# Assessing the Small Business Administration’s Pandemic Programs: Not Good Enough, Even for Government Work 

Both the Paycheck Protection Program and the Economic Injury Disaster Loan program reflect gross expansions of frameworks that were already troubled before the pandemic.

June 23, 2021 • Legal Policy Bulletin No. 7 

By [William Yeatman](https://www.cato.org/people/william-yeatman) 

[ 

Download PDF 

](https://www.cato.org/sites/cato.org/files/2021-06/LPB-7.pdf) 

This bulletin assesses the Small Business Administration’s performance in implementing two marquee programs as part of the federal government’s pandemic response: the $813 billion Paycheck Protection Program and the $367 billion Economic Injury Disaster Loan program.

To be sure, the federal government faced an extraordinary challenge. Due to the very nature of the government’s policy of quickly aiding those affected by COVID-19 and its economic effects, federal relief programs were at an increased risk of improper payments. It may be that some level of waste is acceptable in an emergency, but the Small Business Administration’s (SBA’s) performance nevertheless undermines the case for “big government.”

Both the Paycheck Protection Program and the Economic Injury Disaster Loan program reflect gross expansions of frameworks that were already troubled before the pandemic. And then Congress and the SBA removed safeguards to hasten funds out the door. Despite the absence of upfront controls, the SBA failed to monitor against improper payments and fraud until after most of these programs’ loans and guarantees had been disbursed. There is a steep taxpayer cost to this mismanagement: government watchdogs have identified more than $250 billion in potentially improper payments.

## Paycheck Protection Program

The SBA operates several subsidies for small businesses, including “section 7(a)” loan guarantees—named after the statutory provision that created the program.[1](#_ednref1) The SBA itself doesn’t lend the money but instead “backs” loans that the lender provides to afford the borrower better terms. If the borrower defaults, the taxpayer is on the hook up to the percentage guaranteed by the SBA. The SBA’s Office of Credit Risk Management administers the program with guidance from the Treasury Department regarding third-party lenders.[2](#_ednref2)

In response to the pandemic, Congress modified the section 7(a) framework to create the Paycheck Protection Program (PPP).[3](#_ednref3) Under the PPP, the federal government guaranteed 100 percent of the loan, set at a low interest rate (1 percent), and the loan could be forgiven if the borrower spent a certain percentage (about two-thirds) on payroll. Further, Congress expanded eligibility to include virtually any business or nonprofit with fewer than 500 employees. The maximum PPP loan amount is a function of the borrower’s payroll costs during the prior year, so it varies for each loan, although no loan could exceed $10 million.[4](#_ednref4)

The SBA administered the PPP in two phases. The program initially ended August 8, 2020, after the SBA exhausted $521 billion in loan authorizations (about 85 percent of which were made during the program’s first two months, approximately April 3 through June 4, 2020).[5](#_ednref5) A few months later, Congress authorized additional loans.[6](#_ednref6) The SBA relaunched the program January 11, 2021, and small businesses could apply for a PPP loan through March 31, 2021.[7](#_ednref7) On August 10, 2020, the SBA began accepting loan forgiveness applications.[8](#_ednref8)

All told, Congress authorized the SBA to guarantee $813.7 billion worth of loans.[9](#_ednref9) As of April 4, 2021, the SBA had backed about 9.1 million PPP loans from 5,460 lenders, totaling about $746 billion.[10](#_ednref10) To put these numbers into perspective, from fiscal years 2000–2019, the SBA made about 1.2 million section 7(a) loans totaling $333 billion, an annual average of about 62,000 loans totaling $16.7 billion.[11](#_ednref11)

### Waste Potential

After the program initially closed, the SBA Office of the Inspector General warned that it had “identified trends that indicate widespread fraudulent activity in the program.”[12](#_ednref12) In the media, anecdotal evidence has been mounting that scammers “ran wild” with the PPP.[13](#_ednref13) For example, the New York Times reported that one lender participating in the program was “frustrated with humanity” by the extent of attempted fraud he had witnessed.[14](#_ednref14)

