To be fair we don't know the full story and signed messages could have been confirmed via PM or both parties may know each other but it does seem strange to me that a loan was given to an address that OP has not posted here before.
Password has not recently been changed as far as i can tell so loan should be repaid.
Maybe I am just suspicious of everyone these days
After doing a little bit of reading I realized I should've taken a few precautions, particularly with the signed message as you mentioned. No matter the outcome it will still be a 0.025 well spent. Thank you bitkilo for the advice.