The IRS Is Comparing Your PPP and EIDL Applications to Your Tax Returns: What the $200 Billion Referral Means for Legitimate Borrowers

You got a PPP loan in 2020, spent it on payroll, got it forgiven years ago, and filed the paperwork away. Case closed — or so you thought. On September 23, 2026, the Small Business Administration and the IRS announced that the tax information borrowers gave the SBA when applying for pandemic relief is now being matched, loan by loan, against what those same borrowers reported to the IRS. The comparison has already flagged discrepancies tied to roughly $100 billion in loans, and the IRS has opened examinations to decide whether back taxes and penalties — including fraud penalties — apply.

If you borrowed honestly, this is not a reason to panic. It is a reason to pull your loan file off the shelf, check it for consistency, and make sure nothing you filed since 2020 accidentally contradicts what you told the SBA. Here is what happened, how the matching works, why legitimate borrowers get flagged, and what to do now.

What Just Happened​

Earlier this year, the SBA referred more than $200 billion in suspected Paycheck Protection Program and COVID Economic Injury Disaster Loan fraud to the IRS. That figure traces back to a June 2023 estimate by the SBA's own inspector general, which concluded that nearly 20 percent of the roughly $1.2 trillion disbursed through pandemic-relief programs may have gone to potentially fraudulent actors.

The IRS then did what tax agencies do best with a big dataset: it compared the tax information borrowers submitted to the SBA on their loan applications with the information those borrowers reported on their actual tax filings. That comparison surfaced discrepancies associated with approximately $100 billion in loans. The IRS has now opened examinations of cases identified through the review, and says it will pursue additional taxes and penalties, including penalties for fraud, where warranted.

This is part of a visibly escalating enforcement campaign. Just days earlier, a mid-September enforcement surge produced actions spanning more than 160 criminal defendants and about $245 million in alleged intended loss. The SBA has separately announced suspensions of roughly 870,000 borrowers tied to $39 billion in suspected fraudulent PPP and EIDL activity, plus the April 2026 referral of 562,000 suspected fraudulent loans totaling $22 billion to the Treasury Department for collection. A White House task force is now coordinating data-sharing across the SBA, IRS, Treasury, and federal law enforcement.

The headline numbers are about fraudsters. But data matching is a blunt instrument, and the net it drags will inevitably catch borrowers who acted in good faith under confusing, fast-changing program rules. Understanding how the match works is the first step to staying out of trouble.

How the Cross-Check Works​

When you applied for a PPP loan, you certified payroll costs, employee headcount, and business income details — figures typically drawn from your 2019 or 2020 payroll tax filings and income tax returns. When you applied for a COVID EIDL, you reported gross revenues and cost of goods sold, again tied to your tax filings.

The IRS is now lining those two sets of numbers up side by side. The most common comparisons include:

• PPP payroll figures vs. Forms 941. The payroll costs on your loan application are checked against the quarterly payroll tax returns you filed for the same periods. If the application shows far more payroll than your 941s support, that is a red flag.
• Stated revenue vs. filed returns. Gross receipts claimed on an EIDL application are compared with gross receipts on your Form 1120, 1120-S, 1065, or Schedule C. A business that told the SBA it earned $800,000 but told the IRS it earned $80,000 will hear about it.
• Employee counts vs. information returns. Headcount certifications are cross-referenced against Forms W-2 and W-3 totals. Phantom employees — headcount with no corresponding wage reporting — are one of the fastest ways to draw an examiner's attention.
• Existence and timing. The IRS can verify whether the business existed and filed returns for the periods in question at all. Entities with no filing history before or during the pandemic are inherently suspicious.

None of this requires an agent to visit your office. It is database work, run at scale across millions of loans — which is exactly why even honest inconsistencies can generate an examination notice.

Why Legitimate Borrowers Get Flagged​

Here is the uncomfortable part: you can be flagged without having done anything wrong. Practitioners who have guided hundreds of small businesses through SBA audits and forgiveness disputes report seeing the same pattern repeatedly — what the government labels as fraud often turns out to be a good-faith reading of unclear or shifting program guidance. Some of the most common innocent explanations for a mismatch:

You amended a return after applying​

This is probably the single biggest trap for honest borrowers. Many businesses amended 2020 or 2021 returns after receiving PPP funds — most notably to claim the Employee Retention Credit, which initially could not be combined with PPP wages the way later guidance allowed. Claiming the credit meant filing Form 941-X amended payroll returns, which changed the very figures the IRS is now comparing against your loan application.

An amended return is perfectly legal. But to an automated matching program, "numbers on the application differ from numbers on file" looks identical whether the cause is fraud or a legitimate amendment. If you filed 941-X forms or amended income tax returns after your PPP application, make sure you can document exactly what changed and why.

You relied on figures that later moved​

PPP loan amounts were frequently calculated from draft or estimated figures during a chaotic rollout — partial payroll reports pulled mid-quarter, annualized part-year numbers, or owner-compensation figures for Schedule C filers that were later refined when the final return was prepared. Small, explainable variances are normal. Large, unexplained ones are not.

The rules changed under your feet​

The SBA issued and reissued guidance on eligibility, affiliation, loan calculation, and forgiveness throughout 2020 and 2021. Businesses that followed the guidance in effect on the day they applied may look noncompliant against guidance issued months later. Contemporaneous records — what you knew and when you knew it — are your best defense, which is why preserving lender communications and advisor emails matters as much as preserving the numbers.

