Back
How to tell if a lender is legitimate in Australia and what are the red flags?

How to tell if a lender is legitimate in Australia and what are the red flags?

Before you apply for a loan, check if the business is actually allowed to lend? And does the website, caller or account that they mention really belong to them?



An ABN alone doesn't prove a business can lend. And even a legit lender can offer you a loan that doesn't actually suit your budget. That doesn't mean every lender you haven't heard of is dodgy. It just means the checks matter.

Three questions to ask before you apply

A slick website or a licence number isn't enough on its own. Work through these three questions, in order:

1. Is the business legally allowed to offer or arrange this type of loan?

2. Does the website, caller or account really belong to that business?

3. Does the loan suit your budget and circumstances?

A yes to the first question doesn't answer the second. And a yes to both doesn't mean the loan is right for you.

An ABN isn't a lending licence

An ABN identifies a business for tax and registration: nothing more. It doesn't show they're allowed to provide consumer credit.

For most personal and household loans in Australia, the lender needs an Australian Credit Licence (ACL), or has to operate as a credit representative of a licensed business. That's the licence that actually matters, not an ABN, ACN or Australian Financial Services Licence.

Search for the lender or credit representative. Check the legal name, licence status and licence number match what you've been told.

Why a clean licence search isn't the finish line

The register can confirm a business exists and holds a licence. It can't confirm that the website, email, phone number or bank account contacting you actually belongs to them.

Scamwatch posted about this in March 2026, after fake personal-loan websites copied real ABNs and licence details from legit Australian businesses. The licence was genuine. The site using it wasn't.

A real licence number proves the business exists, but it doesn't prove the person contacting you is that business.

After you've checked the licence, confirm the website domain, email address, phone number and payment details. Then contact the real organisation using details you've found independently, not the ones in the message or the ad you're received.

A simple three-step check

Do all three checks. Each one answers a different question.

1. Check the licence

Search ASIC's credit register for the business or credit representative, and confirm the legal name, licence status and authorised activity match what you've been told.

2. Check you're dealing with the real business

Compare the licensed business's details with the website domain, email address and phone number contacting you, find the organisation's contact details yourself and get in touch independently, and check who owns any bank account you are being asked to pay.

3. Check the loan terms

Read the contract, fees and disclosures rather than relying on marketing claims, and know whether you're dealing with the lender, a broker or a credit representative, and whose name will appear on the credit contract.

What each check actually proves

Check
What it tends to confirm
What it doesn't confirm
ASIC credit register resultThe business is currently authorised for the relevant credit activityThat the website, caller or account contacting you really belongs to that business
ABN or ACNThe business is registered for tax and reporting purposesAny authority to provide or arrange consumer credit
Independent contact confirmationYou're genuinely speaking with the organisation you intended to contactWhether the loan itself is suitable or affordable
Contract and credit disclosuresThe fees, conditions and repayments in this particular offerWhether those repayments suit your circumstances
Secure-website symbolYour connection to the site is encryptedWho owns or operates the site
Customer reviewsOther customers' reported experiencesCurrent licensing status or identity

Check

What it tends to confirm

ASIC credit register result
The business is currently authorised for the relevant credit activity
ABN or ACN
The business is registered for tax and reporting purposes
Independent contact confirmation
You're genuinely speaking with the organisation you intended to contact
Contract and credit disclosures
The fees, conditions and repayments in this particular offer
Secure-website symbol
Your connection to the site is encrypted
Customer reviews
Other customers' reported experiences

What it doesn't confirm

ASIC credit register result
That the website, caller or account contacting you really belongs to that business
ABN or ACN
Any authority to provide or arrange consumer credit
Independent contact confirmation
Whether the loan itself is suitable or affordable
Contract and credit disclosures
Whether those repayments suit your circumstances
Secure-website symbol
Who owns or operates the site
Customer reviews
Current licensing status or identity

The licence and identity checks matter most. A slick site, good reviews or a flashy office might feel reassuring, but none of it proves you're dealing with the real licensed business.

