SBA Audit of My $2 Million+ PPP Loan: What to Expect | Federal PPP Fraud Defense Lawyers
So your probably thinking “I just received a letter saying my $2 million+ PPP loan is being audited by the SBA — what does this mean and should I be worried?” — and the answer is that **ALL loans over $2 million are automatically audited**, meaning this audit was expected and mandatory regardless of whether there’s any suspicion of fraud. However, the audit results can range from smooth approval with no issues to forgiveness denial, repayment demands, and referral to the SBA Office of Inspector General for criminal investigation if the auditors find discrepancies between your application and your actual eligibility, payroll expenses, or use of funds. We’re gonna walk through exactly what the SBA audits (eligibility certification, loan amount calculation, use of proceeds, forgiveness documentation), the audit process timeline (typically 6-12 months from notification to final decision), what documentation you’ll need to provide, the potential outcomes ranging from full approval to criminal referral, and most importantly what you should do RIGHT NOW if you’ve received an audit notification — because how you respond to document requests and whether you have experienced legal counsel can literally determine whether this audit results in a smooth forgiveness approval or a federal fraud investigation that puts you at risk of prison time and treble damages.
## Why Is My $2 Million+ PPP Loan Being Audited?
According to federal lending and audit guidance, the SBA made it clear from the beginning that it will audit ALL loans exceeding $2 million once the lender submits the borrower’s loan forgiveness application.
**This is automatic — NOT because they suspect fraud in your specific case.**
### SBA’s $2 Million Audit Policy:
In April 2020, shortly after the PPP program launched, the SBA announced that it would review all requests for forgiveness of PPP loans in excess of $2 million to “further ensure PPP loans are limited to eligible borrowers in need.”
**Why $2 Million?**
– Represents largest loan amounts (highest dollar exposure)
– Approximately 11,000+ loans in this category
– These loans account for significant portion of total PPP funds distributed
– SBA wanted extra scrutiny on largest disbursements
**Important:** If you received a $2M+ loan, you should have EXPECTED this audit — it’s not a red flag specific to your loan, it’s standard policy for all loans in this category.
### When Does the Audit Happen?
According to audit procedures, the SBA usually begins the PPP loan audit process within one year after the borrower has received loan forgiveness — though audits can be initiated up to **six years** after the loan is forgiven.
**Typical Timeline:**
– Forgiveness approved: March 2021
– Audit initiated: Sometime between March 2021 – March 2027
– Most common: Within 12-18 months of forgiveness
### What If My Loan Hasn’t Been Forgiven Yet?
The audit typically occurs AFTER you submit forgiveness application — but can also occur before forgiveness decision is made, especially if red flags are detected during forgiveness review.
## What Does the SBA Audit?
The audit examines three primary areas:
### 1. Eligibility for PPP Loan
**SBA Reviews:**
**Necessity Certification:**
– Did you have reasonable basis to certify that “current economic uncertainty made the loan request necessary to support ongoing operations”?
– This is the MOST SCRUTINIZED element for $2M+ loans
– SBA issued guidance that borrowers should consider:
– Access to other sources of liquidity
– Ability to access credit elsewhere
– Business activity at time of application
– Financial condition
**Size Standards:**
– Did you meet SBA size standards (generally 500 employees or less)?
– Properly calculated employee count using SBA’s affiliation rules?
– Included all affiliates in employee count?
**Business Type:**
– Was your business type eligible for PPP?
– Not engaged in excluded activities (lobbying, speculation, pyramid schemes, etc.)
**Prior Debts:**
– No outstanding delinquent federal debts
– Not in bankruptcy
– No tax liens or judgments against you
### 2. Loan Amount Calculation
**SBA Audits Whether You Correctly Calculated:**
**Payroll Costs (Most Common Issue):**
– Did you use correct methodology to calculate average monthly payroll?
– For business operational before Feb 15, 2020:
– 2.5 times average monthly payroll during 2019 or 2020
– Did you include only eligible payroll costs?
– Did you properly cap individual employee comp at $100K annual ($8,333 monthly)?
**Eligible vs. Ineligible Payroll Costs:**
**ELIGIBLE:**
– Salaries, wages, commissions, tips (capped at $100K per employee annually)
– Employee benefits (health insurance, retirement)
– State/local payroll taxes
– For sole proprietors/self-employed: Net profit from Schedule C (capped at $100K annually)
**INELIGIBLE:**
– Compensation above $100K per employee
– Federal payroll taxes (employer portion of Social Security, Medicare)
– Qualified sick/family leave wages covered by FFCRA
– Compensation of employees living outside U.S.