By the end of September 2020, the inspector general’s office had received more than 77,000 hotline complaints of potential fraud, and since then, “the numbers continue to rise.”[15](#_ednref15) From April through October 2020, financial institutions filed more than 21,000 suspicious activity reports related to the PPP involving indicators such as rapid movement of funds, identity theft, and forgeries.[16](#_ednref16)

In addition to the risks posed by scammers, there is the related risk posed by administrative inefficiency at the SBA. In December 2020, an independent financial statement auditor (KPMG) flagged as potentially improper payments more than 2 million approved PPP loan guarantees, with an approximate value of $189 billion.[17](#_ednref17) KPMG flagged the loans for one or more of 35 reasons (such as borrower with criminal record or inactive business).

The SBA has yet to estimate how much waste is associated with the PPP. However, there are such serious data quality issues—KPMG found 896,000 lender reporting errors[18](#_ednref18)—that it’s uncertain whether it’s even possible to calculate the level of waste associated with the PPP.[19](#_ednref19)

### Assessment

SBA section 7(a) loan guarantees were troubled even before the pandemic, having been an annual presence on the Office of Management and Budget’s list of “high priority” programs.[20](#_ednref20) Moreover, since 2014, the SBA Office of the Inspector General has considered the section 7(a) program to be “high risk,” warranting greater attention to protect program dollars.[21](#_ednref21)

From this suboptimal baseline, Congress loosened safeguards that are part of the SBA’s regular framework for backing loans, such as not requiring a personal guarantee and allowing borrower self-certification of eligibility.[22](#_ednref22) Also, by increasing the loan guarantee to 100 percent, Congress reduced the risk to lenders, who, as a result, may have had less incentive to perform due diligence in originating loans.

Then the SBA relaxed internal controls even further by limiting underwriting requirements for lenders. Under the SBA’s section 7(a) program, borrowers must provide documentation, including financial statements and income tax returns; for the PPP, however, the SBA waived these evidentiary requirements for the program’s first phase.[23](#_ednref23) Because of the limited loan underwriting, lenders and the SBA had less information from applicants to detect errors or fraud. The SBA further deflated lenders’ incentive to vet loans by holding them harmless for borrower error.

The outcome is that an already troubled program loosened its existing safeguards to process its unprecedented workload. This is a recipe for disaster and, predictably, the results were dire.

KPMG, the independent auditor contracted to review the SBA’s performance, found that “material weaknesses”—its harshest assessment—plagued every aspect of the program, including “approval of PPP loan guarantees,” “reporting of PPP loan guarantees,” and “service entities used for loan guarantee programs.” According to KPMG, these deficiencies resulted from “an inadequate entity wide control environment to implement processes, and procedures to account for new and expanded programs under the \[Coronavirus Aid, Relief, and Economic Security\] Act and related legislation with sufficiently designed, implemented, and effectively operating controls.”[24](#_ednref24)

The Government Accountability Office corroborated KPMG’s assessment in a report whose blunt title speaks volumes: “COVID-19 Loans Lack Controls and Are Susceptible to Fraud.”[25](#_ednref25) Perhaps the most alarming alert came from the SBA inspector general, who reported that the agency, in order to diminish its backlog, temporarily “turned off system controls to allow faster approval times.”[26](#_ednref26)

When it comes to ongoing oversight, the SBA was caught flatfooted without a plan. For almost a year, the agency resisted calls from government watchdogs to implement a plan to proactively manage the related risks of fraud and improper payments.[27](#_ednref27) The agency relented only after Congress forced its hand in the Consolidated Appropriations Act of 2021, which requires the SBA to submit to the Senate and House Small Business Committees an audit plan that details the policies and procedures for conducting forgiveness reviews and audits of PPP loans.[28](#_ednref28)

Only after most of the loan authorizations had been exhausted did the SBA start to formally estimate improper payments, conduct a fraud risk assessment, or develop a strategy to monitor and manage fraud risks in the PPP on a continuous basis.[29](#_ednref29)

Equally troubling, the agency has been uncooperative with third-party oversight. Throughout 2020, both the Government Accountability Office and the SBA Office of the Inspector General repeatedly reported that the SBA had failed to provide key data and documents.[30](#_ednref30) Again, the agency’s recalcitrance ended only after Congress intervened.[31](#_ednref31)

## Economic Injury Disaster Loans

The Economic Injury Disaster Loan (EIDL) program provides loans to small businesses after disasters.[32](#_ednref32) Whereas the SBA backs third-party loans under the section 7(a) program, the agency directly issues EIDLs up to $2 million each.[33](#_ednref33) The SBA’s Office of Disaster Assistance administers the program.

