SBA loan scams are on the rise, targeting business owners seeking funding during COVID-19.
While banks have worked nonstop in recent days to process and fund new SBA loans through the Paycheck Protection Program (PPP), fraudsters are trying to exploit small business owners.
Watch out for SBA Loan Scams
Phone scams, Business Email Compromise, and check fraud are common 'vectors of choice' for fraudsters, and these scams are now being used to take advantage of COVID-19. Dubbed 'coronavirus scams' or 'SBA loan scams,' these scams target victims of the coronavirus who are awaiting SBA loans and receipt of stimulus payments, with scammers seeking to obtain personal identifiable information (often called PII). Once they have your PII, they may access your bank account or install ransomware or malware on your computer.
SBA loan scams may include:
- Phishing attacks utilizing the SBA logo
- Callers or spoof emails posing as a lender or financial institution and request the routing number, account number, or credit card number that you want to use to deposit your stimulus payment
- Offers to process an SBA loan for you
- Emails about SBA loans that do not originate from SBA sites (SBA sites end with '.gov')
Remember: the SBA does not reach out to individuals or businesses to initiate a loan, and will not ask for information that was already provided in the application process. These scenarios are attempts to obtain your private information or that of your business for nefarious purposes. Check out more scam scenarios from the SBA.
Protect Yourself and Your Business from Fraud
Anyone can become a victim of fraud, but taking these steps can go a long way in preventing fraud:
- Utilize appropriate back-up- and malware detection systems to prevent and mitigate infection.
- Train employees to be skeptical of emails, attachments and websites they don't recognize.
- Take time to verify the instructions in an email before taking action.
- Protect your personal and private information and secure your online systems with strong passwords that include a combination of capital letters, small letters, numbers and characters.
- Don't use the same password on multiple sites.
- Exercise caution when accessing links in emails or websites. Thoroughly investigate the link to insure it is legitimate.
As you work harder than ever to protect your business and employees amid the coronavirus pandemic, do not allow bad actors to hinder your efforts. If you have any doubt, reach out to your nearest SBA office.
If you believe that you are a victim of fraud, or if you have received a suspicious alert or communication, please call Regions Client Services immediately at 1-800-787-3905.
Find more resources for reporting fraud and helpful tips for fraud prevention.
