A text saying “Your loan is ready” can arrive when you have applied for credit, when you have not applied, or when you are still comparing options. Its timing may make it feel relevant. That is precisely why checking through your own records is more useful than deciding whether the wording looks professional.
Leave the message’s route unused
Do not use its link, call its number or reply with identifying details to establish whether it is genuine. The FTC recommends contacting a company through a phone number or website you already know is real. A suspicious message should not also supply the evidence used to authenticate it.
For example, a text might name the same loan amount you recently considered and say a final verification is missing. Open the lender’s app independently or use the contact details saved with your application. Ask whether that request appears in your account. The apparent match in amount is a clue to investigate, not a reason to submit a code.
Distinguish a notification from a demand
Real notifications may tell you a document is available. A message that asks you to disclose a password, full account details or a one-time sign-in code deserves particular caution. Read the entire message before acting, including whether it claims a deadline that you cannot verify anywhere else.
If you have applications with several companies, consult your application log. Check the legal company name and application date. Avoid assuming that an unfamiliar sender is one of the businesses in a referral network.
Preserve only what helps
Take a screenshot showing the sender, text and date if you need a record. Keep it in a private folder. Do not circulate a screenshot containing personal information in a public discussion to ask strangers whether the offer is real.
After checking, use your messaging app’s spam-reporting option. The FTC also describes forwarding unwanted texts to 7726 so your wireless provider can identify similar messages. Reporting does not require continuing the conversation with the sender.
If you already responded
Make a short list of what happened: opened a page, entered an email address, supplied a password, uploaded a document or sent money. Those are different exposures and call for different responses. Contact the relevant account provider through a known route if credentials or payment details were shared. An unanswered suspicious text is inconvenient; a careful response after a mistake can still limit further exposure.
