Is That Pre-Approved Loan Email Genuine? A Safer Way to Check

How families can help older relatives handle credit-report and
loan offers without clicking first.

An unexpected email says a free credit report is ready, or that a
pre-approved business or personal loan is waiting. It may look
helpful—especially if it uses familiar financial language or promises a
quick next step.

Treat an unsolicited offer as unverified until it has been checked
independently. ElderSave received a report of this type of email, but
the reported message has not been independently verified. The safety
steps below apply whether an offer is genuine, misleading, or
fraudulent: do not use the email’s links, attachments, reply address, or
phone number to check it.

How the Scam Works

A phishing email tries to get a recipient to take an action that
gives away information or creates a route to further contact. In a loan
or credit-report lure, the message may offer a free report, say that an
application is pre-approved, or suggest that an offer will expire
soon.

The next step may be a link to a lookalike website, an attachment, a
request to reply, or a phone number controlled by the sender. The aim
can be to collect personal or banking information, account credentials,
or documents. It can also be to start a conversation that feels
official.

The Reserve Bank of India (RBI) has warned the public not to respond
to phishing emails sent in its name and has advised people not to open
or download suspicious attachments. CERT-In similarly advises people to
avoid links and attachments from unknown senders and to enter an
organisation’s address directly in a browser instead.

Why This Scam Is Effective

Loan and credit language can feel routine. A message may arrive when
a person is genuinely considering a loan, helping a family business, or
trying to understand their finances. “Pre-approved” can create a sense
that a decision has already been made, while “free credit report” can
make a request for information appear reasonable.

The message does not need to look obviously alarming to be risky. A
familiar logo, polished wording, or a stated deadline is not proof that
the sender is genuine.

Warning Signs

Pause if an email:

arrives unexpectedly and offers a loan, credit report, or account
action you did not request;
asks you to click a link, open an attachment, reply, or call a
number in the email to continue;
asks for bank-login details, card details, an OTP, PAN, Aadhaar
information, or copies of identity documents before you have
independently confirmed the organisation;
creates pressure with a short deadline, a threat of losing an offer,
or a promise of unusually easy approval;
uses a sender address or web address that is not the one you
normally use for that bank or lender;
claims to be from a regulator or bank but asks you to update account
details through the email.

One warning sign is enough to slow down. You do not need to prove
that an email is a scam before deciding not to engage with it.

What To Do Now

Do not click, reply, unsubscribe, download, or call from the
email. Closing the message without interacting is a sensible
first step.
Check independently. If you are interested in the
offer, type the bank or lender’s known official web address into your
browser, use its official app, or call the number printed on your bank
card, statement, or official website. Do not use contact details
supplied in the email.
Ask a trusted family member to take a second look.
A short phone or video call can be especially useful before an older
relative shares documents or money-related information.
Keep personal information private until verification is
complete. Never share an OTP, banking password, card PIN, or
internet-banking credentials in response to an unexpected email. Do not
send PAN, Aadhaar, or other identity documents through an unverified
link or reply.
Use official channels to report a suspicious
attempt. The National Cyber Crime Reporting Portal provides a
way to report suspected cybercrime activity. Its “Report Suspect”
facility also accepts information about suspicious email addresses,
websites, and other identifiers.

For family members living abroad, the practical role is simple: help
your parent or relative pause, verify through a known channel, and avoid
making a decision while someone is pressuring them.

If You Think You’ve Been
Scammed

Act promptly, but without panic.

Contact your bank or relevant financial institution
immediately using a known official number or official app.
Explain what information was shared or what transaction occurred.
If there is suspected financial fraud, call 1930 and report
the incident through the National Cyber Crime Reporting Portal.
The portal identifies 1930 as the national cybercrime helpline for
reporting online financial fraud.
Change passwords from a trusted device if you
entered credentials on a suspicious site. Use a new, strong password
that is not reused elsewhere.
Review account activity and alerts. Check bank,
card, and email accounts for unfamiliar activity, and follow your
institution’s instructions.
Preserve useful evidence. Keep the email, sender
address, screenshots, transaction details, and any website address. Do
not forward suspicious attachments to friends or family.

If you only opened an email but did not click, download, reply, or
share information, the appropriate next step is usually to delete or
report it through your email service and remain alert for follow-up
messages. If you are unsure, contact the legitimate organisation using
independently obtained contact details.

Key Takeaways

An unexpected loan or credit-report email is not proof of a real
offer.
Do not verify an offer through its own link, attachment, reply
address, or phone number.
Use a bank or lender’s known official website, app, or contact
number instead.
Never share OTPs, passwords, banking credentials, or identity
documents in response to an unverified email.
If money or sensitive information may have been involved, contact
the bank promptly and use 1930 and the National Cyber Crime Reporting
Portal for suspected online financial fraud.

Sources

Stay Informed

ElderSave helps Indian families protect older adults from scams,
fraud, and digital threats.

Our resources include:

scam education;
practical protection guides;
AI-powered digital safety tools;
updates on emerging scam techniques.

Visit eldersave.com to explore additional resources and learn how to
better protect yourself and those you care about.