Grant and Disaster Loan Fraud

Why This Topic Matters

Governments distribute enormous sums through grants and emergency lending programs, and these funds are frequently released under time pressure, with relaxed verification and limited post-award monitoring. That combination makes grant and disaster loan programs prime targets for fraud. The COVID-19 relief programs (Paycheck Protection Program, Economic Injury Disaster Loans, unemployment insurance expansions) produced the largest surge of public-sector fraud in modern history, and natural disasters (hurricanes, floods, wildfires) consistently trigger waves of fraudulent assistance claims and contractor schemes. For a Certified Fraud Examiner, this area sits within the Financial Transactions and Fraud Schemes section of the CFE exam under Government and Public Sector Fraud, and it also connects to the Law section (False Claims Act, federal false statement statutes) and the Investigation section (tracing proceeds, interviewing, document analysis). Understanding it helps you detect, investigate, and prevent losses that ultimately fall on taxpayers.

What Grant Fraud Is

A grant is a financial award given by a government agency (or by a pass-through entity such as a state or prime recipient) to an organization or individual to carry out a public purpose. Unlike a procurement contract, the government is not purchasing goods or services for its own direct use; it is funding activity that benefits the public. Grant fraud is any intentional deception to obtain grant funds, to retain funds the recipient is not entitled to, or to divert funds from their authorized purpose.

Grant fraud generally occurs at three stages:

1. Application (pre-award) stage
- Falsifying eligibility (claiming non-profit status, minority- or veteran-owned status, geographic location, or research credentials that do not exist)
- Misrepresenting qualifications, staffing, facilities, or past performance
- Inflating budgets or proposed costs
- Falsely promising matching funds or cost-share the applicant cannot provide
- Submitting plagiarized or fabricated proposals and research data
- Concealing conflicts of interest or debarment status

2. Performance (post-award) stage
- Diverting funds to unauthorized uses (personal expenses, unrelated business activities)
- Charging unallowable costs (entertainment, lobbying, alcohol, fines, fundraising)
- Charging the same cost to multiple grants (double-dipping or duplicate billing)
- Misallocating indirect (overhead) costs or using inflated indirect rates
- Falsifying time and effort reports so salaries are charged to grants employees did not work on
- Commingling grant funds with other money to obscure their use
- Creating fictitious vendors, consultants, or sub-recipients
- Kickbacks between grantee personnel and vendors or sub-grantees
- Substituting cheaper materials or reducing scope while billing at the approved level
- Failing to deliver the promised services or fabricating beneficiaries served

3. Reporting and closeout stage
- Submitting false progress, performance, or financial status reports
- Fabricating research results or outcome data to secure continued funding
- Failing to return unspent funds or program income
- Falsifying audit documentation or obstructing monitors

Key Grant Terminology You Should Know

- Allowable cost: a cost permitted under the grant terms and applicable cost principles
- Allocable cost: a cost that benefits the specific grant in proportion to the amount charged
- Reasonable cost: a cost a prudent person would incur under the circumstances
- Direct cost: a cost that can be specifically identified with the project (salaries of project staff, project supplies)
- Indirect cost: overhead shared across activities (utilities, administration), typically recovered through a negotiated rate
- Cost sharing / matching: the portion of project costs the recipient must contribute from non-federal sources
- Pass-through entity: a recipient that provides a subaward to a sub-recipient
- Sub-recipient vs. contractor: a sub-recipient carries out part of the program and is subject to grant compliance rules; a contractor provides goods or services for the recipient's use
- Program income: revenue generated by grant-funded activity, which usually must be used for the program
- Single Audit: an organization-wide audit required in the United States for non-federal entities expending a threshold amount of federal awards in a year
- Uniform Guidance (2 CFR Part 200): the consolidated U.S. federal rules on administrative requirements, cost principles, and audit requirements for federal awards

What Disaster Loan and Disaster Assistance Fraud Is

Disaster relief fraud targets programs created to help individuals and businesses recover from declared disasters or emergencies. In the United States the main vehicles are Small Business Administration disaster loans (including Economic Injury Disaster Loans), FEMA individual and household assistance, and emergency programs such as the Paycheck Protection Program. The defining feature is speed: agencies deliberately loosen documentation and verification so money reaches victims quickly, and fraudsters exploit that gap.

