The SBA Is Using AI to Recheck Pandemic Loans

A pandemic-era business loan may feel like closed history. The Small Business Administration is treating it as active data.

On July 14, the SBA said it is expanding its use of Palantir software and artificial intelligence to investigate possible fraud in the Paycheck Protection Program and the COVID Economic Injury Disaster Loan program. The system is meant to scan large datasets, flag unusual patterns, connect possible coordinated activity, and generate leads for investigators.

For honest borrowers, this is not a reason to panic. It is a reason to make sure old records are still findable and to handle any government notice carefully.

What changed

The SBA says the new arrangement formalizes and expands a Palantir pilot launched earlier this year. The agency is using the technology to support investigations, criminal enforcement, and recovery of pandemic-relief funds.

The scale has grown since the July announcement. On September 14, the SBA announced nationwide suspensions affecting 870,000 borrowers tied to an estimated $39 billion in suspected pandemic-loan fraud. The agency described this as its largest suspension announcement to date. Those figures are the SBA’s announcement, not a count of proven fraud cases.

Those numbers describe suspected fraud and enforcement actions, not a finding that every flagged borrower committed a crime. The SBA describes the software as a way to surface anomalies and investigative leads. That distinction matters when automated analysis reaches old business records.

Why a legitimate borrower should pay attention

A data-matching system can compare information across applications, tax records, payment histories, business identities, and other government data. A mismatch may have an innocent explanation: a business name changed, a lender entered data differently, ownership shifted, payroll varied, or identity theft put someone else’s loan under your information.

But an old discrepancy is much harder to explain when the supporting files are scattered across retired email accounts, closed bank portals, and a former bookkeeper’s computer. The practical problem is not understanding Palantir. It is being able to reconstruct what your business submitted and why.

Suspension can also affect more than the original loan. The SBA says suspended borrowers cannot receive future small-business or disaster loans and are not eligible for programs such as 8(a) federal contracting. A notice deserves prompt attention even if you believe the underlying loan was proper.

Do a 20-minute record check

If your business received PPP or COVID EIDL funds, create one clearly labeled folder and gather what you can now:

The original application, loan number, promissory note, and lender contact information.
Forgiveness applications and decisions, including any messages from the lender or SBA.
Payroll reports, tax forms, bank statements, receipts, invoices, leases, and utility records used to support the application or forgiveness request.
Documents showing any business-name, address, ownership, or banking changes that could explain a mismatch.
A short timeline of when the money arrived, how it was used, and when forgiveness or repayment actions occurred.

Do not rewrite history or create documents after the fact. Preserve the records you actually used. If something is missing, note what is missing and where you tried to retrieve it.

If a notice arrives

First, verify the sender before clicking a link or sending personal information. SBA guidance says official agency emails end in @sba.gov and recommends contacting the agency through the MySBA Loan Portal or contact information you look up yourself. Scammers have targeted PPP and EIDL borrowers by impersonating the SBA, lenders, and collection agencies.

Second, read the notice for the exact action and deadline. A data flag, a suspension, a collection notice, and a final loan-review decision are not the same thing. The response path depends on the document you received.

For a final SBA PPP loan-review decision, the Office of Hearings and Appeals says a borrower generally has 30 calendar days after receiving the decision to file an appeal. The filing must include the decision and a specific explanation, backed by facts and legal arguments, of why it is wrong. That is a short window. If the amount or consequences are serious, consider speaking with a qualified attorney or accountant who understands SBA loans.

For an existing COVID EIDL loan, the SBA directs borrowers to the MySBA Loan Portal or CESC@sba.gov for account-specific help. If the loan is not yours, use the SBA’s identity-theft reporting process instead of trying to fix it through an unfamiliar caller or email link.

What to watch next

The SBA has explained what the Palantir system is intended to find, but its July 14 announcement does not spell out how many flags are cleared before enforcement, what human review is required, or how error rates will be reported. Those are the details that will show whether the system improves investigations without creating avoidable problems for legitimate borrowers.

Watch for updated borrower guidance and clearer instructions for challenging incorrect records. Businesses should also watch for copycat scams that use headlines about the crackdown to create urgency.

The practical takeaway

If you received a PPP or EIDL loan, spend 20 minutes today putting the core records in one folder. Then confirm that you can still access the email address, lender account, and MySBA portal tied to the loan. You may never need the file. If a notice does arrive, having it ready will matter more than knowing which AI system produced the first flag.