This is what I was thinking.  I see shasan often giving loans without requesting a signed message, and I think it adds undue risk.  At the very least check to see if the funding address has been posted by the borrower on the forum in the past, if for whatever reason the borrower doesn't have the ability to sign a message.