Common disaster loan and assistance schemes:

Applicant-side schemes
- Fictitious businesses created solely to apply for loans
- Stolen or synthetic identities used to file applications
- Inflating payroll, employee headcount, or revenue to increase the loan amount
- Fabricated tax returns, bank statements, or payroll records
- Claiming damage to property that was not damaged, did not exist, or was not owned by the applicant
- Filing multiple applications under different names, addresses, or entities
- Applying for the same loss under multiple programs (duplication of benefits), such as receiving insurance proceeds plus a disaster loan for the same damage without disclosure
- Misusing proceeds (luxury purchases, investments, paying personal debts) instead of the authorized purpose
- Falsely certifying eligibility for loan forgiveness
- Applying while debarred, incarcerated, or otherwise ineligible

Insider and facilitator schemes
- Loan agents, accountants, or brokers who fabricate documents for many applicants in exchange for a percentage of proceeds
- Agency or lender employees who approve ineligible applications in exchange for kickbacks
- Organized rings filing hundreds of applications using purchased identity data

Post-disaster schemes
- Contractor fraud: taking deposits and disappearing, shoddy repairs, unlicensed work, inflated estimates
- Charity fraud: fake relief organizations soliciting donations
- Price gouging and inventory hoarding
- Insurance fraud layered on top of government assistance
- Impersonation of government inspectors to collect fees or steal identity information

How These Frauds Work: The Mechanics

Grant and disaster fraud succeeds because of structural weaknesses:
- Self-certification: applicants attest to facts the agency does not independently verify
- Volume and urgency: reviewers are overwhelmed, so anomalies slip through
- Fragmented data: agencies cannot easily cross-check applications against tax, payroll, identity, or insurance databases
- Weak post-award monitoring: site visits and desk reviews are infrequent
- Reliance on recipient-maintained records: time sheets, invoices, and progress reports are produced by the party being paid
- Pass-through layers: sub-recipients add distance between the funder and the actual expenditure

Fraudsters move money through fictitious vendors, related-party transactions, cash withdrawals, transfers to personal accounts, cryptocurrency purchases, or rapid asset acquisitions. Document fabrication often involves template-generated tax forms, altered bank statements, and identical supporting documents reused across many applications.

Red Flags

Grant red flags:
- Costs charged to a grant that do not relate to its scope
- Round-number or budget-exact expenditures, especially near the end of the funding period
- Employees charging 100 percent of time to multiple grants simultaneously
- Indirect costs also charged as direct costs
- Missing or altered supporting documentation; photocopies instead of originals
- Vendors with addresses matching employee addresses or with no physical presence
- Progress reports that are vague, repetitive, or copied from prior periods
- Matching funds that cannot be traced or that consist of in-kind contributions with inflated valuations
- Grantee resists site visits or delays audit requests
- Program income not reported
- Sudden lifestyle changes among grant administrators

Disaster loan red flags:
- Business formed shortly before or after the disaster declaration
- Applicant address is a mail drop, vacant lot, or residential address inconsistent with the stated business
- Reported payroll or revenue inconsistent with tax filings or industry norms
- Identical bank account, IP address, phone number, or email used across many applications
- Supporting documents with identical formatting, fonts, or errors across unrelated applicants
- Loan proceeds immediately transferred out, withdrawn in cash, or used for luxury purchases
- Multiple applications from the same household or with sequential EINs
- Damage claims on property the applicant did not own on the disaster date
- Insurance payout already received for the same loss
- Applicant cannot describe the business operations in an interview

