How to spot a business loan scam before it costs you

Here’s the single most useful rule in this guide: if anyone asks you to send money so that a loan can be released, stop. Genuine lenders take their fees out of the advance at settlement or add them to the balance. They don’t need you to transfer “insurance”, “tax”, a “security deposit” or a “first repayment” before the money arrives.

Almost every business loan scam is a variation on that one trick. The details below help you recognise the variations, check a lender properly, and act fast if something has already gone wrong.

Why are business owners targeted?

Scammers go where urgency is. An owner chasing funds for payroll, a supplier bill or an ATO deadline is more likely to accept a fast yes without asking questions. Business owners also tend to have documents a fraudster can reuse: ABNs, company details, bank statements and director ID.

The numbers show the scale. The National Anti-Scam Centre’s report on 2024 recorded about $2.03 billion in reported scam losses across Australia that year. Payment redirection scams alone, where a fraudster changes the bank details on a genuine payment, accounted for roughly $152.6 million. Loan fraud is a smaller slice, but it relies on the same psychology: a believable story, time pressure and a payment.

What do business loan scams look like?

The upfront fee

The classic. You’re approved, often quickly and for more than you expected, and then told the funds can only be released once you pay a fee. ASIC’s warning on lender impersonation describes demands for “insurance” or “tax” before the money is paid, sometimes with a promise that the fee will be refunded later. It won’t be. If you pay, a second fee usually follows.

The cloned lender

Scammers borrow the name, logo and even the ABN and credit licence number of a real lender. Their website looks right, their documents look right, and a register search confirms the company exists. What doesn’t match is the contact detail: a free email address, a mobile number, a slightly altered web domain. ASIC notes that genuine lenders are unlikely to use free email services such as Gmail or Outlook.

The approach after an online enquiry

You fill in a form on what looks like a comparison site or lender page. Within hours someone rings, knows exactly what you asked for and has a great offer. ASIC has flagged this pattern specifically. The enquiry may have gone to a fake site, or your details may have been passed on or leaked. Being contacted about something you did apply for makes the call feel legitimate, which is the point.

The identity harvest

Some “lenders” never ask for a fee. They ask for a photo of your licence, a selfie holding your passport, your myGov or bank login, or the six-digit code your bank just texted you. That’s enough to apply for credit in your name or drain an account. No genuine lender needs your banking password.

The redirection at settlement

On a genuine loan, a fraudster who has compromised an email account can send a convincing message changing the account details for a fee, a settlement payment or the loan funds themselves. The same trick hits supplier invoices daily. Whenever account details change, ring the sender on a number you’ve used before, never one from the email itself.

How can you tell a real lender from a fake one?

Work through these in order. The first three take five minutes; the fourth is the one that catches clones.

1. Search the ABN. Use ABN Lookup to confirm the entity exists, is active and has the name it’s using. Our glossary entry on the ABN explains what the record shows.
2. Check ASIC’s registers if a licence is claimed. ASIC’s free professional registers search covers credit licensees and representatives. Many lenders that only make business-purpose loans don’t need a credit licence, so absence isn’t proof of fraud. But a licence number that belongs to someone else is.
3. Look at the contact details. A free email domain, a mobile-only number, no physical address or a web address with an extra word or misspelling are all warning signs.
4. Call back independently. Find the lender’s official website through a search engine or a reputable directory, not through a link in the message. Call the number listed there and ask whether the person you’ve been dealing with works for them and whether your application exists. This step defeats most impersonation scams.
5. Check where money goes. Any payment should go to an account in the lender’s name, never to an individual or an overseas account. business.gov.au’s scam guidance notes that unusual payment requests, including sudden changes to bank details, should be verified using contact details you already trust.

You can also cross-check names against the lenders listed on our site. Our guide on how to choose a business lender covers the broader quality checks once you know a lender is real.

Want a genuine option without the second-guessing? You can enquire with us here. We never ask for a payment to look at your situation, and enquiring leaves your credit file alone.

Which warning signs should stop you immediately?

Warning sign	What a genuine lender does instead
Fee demanded before funds are released	Deducts fees from the advance or adds them to the loan
Payment to a personal or overseas account	Receives payments into an account in its own name
Free email address or mobile-only contact	Uses its own domain and published phone lines
Approval guaranteed before seeing financials	Assesses statements and usually checks credit before approving
Request for passwords or one-time codes	Never asks for your banking login
“Offer expires in an hour”	Gives you time to read documents and get advice
Payment by gift card or crypto	Uses normal bank transfers or deducts at settlement

Note that business.gov.au now cautions owners not to rely on spelling mistakes to spot scams, because fraudsters increasingly use AI to write polished messages. Judge the request, not the grammar.

Paid a scammer? Here’s what to do, in order

Speed matters, so act in this order.

1. Call your bank now. Ask for the fraud team and request that the payment be stopped or recalled. The sooner, the better the chance.
2. Secure your accounts. Change passwords for email, banking and accounting software, and turn on multi-factor authentication.
3. Report it. Use ReportCyber, run by the Australian Signals Directorate’s cyber security centre, and Scamwatch. ASIC also asks people to lodge a report of misconduct for lender impersonation.
4. Protect your identity. If you’ve sent ID documents, contact IDCARE, Australia’s identity and cyber support service, for a tailored plan. Consider a ban on your credit file with the credit reporting bureaus.
5. Warn your team and bookkeeper. If an email account was compromised, others may receive fake invoices or payment instructions from it.

A note on what’s changing. The Scams Prevention Framework, legislated in 2025, requires banks, telecommunications providers and digital platforms to prevent, detect and respond to scams, with most obligations expected from 31 March 2027. Until then, your own checks are the main defence.

A scenario: how the callback saved $4,800

A Ballarat electrician applied online for $40k to fund a solar inventory order. Next morning, a caller claiming to represent a well-known online lender quoted the application amount and emailed an approval letter with the lender’s logo, ABN and credit licence number. To release the funds, the electrician needed to pay $4,800 in “loan protection insurance”, refundable after three months.

The ABN was real. The licence number was real. The email came from a free webmail address with the lender’s name in it. The electrician searched for the lender’s website, rang the number listed there, and was told no such application existed. The genuine lender confirmed its fees are taken from the loan at settlement. The electrician reported the approach, then applied properly elsewhere.

Looking for finance from people who’ll never ask you to pay first?

After reading about scams, it’s reasonable to feel wary of every form on the internet. So here’s exactly how we work, and you can hold us to it.

Our enquiry takes roughly a minute to complete and asks for no money at all. It doesn’t pull your credit report, so your file shows nothing. Your details are never sold on or blasted out to a lender panel, which keeps unknown callers away. A real person here reads your enquiry and rings you to talk it over, and you’re welcome to verify us however you like before sharing documents. Be as accurate as you can about your figures; it lets us find the right fit at the first attempt.

Start a genuine enquiry →