Paycheck Protection Program (PPP) — CARES Act Small Business Relief
The Paycheck Protection Program (PPP) was the largest small business relief program in U.S. history. Created by the CARES Act on March 27, 2020, and codified primarily at 15 U.S.C. §§ 9001–9012, the PPP provided forgivable loans — effectively grants — to small businesses, self-employed individuals, and nonprofits to cover payroll and certain other expenses during the COVID-19 pandemic. More than 11 million loans totaling approximately $800 billion were disbursed through thousands of participating lenders. If a business spent at least 60% of the funds on payroll within the covered period, the entire loan was forgiven and never had to be repaid. The program officially closed to new applications in May 2021, but its legal framework remains codified and has influenced subsequent small business relief design.
Current Law (2026)
| Parameter | Value |
|---|---|
| Core statute | 15 U.S.C. §§ 9001–9012 (CARES Act, Keeping American Workers Paid and Employed Act) |
| Program status | Closed to new applications (May 31, 2021) |
| Total disbursed | ~$800 billion across ~11 million loans |
| Loan amount formula | 2.5x average monthly payroll (3.5x for restaurants/hotels in PPP2) |
| Maximum loan amount | $10 million (PPP1); $2 million (PPP2, "second draw") |
| Forgiveness condition | At least 60% of proceeds spent on payroll during 8- or 24-week covered period |
| Interest rate | 1% fixed |
| Loan term | 2 years (PPP1); 5 years (PPP2 loans) |
| Administering agency | Small Business Administration (SBA) through approved lenders |
| Eligibility | Businesses with 500 or fewer employees; sole proprietors; nonprofits; self-employed |
| PPP2 eligibility | 300 or fewer employees + 25% revenue reduction in a 2020 quarter vs. 2019 |
| Tax treatment | Forgiven amounts not taxable income; expenses paid with PPP funds are deductible |
Legal Authority
- 15 U.S.C. § 9006 — Direct appropriations: established the initial $670 billion appropriation for SBA loan guarantees under the CARES Act, plus funds for SBA operations and oversight; subsequent legislation (PPP and Health Care Enhancement Act, Economic Aid Act) added additional funds
- 15 U.S.C. § 9008 — Treasury program management authority: directed Treasury to issue rules enabling banks, credit unions, Farm Credit System lenders, and other approved lenders to make PPP loans during the national emergency; the SBA used its 7(a) loan authority (15 U.S.C. § 636) as the statutory base for PPP loan mechanics
- 15 U.S.C. § 9009 — Emergency EIDL grants: authorized the companion Economic Injury Disaster Loan (EIDL) program with advance grants of up to $10,000 for businesses experiencing pandemic-related economic injury; the EIDL advance (now often called the "EIDL grant") did not need to be repaid even if the EIDL loan was not approved; priority for low-income communities
- 15 U.S.C. § 9011 — SBA loan payment subsidies: required the SBA to pay principal, interest, and fees on existing SBA 7(a) and 504 loans for borrowers affected by COVID-19 — a separate benefit stack on top of PPP for businesses with pre-existing SBA loans
- 15 U.S.C. § 9012 — Emergency rulemaking: required the SBA Administrator to issue implementing rules within 15 days, bypassing normal notice-and-comment requirements; the emergency authority allowed PPP to launch within days of enactment
How the PPP Worked
The PPP was structured as an SBA-guaranteed loan, but unlike ordinary SBA loans, it was designed to be forgiven — not repaid — if used correctly. The basic mechanics:
Loan amount: Businesses could borrow up to 2.5 times their average monthly payroll costs for the prior 12 months (or calendar year 2019), with a maximum of $10 million per loan. For restaurants and accommodation businesses with a NAICS code starting with 72 ("Second Draw" PPP only), the multiplier was 3.5x. Payroll costs included employee salaries and wages, health insurance premiums, retirement contributions, and state and local payroll taxes.
Eligible expenses for forgiveness: To have the full loan forgiven, at least 60% had to be spent on payroll. The remaining 40% could be spent on: rent on leases in effect before February 15, 2020; mortgage interest on loans in place before February 15, 2020; utility payments; certain operations expenditures (software, accounting); covered worker protection costs (COVID safety equipment); property damage from civil unrest; and supplier costs for essential goods.
