Maybe asking a signed message from known addresses of a user by default will be a good decision for loan service.
This is what I was thinking. I see shasan often giving loans without requesting a signed message, and I think it adds undue risk. If for whatever reason the borrower doesn't have the ability to sign a message, at the very least check to see if the funding address has been posted by the borrower on the forum in the past.
Until one gets scammed, he would never believe scam exist, and sometimes we build blind trust based on past transactions. Op will know the usefulness of linking his forum account to his regular email and the lender will also learn how to secure his deals.
I've never received a loan from Shahan, but if he's giving out loans based on reputation and active signature participants without additional checks, he has to add another layer of security to his loan business to avoid this from happening again.