SBA OIG Believes at Least 20% of EIDL and PPP Loans Disbursed Are Potentially Fraudulent
Client Alert | 1 min read | 06.28.23
On June 27, 2023, the Small Business Administration (SBA) Office of Inspector General (OIG) reported its estimate that SBA disbursed over $200 billion of potentially fraudulent COVID relief, including Economic Injury Disaster Loans (EIDL) and Paycheck Protection Program (PPP) loans. These possibly fraudulent loans represent at least 17% of all EIDL and PPP funds—or 21% of all loans and grants--disbursed. The SBA OIG estimates that the SBA disbursed $64 billion in potentially fraudulent PPP loans.
Nearly $30 billion in EIDL and PPP funds have already been seized or returned to SBA through the SBA OIG’s collaboration with SBA, the United States Secret Service, other federal agencies, and financial institutions. The SBA OIG reports a $9 billion return on investment in enforcement efforts in fiscal years 2021 and 2022.
The SBA OIG also details in Report 23-09 common indicators that have been useful in identifying fraud, including hold codes flagged by SBA and third parties, hotline complaints, loan defaults and PPP borrowers not applying for forgiveness. The SBA OIG used such rule-based analytical methods as link analysis of commonly shared data such as phone numbers, bank accounts, email addresses, physical addresses, and IP addresses to determine if they were used for more than one application. The SBA OIG plans to obtain, review, and analyze additional datasets from other government agencies as well as information subpoenaed from certain lenders and their third-party processors.
While the majority of PPP loans have been forgiven, borrowers should understand that forgiveness does not necessarily equate to a determination that the borrower was eligible for the PPP loan, nor does it preclude the SBA Office of Capital Access from opening a post-forgiveness review or the SBA OIG from opening an investigation. PPP borrowers should continue to maintain records establishing initial eligibility and demonstrating that they used the PPP funds for forgivable expenses.
Contacts
Insights
Client Alert | 7 min read | 12.17.25
After hosting a series of workshops and issuing multiple rounds of materials, including enforcement notices, checklists, templates, and other guidance, the California Air Resources Board (CARB) has proposed regulations to implement the Climate Corporate Data Accountability Act (SB 253) and the Climate-Related Financial Risk Act (SB 261) (both as amended by SB 219), which require large U.S.-based businesses operating in California to disclose greenhouse gas (GHG) emissions and climate-related risks. CARB also published a Notice of Public Hearing and an Initial Statement of Reasons along with the proposed regulations. While CARB’s final rules were statutorily required to be promulgated by July 1, 2025, these are still just proposals. CARB’s proposed rules largely track earlier guidance regarding how CARB intends to define compliance obligations, exemptions, and key deadlines, and establish fee programs to fund regulatory operations.
Client Alert | 1 min read | 12.17.25
Client Alert | 7 min read | 12.17.25
Executive Order Tries to Thwart “Onerous” AI State Regulation, Calls for National Framework
Client Alert | 4 min read | 12.17.25
The new EU Bioeconomy Strategy: a regulatory framework in transition