In response to the pandemic, Congress modified the EIDL program by expanding eligibility and improving benefits.[34](#_ednref34) To fund the expanded program, Congress appropriated about $50 billion in loan credit subsidy costs to support approximately $367 billion in EIDLs.[35](#_ednref35) Congress appropriated an additional $40 billion for the SBA administrator to provide up to $10,000 as an advance payment, which applicants were not required to repay, even if subsequently denied an EIDL.[36](#_ednref36)

To put these figures in perspective, the SBA had approved 2.2 million disaster loans for $66.7 billion over the agency’s entire 67-year history prior to the pandemic.[37](#_ednref37) As of April 1, 2021, the SBA had approved about 3.8 million EIDLs totaling about $202 billion (or an average of about $53,500 per loan) and about $20 billion in funding for advances.[38](#_ednref38)

### Waste Potential

Last July, the SBA Office of the Inspector General warned that its preliminary investigation suggested “rampant fraud” in the EIDL program.[39](#_ednref39) Between May and October 2020, over 900 U.S. financial institutions filed more than 20,000 suspicious activity reports related to the EIDL program, involving suspected identity theft, the rapid movement of funds, and forgeries. As of January 2021, SBA investigators had received nearly 750,000 referrals related to identity theft and over 585,000 referrals related to other potentially fraudulent activities associated with the EIDL program.[40](#_ednref40)

Last October, the SBA Office of the Inspector General conducted an informal assessment and flagged $77 billion in approved loans that evinced “strong fraud indicators”—or almost 46 percent of the EIDL applications that had been approved up to that point ($169 billion). Of course, the SBA continued to make loans, and accordingly, the SBA inspector general cautioned that “the potential fraud in the COVID-19 EIDL Program has continued to grow.”[41](#_ednref41)

Ultimately, we don’t know the potential for waste in the EIDL program because the SBA has yet to perform a formal estimate of its improper payments.

### Assessment

Long before the pandemic, government auditors had sounded alarms about core aspects of the EIDL program, including the SBA’s assessment of creditworthiness and ensuring applicant eligibility.[42](#_ednref42) Despite these repeated warnings, the agency’s performance has worsened. For the fiscal year prior to its expanded responsibilities, the SBA reported its highest ever improper payment rate of 11.98 percent,[43](#_ednref43) among the worst rates in government.[44](#_ednref44) The EIDL program, therefore, was troubled before the stress of having to operate a vastly expanded loan portfolio almost overnight. Further, to hasten loans out the door, Congress removed the SBA’s most important internal control by blocking the agency from seeking borrower tax transcripts directly from the IRS.[45](#_ednref45)

Even allowing that Congress made the SBA’s job much more difficult, the agency’s stewardship of the expanded EIDL program nonetheless proved to be a debacle. Days into its administration, an overwhelmed SBA suffered a significant data breach, so the agency turned to a contractor. But the contractor had no experience with a job of this magnitude, so it turned to a subcontractor.[46](#_ednref46) Under this arrangement, the subcontractor reviewed EIDL applications and then transmitted recommendations to SBA personnel, who were responsible for making the final decisions.

In processing applications, the subcontractor used a computer system that relies on public data to verify a borrower’s eligibility. As designed, the subcontractor’s system was supposed to flag applications with potential problems and thereby alert an SBA loan officer that more research was necessary. In practice, however, this on-the-fly review process was prone to serious flaws. For example, the subcontractor estimated that 40 percent of banks do not collect enough information for its system to verify a bank account.[47](#_ednref47)

But even if the subcontractor’s system had been foolproof and flagged every suspicious application, it wouldn’t have mattered, because the SBA failed to implement a process to take these warnings into account.[48](#_ednref48) Worse, the SBA “ignored” certain subcontractor flags for months, according to the inspector general.[49](#_ednref49) More generally, the inspector general determined that the SBA “lowered the guardrails,” which “significantly increase\[ed\] the risk of fraud.”

