I handed R1,400 to a lender I found through an ad on a classifieds page, and the money disappeared along with the website inside three weeks. That was in 2021. The month I learned that a padlock in the corner of a browser tells you almost nothing, because a site can buy its certificate for a few hundred rand and still be a front for someone operating from a laptop in a city you will never visit. Cheap to buy. Worthless as proof.
Start with the registration number, which is the one detail a legitimate lender cannot easily fake, and where it is displayed tells you almost as much as the number itself. In South Africa, a credit provider has to be registered with the National Credit Regulator. That registration number (something in the format NCRCP followed by digits) should appear in the footer of every page, not buried in a PDF terms document nobody opens. Copy the number and leave the site. Then search it on the regulator’s own register. A lender whose number returns nothing is finished as far as I am concerned, no matter how polished the online loan application South Africa homepage looks. Last March I found a site charging a 22% initiation fee with no number anywhere, only a Cape Town street address that turned out to be a postal box. I closed the tab in under a minute. Gone.
Then look at what the site asks for and when it asks for it, since the sequence of questions is itself a diagnostic. Before it touches your ID number or bank details, a lender registered with the NCR has to show you the rate, the total repayment and the full cost of credit, because the National Credit Act requires exactly that disclosure. A site that wants your account number to “verify eligibility” before showing you any number is harvesting data, and the ones that show their fees up front are the ones worth your time. My own rule: the moment a screen demands my banking details while the interest rate is still described as “competitive”, I am gone.
I check the contact details properly now, and I mean the landline specifically. A working phone number, answered by a person during business hours, is step one. In February I called one site’s number. It rang through to a general call centre that had never heard of the company. That was answer enough. Email-only contact on a site handling large sums is a warning I no longer ignore.
Before I ever get as far as a form for applying for a loan online in South Africa, a handful of small things get checked in one pass:
- The NCR registration number in the footer, verified on the regulator’s register
- A landline answered by a person, not a call centre script
- The full cost of credit shown before any personal details are requested
- A physical address that resolves to a real building on a map
- Terms and conditions that name a registered company, not a trading name alone
That padlock, the one every loan site displays like a badge, proves a single thing: your data travels encrypted to whoever owns the site. Scammers buy the same certificate for R300. It encrypts your details beautifully on the way to the thief.
If everything checks out and you decide to proceed, apply now, but keep a screenshot of the quoted rate and the total repayment, because the interest rate is the number the advertising shouts about and the total cost of credit is the one that empties your account.











