How LendUp Protects Your Information

When you use this site - especially when you submit a loan request - you share sensitive personal and financial information. We take the security of that information seriously. This page describes how your data is protected on LendUp-controlled systems, what LendUp will never ask you to do, and what steps you can take to protect yourself.

Some forms on this site may be operated by partners in our network. In those cases, the partner's own security practices apply. See our Privacy Policy for how to identify partner-operated forms.

• Encrypted connections: this site uses HTTPS (SSL/TLS encryption) to protect data transmitted between your browser and our servers. Information you enter - including personal details, financial data, and account numbers - is encrypted in transit.
• Safeguards for stored data: we use technical and administrative safeguards designed to protect information on LendUp-controlled systems.
• Restricted access: access to borrower information is limited to personnel and systems that require it for the matching process and site operations.

No system is completely immune to security risks. We implement protections designed to reduce risk, but we cannot guarantee absolute security - no website can. If you become aware of a potential security issue involving this site, contact us immediately.

If LendUp determines that a security incident affecting your information has occurred on LendUp-controlled systems, we will respond and notify affected users as required by applicable law.

Use these to verify any communication claiming to be from LendUp:

LendUp does not provide support by phone and does not make outbound calls. This is a deliberate choice for your security:

• You can verify who you're communicating with. Emails from LendUp come from an @lendup.com address - you can check the sender before responding. On a phone call, there's no reliable way to verify who's actually calling.
• You have a written record of everything. Email keeps all correspondence in one place. If a dispute arises later, you have documentation of what was said and when. Phone calls leave no verifiable record.
• Any phone call claiming to be from LendUp is a red flag. Because we never call borrowers, you can treat any call claiming to be from LendUp as suspicious - no judgment call required. If someone calls you saying they're from LendUp and asks for personal or financial information, hang up and report it.

If you need to reach LendUp, email [email protected] or use the contact page.

If someone contacts you claiming to be from LendUp and does any of the following, it is not legitimate:

• Ask for your full Social Security number by email or text. Where LendUp-operated secure forms collect SSN, it is collected through the secure request flow on this site - not through unsolicited email or text message.
• Call you for any reason. LendUp does not make outbound calls and does not provide support by phone. Any call claiming to be from LendUp is not from us.
• Ask you to pay a fee before receiving loan funds. LendUp does not charge borrowers any fee for using this site. If someone says you're approved and then asks for payment before disbursement - especially by gift card, wire transfer, or payment app - it is a scam.
• Ask for your bank login credentials. We may collect account and routing numbers through the secure form, but we will never ask for your online banking username or password.
• Threaten you with arrest or legal action over a loan. LendUp does not make loans and does not collect debt. If someone contacts you claiming to be from LendUp and threatens consequences for an unpaid loan, it is not legitimate.

If you receive a suspicious communication claiming to be from LendUp, do not respond or provide any information. Contact us at [email protected] to verify, and report the incident to the FTC.

After you submit a loan request, you authorized lenders in the network - and, where applicable, partner services associated with the request flow - to contact you by email, phone, or text. Here's how to tell legitimate follow-up from fraud:

• Lenders and partner services may call, email, or text you. This is normal and part of the consent you gave when submitting. LendUp itself will not call - but lenders may. The key is whether the caller identifies themselves clearly.
• Any contact should clearly identify the company name and reason for reaching out. If a caller or sender can't or won't tell you who they are and why they're contacting you, treat it as suspicious.
• Verify the lender's license independently. Ask for the lender's name and state license information, then confirm through your state's license lookup directory before sharing any additional information or accepting any offer.
• Be cautious with urgency and pressure. Legitimate lenders give you time to review an offer. If someone pressures you to accept immediately or threatens consequences for not acting fast, that is a red flag.

• Confirm you are on the real LendUp site: check your browser's address bar for https://lendup.com. If the URL is different - misspellings, extra words, a different domain - do not enter personal information.
• Review the privacy disclosure: understand what information is collected and who it's shared with before you submit. See our Privacy Policy.
• Understand that lenders may contact you after submission: by submitting the form, you give express written consent for lenders in the network to contact you by email, phone, or text about financial programs and services. LendUp itself will only contact you by email - but lenders and partner services may use any of these channels.
• Use a private device and network if possible: avoid submitting personal and financial information on shared or public computers or over unsecured public Wi-Fi.

• Monitor your bank account: check for any unauthorized transactions in the days after submitting a request. If you see activity you didn't authorize, contact your bank immediately.
• Monitor your credit reports: after sharing personal information with any financial service, check your credit reports for unfamiliar accounts or inquiries. Pull your reports for free at AnnualCreditReport.com.
• Don't reuse passwords: if you create an account on a lender's site after being matched, use a unique password you don't use elsewhere.
• Keep records: save any offer documents, loan agreements, and correspondence from lenders. These are important if a dispute arises later.

1. Contact your bank or credit union immediately if you see unauthorized transactions or believe your account details have been exposed. Ask about placing a temporary hold or changing your account number if needed.
2. Place a fraud alert or credit freeze on your credit reports by contacting any one of the three major credit bureaus - Equifax, Experian, or TransUnion. A fraud alert at one bureau is shared with the other two. A credit freeze restricts access to your report entirely and provides stronger protection.
3. Report identity theft to the FTC at IdentityTheft.gov. This site walks you through a recovery plan and generates an identity theft report you can use with creditors and law enforcement.
4. File a report with local law enforcement if you believe you've been a victim of fraud or identity theft.
5. Contact LendUp at [email protected] if you believe the security issue involves this site specifically - for example, if you suspect unauthorized access to your loan request data or if you received a suspicious communication that appeared to come from LendUp.