Before accepting a loan I see a few things about them:
#Trust
# recent merit
# recent post
# Signature campaign.
But the user has failed all of these as the user woke up recently. Who knows if the account has been sold or not? However, the possibility of being hacked is too low as the user had not created any post regarding the hack.
You should've gone a step further to put a neutral tag on such user (as a reg tag will be an overkill) to warn others, seeing how some of them have been defaulting on loans. I read your story with Edwardard, all what transpired and it saddened me. As for ~money~, his poor attempt is very evident of the scam they intended carrying out. An account that was last active in May 2021, only to wake up in October 20, 2023 and the first thing they deemed fit was to ask for a loan after over two years of absence. The user didn't just ask for a loan but a $800 loan. That's ridiculous. If the borrower's intention wasn't bad, why did they cease to post again after the loan demand was made. The answer is obvious.