Paycheck Protection Program (PPP) loan fraud

What it is

The Paycheck Protection Program was a real, forgivable federal loan Congress created in the CARES Act in March 2020 to keep small businesses paying their staff during pandemic shutdowns. The loans could be fully forgiven if spent mostly on payroll, which meant a genuine PPP loan was, in effect, a grant.

The program was built to move in days, not months, so the Small Business Administration let banks and fintech lenders approve loans based on numbers the applicant self-certified: payroll, headcount, how long the business had operated. That same design feature, speed over verification, is the one thing every case on this page exploited. A fabricated payroll figure, an invented employee count, or an entirely fictional business was, for a crucial window in 2020 and 2021, almost as good as a real one.

The SBA’s own inspector general has since estimated that over $200 billion, at least 17% of the roughly $1.2 trillion the program and its sibling Economic Injury Disaster Loan program disbursed, went to potentially fraudulent applicants. As of September 2026, the SBA says it has suspended about 1 million borrowers tied to roughly $49 billion in suspected pandemic-era fraud.

How it actually works

1. The pitch

   Word of mouth, a social media ad, or a “PPP specialist” promises a loan that is fast, requires little or no documentation, and will likely never have to be repaid at all.

2. A number nobody verifies

   The application asks for payroll and employee counts, numbers the applicant or a preparer simply writes in, sometimes for a business with one real employee, sometimes for a business that does not exist at all.

   Where it could have stopped

   The program’s design let a lender approve a loan on the applicant’s self-certified numbers alone, with no requirement to produce underlying payroll records before the money moved. A single document check at this point, before disbursement rather than years later in an audit, is the control every documented case on this page exploited the absence of.

3. The fee or the kickback

   A preparer charges a flat fee per application, $2,000 to $7,000 in one documented case, or a lender service provider charges a cut calculated as a percentage of the loan itself, paid regardless of what happens to the loan later.

4. The loan clears

   Treasury funds reach the applicant’s bank account within days, sometimes tens of thousands of dollars, sometimes millions, before any detailed review of the underlying claim.

5. Forgiveness, a second false certification

   A borrower applies to have the loan forgiven by certifying the money went to payroll, rent and similar costs, a second point in the process where the same fabricated numbers could be repeated rather than caught.

6. The proceeds move into real assets

   Documented cases show loan proceeds converted into real estate, luxury vehicles, an investment account, and extensive gambling, assets that are easier to trace after the fact than cash is to recover.

7. The government comes back, years later

   Audits, SBA suspension letters, and criminal referrals have continued landing years after the loans were disbursed; the SBA’s September 2026 “Operation No Doze” sent 30-day demand letters over loans taken out as far back as 2020.

Why it works

Speed was the entire point of the program, and verification was the trade-off. The CARES Act was written to get relief money into small-business accounts within days of a national shutdown. Self- certification was a deliberate design choice to make that possible, not an oversight, and it is the exact feature every documented case on this page used.

Forgiveness turned a loan into a grant. A PPP loan that was forgiven never had to be repaid at all, which meant a fabricated application was not a loan the applicant planned to pay back and hoped not to get caught on, it was free money if the same false numbers survived one more certification.

A fee-per-loan or percentage structure rewards volume over scrutiny. Whether it was a $2,000-to- $7,000 flat fee or a lender service provider’s percentage cut, paid regardless of outcome, the facilitator who filed the loan had no financial incentive to question the numbers the applicant provided.

The paperwork looked ordinary. A fabricated payroll figure or a shell business with no employees reads exactly like a real small business’s loan file to a reviewer working through thousands of applications in days, which is why detailed review mostly happened after the money had already moved.

And enforcement runs years behind disbursement. The loans went out in 2020 and 2021; the prosecutions, restitution orders and SBA suspensions on this page landed in 2024, 2025 and 2026, long after any sense of urgency or scrutiny from the pandemic itself had faded.

Where it comes from

Entirely domestic, and built directly on top of a real, well-publicized federal program rather than a fabricated one.