**Common Calculation Errors SBA Finds:**
– Including federal payroll taxes (not allowed)
– Not capping individual employee compensation
– Including owners/partners above allowable amounts
– Using gross revenues instead of payroll for sole proprietors
– Including contractors (1099 workers) as employees
### 3. Use of PPP Loan Proceeds
**SBA Verifies Funds Were Used for Eligible Purposes:**
**Eligible Uses:**
– Payroll costs (must be at least 60% for full forgiveness)
– Mortgage interest (not principal)
– Rent payments
– Utilities
– Covered operations expenditures
– Covered property damage costs
– Covered supplier costs
– Covered worker protection expenditures
**Red Flags SBA Looks For:**
– Large cash withdrawals
– Transfers to personal accounts
– Luxury purchases
– Cryptocurrency investments
– Payments to related parties above market rates
– International wire transfers
– Uses unrelated to business operations
**Important:** Bank records will be analyzed — SBA can see exactly where every dollar went.
## The SBA Audit Process: Step-by-Step
### Step 1: Audit Notification
**How You’re Notified:**
– SBA notifies your LENDER first
– Lender then notifies YOU
– You receive letter requesting additional documentation
– Typically gives 30-60 days to respond
**What the Letter Says:**
– Your loan has been selected for review
– List of documents requested
– Deadline for submission
– Contact information for questions
### Step 2: Document Request
**SBA Typically Requests:**
**Application Documents:**
– Original PPP loan application (SBA Form 2483)
– All supporting documents submitted with application
– Calculation worksheets for loan amount
**Payroll Documentation:**
– IRS Form 941 (quarterly payroll tax returns) for 2019, 2020, 2021
– State quarterly payroll reports
– Payroll reports from payroll provider (ADP, Paychex, etc.)
– Payroll journal entries and cancelled payroll checks
– W-2s and W-3s
– 1099s for contractors
**For Self-Employed/Sole Proprietors:**
– Schedule C from 2019 and 2020 tax returns
– If partnership: Form 1065, K-1s
– If S-Corp: Form 1120-S
**Business Tax Returns:**
– Complete business tax returns for 2019, 2020, 2021
– All schedules and attachments
**Bank Statements:**
– Business bank account statements from PPP deposit through covered period
– Statements showing use of PPP funds
– Documentation of payments for eligible expenses
**Forgiveness Documentation:**
– Forgiveness application (Form 3508, 3508EZ, or 3508S)
– All supporting documents submitted with forgiveness application
– Updated payroll reports for covered period
– Documentation of non-payroll expenses (rent, utilities, etc.)
**Other Business Records:**
– Articles of incorporation/organization
– Business licenses
– Lease agreements or mortgage statements
– Utility bills
– Evidence of payment for eligible expenses
### Step 3: Document Review and Analysis
**What SBA Does:**
– Compares application to tax returns (looking for discrepancies)
– Verifies loan amount calculation
– Analyzes bank records for fund usage
– Checks payroll reports against claimed employee count
– Compares forgiveness application to loan application
– Looks for inconsistencies or red flags
**Common Discrepancies Found:**
– Application claimed 25 employees, but 941s show only 15
– Loan amount based on $250K payroll, but tax returns show $150K
– Bank records show $100K transferred to personal account
– Forgiveness docs claim different payroll than application
– Self-employed borrower claimed more than Schedule C net profit
### Step 4: Follow-Up Questions (If Needed)
If SBA finds issues or has questions:
– Requests additional documentation
– Asks for written explanations of discrepancies
– May request interview with borrower
– Timeline extends as clarifications sought
**This is where attorney representation becomes critical.**
### Step 5: Audit Decision
**Possible Outcomes:**
**Option 1: No Issues Found ( Case)**
– Audit complete
– Forgiveness approved as submitted
– No further action required
– You receive forgiveness confirmation
**Option 2: Minor Issues – Partial Forgiveness**
– Some discrepancies found
– Forgiveness amount reduced based on findings
– Example: Claimed $2.5M but only $2.2M properly documented
– Required to repay difference ($300K)
