Protecting identity and banking data during a loan application

Share information only after identifying the recipient

A loan application may request identification, income evidence and access to financial information, but each request should have a clear purpose and recipient. Check the website address and privacy notice before uploading documents. For a Social Insurance Number request, ask why it is needed and whether another identifier can be used; a legitimate requirement depends on the circumstances and should not be assumed from a form field alone.

Read the scope of banking-verification consent

The Office of the Privacy Commissioner explains how to protect a SIN, while Flinks describes the bank-connectivity technology used by some financial services. A verification provider supplies a technical process; it does not establish that a lender’s offer is suitable or approved. Read what accounts and data are covered, whether access is ongoing and how consent can be managed. Never disclose a one-time security code to someone who unexpectedly contacts you claiming that it is necessary to release a loan.