Is cf.lk legit or a scam?
Established Sri Lankan finance company (founded 1957) with Central Bank licensing, stock-exchange listing, and Fitch A-(lka) rating.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
Central Finance Company PLC is one of Sri Lanka's oldest and most established non-bank financial institutions. The company holds a valid license from the Central Bank of Sri Lanka (Reg No: PQ 67) under the Finance Business Act and Finance Leasing Act, and has been listed on the Colombo Stock Exchange since 1969. Our antivirus network and browser blocklists show no malicious flags, and the hosting infrastructure (IP 52.44.182.199) has a clean abuse score of 0/100 with no reported incidents. Independent financial ratings confirm a Fitch A-(lka) rating with a Stable outlook, and web searches found no scam reports, fraud complaints, or negative reviews. Customer testimonials and regulatory documentation confirm the company's legitimate operations in vehicle leasing, loans, deposits, and insurance services.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for cf.lk, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- cf.lk is the official website of Central Finance Company PLC, founded in 1957 in Kandy, Sri Lanka, providing leasing, loans, deposits, insurance and related financial services.
- Licensed by the Monetary Board of the Central Bank of Sri Lanka under the Finance Business Act No.42 of 2011 and Finance Leasing Act No 56 of 2000 (Reg No: PQ 67).
- Deposits insured under Sri Lanka Deposit Insurance Scheme up to LKR 1,100,000 per customer; Fitch Ratings affirmed A-(lka) with Stable outlook.
- Listed on Colombo Stock Exchange since 1969; ranked among top brands in Sri Lanka (Brand Finance 28th most valuable in 2021).
- No scam reports, fraud complaints or negative reviews found in web searches for "cf.lk scam", "Central Finance Company scam" or similar terms.
- Company maintains a complaints-grievances page, whistle-blowing policy, and mobile app (CF Click) on Google Play and Apple App Store.
- Historical note: Involved as shareholder with Perpetual Treasuries during 2016 Central Bank bond scandal (per Wikipedia).
- cf.lkopen
"I leased my car at CF Matale and the experience I had with CF was really commendable. It was a lease where I had the least hassle and a timely service. Would recommend CF to anyone looking for a quick and easy leasing experience."
- Wikipediaopen
"Central Finance Company PLC is one of the oldest non-bank financial institutions (NBFIs) in Sri Lanka having founded in 1957. ... Fitch : A-(lka)"
Licensed Finance Company by Central Bank of Sri Lanka (Reg No: PQ 67); listed on Colombo Stock Exchange since 1969; Fitch rating A-(lka) Stable
We searched scam-report databases, consumer-review sites, and general web sources for cf.lk and Central Finance Company and found no scam reports, fraud complaints, or negative reviews. Instead, we located customer testimonials praising the leasing service, Wikipedia confirmation of the company's 1957 founding and regulatory status, and independent financial ratings (Fitch A-(lka) Stable). The company maintains active regulatory compliance, deposit insurance, and a published complaints-grievances process.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on cf.lk and not a lookalike like c-f.lk.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on cf.lk. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- cf.lk passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. cf.lk presents a valid TLSv1.3 certificate issued by Sectigo Limited · Sectigo Public Server Authentication CA DV R36, expiring in 66 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- No. All 92 antivirus engines in our malware network report cf.lk as clean.
- No. cf.lk is not currently listed on the major browser blocklist feeds that modern browsers use.
- cf.lk resolves to an IP operated by Amazon Technologies Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- This is a permanent record of the scan run on June 17, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around cf.lk have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.