KPMG, the independent auditor, found “material weaknesses” in the SBA’s processing of EIDLs and contractor oversight. In its discussion of these weaknesses, the auditor noted deficiencies within all components of the SBA’s internal control.[50](#_ednref50)

As was the case with the PPP, the SBA had no plan for ongoing oversight, despite the absence of upfront controls.[51](#_ednref51) And again, the SBA resisted calls from government watchdogs to implement a framework to identify and mitigate taxpayer waste. And yet again, the agency stonewalled data requests from third-party watchdogs, thus impeding their oversight too.[52](#_ednref52)

For both programs (EIDL and PPP), the SBA’s response to criticism has been illustrative. Over the past year, various public and private watchdogs have issued a raft of reports that are all in agreement that the SBA’s management failures have placed huge sums of taxpayer money at risk.[53](#_ednref53) In response, the agency effectively buried its head in the sand. Last October, for example, the Office of the Inspector General observed that “SBA’s management continues to insist that its controls are robust despite overwhelming evidence to the contrary.”[54](#_ednref54) Similarly, the agency did not concur on the independent auditors’ finding of material weaknesses.[55](#_ednref55) These responses call into question the extent to which the agency is capable of the self-reflection necessary for improvement.

## Conclusion

For the SBA’s pandemic programs, a troubling pattern emerged. In responding to the pandemic, Congress sought to scale up already troubled programs while also rolling back internal controls. The SBA, in turn, lowered safeguards further. In terms of oversight, the agency had no plan at the outset, despite the lack of upfront controls; further, the agency dragged its feet on ongoing oversight. Due to this maelstrom of mismanagement, hundreds of billions of taxpayer dollars have been placed at undue risk.

[![lpb7-cover.jpg](/sites/cato.org/files/styles/serial_cover_phone/public/2021-06/lpb7-cover.jpg?itok=JT3ydHef)](https://www.cato.org/sites/cato.org/files/2021-06/LPB-7.pdf) 

### Download This Legal Policy Bulletin

##### Assessing the Small Business Administration’s Pandemic Programs: Not Good Enough, Even for Government Work 

[ 

Download PDF 

](https://www.cato.org/sites/cato.org/files/2021-06/LPB-7.pdf) 

##### About the Author 

[![William Yeatman](/sites/cato.org/files/styles/author_picture/public/2021-01/Will%20Yeatman.jpg?itok=cX7wRQR4)](/people/william-yeatman) 

##### [William Yeatman](/people/william-yeatman)

Senior Legal Fellow, Pacific Legal Foundation

Show Endnotes 

Hide Endnotes 

##### Notes

[1](#_edn1). 15 U.S.C. § 636(a).

[2](#_edn2). Robert Jay Dilger, “Small Business Administration 7(a) Loan Guaranty Program,” Congressional Research Service Report no. R41146, updated January 27, 2021.

[3](#_edn3). Coronavirus Aid, Relief, and Economic Security Act, Pub. L. No. 116–136, 134 Stat. 281 (2020); Paycheck Protection Program and Health Care Enhancement Act, Pub. L. No. 116–139, 134 Stat. 620 (2020); Paycheck Protection Program Flexibility Act of 2020, Pub. L. No. 116–142, 134 Stat. 641 (2020); Consolidated Appropriations Act of 2021, Pub. L. No. 116–260, 134 Stat. 1182 (2021); and American Rescue Plan Act of 2021, Pub. L. No. 117–2, 135 Stat. 4 (2021).

[4](#_edn4). Robert Jay Dilger, “Small Business Administration: A Primer on Programs and Funding,” Congressional Research Service Report no. RL33243, updated March 18, 2021, pp. 19–22.

