To report PPP loan fraud, file a complaint with the U.S. Small Business Administration’s Office of Inspector General, either through its online complaint portal or by mail. The Department of Justice and the IRS also take PPP fraud tips, and which agency fits best depends on the type of fraud you saw. Federal law protects you from workplace retaliation for reporting, and in some cases pays you a share of what the government recovers.
Where to File a PPP Fraud Complaint
Three federal agencies accept these reports. Pick based on what kind of fraud you’re describing and whether you want to pursue an award.
SBA Office of Inspector General
The SBA OIG is the primary investigative body for fraud involving SBA programs, PPP included.1U.S. Small Business Administration. About the Office of Inspector General The fastest route is the OIG’s online complaint system. You can also mail a complaint to the Office of Inspector General, 409 3rd Street SW, Suite 7150, Washington, DC 20416. The OIG no longer takes fraud complaints by phone or email.2U.S. Small Business Administration. Office of Inspector General Hotline
You can report anonymously. The OIG doesn’t automatically capture identifying information during intake. Anonymous tips are harder for investigators to use, though, because they can’t come back to you for clarification. If you do give your name, the OIG treats your identity as confidential by default and won’t disclose it outside the office without your consent unless disclosure becomes unavoidable during the investigation.2U.S. Small Business Administration. Office of Inspector General Hotline
DOJ National Center for Disaster Fraud
The DOJ’s National Center for Disaster Fraud coordinates investigations tied to federally declared disasters, and COVID-19 relief programs like PPP fall inside its remit.3Department of Justice. National Center for Disaster Fraud (NCDF) Call 1-866-720-5721 or use the NCDF online complaint form. Email is no longer an option.4U.S. Department of Justice. NCDF Disaster Complaint Form
Internal Revenue Service
When the fraud involves tax-related conduct — falsified tax documents on the application, unreported income from misused funds, or a fraudulent forgiveness claim — the IRS is the right place. There are two forms depending on whether you want a financial award.
If you’re reporting without seeking an award, use Form 3949-A (Information Referral). Submit it online through the IRS website or mail it to Internal Revenue Service, PO Box 3801, Ogden, UT 84409.5Internal Revenue Service. About Form 3949-A, Information Referral
If you want an award, submit Form 211 (Application for Award for Original Information) to the IRS Whistleblower Office, either online or by mail. Form 211 requires specific, credible information about the violation, your signature under penalty of perjury, and your contact information. You cannot file it anonymously.6Internal Revenue Service. Submit a Whistleblower Claim for Award
What to Include in Your Report
How much investigators can do with your tip depends almost entirely on how specific it is. General suspicion doesn’t give them anywhere to start. Before you file, pull together as much of the following as you can:
- The name, address, and contact information of the business and its owners or principals.
- Approximate dates the fraud happened, such as when the loan application was submitted or when funds were diverted.
- The approximate loan amount, if you know it, so investigators can gauge the scale.
- A clear narrative of the scheme. “They claimed 50 employees but only had five” is far more useful than “I think they lied on their application.”
- Any supporting documents: internal emails, financial records, screenshots, photographs.
Collecting Evidence Without Exposing Yourself
If you’re a current employee, proceed carefully when gathering documents. Employers sometimes threaten criminal prosecution for taking workplace files, or file breach-of-contract lawsuits to pressure whistleblowers into backing off. Avoid removing originals when you can. Photographing unclassified records with your personal phone is a safer alternative. If you’re worried about legal exposure, talk to an attorney before you gather anything, and store copies with the attorney rather than at home or on work devices.7Office of the Whistleblower Ombuds. Whistleblower Survival Tips
If Someone Took a PPP Loan in Your Name
This is a different situation from reporting fraud you witnessed, and the process is different too. Start by filing an identity theft report with the FTC at IdentityTheft.gov. That generates an official FTC Identity Theft Report you’ll need for later steps.8Federal Trade Commission. Steps
Then report the theft directly to the SBA through its identity theft portal at sba.gov/idtheft. The SBA has a dedicated email for PPP identity theft inquiries at PPPIDTheftInquiries@sba.gov.8Federal Trade Commission. Steps If you can identify the lender that issued the loan, contact them, explain that the loan was taken without your knowledge, and ask to be released from it. Get written confirmation of what the lender does and keep a record of every conversation.
