Amid the COVID-19 pandemic, the U.S. government established the Paycheck Protection Program (PPP) to bailout small businesses. But amid understandable relief there was also PPP loan fraud galore: some estimates suggest more than $100 billion was scammed.
This blog will explain what PPP
loan fraud is, how it works, how criminals use your information, and practical
steps you can take to protect yourself.
What Is the Paycheck
Protection Program (P.P.P.)?
The Paycheck Protection Program
was a component of the U.S. government’s relief effort in the CARES Act. Its
goal was to provide forgivable loans to affected businesses, to cover payroll
and certain approved expenses so that employees could remain employed.
Businesses could apply through
banks and fintech lenders.
Loans were forgivable, meaning
under correct use, borrowers wouldn’t have to repay certain portions.
What Is PPP Loan Fraud &
How Did It Happen?
PPP loan fraud occurs when
individuals or businesses misuse the PPP system by providing false or
misleading information. Fraud can take many forms:
- False Statements on Applications: Lying about number of employees, payroll costs, or expenses to get a larger loan.
- Loan Stacking: Applying for multiple PPP loans through different lenders simultaneously.
- Misuse of Funds: Using PPP funds for unauthorized purposes not allowed under program rules.
- False Certifications: during audits or forgiveness applications. Making false claims of compliance & non legitimated expenses.
Because the program was quickly
enacted, its oversight lagged in some cases, particularly as officials hurried
to release funds. This gave fraudsters — including overseas crime rings and
fintechs — room to maneuver.Aura
Scale of the Problem
- More than $100 billion in PPP funds is estimated to have been stolen or misused.
- About 15% of loan applications (roughly 1.8 million) had at least one fraud indicator.
- Fintech lenders, although making ~29% of PPP loans, were responsible for more than half of suspicious ones.
How Criminals Can Use Your
Identity
Identity theft plays a large role
in PPP fraud. Here’s how your personal information could be used against you:
- You get a leak (Social Security Number, name, address, etc.) from the Dark Web or phishing.
- They submit PPP loan applications in your name, redirect funds to accounts they control. You may not even know until you see suspicious activity.
- This also leads to legal headaches: fraud charges, investigations, difficulty proving that you were the victim.
What Happens to PPP Scammers
If caught, PPP fraud is
prosecuted aggressively:
- Federal laws like bank fraud, wire fraud, and making false statements are often applied.
- The U.S. Department of Justice has charged many individuals and entities. Some have received prison sentences.
How to Detect PPP Loan Fraud
Red Flags
Here are warning signs that PPP
loan fraud might be happening—or that someone is trying to involve you:
- Someone claiming you’re “pre-approved” for PPP when the program is over.
- Requests for your sensitive identity info (SSN, bank account) from suspicious sources.
- Claims of guaranteed, fast forgiveness with no verification required.
- Urgency or offers that are too good to be true.
- Unsolicited phone calls, emails or social media ads pitching easy PPP loans.
How to Protect Yourself:
Tricks and Tips
Here are ways to save yourself
from falling victim to PPP loan fraud:
1. Guard Your Personal
Information
Do not share your Social Security Number or banking information without confirming validity of the organization.
Be suspicious of phishing attempts, particularly COVID or relief-related ones.
2. Check Official Sources
PPP was managed by the SBA (Small
Business Administration). Check with the SBA or credible financial
institutions.
3. Monitor Credit Reports
If someone uses your identity, it
will show up as new accounts or inquiries. Use free annual credit reports to
check.
4. Establish Fraud Alerts or
Freeze Credit
You may want to place a fraud
alert on record with the major credit bureaus, or even completely freeze your
credit for a time period if you believe that identity theft is occurring.
5. Use Two-Factor Authentication
(2FA)
On any account that has sensitive
info—emails, banking, business accounts.
6. Try Identity Theft Protection
Services
These can help you to monitor for
suspiciousness going in the dark web leaks, and assist with recovery from
identity theft should it happen.
7. Beware of Social Media Claims
Scammers often run advertisements
or post messages about easy PPP money.
8. File Reports Promptly
If you believe there is fraud,
report it to the FTC (Identity Theft. gov), the police in your area and the
lender. Speed is important.
What to Do If Fraud Happens to
You
If your identity or business was
used without your consent:
- File a report with the FTC via IdentityTheft.gov. You’ll get a recovery plan.
- Report PPP fraud to the SBA Office of Inspector General (OIG).
- Contact your bank or lender to let them know you didn’t authorize the loan.
- Report to local law enforcement. This helps in establishing evidence.
- The Same Old Advice: Change Passwords, Protect Devices, Use 2FA.
- Watch credit and freeze or place fraud alerts when necessary.
Why It Matters
Even beyond the financial losses,
PPP loan fraud undermines public trust in relief efforts. It also means that
fewer resources are going to those who actually needed help in a crisis.
Knowing and protecting your identity helps protect your interests, as well as
the integrity of programs intended for all.
Conclusion
PPP loan fraud is a crime that
betrays the intent of a program designed to bolster businesses in times of
need. From lying to device theft, scammers employed a variety of methods to
steal money.
How to protect yourself: Be wary
and protect your identity, question offers, report anything suspicious and
consider using tools like credit monitoring or identity theft protection. You
need to know, for your safety.
FAQ
Q: Is there still fraud in
P.P.P. loans?
A: Yes. Although the first
PPP program expired, investigations are ongoing, and schemes to defraud may
still emerge in the future because identity theft and false claims could be
submitted retroactively.
Q: Can I be signed up for
a Paycheck Protection Program loan without my knowing?
A: Yes, if they have
enough personal information (SSN, address, etc) which they may purchase from
data breaches or phishing. And that’s why credit alerts and monitoring are
crucial.
Q: What are the legal
consequences for PPP scammers?
A: Anyone charged with
bank fraud, wire fraud and making false statements, crimes that potentially
carry prison sentences, fines and restitution.
Q: I believe my
information was stolen by someone and used to claim a check for which the
person is not eligible. What do I need to do?
A: Yes, but it requires
documentation: police reports, FTC complaints, exchanges with banks/SBA. That’s
where identity theft protection can really come in handy.