[5](#_edn5). William B. Shear, “Small Business Administration: COVID‑9 Loans Lack Controls and Are Susceptible to Fraud,” Government Accountability Office Report no. 21–117T, October 1, 2020, p. 6.

[6](#_edn6). Consolidated Appropriations Act of 2021, Pub. L No. 116–260, 134 Stat. 1182, Division N, Title III § 311 (2020).

[7](#_edn7). 86 Fed. Reg. 3712 (January 14, 2021).

[8](#_edn8). Small Business Administration, “Procedures for Lender Submission of Paycheck Protection Program Loan Forgiveness Decisions to SBA and SBA Forgiveness Loan Reviews,” Procedural Notice 5000–20038, July 23, 2020 (setting forth guidelines for lenders for processing forgiveness applications).

[9](#_edn9). American Rescue Plan Act of 2021, Pub. L. No. 117–2, 135 Stat. 4 § 5006 (2021) (increasing Paycheck Protection Program loan authorization limit to $813.7 billion).

[10](#_edn10). William B. Shear, “COVID-19 Loans: SBA Has Begun to Take Steps to Improve Oversight and Fraud Risk Management,” Government Accountability Office Report no. 21–498T, April 20, 2021, p. 6.

[11](#_edn11). Small Business Administration, “Agency Financial Report: Fiscal Year 2020,” December 2020, p. 122, [https://www.sba.gov/sites/default/files/2021–01/FY20\_SBA\_AFR-508%20%281.11.21%29.pdf](https://www.sba.gov/sites/default/files/2021-01/FY20_SBA_AFR-508%20%281.11.21%29.pdf).

[12](#_edn12). Small Business Administration, “Agency Financial Report: Fiscal Year 2020,” p. 123.

[13](#_edn13). Fred Lucas, “PPP Loan Fraud Schemes Ran Wild as Government Doled Out Billions,” *Fox News*, May 24, 2021; Derek Willis and Lydia DePillis, “Hundreds of PPP Loans Went to Fake Farms in Absurd Places,” ProPublica, May 18, 2021; and Kate Rogers et al., “As Pandemic Aid Was Rushed to Main Street, Criminals Seized on COVID Relief Programs,” *CNBC*, April 15, 2021.

[14](#_edn14). Stacy Cowley, “How Bad Was Virus Aid Fraud? One Banker Was ‘Frustrated with Humanity,” *New York Times*, updated January 8, 2021.

[15](#_edn15). Small Business Administration, “Agency Financial Report: Fiscal Year 2020,” p. 123.

[16](#_edn16). Shear, “COVID-19 Loans: SBA Has Begun to Take Steps to Improve Oversight and Fraud Risk Management,” p. 9.

[17](#_edn17). KPMG, “Independent Auditors’ Report on SBA FY 2020 Financial Statements,” December 18, 2020, p. 7.

[18](#_edn18). KPMG, “Report on SBA FY 2020 Financial Statements,” p. 8.

[19](#_edn19). Government Accountability Office, “COVID-19: Federal Efforts Could Be Strengthened by Timely and Concerted Actions,” Government Accountability Office Report no. 20–701, September 21, 2020, p. 64.

[20](#_edn20). “High-Priority Programs and Programs over $100M in Monetary Loss,” PaymentAccuracy, [https://​www​.pay​men​tac​cu​ra​cy​.gov/](https://www.paymentaccuracy.gov/).

[21](#_edn21). Office of the Inspector General, “Flash Report Small Business Administration’s Implementation of the Paycheck Protection Program Requirements,” Small Business Administration Office of the Inspector General Report no. 20–14, May 18, 2020, p. 1.

[22](#_edn22). Coronavirus Aid, Relief, and Economic Security Act, Pub. L. No. 116–136, 134 Stat. 281 §§ 1102(b), 1107(a)(1), 1112 (2020).

[23](#_edn23). 85 Fed. Reg. 20,811, 20815 (April 15, 2020).

[24](#_edn24). KPMG, “Report on SBA FY 2020 Financial Statements,” pp. 7–8.

[25](#_edn25). Shear, “COVID‑9 Loans Lack Controls and Are Susceptible to Fraud.”