Detection and Investigation Approach

1. Obtain the governing documents: the notice of award, approved budget, grant agreement, loan application, certifications, and program rules. Fraud is measured against what was promised and what was permitted.
2. Compare the application to independent evidence: tax filings, payroll provider records, state business registrations, property records, insurance claims, and third-party databases.
3. Trace the money: follow funds from disbursement through bank records to ultimate use. Look for transfers to personal accounts, related parties, or cash.
4. Test costs: for grants, sample charges and verify they are allowable, allocable, reasonable, and supported. Reconcile time and effort reports to payroll and calendars.
5. Analyze patterns across applicants: data analytics on shared identifiers (addresses, bank accounts, IP addresses, preparers) reveals organized rings.
6. Verify deliverables and beneficiaries: confirm that services were actually performed and that people counted as served exist.
7. Interview: start with neutral third parties and lower-level staff, then move toward the subject. Ask applicants to explain their own documents.
8. Coordinate with the agency Inspector General or law enforcement when federal funds are involved, and preserve evidence for potential civil and criminal action.

Legal Framework (U.S. focus, as emphasized on the exam)

- False Claims Act (31 U.S.C. 3729-3733): civil liability for knowingly presenting false claims for payment to the government; treble damages plus per-claim penalties; qui tam provisions allow whistleblowers (relators) to sue on the government's behalf and share in recovery. Grant and disaster loan applications and draw-down requests are claims.
- False Claims (18 U.S.C. 287): criminal statute for presenting false claims to the government.
- False Statements (18 U.S.C. 1001): criminal liability for materially false statements to a federal agency, including false certifications on applications and reports.
- False statements to influence a federal lender or federally insured institution (18 U.S.C. 1014): frequently charged in SBA loan cases.
- Fraud in connection with major disaster or emergency benefits (18 U.S.C. 1040): specifically targets false statements to obtain disaster benefits.
- Wire fraud, bank fraud, aggravated identity theft, and money laundering statutes are commonly added.
- Program Fraud Civil Remedies Act: administrative remedy for smaller false claims.
- Administrative remedies: suspension and debarment, termination of award, cost disallowance, and repayment demands.
Outside the United States, equivalent frameworks include national fraud acts, public finance laws, and EU rules protecting the Union budget, but the CFE exam leans heavily on the U.S. statutes above.

Prevention and Controls

- Pre-award risk assessment and verification of eligibility against authoritative databases
- Identity verification and device or IP analytics on applications
- Cross-agency data matching to detect duplicate benefits
- Clear written cost principles and training for grantees
- Segregation of duties between application review, approval, and disbursement
- Required documentation for draw-downs and reimbursement rather than advance lump sums where feasible
- Periodic desk reviews, site visits, and risk-based audits
- Sub-recipient monitoring by pass-through entities
- Whistleblower hotlines publicized to grantee staff and the public
- Post-disbursement analytics flagging rapid outflows and unusual spending
- Strong closeout procedures to recover unspent funds

Grant Fraud vs. Procurement Fraud: A Common Exam Distinction

In procurement the government buys goods or services for its own use and typical schemes involve bid rigging, collusion, defective pricing, and product substitution. In grant programs the government funds a third party's public-purpose activity and typical schemes involve misrepresentation of eligibility, unallowable or misallocated costs, false reporting, and diversion. If a question describes a competitive solicitation and winning bidder, think procurement; if it describes an award to carry out a program with a budget, matching requirement, or progress reports, think grant.

Exam Tips: Answering Questions on Grant and Disaster Loan Fraud

Tip 1 - Identify the stage. Ask yourself whether the scenario describes conduct before the award (eligibility and application misrepresentation), during performance (misuse, unallowable costs, double charging, time and effort fraud), or at reporting (false progress or financial reports). The correct answer usually names the scheme tied to that stage.