The covered period: Borrowers had an 8-week or 24-week covered period, starting from the date funds were received, to spend the money and qualify for forgiveness. The 24-week option (added by the PPP Flexibility Act of June 2020) made forgiveness significantly easier to achieve.
Forgiveness process: Borrowers applied to their PPP lender for forgiveness by submitting documentation of how funds were spent. For loans of $150,000 or less, borrowers could use a simplified one-page certification. The SBA paid the lender the forgiven amount, and the loan was extinguished. If a borrower spent less than 60% on payroll, or reduced headcount or wages below certain thresholds, forgiveness was reduced proportionally.
Who Was Eligible
The CARES Act opened PPP broadly:
- Small businesses: Any business, nonprofit, veterans organization, or tribal business with 500 or fewer employees (or fewer in industries with stricter SBA size standards)
- Sole proprietors and independent contractors: Self-employed individuals could apply, using 2019 net profit from Schedule C as the payroll basis
- Gig workers: Independent contractors — Uber drivers, freelancers, consultants — were explicitly eligible, a departure from traditional SBA loan programs
- Nonprofits: 501(c)(3) and 501(c)(19) organizations qualified; 501(c)(6) business associations were added in subsequent legislation
- Seasonal businesses: Could use a 12-week period from February–June 2019 as the payroll baseline instead of the full year
Second Draw PPP (PPP2, authorized January 2021): A second round of forgivable loans for businesses that had already received and spent a first PPP loan; required 300 or fewer employees and a 25% or greater reduction in gross receipts in any quarter of 2020 compared to the same quarter in 2019. Maximum loan was $2 million.
EIDL: The Companion Program
Alongside PPP, the CARES Act expanded the SBA's existing Economic Injury Disaster Loan (EIDL) program for COVID-19. Unlike PPP, EIDL loans were not forgivable — they were low-interest loans (3.75% for businesses, 2.75% for nonprofits) with 30-year terms. However, the CARES Act included emergency EIDL grants — advance payments of up to $10,000 that did not need to be repaid. A later COVID relief act (Economic Aid Act, December 2020) replaced these with Targeted EIDL Advances for businesses in low-income communities, up to $10,000, and Supplemental Targeted Advances of $5,000 for the hardest-hit businesses. The EIDL program separately disbursed approximately $380 billion in loans and $20 billion in grants.
Tax Treatment: The Critical Change
When PPP was first enacted, the IRS ruled that expenses paid with forgiven PPP funds were not deductible — which would have negated much of the tax benefit. Congress overrode this interpretation in the Consolidated Appropriations Act of December 2020: forgiven PPP amounts are excluded from taxable income, and expenses paid with forgiven PPP funds are fully deductible. This bipartisan fix was critical — without it, a business that received a $500,000 forgivable loan could have owed $100,000+ in additional taxes on the "income" from forgiveness.
PPP Fraud and Enforcement
The PPP's rapid deployment — loans began less than two weeks after enactment — came with significant fraud risk. The SBA accepted applications through thousands of approved lenders with minimal upfront verification. Subsequent DOJ investigations have resulted in thousands of fraud prosecutions for false PPP applications: inventing employees, inflating payroll, applying multiple times for the same business, and creating entirely fictitious businesses. The SBA OIG estimated that at least $200 billion in PPP loans may have been fraudulently obtained. Congress extended the statute of limitations for PPP fraud to 10 years (from the usual 5 years for wire fraud).
How It Affects You
If you received a PPP loan: Your forgiven loan is not federal taxable income, and your covered expenses are fully deductible. If you kept records, this is a clean benefit. If you did not apply for forgiveness within the required period (generally by the SBA deadline for your loan date), you owe the remaining principal at 1% interest. For non-pandemic disaster needs, the parallel SBA disaster loans program remains the main SBA emergency-lending tool.
If you're a small business owner considering future relief programs: PPP established a template — forgivable loans through existing lenders, fast deployment, broad eligibility — that is likely to be replicated in future economic emergencies. Understanding what PPP required (payroll documentation, 60% payroll spending rule) helps you prepare records for any future program.
If you reported PPP fraud: Whistleblowers who report PPP fraud under the False Claims Act may be entitled to a share of any government recovery (15–30% of amounts recovered). Several law firms actively represent qui tam whistleblowers in PPP fraud cases.
