A New York consumer says a fraudulent COVID-era PPP loan that he had disputed for years was referred to collections, cutting his credit score by 100 points in a single day. The case underscores the consumer-reporting risk embedded in the SBA’s large-scale push to collect on pandemic loans flagged for suspected fraud.
By Credit and Collection News Staff
A High Falls, New York, man says his credit score fell 100 points after the Small Business Administration referred a COVID-era Paycheck Protection Program loan—one he says was fraudulently obtained in his name—to the U.S. Treasury for collection.
According to a News10NBC investigation, Tim Thompson received notice roughly three years ago that he owed $20,000 on a COVID relief loan despite never owning a business. Thompson said he completed forms, retained correspondence, and believed the matter had been addressed. Then, late last week, he received a credit alert showing that the Treasury Department had reported a $20,833 debt to the credit bureaus. The collection tradeline caused a 100-point score decline in one day, he said.whec
Thompson told the station that the balance later rose to $27,000 with interest and penalties. The case was reportedly among loans transferred after the SBA’s recent mass referral of delinquent pandemic-program debts to Treasury.whec
SBA’s Mass Collection Referral
In April, the SBA announced that it had referred 562,000 delinquent PPP and COVID Economic Injury Disaster Loan accounts—totaling $22.2 billion—to the Treasury Department for collection. The agency described the accounts as “suspected fraudulent loans” and said the package was its largest collection referral on record.legacy.sba
The SBA said the borrowers had previously been flagged for potential fraud but had not been referred to Treasury for collection or to the Department of Justice for investigation. Treasury’s Bureau of the Fiscal Service is expected to pursue collection on the transferred debts.legacy.sba
That scale creates an operational and consumer-protection concern: a fraud indicator is not the same thing as a completed, individualized adjudication that the named borrower knowingly participated in fraud. When a loan is tied to identity theft or misidentification, a referral and subsequent negative furnishing can immediately affect a consumer’s access to housing, employment screening, insurance, and credit.
For Thompson, the mismatch was stark. He told News10NBC that he never owned a business, yet someone allegedly used his identity to obtain the PPP funds.whec
Disputes Must Be Handled Differently
The episode illustrates why collectors, furnishers, credit bureaus, and government agencies should distinguish an ordinary debt dispute from an identity-theft claim supported by the documentation required under federal law.
The CFPB advises consumers to submit an identity theft report, proof of identity, and a letter identifying the fraudulent account or information to each credit reporting company. Upon receiving a complete request, nationwide consumer reporting agencies generally must block identity-theft-related information within four business days.consumerfinance
Once the consumer reporting agency gives notice of an identity-theft block, creditors that receive that notice cannot turn the related debt over to debt collectors, according to CFPB guidance.consumerfinance
In the SBA context, the FTC instructs victims of fraudulent PPP or EIDL borrowing to:
-
-
-
File an Identity Theft Report through IdentityTheft.gov.
-
Report the identity theft to the SBA to begin the agency’s review.
-
Contact the originating private lender for PPP loans, when known, seek release from the debt, and request removal of related credit-file information.consumer.ftc
The SBA’s current guidance says an identity-theft claimant must submit a photo ID, an Identity Theft Report, and a completed SBA Declaration of Identity Theft, Form 3513. PPP-related materials may be sent through the SBA Loan Portal or to PPPidtheftinquiries@sba.gov.sba
Compliance Implications for Collectors
For debt collectors handling Treasury-referred pandemic debts, the fact pattern calls for heightened controls—not merely standard validation workflows.
A collector receiving a claim that a PPP or EIDL debt resulted from identity theft should promptly identify whether the consumer has supplied an FTC or law-enforcement identity-theft report, document the claim, preserve all evidence, and coordinate with the referring agency or furnisher before continuing reporting or collection activity. A substantiated identity-theft claim presents more than a routine disagreement over amount or liability; it raises potential FCRA furnishing and collection-placement issues.
The stakes are especially high where a government referral produces a new derogatory item after the consumer had already made prior attempts to alert the SBA. Thompson told News10NBC that he had retained forms and emails from his earlier efforts to challenge the loan, but the account was nevertheless sent to collections.whec
Organizations that furnish these accounts should ensure their dispute and fraud-escalation systems can:
-
-
-
Identify prior identity-theft reports before new collection activity or furnishing occurs.
-
Suppress negative reporting while an adequately documented fraud claim is under review.
-
Provide a clear audit trail showing when the claim was received, what evidence was reviewed, and what corrective action was taken.
-
Communicate quickly with credit bureaus and downstream collectors when an account is determined to be fraudulent or wrongly associated with a consumer.
A Test for Pandemic-Loan Recovery
The SBA’s effort to recover potentially fraudulent pandemic funds is likely to generate more disputes as a very large pool of delinquent loans moves into the federal collection pipeline. The agency’s April announcement characterized the referrals as a fraud-enforcement initiative, but the Thompson case shows how a broad recovery campaign can impose serious harm when identity-theft victims are included in the population sent to collections.legacy.sba+1
For the credit and collection industry, the central lesson is straightforward: collection efficiency cannot replace individual verification. Where a consumer presents a credible identity-theft claim, agencies, furnishers, and collectors must treat it as a potential credit-reporting emergency—not simply another delinquent account.
The exchange for the debt economy
