COVID-19 Economic Injury Disaster Loan Applications Submitted from Foreign IP Addresses
Audit · Small Business Administration OIG · 2022-09-12 · about Small Business Administration
Report
Title
COVID-19 Economic Injury Disaster Loan Applications Submitted from Foreign IP Addresses
Submitting OIG
Small Business Administration OIG
Component agency
Small Business Administration
Type
Audit
Publication date
2022-09-12
Summary
We evaluated the U.S. Small Business Administration’s (SBA) controls to flag or prevent potentially fraudulent Coronavirus Disease 2019 (COVID-19) Economic Injury Disaster Loan (EIDL) applications submitted from foreign Internet Protocol (IP) addresses.Although the agency implemented several layers of controls to prevent or reduce fraud from foreign countries, individuals at foreign IP addresses were able to access the COVID-19 EIDL application system.
Recommendations (2)
#
Status
Text
1
Open
Thoroughly review each COVID-19 EIDL, grant, and advance application submitted from foreign IP addresses that were approved and funded and verify eligibility. If ineligibility or evidence of potential fraud is found, SBA should stop any further or…
2
Open
Examine controls related to foreign IP addresses and ensure these controls are more effective in future disaster processing systems.