Paycheck Protection Program Lender Reliance Credential Authority Failure Through Borrower Self-Certification Accepted as Sufficient for Federally Guaranteed Loan Authorization Without Verification at the Point of Reliance — Kabbage Inc., 2020–2024

The Paycheck Protection Program was enacted under the CARES Act on March 27, 2020 as an emergency response to the economic impact of the COVID-19 pandemic. Congress authorized $349 billion in initial funding, subsequently increased by additional legislation to a total program size of approximately $800 billion. The program operated through private lenders who originated loans to qualifying small businesses under SBA authority. Loans were 100 percent guaranteed by SBA. Borrowers could seek forgiveness of the full loan amount if funds were used for payroll and other approved expenses. Lenders received tiered processing fees based on loan size.

On April 2, 2020, SBA posted the First PPP Interim Final Rule (published at 85 FR 20811 on April 15, 2020) establishing the program’s operating architecture. The rule directed that “SBA will allow lenders to rely on certifications of the borrower in order to determine eligibility of the borrower and use of loan proceeds and to rely on specified documents provided by the borrower to determine qualifying loan amount and eligibility for loan forgiveness.” Lenders were required to comply with specified obligations but would be “held harmless for borrowers’ failure to comply with program criteria.” For forgiveness, the rule stated that “the lender does not need to conduct any verification if the borrower submits documentation supporting its request for loan forgiveness and attests that it has accurately verified the payments for eligible costs.” The borrower’s certification functioned as the lender reliance credential. The rule did not require correspondence between the certification and the borrower’s actual eligibility to be verified at the point of payment authorization.

DOJ announced on May 13, 2024 that Kabbage Inc., operating as KServicing Wind Down Corp., agreed to pay up to $120 million to resolve False Claims Act allegations that it defrauded the Paycheck Protection Program. The settlement was structured in two parts. The first, providing a recovery claim of up to $63.2 million, resolved allegations that Kabbage systematically inflated tens of thousands of PPP loans. Kabbage admitted double-counting state and local taxes paid by employees in gross wage calculations, failing to exclude employee compensation above $100,000, and miscalculating leave and severance payments. The second settlement, providing a recovery claim of up to $56.7 million, resolved allegations that Kabbage knowingly failed to implement appropriate fraud controls. The government alleged Kabbage removed underwriting steps from its pre-PPP procedures to maximize loan processing volume, set substandard fraud check thresholds despite SBA warnings, relied on inadequate automated fraud tools, maintained insufficient fraud review personnel, and discouraged staff from requesting additional borrower information.

The government alleged Kabbage was aware of its loan inflation errors as early as April 2020 but failed to remediate disbursed loans and continued approving additional loans containing the same miscalculations. The $120 million figure represents maximum recovery; actual payment is contingent on assets available in the bankruptcy estate for distribution to unsecured creditors. The resolution included a $12.5 million credit for payments Kabbage had already returned to SBA during the investigation. The case originated from two qui tam complaints: one filed by an accountant who submitted PPP applications to Kabbage and other lenders, and a second filed by a former legal analyst in Kabbage’s collections department.

The PPP lender reliance credential is the borrower’s self-certification of eligibility and use of loan proceeds. The SBA interim final rule stated that lenders could rely on the certification and would be held harmless for borrowers’ failure to comply. The lender’s verification obligations were explicitly limited. For origination, the lender was required to confirm receipt of borrower certifications and documentation as specified in the rule. For forgiveness, the lender was not required to conduct any verification if the borrower submitted documentation and attested that the payments had been accurately verified. The government’s payment — the processing fee to the lender, the guarantee to the borrower, and the forgiveness if requested — flowed on the credential. The correspondence between the certification and the borrower’s actual eligibility was not required at the point of payment authorization.