A licence can be genuine and still be copied

A fake lender can copy a real company's name, ABN and licence number onto a lookalike website. Those details will check out, because they were lifted from a real business.

The giveaway is usually in the contact details: a different domain, phone number or bank account. If anything doesn't match, contact the licensed business using details you've found independently.

What a lender may ask for and what they should never ask for

Legitimate lenders need to understand your financial situation before they lend, so being asked for income, expenses, payslips or bank statements is normal.

Common parts of a loan application
Red flags: stop and verify
Income and expense detailsYour online banking password
PayslipsYour myGov password
Bank statementsA one-time authentication code sent to your phone
Identification documentsRemote access to your device
Existing debt informationA request to transfer money into a personal bank account

Common parts of a loan application

Red flags: stop and verify

Income and expense details
Your online banking password
Payslips
Your myGov password
Bank statements
A one-time authentication code sent to your phone
Identification documents
Remote access to your device
Existing debt information
A request to transfer money into a personal bank account

Are upfront loan fees a red flag?

Not every fee is dodgy. An establishment or application fee clearly disclosed in the credit contract can be a normal part of the loan. The bigger warning sign is a separate payment demanded before funds are released, especially if it's going to a personal account, dressed up as refundable insurance, or comes with pressure to pay right now.

The key question: is the fee written into a contract you can actually read, or is it suddenly being asked for on the side?

Fast approval isn't necessarily suspicious but guaranteed approval is a warning sign

Plenty of legitimate lenders use technology to assess applications fast, so speed on its own isn't a red flag. What should make you cautious is a promise of approval before anyone's actually looked at your situation.

Meeting a lender's eligibility criteria doesn't guarantee approval. A legit lender will still assess your financial circumstances before deciding whether to lend.

Legitimate and suitable are two different decisions

Confirming a lender is real answers the safety question; it doesn't tell you if the loan is actually a good fit. Once you know who you're dealing with, look separately at the total cost, loan term and repayments, and whether they work for your budget.

Think you may have been scammed? Do these things now

If you’ve sent money, ID documents, a password or an authentication code to a business you now think may be fake, don’t wait until you’re 100% sure before acting.

Contact your bank or card provider immediately and ask whether the payment can be recalled and whether any further transactions can be blocked. Scamwatch also recommends acting quickly if your financial or personal information has been compromised.

You should also:

Acting quickly can help limit further financial loss and reduce the risk of your personal information being misused.

Questions to ask before you apply

A legitimate lender, broker or credit representative should be able to answer these clearly: who is actually providing the loan, are they the lender, a broker or a credit representative, what their Australian Credit Licence number is or which licence they're authorised under, why they need a particular document or piece of information, how your financial information will be collected and stored, whether a fee is written into the contract or being asked for separately, whose bank account you're being asked to pay, and what their complaints process is.

If the lender is genuine but something still feels wrong

Start by raising the issue through the lender’s internal complaints process. Keep copies of relevant ads, loan documents, emails, messages, receipts and payment records in case you need them later.

If you’re not satisfied with the lender’s response, you may be able to take your complaint to the Australian Financial Complaints Authority (AFCA). AFCA provides free and independent dispute resolution for eligible complaints about credit, finance and loan providers.

If you suspect a business is providing credit without the required licence, or may have breached consumer credit laws, you can report suspected misconduct to ASIC.

If ongoing debt or money pressure is the bigger concern, the National Debt Helpline can connect you with a free, confidential and independent financial counsellor.

FAQs

Search ASIC's Professional Registers for the business or credit representative, then confirm the legal name, licence status and authorised activity match what you've been told.

No. An ABN just confirms business registration for tax purposes: not any authority to provide or arrange consumer credit. Check the Australian Credit Licence or credit representative authorisation instead.

Yes. A scammer can copy a real business name, ABN and licence number, which is why you still need to verify the website, caller and contact details independently.

Yes. Payslips and bank statements are commonly used to assess your financial situation. A lender should never need your passwords or one-time login codes.

Contact your bank immediately, report the scam to Scamwatch, and contact IDCARE if identity documents or login details were exposed.

You might also like