Can You Get Paid for Reporting
Federal law puts real money behind these tips. Two programs are relevant.
False Claims Act Qui Tam Awards
The False Claims Act lets a private citizen file a civil lawsuit on the government’s behalf, called a qui tam action, against anyone who defrauded a federal program. If the government intervenes in your case, you receive between 15% and 25% of what it recovers, depending on how much you contributed to the prosecution. If the government declines to intervene and you continue the suit yourself, your share rises to between 25% and 30%.9Office of the Law Revision Counsel. 31 U.S. Code 3730 – Civil Actions for False Claims
Some PPP fraud cases involve millions of dollars, so those percentages can translate into significant payouts. In fiscal year 2025, over 1,297 new qui tam lawsuits were filed across all federal programs.10U.S. Department of Justice. False Claims Act Settlements and Judgments Exceed $6.8B in Fiscal Year 2025 You don’t legally need an attorney to file a qui tam action, but the case is filed under seal in federal court and the procedural rules are unforgiving. This is one situation where hiring an experienced whistleblower attorney is worth the cost.
IRS Whistleblower Awards
When your tip leads the IRS to collect additional taxes, penalties, or interest, the IRS Whistleblower Office pays awards of 15% to 30% of the collected proceeds for tips that substantially contribute to enforcement. If the IRS action is based primarily on information already publicly available through news reports or government audits, the maximum award drops to 10%.11eCFR. 26 CFR 301.7623-4 – Amount and Payment of Award
One thing to know: whistleblower awards are taxable income. The IRS withholds 24% in federal income tax on awards over $10,000 paid to U.S. citizens or resident aliens, and you’ll receive a Form 1099-MISC the following January reporting the payment.12Internal Revenue Service. Whistleblower Awards
Protection From Employer Retaliation
The False Claims Act doesn’t just pay whistleblowers; it protects them. If your employer fires you, demotes you, suspends you, harasses you, or takes any other adverse action because you reported fraud, filed a qui tam suit, or assisted an investigation, you have a federal cause of action against them.13Office of the Whistleblower Ombuds. Anti-Retaliation Provisions of the False Claims Act
If you win a retaliation claim, the statute provides reinstatement to your former position with the seniority you would have had, twice the amount of your lost back pay plus interest, and compensation for special damages including litigation costs and attorney fees.9Office of the Law Revision Counsel. 31 U.S. Code 3730 – Civil Actions for False Claims The double back pay provision is the piece that gives the statute teeth. An employer who retaliates ends up paying more than one who leaves the whistleblower alone.
These protections cover employees, contractors, and agents. They also cover people retaliated against for conduct that was part of a lawful effort to stop a False Claims Act violation, even before any formal complaint was filed.
How Long You Have to Report
The window is long. In 2022, Congress passed the PPP and Bank Fraud Enforcement Harmonization Act, which set a 10-year statute of limitations for both criminal charges and civil enforcement actions involving PPP loan fraud.14Congress.gov. H.R.7352 – PPP and Bank Fraud Enforcement Harmonization Act Before that law, some PPP fraud carried only a five-year window because the loans were originated through fintech companies rather than traditional banks. The 10-year clock closes that gap.
For civil qui tam lawsuits under the False Claims Act, the deadline is the later of six years from the date the fraud was committed, or three years from when the responsible government official learned (or should have learned) the key facts, but no more than 10 years from the violation.15Office of the Law Revision Counsel. 31 U.S. Code 3731 – False Claims Procedure Because most PPP loans were disbursed in 2020 and 2021, the civil window runs into the early 2030s in most cases. There is still time to report, but the sooner you do, the easier it is for investigators to gather evidence while it’s fresh.