The structural condition is the absence of a correspondence requirement at reliance. The lender accepted the borrower’s certification. The SBA accepted the lender’s confirmation. The government guaranteed the loan. Whether the borrower met program eligibility criteria, whether the loan amount was accurately calculated, whether the use of proceeds would satisfy forgiveness requirements — none of these conditions were verified at the point of authorization. They were represented by the borrower in the certification the lender was instructed to accept. The evidentiary boundary between the credential and the underlying conditions it was required to represent was not enforced at the point of payment.

The Kabbage settlement is one of the larger PPP lender FCA resolutions documented to date. The actual recovery will depend on the disposition of the KServicing bankruptcy estate. The first PPP lender FCA settlement — Prosperity Bank, $18,673 — resolved allegations involving a single $213,400 PPP loan in which DOJ alleged the lender knew of the borrower’s false certification. DOJ has pursued more than 250 additional FCA claims related to PPP fraud, with aggregate recoveries exceeding $250 million as of 2024. The SBA Office of Inspector General Report 23-09 (June 2023) estimated approximately $64 billion in fraudulent PPP loans, representing approximately 8 percent of the total disbursed PPP funds. The same analysis estimated total potentially fraudulent disbursements across the COVID-19 relief programs at more than $200 billion.

The remediation record is the enforcement artifact of the architectural gap. DOJ continues to pursue PPP fraud as a sustained enforcement priority; the statute of limitations for PPP fraud was extended from 5 to 10 years by the PPP and Bank Fraud Enforcement Harmonization Act of 2022, permitting civil and criminal actions through approximately 2031. SBA has onboarded to the Treasury Department’s Do Not Pay list and has implemented additional fraud screening. These remediation measures operate after authorization. The credential that authorized each PPP loan — the borrower’s self-certification, accepted by the lender under the SBA rule that instructed lenders they could rely on it — was the mechanism that moved the loan through origination to guarantee to forgiveness without correspondence verification. The enforcement record recovers a fraction of the disbursed total. The structural condition that authorized the disbursements was not addressed.

• The PPP lender reliance credential was the borrower’s self-certification of eligibility; the SBA First PPP Interim Final Rule (April 2, 2020; 85 FR 20811) expressly permitted lenders to rely on the certification and held them harmless for borrowers’ failure to comply; for forgiveness, the rule stated the lender did not need to conduct any verification if the borrower submitted documentation and attestation; the correspondence between the certification and the borrower’s actual eligibility was not required at the point of payment authorization
• Kabbage Inc. processed approximately $7 billion in PPP loans to more than 300,000 borrowers as the second-largest PPP lender by application volume; the company settled FCA allegations for up to $120 million in May 2024, with actual recovery contingent on the KServicing bankruptcy estate; the settlement resolved allegations of systematic loan inflation and inadequate fraud controls
• The government alleged Kabbage was aware of loan inflation errors by April 2020 but continued approving additional loans containing the same miscalculations; Kabbage admitted double-counting state and local taxes, failing to exclude compensation above $100,000 per employee, and miscalculating leave and severance payments; related allegations on fraud controls — removal of underwriting steps, substandard fraud check thresholds, discouragement of staff from requesting additional borrower information — operated within an architecture in which the rule explicitly stated the lender could rely on borrower certification and would be held harmless for borrower noncompliance; the FCA theory required proving knowledge or reckless disregard because the architecture itself did not require verification
• The SBA Office of Inspector General estimated in June 2023 (Report 23-09) approximately $64 billion in fraudulent PPP loans — approximately 8 percent of the total disbursed — within a combined COVID-19 relief fraud total estimated at more than $200 billion; the Kabbage settlement is a named-entity resolution within a program-wide architectural failure, not an isolated lender failure
• The PPP lender reliance credential as payment instrument is structurally distinct from provider enrollment credentials and cybersecurity compliance credentials documented elsewhere in the catalog: the credential is generated by the borrower, accepted by the lender under explicit regulatory safe harbor, confirmed by SBA, and honored through a 100 percent loan guarantee and forgiveness — the correspondence gap was built into the emergency architecture by regulatory design, with verification requirements expressly waived to enable rapid disbursement