Coronavirus fraud: 9 things small businesses need to know.
Phishing attempts are already underway on grant and loan activities. When it comes to the Small Business Administration (SBA) loans, including the Economic Injury Disaster Loans (EIDL) and the Paycheck Protection Program (PPP), here’s what small business owners need to know:
1) The SBA does not solicit people (or businesses) directly.
If you get an unsolicited phone call saying you’ve been approved for an SBA loan, that, unfortunately, isn’t true. Do not share any business or personal information with the caller. Anything you say can be used in fraud attempts later.2) No loans are automatically provided to you.
Again, if you’re contacted by someone promising funds through an SBA loan or grant, it’s too good to be true. They are counting on you and your employees to confuse their offer with the CARES Act. They might ask seemingly innocent questions to gather information which will ultimately lead to requests for upfront payment or bank information. Remember, while you might be eligible for some of these SBA loans if certain parameters are met, they still require application paperwork and additional documentation.3) Don’t pay anything for “access to funds” or “faster payment”.
This is a version of a common consumer scam: someone promises that if you pay some money upfront, you’ll get more money in return, and after you’ve made your initial payment, the fraudster will disappear. In another scenario, they will request a fee for “expedited payment” – which is not legitimate. The CARES Act does not offer paid expedited options and will not require upfront payment.4) Never share Personally Identifiable Information (PII) over the phone or via email to an unknown source.
Asking for this info is the definition of a phishing scam. Fraudsters are trying to catch you or your employees off guard, and it is easier to do so during a tumultuous time like in a global pandemic. Never provide private information without verifying your caller or email sender.5) ALWAYS check email addresses and website URLs.
This should be common practice for all business owners and employees. Business Email Compromise (BEC) scams are alive and well and are a big part of pandemic fraud. A few things to consider:- Always hover over links to see the web address before clicking.
- Never directly respond to emails from unknown senders – always create a new email when replying in these situations.
- Be skeptical of URLs and emails with multiple misspelled words or ones that use the wrong domain in their name (CDC.com, for instance, instead of CDC.gov).