MalwareTips: borrowlly.com lookalike links used in fake Borrowly loan-approval texts
MalwareTips says fake Borrowly loan-approval texts use lookalike borrowlly.com links and other domains. Borrowly.net warns it does not send these offers and is not involved.
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips published an investigation on 6 November 2026 of Borrowly fake-approval text scams. Unsolicited messages tell recipients a loan was approved, an application already exists or a request needs one final confirmation, and push them to reply or follow a link. Borrowly.net's own contact page warns about scam approval texts pretending to represent it, says it does not send those offers and identifies borrowly.net as its official site. Borrowly.net is impersonated and not involved.
How the scam works
According to MalwareTips, a BBB Scam Tracker report dated 15 June describes an unexpected Borrowly approval attributed to an agent called Tony, sent from a regular number and followed by three short-code messages, though the recipient had made no application. A separate report dated 6 June gives a longer sequence that moves from acknowledging a request to announcing amounts, including 2600, 1000 and 400, and pushing status checks with same-afternoon deadlines. That sequence used open.borrowlly.com, go.borrowlly.com and auth.borrowlly.com, under the double-l borrowlly.com spelling that is not Borrowly.net, and also addresses under checkgo.io, fintara.org, gochecks.org and partnerpros.org.
The invented application works on two kinds of people. Someone who needs money may click to collect, while someone who never applied may click to cancel or to check whether their identity was stolen. Both actions give an unidentified sender an opening, and a loan form can collect personal and banking details. MalwareTips notes these are consumer accounts, that no completed loan, credential theft or specific charge was established, and that receiving a text does not prove identity theft or device infection.
MalwareTips advises not replying to or following an unsolicited approval. If you really applied somewhere, reopen the application through records you already trust. Borrowly, Borrowlly and Borrowli are not interchangeable spellings, and loan matching is not the same as a lender approving funds.
Source
MalwareTips investigation, 6 November 2026: https://malwaretips.com/blogs/borrowly-loan-text-scam-fake-approval-borrowlly-links/
Red flags
- A loan approval text for an application you never made.
- A link using a misspelled name such as borrowlly.com.
- An agent's first name and amounts used to make the offer feel personal.
- Deadlines such as same-afternoon cutoffs or hours remaining.
- Follow-ups from short codes or under different company names.
If you were targeted
- 1Do not reply to or tap links in unsolicited loan approval texts.
- 2If you applied for a loan, go to the lender's site through your own records or bookmark.
- 3Never enter bank details or ID on a page reached from such a text.
- 4Report the text by forwarding it to 7726 (SPAM) and to the FTC.
- 5If you entered personal details, watch your credit reports and consider a credit freeze.