Size and affiliation calls were genuinely ambiguous​

A meaningful share of enforcement activity targets whether borrowers were "small" enough to qualify — including whether affiliated entities should have been counted together toward the 500-employee (first draw) or 300-employee (second draw) thresholds. But affiliation analysis is notoriously fact-specific: alternative size standards, NAICS-code-based thresholds, and lender or advisor guidance all bear on whether a borrower's certification was reasonable. If your eligibility depended on an affiliation analysis, locate that analysis now.

EIDL revenue figures vs. accounting methods​

EIDL applications asked for revenue in ways that did not always map cleanly onto a tax return line. Cash-basis filers, businesses with deferred revenue, and Schedule C filers with gross-vs-net confusion could all report defensible numbers that still differ from what the matching program expects. Document the method you used.

The Tax Stakes If Your Loan Is Questioned​

For borrowers whose loans were properly obtained and properly forgiven, the federal tax treatment remains generous: forgiven PPP amounts are excluded from gross income, and — after Congress overruled the IRS's original position — the expenses paid with forgiven proceeds remain fully deductible. In other words, a clean PPP loan has zero net federal tax impact.

The picture changes sharply if the IRS or SBA concludes your loan should never have been forgiven:

• Improperly forgiven PPP amounts are taxable income. The IRS Chief Counsel's office has confirmed that if any of the three forgiveness conditions fails — you were not eligible, you did not use the proceeds for eligible expenses, or your forgiveness attestations were inaccurate — the forgiven amount must be included in income via an original or amended return.
• Fraud penalties are severe. The civil fraud penalty is 75 percent of the underpayment attributable to fraud, on top of the tax itself plus interest. The September announcement explicitly states that examinations will consider fraud penalties.
• The clock runs far longer than you think. Congress extended the statute of limitations for PPP and EIDL fraud to ten years. For a 2020 loan, that means potential criminal and civil exposure stretching to 2030 or even 2031 — and borrowers should keep their COVID loan files for at least that long, not the six years the SBA originally advised.
• Forgiveness can be revisited. The SBA can reverse a prior forgiveness decision by issuing a new final loan review decision, which starts a short appeal fuse: borrowers generally have 30 calendar days from receipt to appeal to the SBA's Office of Hearings and Appeals, where the borrower bears the burden of showing clear error of fact or law.

There are also parallel tracks beyond the IRS examination itself — from 30-day repayment demand notices to Treasury collection referrals (sometimes surfacing first as a private collector's letter with a steep surcharge) to False Claims Act cases, many filed by serial relators over size-eligibility theories. You do not need to master every track today. You do need to take any government letter about your pandemic loans seriously and immediately.

What to Do Now: A Checklist for Legitimate Borrowers​

You cannot control whether your loan lands in the examination pool. You can control how ready you are if it does. Work through this list now, while there is no deadline pressure:

1. Rebuild your loan file. Gather the application, loan-amount calculations, bank records, payroll documents, tax returns as originally filed, any amended returns with explanations, affiliation or eligibility analyses, forgiveness applications with supporting documents, lender communications, and correspondence with your accountant or attorney. If anything is missing — especially from employees who have since left — track it down now.

2. Reconcile your application against your filings. Line up the payroll, revenue, and headcount figures on your PPP and EIDL applications against your Forms 941 (including 941-X amendments), W-3s, and income tax returns. For every difference, write down the explanation while the memory is fresh: which return was amended, when, why, and who advised it.

3. Keep everything for ten years. The old six-year retention guidance is obsolete given the ten-year enforcement window. Do not purge 2020–2021 loan records, and make sure backups survive software migrations and accountant changes.

4. Update your contact information. If the person who handled your PPP correspondence is gone, or your business has moved, make sure current addresses and monitored email accounts are on file with your lender and the SBA. A 30-day appeal or repayment deadline can expire while a letter sits at an old address.

5. Do not freelance your response to a government letter. If you receive an examination notice, demand letter, loan review decision, or any inquiry from the IRS, SBA, Treasury, or a U.S. Attorney's office, contact experienced counsel before responding substantively. What looks like a routine information request can be the opening of an enforcement action, and early missteps — including producing privileged materials without a plan — are hard to undo.

6. Brief your bookkeeper and CPA. Make sure the people who maintain your books know the loan file exists, where it lives, and that nothing from the pandemic-loan years gets discarded or "cleaned up." A surprising number of examination headaches start with a well-meaning cleanup that destroys the paper trail.

Keep Your Loan File Audit-Ready From Day One​

The deeper lesson of the $200 billion referral is that your loan application and your tax returns are no longer separate conversations — the government is reading them as one document. Borrowers whose books clearly tie every certified figure back to a filed return, with amendments and corrections documented in plain language, can answer an examiner's questions in an afternoon. Borrowers whose records live in three disconnected systems, maintained by people who have since moved on, face a scramble.

Maintaining that kind of traceability is exactly what plain-text accounting is built for. Beancount.io gives you version-controlled, transparent financial records where every figure carries its history — no black boxes, no mystery adjustments. Get started for free and make your next examination, loan application, or due-diligence request a non-event.