Tip 2 - Know the cost principle vocabulary cold. Expect questions that hinge on whether a cost is allowable, allocable, or reasonable, and on the difference between direct and indirect costs. If an employee's full salary is charged to two grants at once, that is a time and effort or duplicate charging problem. If overhead is charged both through the indirect rate and as a line item, that is double recovery.

Tip 3 - Watch for duplication of benefits. Disaster questions frequently test the concept that an applicant cannot recover the same loss from insurance, FEMA, and an SBA loan without disclosure and offset. Any scenario mentioning an insurance payment plus a government disaster payment for the same damage is pointing you to duplication of benefits.

Tip 4 - Match facts to statutes carefully. A false certification on a federal application is a false statement under 18 U.S.C. 1001. A request for payment on a federal grant that is false is a false claim under the False Claims Act or 18 U.S.C. 287. A whistleblower suing on behalf of the government is a qui tam relator. A false statement to a federally insured lender or to the SBA points toward 18 U.S.C. 1014. Statements made to obtain disaster benefits point toward 18 U.S.C. 1040.

Tip 5 - Red flag questions reward specificity. When asked which item is a red flag of grant fraud, favor answers tied to the mechanics of grants (end-of-period spending spikes, 100 percent effort on multiple grants, missing matching documentation, vendor addresses matching employees) over generic answers that could apply to any fraud.

Tip 6 - Distinguish grant from procurement. If the answer choices include bid rigging or bid rotation for a scenario about a funded program, those are distractors. Conversely, do not pick unallowable cost or false progress report for a scenario about a competitive purchasing contract.

Tip 7 - Distinguish sub-recipient from contractor. A sub-recipient performs part of the program and is subject to the same compliance rules and monitoring; a contractor simply sells goods or services. Questions about monitoring responsibility hinge on this.

Tip 8 - For investigation questions, think evidence hierarchy. The best first step is usually to obtain the award documents and application, then compare them against independent third-party records, then trace funds. Interviewing the subject first or confronting them before the paper trail is secured is typically the wrong answer.

Tip 9 - Prevention questions favor verification and data matching. If asked for the most effective control against disaster loan fraud, answers involving independent verification of identity and eligibility, cross-program data matching, and post-disbursement analytics beat answers relying on applicant self-certification or after-the-fact prosecution.

Tip 10 - Watch absolute words. Answer choices stating that grant funds can never be used for indirect costs, or that all disaster loans require collateral, or that self-certification is always fraudulent are usually wrong. The exam prefers answers that reflect the conditional nature of program rules.

Tip 11 - Remember who is harmed. In government fraud questions, the victim is the government and ultimately the taxpayer, and the measure of loss often includes the full amount of funds obtained by fraud, not merely the portion personally pocketed. This affects answers about damages and restitution.

Tip 12 - Read the scenario twice and underline the trigger facts. Words like certified, attested, progress report, matching, indirect rate, draw-down, declared disaster, forgiveness, EIN, headcount, or payroll are signals telling you which concept the question is testing. Let the trigger facts, not the length of the answer choice, drive your selection.

Quick Review Summary

- Grant fraud occurs at application, performance, and reporting stages
- Core grant schemes: eligibility misrepresentation, unallowable costs, double charging, false time and effort, false reports, diversion, fictitious vendors, kickbacks
- Core disaster schemes: fictitious businesses, identity theft, inflated payroll or damage, duplicate benefits, misuse of proceeds, contractor and charity fraud
- Costs must be allowable, allocable, reasonable, and consistently treated
- Key statutes: False Claims Act with qui tam, 18 U.S.C. 287, 1001, 1014, 1040, plus wire fraud and identity theft
- Investigation: documents first, independent verification second, trace funds third, interviews last
- Prevention: verify, match data across programs, monitor sub-recipients, analyze post-disbursement behavior

Master these mechanics and distinctions and you will be able to recognize the scheme a question is describing, select the correct red flag or control, and identify the applicable legal remedy with confidence on exam day.