Reports

We evaluated the U.S. Small Business Administration’s (SBA) controls to flag or prevent potentially fraudulent Coronavirus Disease 2019 (COVID-19) Economic Injury Disaster Loan (EIDL) applications submitted from foreign Internet Protocol (IP) addresses. Although the agency implemented several layers of controls to prevent or reduce fraud from foreign countries, individuals at foreign IP addresses were able to access the COVID-19 EIDL application system. SBA received millions of attempts to submit COVID-19 EIDL applications from foreign IP addresses and stopped most of them; however, the agency...

The Office of Inspector General (OIG) found that the Small Business Administration (SBA) did not have an organizational structure with clearly defined roles, responsibilities, and processes to manage and handle potentially fraudulent Paycheck Protection Program (PPP) loans across the program.