Scale runs from a single paid preparer to a venture-backed fintech. Renetta Golden-Larimore filed 43 funded fraudulent applications herself as part of a wider ring of 21 other defendants across seven related Kansas City cases; Blueacorn, a fintech “lender service provider” that processed PPP applications for an FDIC-insured bank, is alleged to have processed more than 530 fraudulent loans worth over $63 million, inside a platform a congressional investigation found moved over $1 billion in PPP funds overall.

Some fraud is entirely self-directed. Meelad Dezfooli submitted three fraudulent applications under an alias and a fictional entity, “Holdings Trust,” with no outside preparer at all, then laundered the roughly $11 million through about 25 Nevada properties, luxury vehicles and gambling.

Enforcement is both civil and criminal, and it is accelerating years after the program closed. The Justice Department, IRS Criminal Investigation and the SBA’s Office of Inspector General have run the criminal cases; the SBA’s September 2026 “Operation No Doze” is a separate, civil track sending 30-day demand letters, threatening False Claims Act liability, Treasury collection fees of up to 28%, and offsets against tax refunds and other federal payments.

And the money, once it moves, stays almost entirely inside the ordinary US financial system. There is no offshore network or cryptocurrency exchange in any of the documented cases here. Proceeds went into US bank accounts, US real estate and US casinos, traceable through conventional financial records once investigators started looking.

Real cases

Red flags

• A promise that “everyone qualifies” or that no real documentation is needed for a federal loan this size.
• A fee tied to the loan amount, a flat per-application charge or a percentage cut, paid to a preparer or lender service provider regardless of the loan’s accuracy.
• Payroll or employee figures you did not personally verify, especially ones a preparer filled in on your behalf.
• A business entity, or an alias, created specifically to file the application, rather than an existing, operating business.
• Pressure to sign quickly without reading the certification, including the later forgiveness certification.
• A “specialist” with no prior relationship to your business, reached by cold outreach, a social media ad, or a referral from another preparer.

If it’s happening to you

If you are being pitched a too-good-to-verify loan or credit right now, stop and get an independent review from your own accountant or attorney before signing anything, whatever program is being offered.

1. If you receive an SBA suspension notice or an “Operation No Doze” demand letter, respond by its deadline. Ignoring it does not make the claim disappear and can forfeit options that are only available if you respond promptly.
2. Get an independent opinion on your original application, ideally from a licensed CPA or attorney with no financial stake in whether the original figures were accurate.
3. Keep every document the original preparer gave you, including any eligibility claims, engagement letters and fee agreements. If the preparer’s conduct was itself fraudulent, this is evidence.
4. Do not spend or move loan proceeds you now have reason to doubt while you seek advice; documented cases show continued transactions after an indictment being treated as further money laundering, not a defence.
5. Report a preparer you believe acted fraudulently to the SBA Office of Inspector General and the IRS. See where to report for other countries.
6. If you believe you were a genuine small-business owner misled into signing false certifications, that distinction, misled versus knowing, is exactly what a defence attorney needs to assess early, not after a federal referral has already been made.

Where the money goes

Almost entirely domestic, moving from the US Treasury through a bank or fintech lender into an applicant’s own account, with no offshore network or cryptocurrency exchange in any of the documented cases here.

A facilitator’s fee or kickback, $2,000 to $7,000 per application in one documented case, or a percentage of the loan in another, is deducted or paid the moment the loan clears, money the applicant cannot recover later even if the loan is disallowed. What remains moves into ordinary assets: real estate, vehicles, an investment account, gambling, the same documented pattern across cases that otherwise look nothing alike. Because the money stays inside the conventional US financial system, the recovery mechanism is also conventional: restitution orders, criminal forfeiture, and, since September 2026, the SBA’s own loan-suspension and Treasury-collection campaign against borrowers who were never prosecuted at all.

By the numbers

No published dataset breaks this scheme out as its own category yet, so there is no chart to show. The data page explains which agency categories exist and why some schemes are invisible in official statistics.