When identity thieves steal personal information, small business owners face a specific kind of danger. Criminals do not just open consumer credit cards or file fake tax refunds. They also use personal identifying information to register fraudulent business entities, open commercial bank accounts, and take out federal small business loans. This leaves the victim to untangle liabilities across multiple government agencies, lenders, and corporate registries.
Why business owners are targeted through their personal identity
Identity theft tied to business registration has grown significantly in recent years. According to analysis from the Identity Management Institute, this rise is driven by easy online access to personal records, sophisticated fraud rings, and relatively light regulatory oversight during entity formation. If an unauthorized party obtains your legal name, date of birth, and Social Security number, they have the core pieces needed to register a new company under your identity.
Limited-liability companies, commonly known as LLCs, are a frequent vehicle for this type of fraud. In many jurisdictions, forming an LLC requires minimal documentation and very little verification of the person submitting the paperwork. Criminals take advantage of this low barrier to create legitimate-looking corporate shells. Once an entity is formed on paper, the scammer can establish commercial bank accounts to move illicit funds without raising immediate red flags. Because the commercial entity is tied to your personal details, the resulting liabilities, unpaid debts, and regulatory scrutiny can linger in your name long after the business was created.
This structure explains why business identity theft is unusually complicated to resolve. A single compromised identity can simultaneously generate records with state corporate filing offices, commercial lenders, private banks, the federal government, and revenue agencies. Fixing the damage requires dealing with each institution on its own terms, starting with any federal programs that were exploited.
Reporting SBA funding taken in your name
During economic recovery initiatives and disaster responses, federal loan programs are frequent targets for identity fraud. If someone used your personal information to secure funding through the Small Business Administration without your knowledge, the agency maintains a specific reporting process. As outlined by the Small Business Administration, victims must submit a formal reporting package consisting of three specific items:
- A clear copy of a valid government-issued photo ID, such as a state driver's license, an official state ID card, or a U.S. passport.
- A completed Identity Theft Report, filed online at IdentityTheft.gov or through your local police department.
- A completed and signed SBA Declaration of Identity Theft form.
Once you gather these three documents, you can submit the package electronically. The SBA allows victims to upload their paperwork through the official SBA Loan Portal, or submit it by email depending on which loan program was fraudulently accessed. For physical disaster loans and economic injury disaster loans, including COVID-19 Economic Injury Disaster Loans (EIDL), documents should be emailed to [email protected]. For 504 debentures, 7(a) standard loans, Paycheck Protection Program (PPP) loans, and Restaurant Revitalization Awards, submissions go to [email protected].
The SBA also mentions a fax filing option in its materials, though official guidance sometimes omits or truncates the specific fax number. Always verify the active number directly on the agency's website before transmitting sensitive records by fax. Additionally, if you have reason to suspect broader criminal mismanagement or systemic fraud within an SBA program, you can submit a report to the SBA Office of Inspector General hotline.
Handling an EIDL bill for a loan you do not owe
Discovering that you are listed as the borrower on a federal business loan often happens abruptly. Many victims first learn about the fraud when they receive a monthly billing statement or collection notice for an outstanding balance they never applied for or received. The Federal Trade Commission addressed this scenario directly in its publication on what to do if you are billed for an SBA EIDL loan you do not owe.
When an unexpected billing notice arrives in the mail, your immediate task is evidence preservation. Create a dedicated physical and digital file for all correspondence. Do not discard any bills, payment coupons, collection letters, or automated notices. Note the date each item arrived, the exact program name cited, the account or loan number listed, and any contact information printed on the document.
Because fraudulent billing can involve confusing agency notices, avoid calling unverified phone numbers listed on questionable mailings without independent cross-referencing. Instead, navigate directly to official government portals to verify the billing department and initiate your dispute. Pairing the SBA identity theft submission process with documented copies of your billing notices ensures you have an auditable trail showing that you formally contested the obligation from the moment you discovered it.
Tax agency and credit monitoring steps the sources do not cover
While the SBA handles its own program disputes, a compromised identity rarely stays confined to a single agency. When criminals use your information to create fake entities or pull down commercial capital, they often trigger tax filings or cross-reference your records with commercial reporting agencies. Understanding where public guidance ends is vital so you can seek appropriate independent verification.
The Internal Revenue Service maintains an Identity Theft Central portal with separate resources, including an identity theft guide for individuals and a dedicated notice board to report identity theft for a business. Scammers may attempt to secure an Employer Identification Number (EIN) under your Social Security number or report fraudulent business losses. While broader public alerts, such as the FTC's educational notes on tax identity theft awareness, describe common personal filing scams, they do not lay out the full sequence for unwinding unauthorized corporate filings. Business owners must check the specific IRS business reporting pages directly to establish whether an EIN was assigned in their name.
Furthermore, standard federal loan guides do not explain how to check or freeze commercial credit reports, nor do they cover the steps for disputing commercial accounts opened at private banks. Personal credit freezes do not automatically extend to commercial credit profiles, and notifying personal credit bureaus will not alert state corporate filing divisions that an LLC was improperly formed. You will need to contact your state business registry, notify any private institutions where accounts were opened, and review both consumer and commercial credit files independently.
This guide is provided for educational purposes only and does not constitute legal, tax, or financial advice. Because identity fraud cases involving corporate entities involve distinct state and federal jurisdictions, consider consulting a qualified attorney or certified accountant to evaluate your specific liabilities.
