In early February 2026 the Small Business Administration rolled out a number designed to sound like a manhunt. The agency, under Administrator Kelly Loeffler, announced it had suspended 111,620 California borrowers who together received 118,489 Paycheck Protection Program and Economic Injury Disaster Loans worth roughly $8.6 billion in suspected fraud, the largest single-state action of its kind. The framing was pure enforcement: bad guys caught, taxpayer money defended, a model state exposed. And it works, right up until you ask the question the podium is built to avoid. If this much fraud came out of California, who let it in?
Because that is the actual scandal here, and it is not a guy in San Diego. It is the machine. Eight point six billion dollars did not sneak out of a vault at gunpoint. It was requested on a form, and the form was approved, and the money was wired, and at no point in that chain did anyone with the authority to say no actually look. The fraud number is not a measure of how clever the criminals were. It is a measure of how little the approval process checked. California is the epicenter because California is the biggest, and the biggest funnel pointed at the loosest gate produces the biggest flood.
Why The Biggest State Produced The Biggest Number
Start with the obvious math nobody says out loud. California has the largest economy and the most small businesses of any state in the country, which means it generated the most pandemic loan applications by a wide margin. Point a firehose of applications at a system that verifies almost nothing and the output is not a mystery. More applications through a gate that does not check equals more fraud through that same gate. The $8.6 billion is not evidence that Californians are uniquely dishonest. It is evidence that a state with the most trips to the counter got the most fraud rubber-stamped, because the counter never asked for ID.
That is the part the triumphant press release quietly reframes. The agency wants the California figure to read as a spotlight it aimed and a criminal underworld it uncovered. Read it the honest way and it is a confession. The single largest state pool of pandemic loans produced the single largest pile of suspected fraud, which is exactly what you would predict if the approval machine treated volume as a reason to check less, not more.
The Rubber Stamp Had A Name: Self-Certification
Here is the mechanism, and it is not complicated enough to hide behind. Across 2020 and 2021, the pandemic loan programs largely ran on self-certification. The applicant swore the numbers were true, and the government took the promise as the proof. On a huge share of PPP loans, the smaller ones under $150,000, borrowers were later granted blanket forgiveness with no additional verification, which means the loan went out on a promise and was erased on a second promise, and nobody in between opened a bank statement. Watchdogs saw exactly where this was going. The government's own pandemic accountability reviewers warned that letting applicants self-certify their eligibility increases fraud, because self-certification means the system relies on the applicant's word that they qualify. The warning was not subtle and it was not late. It was ignored, because the entire point of the program was speed, and verification is the enemy of speed.
So when the SBA points to a single San Diego address linked to 14 different small businesses that together pulled in more than $2 million, it thinks it is showing you a crime scene. It is showing you a design flaw. Fourteen fake companies at one mailbox is not a heist that outsmarted the system. It is the system working exactly as built, approving fourteen promises from one place because the process had no step where a human being drove past the address, or noticed the pattern, or asked a single follow-up question before the money moved. The crook did not beat the gate. There was no gate.
The National Frame Makes California Look Small
Zoom out and the $8.6 billion stops looking like an outlier and starts looking like a serving size. The SBA approved roughly $1.2 trillion in PPP and COVID-EIDL loans across 2020 and 2021. The agency's own Inspector General has estimated that at least $200 billion of that is potentially fraudulent, roughly one dollar in six. Against a $200 billion national estimate, California's $8.6 billion is not the whole crime. It is the largest single-state slice the agency has so far pulled out of a pie it baked itself. Every state has its own version of this number waiting to be announced, because every state fed the same machine, and the machine did the same thing everywhere, which was approve first and check never.
This is why the systemic framing matters and the single-perp framing is a dodge. If the story is one San Diego mailbox, the fix is one indictment and the machine survives to rubber-stamp the next emergency. If the story is that an $8.6 billion state total was made possible by a program that verified nothing on the way out, the fix is the whole design, and that is a far more expensive admission for the agency to make. So the podium picks the mailbox. The mailbox is embarrassing for the crook. The machine is embarrassing for the SBA.
The Two Speeds, Same As Every Story On This Site
And here is where it lands, because it always lands here. The legitimate California small business owner, the one with real payroll and real receipts and a real reason to need the money, spent 2020 fighting a portal, waiting on documentation requests, and getting denied or delayed while the fabricated fourteen-business mailbox sailed straight through. The same agency that could not find the time to verify a real applicant found infinite capacity to approve a fake one, because approving the fake one required nothing. No verification is faster than any verification, and the machine was optimized for speed, so the path of least resistance ran directly through the fraud.
Now the same agency is back at the microphone in 2026 with $8.6 billion and 111,620 suspensions, performing the toughness it refused to perform when toughness would have actually stopped the money. That is the whole arc. The machine that shoveled the cash out the door with no verification is the same machine now demanding applause for noticing where it went. California is not the epicenter because Californians are worse. California is the epicenter because it was the biggest customer of a system that was never designed to say no, and the biggest customer of a broken gate gets the biggest bill.
The Receipt
- The SBA suspended 111,620 California borrowers tied to 118,489 PPP and EIDL loans totaling roughly $8.6 billion in suspected pandemic-era fraud, announced in early February 2026, the largest single-state action to date.
- The loans were approved largely on self-certification, with blanket forgiveness on most PPP loans under $150,000 granted with no additional verification.
- Federal pandemic accountability reviewers warned in advance that self-certification increases fraud because it relies on the applicant's word that they qualify.
- The SBA approved roughly $1.2 trillion in PPP and COVID-EIDL loans in 2020 and 2021, with the SBA Inspector General estimating at least $200 billion as potentially fraudulent.
- The agency's showcase example, a single San Diego address linked to 14 businesses that received more than $2 million, is a symptom of an approval process that verified nothing, not a heist that beat one.
California did not out-cheat the rest of the country. It out-applied it, at a gate that checked nothing, run by an agency that was warned and shoveled anyway. The $8.6 billion is the price of the rubber stamp. The suspensions are the agency trying to expense it back after the fact.
For the companion breakdown of the enforcement side of this same California sweep, see the math behind the 111,620-borrower dragnet. For the watchdog that called the $200 billion in advance, read the $200 billion warning the SBA ignored, and for where the money goes now, see 562,000 collection notices meeting a 2% recovery rate. More receipts live on the LOLSBA blog and the running statistics page.