[26](#_edn26). Office of the Inspector General, “Inspection of SBA’s Implementation of the Paycheck Protection Program,” Small Business Administration Office of the Inspector General Report no. 21–07, January 14, 2021, p. 10.

[27](#_edn27). William B. Shear, “Small Business Administration: Steps Needed to Address COVID-19 Loans’ Susceptibility to Fraud,” Government Accountability Office Report no. 21–449T, March 25, 2021, pp. 8–9.

[28](#_edn28). Consolidated Appropriations Act of 2021, Pub. L No. 116–260, 134 Stat. 1182 § 307(a)(3) (2020).

[29](#_edn29). Shear, “COVID-19 Loans: SBA Has Begun to Take Steps to Improve Oversight and Fraud Risk Management,” pp. 7–9.

[30](#_edn30). Shear, “COVID-19 Loans: SBA Has Begun to Take Steps to Improve Oversight and Fraud Risk Management,” p. 2.

[31](#_edn31). Consolidated Appropriations Act of 2021, Pub. L No. 116–260, 134 Stat. 1182 § 321 (2020) (requiring the Small Business Administration to respond to requests from the Government Accountability Office within 15 days \[or such later date as the comptroller general may provide\] or report to Congress on the reasons for the delay).

[32](#_edn32). 15 U.S.C. § 636(b); and 13 C.F.R. Part 123.

[33](#_edn33). Bruce R. Lindsay, “The SBA Disaster Loan Program: Overview and Possible Issues for Congress,” Congressional Research Service Report no. R41309, updated October 23, 2015, [http://​nation​alaglaw​cen​ter​.org/​w​p​-​c​o​n​t​e​n​t​/​u​p​l​o​a​d​s​/​a​s​s​e​t​s​/​c​r​s​/​R​4​1​3​0​9.pdf](http://nationalaglawcenter.org/wp-content/uploads/assets/crs/R41309.pdf).

[34](#_edn34). Coronavirus Preparedness and Response Supplemental Appropriations Act of 2020, Pub. L. No. 116–123, 134 Stat. 146, Title II (2020) (authorizing the Small Business Administration administrator to deem the pandemic a “disaster”); and Coronavirus Aid, Relief, and Economic Security Act Pub. L. No. 116–136, 134 Stat. 281 § 1110 (2020) (modifying the program to expand eligibility and increase benefits).

[35](#_edn35). Paycheck Protection Program and Health Care Enhancement Act, Pub. L. No. 116- 139, 134 Stat. 620, § 101 (2020) (funding the expanded Economic Injury Disaster Loan program).

[36](#_edn36). Coronavirus Aid, Relief, and Economic Security Act Pub. L. No. 116–136, 134 Stat. 281 §§ 1107, 1110 (2020) (providing $10 billion in advance payments); Paycheck Protection Program and Health Care Enhancement Act, Pub. L. No. 116- 139, 134 Stat. 620 § 101 (2020) (providing another $10 billion for Economic Injury Disaster Loan advance payments); and Consolidated Appropriations Act of 2021, Pub. L No. 116–260, 134 Stat. 1182 § 323(D) (2020) (providing “targeted” Economic Injury Disaster Loan advances to eligible entities located in low-income communities).

[37](#_edn37). Office of the Inspector General, “Inspection of Small Business Administration’s Initial Disaster Assistance Response to the Coronavirus Pandemic,” Small Business Administration Office of the Inspector General Report no. 21–01, October 28, 2020, p. 3.

[38](#_edn38). Shear, “COVID-19 Loans: SBA Has Begun to Take Steps to Improve Oversight and Fraud Risk Management,” p. 13.

[39](#_edn39). Office of the Inspector General, “Serious Concerns of Potential Fraud in EIDL Program Pertaining to the Response to COVID-19,” Small Business Administration Office of the Inspector General Report no. 20–16, July 28, 2020, p. 3.

[40](#_edn40). Shear, “Steps Needed to Address COVID-19 Loans’ Susceptibility to Fraud,” pp. 10–11.