If you're a lender who processed PPP loans: Congress provided safe harbor protection for good-faith lenders who relied on borrower certifications. SBA enforcement has focused primarily on borrowers who falsified applications, not on lenders who processed in good faith. If you're facing a civil investigative demand or DOJ inquiry related to PPP loan origination, the legal issue typically centers on whether your bank implemented required fraud controls — not just whether you accepted borrower certifications. Maintain your loan files and underwriting documentation; the SBA Inspector General has pursued lenders who failed to conduct basic eligibility checks.
State Variations
PPP was an exclusively federal program — states played no role in funding, administration, or forgiveness. However, some states required borrowers to include forgiven PPP amounts as state taxable income (because state tax codes didn't automatically conform to the federal exclusion from income). Most states eventually conformed to the federal treatment, but some states did tax forgiven PPP amounts in 2020 or 2021. Check your state's PPP conformity status for any outstanding state tax obligations.
Pending Legislation
The PPP is closed to new applications, and no legislation has proposed reopening it as of 2026. The SBA's existing EIDL program remains available for federally declared disasters (including economic injury disasters). Congress has discussed structural improvements to SBA disaster loan programs and small business emergency access in case of future economic crises. The Infrastructure Investment and Jobs Act (2021) and other bills included provisions targeting communities that did not fully benefit from PPP (particularly small minority-owned businesses and sole proprietors who could not document payroll the way larger businesses could).
Recent Developments
The SBA completed mass PPP forgiveness processing through 2022–2023. The DOJ's PPP fraud initiative continues to produce prosecutions annually — including high-profile cases involving individuals who purchased luxury items with PPP funds. The SBA OIG has identified specific patterns of fraud (particularly through fintech lenders who processed applications with less scrutino than traditional banks) and has recommended program design changes for any future similar effort. The 10-year fraud statute of limitations means PPP fraud prosecutions will continue through at least 2031.
- PPP fraud enforcement — $30 billion recovered through 2025: DOJ's PPP and COVID fraud enforcement has recovered approximately $30 billion in fraudulent or improper payments through 2025 — a significant but still small fraction of the estimated $200 billion in fraud and waste from the $800 billion program. High-profile recoveries include cases against organized fraud networks that filed thousands of false applications, corrupt bank insiders who approved fraudulent loans, and individuals who used PPP funds for personal luxury purchases (yachts, Ferraris, real estate). The civil enforcement track through the False Claims Act has been more productive than criminal prosecution for recovering funds from institutional actors.
- Forgiveness disputes and unresolved audits: Despite mass forgiveness processing, approximately 100,000 loans remain in dispute — particularly larger loans ($2M+) that were subject to mandatory SBA audit reviews. Borrowers who certify economic necessity when it was not supported (a "necessity certification" problem) face forgiveness denial; the SBA's safe harbor ended in 2020 for large loans but many large borrowers still face uncertainty about final forgiveness. Denial appeals to the SBA Office of Hearings and Appeals (OHA) have been processed slowly, and DOGE-driven SBA staffing reductions in 2025 created additional backlogs.
- EIDL — separate program with different legacy: The Economic Injury Disaster Loan (EIDL) program — distinct from PPP — provided low-interest loans (not forgivable) of up to $2 million to small businesses. EIDL borrowers must repay their loans; the $300 billion in outstanding EIDL balances represent real debt obligations for small businesses. The SBA has been aggressive in collections for EIDL loans that are in default, including liens on business assets and referral to Treasury's offset program. Many small businesses that took EIDL during COVID have struggled with the combination of post-COVID economic headwinds and the requirement to repay EIDL principal + interest.
- Lessons and future emergency lending design: The PPP's structural weaknesses — forgivable loans processed through banks, with minimal upfront verification — are being studied for future emergency lending design. The SBA OIG, GAO, and congressional committees have issued recommendations including: real-time income verification against tax records before disbursement, lower per-employee loan caps, mandatory clawback authority for certifications that prove false, and direct-to-employer payroll subsidies (avoiding bank intermediaries). The OBBBA extended SBA's PPP/EIDL fraud recovery authority and added identity theft provisions applicable to future emergency lending programs.