On July 8, 2026, the SBA announced it had suspended 7,800 Wisconsin borrowers tied to $375 million in suspected fraudulent Paycheck Protection Program and COVID EIDL loans — the latest in a rolling, state-by-state review that has now flagged more than 112,000 borrowers connected to over $10 billion in suspected pandemic-era fraud, in collaboration with the White House Task Force to Eliminate Fraud.
If you received a PPP or EIDL loan in 2020–2022 and used it as intended, you are not the target. But you may still be affected — by a records request, a bank inquiry, or a suspension notice triggered by a data match that you need to resolve. Understanding how the sweep works and what legitimate borrowers should check now can prevent a legitimate loan from becoming an administrative nightmare.
What the Sweep Is — and What It Is Not
The SBA is not re-auditing every PPP and EIDL loan. It is running a data-driven triage across its pandemic portfolio, state by state, looking for patterns that indicate fraud: duplicate entities, identity mismatches, fictitious payroll, and use of the same bank account or address across hundreds of applications. Wisconsin's 7,800 suspensions — following earlier tranches in other states — were flagged through those pattern matches, not through individualized audits of 7,800 businesses.
A suspension means the borrower is temporarily barred from receiving further SBA assistance (including new 7(a) or disaster loans) and is flagged for further review. It is not a criminal indictment and it is not a final determination of fraud. The SBA's notices explicitly describe the loans as "suspected" fraudulent activity, precisely because the next step is verification, not prosecution.
Legitimate borrowers who share a data point with a fraud ring — for example, a shared accountant's address used by a fraudulent filer, or a transposed EIN that matches a synthetic identity — can be swept into the initial suspension pool. That is why the legitimate-borrower playbook matters: the faster you can document the loan's basis, the faster the hold is lifted.
What Legitimate Borrowers Should Verify Now
Do not wait for a letter. If you have an outstanding SBA pandemic loan (including an EIDL that is still in repayment or a PPP that was forgiven), run a self-check on the five areas the sweep is flagging:
1. Forgiveness and Repayment Records Match the Ledger
For PPP, pull the forgiveness application you filed (or the lender filed on your behalf), the SBA forgiveness determination, and your general ledger entries for the covered period. Payroll costs, rent, utilities, and other eligible uses should reconcile to bank statements for that period. If forgiveness was granted, retain the determination letter — it is not immunity from fraud screening, but it is evidence of a reviewed filing.
For EIDL, verify the loan amount, disbursement dates, and current repayment status match both the SBA portal (via the Capital Access Financial System) and your books. EIDL proceeds were required to be used for working capital and normal operating expenses. If you can show the funds serviced payroll and vendor obligations during the covered hardship period, you are aligned with the program's purpose.
2. Entity and Identity Documents Are Consistent
The sweep is flagging synthetic-identity and shell-entity patterns. Confirm that the EIN, legal entity name, formation date, and owner identities on the loan documents match your Secretary of State filing and your tax returns for the same period. Common legitimate triggers for a mismatch include:
- A business that changed entity type (e.g., sole proprietorship to LLC) between application and forgiveness
- An application filed under a DBA where the legal name on the tax return is different
- An address that is a registered agent or accountant's office used for many clients, which fraud rings also abused
If any of those apply to you, prepare a one-page entity history that explains the transition with dates and supporting filings — formation certificate, EIN letter, and the relevant tax return header.
3. Payroll Documentation Survives Scrutiny
Most PPP fraud involved exaggerated or fictitious payroll. Legitimate borrowers should be able to produce, for the 2019–2020 base period used in the application:
- Quarterly payroll tax filings (Form 941) and annual W-2/W-3 transmittals that tie to the payroll cost claimed
- Payroll processor reports or bank payroll debits that corroborate the filings
- Health insurance and retirement contribution records if those were included in payroll costs
If you used a PEO, keep the PEO's wage reports plus the contract showing the co-employment relationship. PEO-reported wages are a frequent source of data mismatches because the wages are filed under the PEO's EIN.
4. Bank Records Show the Funds' Path
Fraud rings often moved proceeds immediately to unrelated accounts or converted them to personal assets. For a legitimate borrower, the bank statements should show a mundane path: PPP or EIDL proceeds deposited to the business operating account, then disbursed over weeks to payroll, rent, and vendors. Highlight that trail now with annotated statements — investigators resolve flagged cases faster when the narrative is obvious without subpoenas.
5. No Undisclosed Affiliation or Double-Dipping
The sweep also flags undisclosed affiliates and duplicate loans. Confirm that no other entity under common control received a separate PPP loan for the same employees in the same covered period without disclosure. Affiliation rules for PPP were complex; if you owned multiple entities, an affiliation disclosure error is often curable, but only if you raise it first.
If You Receive a Suspension Notice
A suspension letter typically arrives by email and via the SBA portal, with a deadline to respond and a request for specific documents. Treat the deadline as firm:
- Respond completely and within the window. Partial responses generate a second request and extend the suspension.
- Use the SBA's designated channel. Do not reply to a general inbox — use the link or email in the notice and retain the submission confirmation.
- Do not ignore it because the loan is forgiven or repaid. Forgiven PPP loans are still in the SBA's portfolio for fraud review, and an open suspension can block future 7(a) eligibility even after repayment.
If you are a legitimate borrower and the notice appears to be a clear data error — for example, the loan number does not match any loan you received — state that explicitly, provide a signed declaration, and include the TxID or loan number from the notice so the SBA can correct the match.
Consider a brief consultation with a CPA or SBA-experienced attorney before submitting. The submission you make becomes part of the record; a clean, organized package with a cover letter that maps each requested item to an exhibit resolves faster than a loose collection of PDFs.
How to Think About Future SBA Borrowing
A suspension does not permanently blacklist you, but even a legitimate borrower who is flagged should plan for underwriting friction on the next SBA loan:
- Lenders will ask whether any principal or affiliate has been suspended or flagged. Answer accurately — the lender will check independently.
- Keep pandemic-loan records for at least 10 years. The SBA's authority to review pandemic programs extends well beyond the normal three-year record-retention many small businesses assume.
- Separate pandemic-era records from current operations in your document retention system, so a records request does not require reconstructing a closed bank account or a departed bookkeeper's files.
Keep Your Pandemic-Loan Records Audit-Ready
The SBA's $10 billion-plus fraud sweep is not ending with Wisconsin — the agency has described it as a 50-state review, and the Wisconsin tranche is simply the latest public announcement. For legitimate borrowers, the risk is not prosecution but administrative drag: a suspension that freezes future SBA access until you produce records you have not looked at in three years.
The best defense is the most boring one: forgiveness determinations, payroll filings, bank statements, and entity records that tie cleanly and are retrievable in a day. If you can produce that packet on request, a flag generated by a distant fraud pattern will not become a long-term problem for your business.
Simplify Your Financial Management
Pandemic-era loans were an emergency response; their documentation should not be an emergency now. Beancount.io gives you plain-text, version-controlled accounting where every PPP draw, every EIDL disbursement, and every payroll allocation is traceable — so a records request is an export, not a scavenger hunt. Get started for free and keep your SBA history organized.