[41](#_edn41). Office of the Inspector General, “Inspection of Small Business Administration’s Initial Disaster Assistance Response to the Coronavirus Pandemic,” pp. 15 and 32.

[42](#_edn42). For prior audit descriptions, see Office of the Inspector General, “White Paper: Risk Awareness and Lessons Learned from Audits and Inspections of Economic Injury Disaster Loans and Other Disaster Lending,” Small Business Administration Office of the Inspector General Report no. 20–12, April 3, 2020, [https://www.sba.gov/sites/default/files/2020–04/SBA\_OIG\_WhitePaper\_20-12\_508\_0.pdf](https://www.sba.gov/sites/default/files/2020-04/SBA_OIG_WhitePaper_20-12_508_0.pdf).

[43](#_edn43). Office of the Inspector General, “Independent Auditors’ Report on SBA’s Compliance with Payment Integrity Information Act,” Small Business Administration Office of the Inspector General Report no. 21–16, May 12, 2021, p. 3.

[44](#_edn44). Garrett Hatch, “Improper Payments in High-Priority Programs: In Brief,” Congressional Research Service Report no. R45257, July 16, 2018, Table 4 (identifying only seven government programs with an improper payment rate above 10 percent).

[45](#_edn45). Coronavirus Aid, Relief, and Economic Security Act Pub. L. No. 116–136, 134 Stat. 281 § 1110(d)(1) (2020).

[46](#_edn46). Office of the Inspector General, “Inspection of Small Business Administration’s Initial Disaster Assistance Response to the Coronavirus Pandemic,” pp. 4–5.

[47](#_edn47). Office of the Inspector General, “Inspection of Small Business Administration’s Initial Disaster Assistance Response to the Coronavirus Pandemic,” pp. 5, 8–9. Another example is that it took five months for the subcontractor to realize its system was unable to flag when multiple applications had the same information, which was a problem because a leading technique for scammers was to send scores of applications in the hope that at least one survived the SBA’s lax verification process.

[48](#_edn48). KPMG, “Report on SBA FY 2020 Financial Statements,” p. 12. (“Adequate controls were not designed and implemented to determine that fraud alerts raised by the portal related to applications submitted by borrowers were sufficiently addressed before loans were approved.”)

[49](#_edn49). Office of the Inspector General, “Inspection of Small Business Administration’s Initial Disaster Assistance Response to the Coronavirus Pandemic,” p. 25; and Shear, “COVID-19 Loans: SBA Has Begun to Take Steps to Improve Oversight and Fraud Risk Management,” p. 16. (“SBA officials told us that 4 months after SBA started using the service organization’s automated validation system to approve loan applications in batches, they realized that these applications contained alerts that should have been further reviewed by loan officers.”)

[50](#_edn50). KPMG, “Report on SBA FY 2020 Financial Statements,” pp. 11–14, 16–18.

[51](#_edn51). Government Accountability Office, “High-Risk Series: Dedicated Leadership Needed to Address Limited Progress in Most High-Risk Areas,” Government Accountability Office Report no. 21–119SP, March 2, 2021, pp. 12–13 (describing absence of oversight plan).

[52](#_edn52). Shear, “COVID-19 Loans: SBA Has Begun to Take Steps to Improve Oversight and Fraud Risk Management,” pp. 2, 16–17.

[53](#_edn53). These reports form the basis of and are cited throughout this bulletin.

[54](#_edn54). Office of the Inspector General, “Inspection of Small Business Administration’s Initial Disaster Assistance Response to the Coronavirus Pandemic,” p. 31.

[55](#_edn55). Small Business Administration Chief Financial Officer, “Response to Audit Report in FY 2020 Financial Statements,” December 18, 2020, reprinted in Small Business Association, “Agency Financial Report: Fiscal Year 2020,” p. 62.

[![Creative Commons License](/build/cato_2020/images/creative-commons.svg)](http://creativecommons.org/licenses/by-nc-sa/4.0/) 
This work is licensed under a [Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License](https://creativecommons.org/licenses/by-nc-sa/4.0/). 

[ 

Download PDF 

](https://www.cato.org/sites/cato.org/files/2021-06/LPB-7.pdf)