– Not referred for investigation
**Option 3: Significant Issues – Forgiveness Denied**
– Major discrepancies between application and documentation
– Loan amount was miscalculated or overstated
– Funds not used for eligible purposes
– Forgiveness denied in full
– Required to repay entire loan
– May be referred to SBA OIG if fraud suspected
**Option 4: Fraud Indicators – Criminal Referral**
– Evidence of intentional misrepresentation
– False documents submitted
– Obvious fraud indicators
– Case referred to SBA Office of Inspector General
– Criminal investigation opens
– Both civil and criminal exposure
### Timeline for Audit Decision:
– **Simple audits (no issues):** 3-6 months
– **Audits requiring follow-up:** 6-12 months
– **Complex audits with significant issues:** 12-24 months
## What Happens If SBA Finds Problems?
Depends on severity of issues found:
### Minor Discrepancies or Errors:
**SBA’s Response:**
– Reduce forgiveness amount to match documentation
– Send demand letter for repayment of difference
– May assess interest on unforgiven portion
– Typically NOT referred for criminal investigation if errors appear innocent
**Example:**
Borrower claimed $2.5M loan based on stated payroll, but upon audit, documentation only supports $2.2M. SBA reduces forgiveness to $2.2M and requires repayment of $300K difference plus interest. No criminal referral.
**Your Options:**
– Pay the difference (ends the matter)
– Appeal the decision through SBA’s Office of Hearings and Appeals
– Negotiate payment plan
### Significant Discrepancies Suggesting Fraud:
**SBA’s Response:**
– Deny forgiveness entirely
– Demand full loan repayment
– Refer case to SBA Office of Inspector General
– OIG opens criminal investigation
– Possible referral to DOJ for prosecution
**Red Flags That Trigger Fraud Referral:**
– Fabricated documents (photoshopped 941s, fake pay stubs)
– Completely fictitious employees
– Payroll numbers with no basis in reality
– Business didn’t exist as claimed
– Funds used entirely for personal expenses
– Owner made false certifications knowing they weren’t true
**Criminal Exposure:**
– 18 USC §1014 (false statements to bank/SBA): Up to 30 years
– 18 USC §1343 (wire fraud): Up to 20-30 years
– 18 USC §1001 (false statements): Up to 5 years
– Civil False Claims Act: Treble damages (3x loan amount) + penalties
### What If I Made Innocent Errors?
**Key Question:** Intent
– **Innocent mistakes** (complex rules, relied on accountant, honest errors) → Usually resolved civilly with repayment, no criminal prosecution
– **Intentional fraud** (knowingly lied, fabricated documents, stole funds) → Criminal prosecution likely
**How SBA/DOJ Determines Intent:**
– Were errors in your favor or random?
– Did you rely on professional advice?
– Did you maintain good records?
– Was there pattern of deceit or just one mistake?
– Did you try to hide information or cooperate?
## What Should You Do If You Receive Audit Notification?
### IMMEDIATE Steps (Do These TODAY):
**STEP 1: DO NOT Panic**
Remember: ALL $2M+ loans are audited. This doesn’t automatically mean they suspect fraud. Many audits result in approval with no issues.
**STEP 2: DO NOT Respond Without Legal Counsel**
Even if you believe everything is fine:
– SBA auditors are looking for problems
– Innocent explanations can be misunderstood
– How you present information matters
– Attorney can negotiate scope and protect your rights
**STEP 3: Hire Experienced PPP Audit Defense Attorney IMMEDIATELY**
You need someone who specifically knows:
– PPP program rules and eligibility requirements
– SBA audit procedures
– How to respond to document requests strategically
– When discrepancies can be explained vs. when they’re problematic
– How to negotiate with SBA auditors
**STEP 4: Gather All Documents Requested**
Work with your attorney to compile:
– Everything SBA requested
– Supporting documentation that explains any discrepancies
– Professional advice you relied on (CPA communications, etc.)
**STEP 5: Let Attorney Review Documents BEFORE Submission**
Attorney should:
– Review for potential issues
– Identify documents that help vs. hurt
– Prepare explanations for discrepancies
– Determine if additional supporting docs needed
– Draft cover letter/narrative explaining any issues
**STEP 6: Attorney Communicates with SBA**
– Attorney serves as point of contact
– Handles all correspondence
– Negotiates extensions if needed
– Presents information in most favorable light
– Protects your rights throughout process
### What NOT to Do:
**❌ DON’T Ignore the Audit Notification**
Ignoring won’t make it go away. Results in:
– Automatic forgiveness denial
– Full loan repayment demand
– Possible default
– Referral to OIG for non-cooperation
**❌ DON’T Provide Documents Without Attorney Review**
Even innocent-seeming documents can contain issues you don’t see.
