Your Social Security number is hard to replace once a bad actor has it. Before you type nine digits into a loan form, spend a few minutes checking who is on the other side. The steps below work best for mortgage lenders, banks and credit unions. They work less well for other online lenders, and that limit matters.

  1. Copy the company's legal name, address and any license or NMLS number from the application page.
  2. Look the company up in an official registry for its type, and check that the details match.
Bright kitchen counter against a blue wall with a partly turned-away laptop and a highlighted paper checklist under a person's hands while they review a lender's details.
A person at a kitchen counter reviews a lender's details on a laptop, with a highlighted paper checklist beside it.
  1. Confirm that the individual loan officer on your file is listed and active in your state.
  2. If the company calls itself a bank or credit union, confirm its federal insurance status.

Why You Check Before You Share

A shady lender does not need to approve you. It only needs your name, birth date and Social Security number for a "quick rate quote." After that, you cannot change the number the way you change a password.

A registry check will not tell you whether the terms are good. It will not replace reading the loan agreement. It answers one narrow question: is this company or person on the official record, and in good standing? That question is worth answering first.

The lookup tools are free, and you do not need an account. You need a browser, the lender's legal name or ID number, and a few minutes.

Using NMLS Consumer Access for Mortgage Lenders

For mortgage companies and loan officers, start with NMLS. The NMLS Reference Guide describes it as the system of record for non-depository financial services licensing and registration in participating state agencies. That includes DC, Puerto Rico, the U.S. Virgin Islands and Guam. The Conference of State Bank Supervisors operates it for those agencies. Each company, branch and individual with an account gets a permanent NMLS Unique Identifier.

The public lookup is NMLS Consumer Access, set up under the SAFE Act of 2008. It is free and open around the clock. You can search by name or ID. The record shows identification details, employment history, license and registration status, and the current employer.

Loan officers are authorized state by state. So check that the company is licensed where you live, and that the officer's status is active and in good standing there. State regulators require the company and officer IDs on loan documents. Compare the ID on your paperwork with the registry entry. If it cannot be found, or belongs to a different firm, stop. NMLS lists a call center at 1-855-665-7123, Monday to Friday, 9:00 AM to 9:00 PM Eastern.

Banks and Credit Unions: Confirm the Insurance Claim

Some online lenders say they are a bank or credit union. That claim is checkable. Fake sites sometimes borrow the name of a real institution, so confirm the exact name.

The FDIC insures deposits at banks, automatically to at least $250,000. Its deposit insurance page explains coverage and is the place to start when confirming a bank. The FDIC also advises sharing sensitive information only on official, secure websites.

For credit unions, the NCUA provides up to $250,000 of share insurance, backed by the full faith and credit of the United States. The NCUA publishes a Credit Union Locator and a Fraud Prevention Center, and its call report data page covers the insurance details. The agency also announced an online search tool for credit union information in 2015. Search the NCUA site for the current locator.

Insurance status tells you the institution is real and supervised. It tells you nothing about its fees or how it handles your data.

Where These Checks Stop Working

This is the gap. NMLS Consumer Access is built for mortgage companies and loan officers. The sources here do not cover personal loan or payday lenders. They also do not say whether NMLS covers every non-bank lender, or how to verify a lender that is neither a bank nor a credit union. If you are shopping for a personal loan, a missing NMLS record is not proof of fraud. It is also not proof of legitimacy. You will need another route, such as your state's financial regulator, and I could not confirm which agency applies from these sources.

Some red flags apply anywhere. Walk away if a mortgage lender has no NMLS ID, or if the ID does not match the loan documents. Walk away if a company claims to be a bank and the FDIC cannot confirm it. Be careful with any request for sensitive details on a site that is not official and secure.

As a general aside, not drawn from the sources above: if you think a lender is fraudulent, people commonly report it to the Federal Trade Commission, the Consumer Financial Protection Bureau or their state attorney general. Check each agency's site for how to file.

Questions to Ask Before You Proceed

Write down the answers and check each one against the registry yourself. Do not rely on the lender's own statement.

  • Does the company have an NMLS ID, and does it match the ID on the loan documents?
  • Is the loan officer's status active and in good standing in my state?
  • Who is the current employer shown in the record, and is it the company quoting me?
  • If the company says it holds deposits, does the FDIC or NCUA confirm it under that exact name?

If a representative dodges these questions, or says credentials are not needed for a quote, hold onto your number. A few minutes with a public registry costs nothing. A stolen identity can take years to repair.

Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.