This user changed his/her password recently.

I'd personally ask for the user to sign a message, as giving loans without collaterals is never a good idea.