof caller ID and put their own number in phishing emails. Reach the company through its published contact path.
- Ask how repayment works and listen for a straight answer. A real funder explains the product, the payment frequency, and what happens if a payment fails. Evasion is data.
For a broader view of how business funding actually gets priced and approved, see our business funding guide and our explainer on revenue-based financing.
How to Read an Offer Without Getting Burned
A safe company can still hand you an offer that's wrong for your business. Read every offer for structure, not just the headline number. Focus on four things:
- What you receive vs. what you repay. With revenue-based financing and merchant cash advances, cost is usually expressed as a factor or fee rather than an APR. Ask for the total cost of capital in plain language and how it's collected.
- Payment frequency and size. Daily and weekly ACH payments hit cash flow differently than monthly payments. The question isn't only "can I afford it" but "can I afford it in this rhythm."
- What happens to slow weeks. Some revenue-based structures flex with your deposits; fixed structures don't. Know which you're signing.
- Fees beyond the main cost. Origination, ACH, and any early-payoff terms. Get them in writing.
Rule of thumb from the underwriting desk: if a payment would leave you unable to cover payroll or inventory in a normal week, it's too much capital collected too fast — regardless of the rate. Right-size the amount to what your deposits comfortably support.
Example: Comparing Two Online Offers Safely
The figures below are illustrative only, to show how to compare structure — not real quotes and not a payback calculation.
| Factor | Offer A (for example) | Offer B (for example) |
|---|---|---|
| Product | Revenue-based financing | Short-term fixed advance |
| Amount offered | $40,000 (for example) | $40,000 (for example) |
| Repayment | Percentage of daily deposits, flexes with sales | Fixed daily ACH, same amount every business day |
| Slow-week behavior | Payment drops when revenue drops | Payment unchanged |
| Fees disclosed? | Yes, in writing | Yes, in writing |
| Upfront fee to fund? | None | None |
| Best when | Revenue is seasonal or uneven | Revenue is steady and predictable |
Both offers here are safe — transparent, no upfront fee, terms in writing. The decision is about fit, not legitimacy. A seasonal business generally sleeps better with the flexible structure; a steady one may not need it. That's the difference between avoiding a scam and choosing well.
Decision Framework: When Online Revenue-Based Funding Fits — and When to Avoid It
Once a funder passes the safety checklist, use this to decide whether the product itself is right.
A revenue-based / MCA marketplace works best when:
- You have consistent monthly revenue and healthy bank deposits, even if your credit is thin — approval leans on deposits and revenue, with FICO around 500+ acceptable.
- You need at least ~$10,000 and want funding in roughly 24–48 hours, not weeks.
- A bank declined you or would take too long for a time-sensitive need (inventory, a repair, payroll, a same-week opportunity).
- Your cash flow can comfortably absorb regular payments and still cover operations.
- You want to compare multiple funder offers from one application instead of applying site by site.
Avoid it (or wait) when:
- Your margins are already thin and a regular payment would squeeze payroll or rent.
- You qualify for and can wait on a bank term loan or SBA loan at a materially lower cost.
- The need isn't urgent — time usually lets you find cheaper capital.
- You'd be borrowing to cover a structural loss rather than a timing gap; financing doesn't fix an unprofitable model.
A marketplace matches your file to several funders at once and lets bank deposits and revenue carry the approval rather than credit score alone. Approval is never guaranteed — a legitimate funder underwrites every file.
What to Do If You Suspect a Scam
If something feels off, act before money or data leaves your hands.
- Stop all payments and communication. Don't send "just one more" fee to recover an earlier one — that's how the scam compounds.
- Don't share more data. If you already gave banking credentials, change them immediately and alert your bank.
- Watch your account. Ask your bank about blocking unauthorized ACH debits and consider a fraud alert.
- Report it. File with the FTC (reportfraud.ftc.gov), your state Attorney General, and the CFPB. Reporting helps others and creates a record.
- Keep records. Save emails, texts, contracts, and payment receipts — they matter for disputes and reports.
Then start over with a funder that passes the checklist. Losing time to a scam is painful; losing your working capital is worse.
Frequently asked questions
How can I tell if an online loan company is legitimate?
Confirm a verifiable legal name and US address, check that it never asks for an upfront fee to release funds, make sure terms are provided in writing, and verify it uses secure bank tools rather than asking for your banking password. Cross-check the business in your state's registry and read independent reviews, especially the negative ones. A company that passes all of these is worth continuing with.
Is it safe to connect my bank account to an online lender?
Yes, when it's done through a read-only bank-verification tool (the kind that shows deposits without giving anyone the ability to move money) or by uploading PDF statements yourself. It is not safe to email or read out your live online-banking username and password. Legitimate funders never need your login credentials.
Why is 'guaranteed approval' a red flag?
Because no legitimate funder can promise approval without underwriting your file. Real revenue-based funders and marketplaces review bank deposits, revenue, and time in business before approving. "Guaranteed approval" is bait used either to collect upfront fees or to harvest personal data.
What credit score do I need for revenue-based financing?
Many revenue-based and MCA marketplace funders work with FICO around 500 and up because approval leans on your bank deposits and revenue rather than credit alone. Strong, consistent deposits can matter more than the score. Funding amounts often start near $10,000.
How fast can I get funded, and does fast mean risky?
Through a legitimate marketplace, funding often arrives in roughly 24–48 hours. Speed by itself isn't a warning sign — the fast, transparent funders are common. What's risky is being rushed to sign before you've seen written terms. Fast approval and a written agreement are not mutually exclusive; insist on both.
What should I do if I already paid an upfront fee to a suspicious company?
Stop sending money immediately and do not pay additional "recovery" or "release" fees. Contact your bank about disputing the charge and blocking further debits, change any credentials you shared, and report the company to the FTC, the CFPB, and your state Attorney General. Save all records for the disputes.
Is a merchant cash advance or revenue-based financing a scam?
No — the product itself is a legitimate form of business funding, priced as a fee or factor rather than a traditional APR. Scams are about the company's behavior (upfront fees, guaranteed approval, credential harvesting), not the product. Vet the funder with this checklist, then decide whether the structure fits your cash flow.
How do I choose between two safe offers?
Compare structure, not just the headline cost. Look at payment frequency and size, how the structure behaves in a slow week (flexible revenue-based vs. fixed), and any extra fees. Seasonal or uneven businesses usually prefer payments that flex with deposits; steady businesses may not need that flexibility. Pick the offer your cash flow can carry comfortably.