**❌ DON’T Agree to Interview Without Attorney Present**
If SBA requests meeting or phone call:
– Tell them you’re represented by counsel
– Have attorney arrange interview
– Attorney should be present for any discussion
**❌ DON’T Fabricate or Alter Documents**
If your original documents have problems:
– DON’T create “new” documents
– DON’T alter existing documents
– DON’T photoshop or backdate anything
– Document falsification = guaranteed criminal prosecution
**❌ DON’T Assume “It Will Be Fine”**
Even small discrepancies can result in forgiveness denial or criminal referral if not properly explained.
## Can I Appeal SBA’s Audit Decision?
**YES** — if you disagree with audit findings, you have appeal rights.
### SBA Office of Hearings and Appeals (OHA)
**What You Can Appeal:**
– Forgiveness denial
– Partial forgiveness decision
– Repayment demand
**Appeal Process:**
1. File appeal with OHA within **30 days** of adverse decision
2. Submit written appeal with supporting documentation
3. OHA reviews SBA’s decision
4. Hearing may be held (optional)
5. OHA issues decision
**Standards:**
– OHA reviews whether SBA’s decision was arbitrary, capricious, or contrary to law
– You have burden of proving SBA’s decision was wrong
– Attorney representation highly recommended
**Timeline:**
– OHA appeals can take **6-18 months**
**Outcomes:**
– Uphold SBA’s decision (you lose)
– Reverse SBA’s decision (you win)
– Remand back to SBA for further review
## How Long Can SBA Audit PPP Loans?
According to federal regulations, the Small Business Administration can conduct a PPP loan audit up to **six years after the loan is forgiven**.
**What This Means:**
– Loan forgiven in 2021 → Can be audited through 2027
– Loan forgiven in 2023 → Can be audited through 2029
– Even years after forgiveness, audit is possible
**Why This Matters:**
– Keep ALL PPP-related documents for minimum 6 years
– Don’t destroy records just because loan was forgiven
– Document destruction can be viewed as obstruction if audit later initiated
**Criminal Statute of Limitations:**
– Separate from audit window
– Criminal fraud charges can be brought up to **10 years** from date of fraud
– Means 2020 loan can result in charges through 2030
## Final Thoughts: $2M+ Audits Are Standard But Serious
We’ve represented numerous clients through SBA audits of their $2M+ PPP loans. Some key lessons:
**Most Common Issues We See:**
– Loan amount calculation errors (didn’t properly cap employee compensation)
– Including ineligible costs in payroll calculation
– Self-employed borrowers claiming more than Schedule C net profit
– Not maintaining documentation of fund usage
– Discrepancies between application and tax returns
**Successful Audit Outcomes:**
✓ Clients who had good documentation → Usually approved
✓ Clients who could explain discrepancies with professional advice → Often resolved favorably
✓ Clients with attorney representation → Better results than DIY
✓ Clients who cooperated and were transparent → Civil resolution even when errors found
**Unsuccessful Audit Outcomes:**
❌ Clients who ignored audit → Forgiveness denied, full repayment demanded
❌ Clients who couldn’t document fund usage → Forgiveness denied
❌ Clients who fabricated documents during audit → Criminal prosecution
❌ Clients with obvious fraud indicators → Referred to OIG, criminal charges
**Bottom line:** If you received a $2M+ PPP loan, the audit is coming (or may already be underway). Being proactive — gathering documents, reviewing your application for potential issues, and having experienced legal counsel — can mean the difference between smooth approval and criminal investigation.
If you’ve already received an audit notification, contact an experienced PPP audit defense attorney immediately. The audit response is NOT something to DIY — how you respond, what documents you provide, and how discrepancies are explained can determine whether you receive full forgiveness or face federal fraud charges.
—
**LEGAL DISCLAIMER:** This article provides general information about SBA audits of PPP loans and does not constitute legal advice for any specific situation. If you received an audit notification or believe your loan may be audited, contact an experienced PPP audit defense attorney immediately for advice tailored to your circumstances. Nothing in this article creates an attorney-client relationship.