The 10-Year Clock: Why PPP Borrowers Who Thought They Were Safe Are Dead Wrong

Posted: January 14, 2026 – 7:30 PM | NEW

Here's a fun fact that should terrify approximately 11 million Americans: if you got a PPP loan in 2020 and thought the government had to charge you by 2025 or 2026, you were dead wrong. Congress extended the statute of limitations to 10 years. That means your 2020 PPP loan can be investigated until 2030. Your 2021 second-draw loan? 2031. Submitted a forgiveness application in late 2021 with questionable information? You're looking at 2032.

Let me say that again for the people in the back: THE GOVERNMENT HAS UNTIL 2030-2032 TO COME AFTER YOU.

How This Happened

On August 5, 2022, Congress passed two bills with bipartisan support - the PPP and Bank Fraud Enforcement Harmonization Act of 2022 and the COVID-19 EIDL Fraud Statute of Limitations Act of 2022. President Biden signed both into law. The original statute of limitations was 5-6 years, which would have meant most cases needed to be charged by 2025 or 2026. That's gone now.

The SBA Inspector General estimates thousands of investigations will continue for years to come. As one DOJ official put it: investigators "can't possibly prosecute all 70,000 cases" but "they've got years to work through the most egregious ones."

Why They Did This

The original 5-year statute was based on wire fraud charges. But most PPP loans went through traditional banks, which means bank fraud could be charged - and bank fraud already had a 10-year statute. The problem? Many loans went through fintechs and non-bank lenders. Those could only be prosecuted as wire fraud with the 5-year limit. Congress "fixed" this by making everything 10 years.

Translation: they wanted more time to catch more people. And they got it.

What This Means For You

If you got a PPP loan and did anything questionable - inflated payroll numbers, miscounted employees, used funds for non-approved purposes, submitted a forgiveness application with errors - you need to:

Keep ALL documentation for at least 10 years from the date of loan, use, and forgiveness (whichever is later)

Don't assume forgiveness means you're safe - the government can and does investigate forgiven loans

Understand that "everyone did it" is not a defense

Know that algorithms are scanning for patterns - the data analysis is ongoing

The DOJ has prosecuted over 3,500 defendants and seized over $1.4 billion so far. They're not done. They're not even close to done. And now they have until the 2030s to keep going.

Sleep tight, borrowers.

Back to Blog