New SBA regulations that took effect May 4, 2026 have materially expanded the agency's ability to pursue False Claims Act violations through its administrative enforcement process, bypassing the Department of Justice for a much larger category of cases than was previously possible. The regulations implement the Administrative False Claims Act of 2023 and raise the administrative FCA ceiling from $150,000 to $1 million — a sixfold increase — while expressly adding reverse false claims to the SBA's administrative jurisdiction and extending the statute of limitations on COVID-era EIDL and PPP violations through 2030 and 2032, respectively.
The change is significant for the full range of small businesses that interact with SBA programs. Administrative FCA enforcement — pursued by the SBA's Office of General Counsel without DOJ involvement — was previously limited to relatively small claims. At $150,000, the administrative track was largely reserved for minor program violations too small to justify the investment of a DOJ-led investigation. At $1 million, the same administrative process becomes a meaningful enforcement mechanism for the full range of SBA program fraud, including misrepresentations in 8(a) applications, false certifications in size status determinations, HUBZone fraud, and procurement fraud on small business set-aside awards.
How Administrative FCA Differs From DOJ-Led Enforcement
The False Claims Act is most commonly associated with DOJ-led civil actions — multi-million-dollar settlements triggered by qui tam whistleblower complaints and pursued through federal court. Those cases require DOJ investigation resources and typically involve large dollar amounts to justify the investment of federal attorney time. Administrative FCA enforcement at the SBA level is faster, cheaper to pursue, and does not require DOJ concurrence except in cases where SBA chooses to refer. Under the new regulations, the SBA may independently pursue administrative FCA proceedings for violations valued at up to $1 million, with DOJ receiving 30 days' notice before SBA resolves any case — a coordination mechanism that allows DOJ to intervene if a case has broader criminal or civil implications — but if DOJ does not intervene, SBA can proceed to settlement or adjudication on its own authority.
Administrative FCA proceedings are generally faster than civil litigation, but they come with procedural trade-offs for companies facing allegations. Discovery in administrative proceedings is more limited than in federal court, timelines are compressed, and the adjudicator is an administrative law judge within the executive branch rather than an independent federal judge. The speed and efficiency advantages accrue primarily to the government; companies facing allegations have less time and fewer procedural tools to contest the facts of a case than they would in federal civil litigation. This asymmetry makes early voluntary disclosure and cooperation a more attractive strategic choice in the administrative context than in full DOJ-led proceedings.
Reverse False Claims and COVID-Era Exposure
The regulations expressly cover reverse false claims — violations involving the concealment of obligations to pay money to the government rather than the submission of false claims seeking government payment. In the SBA context, reverse false claims exposure is most acute around the COVID-era loan programs. Companies that received Economic Injury Disaster Loans or Paycheck Protection Program loans based on inflated payroll figures, ineligible employee counts, or misrepresented business activity have a continuing obligation to repay if the misrepresentation is later discovered. Concealing that obligation — by failing to disclose the overpayment when discovered, by manipulating records to support the original application, or by structuring transactions to avoid repayment — now expressly falls within the SBA's administrative FCA jurisdiction.
The extended statute of limitations compounds the COVID exposure risk. EIDL violations remain enforceable through 2030; PPP violations through 2032. Companies that received COVID-era SBA loans in 2020 and 2021 face continuing legal exposure for the next several years. The SBA has not publicly indicated how aggressively it plans to pursue historical COVID loan fraud under the expanded administrative authority, but the regulatory infrastructure for doing so is firmly in place, and the combination of extended limitation periods and expanded jurisdiction creates meaningful long-tail risk for any company whose COVID-era loan records do not withstand scrutiny.
Impact on 8(a) and Set-Aside Contractors
The SBA's expanded administrative FCA jurisdiction covers all SBA program areas, including the 8(a) Business Development Program, the HUBZone program, the Women-Owned Small Business program, and self-certifying small businesses competing on set-aside contracts. False representations in program applications — overstating social disadvantage qualifications, misrepresenting principal office location for HUBZone purposes, or falsely certifying small business status on a set-aside contract — fall within the expanded administrative jurisdiction when the associated program value is at or below $1 million per violation.
The expanded enforcement authority arrives at a moment when the SBA is already pursuing an aggressive program integrity posture across its major contracting programs. The agency has been conducting financial records reviews of 8(a) participants, suspending and terminating firms that failed to provide required documentation, and restructuring the social disadvantage standard to require individualized proof of actual discrimination. Administrative FCA authority layered on top of these existing enforcement mechanisms gives the SBA additional tools to sanction contractors that provided false information in program applications or annual program reviews, adding financial liability beyond the consequences of losing program participation alone.
What It Means for Contractors
The May 4 effective date means SBA's expanded administrative FCA jurisdiction is already active. Contractors participating in any SBA program should immediately audit three areas: the accuracy of program application representations, the accuracy of ongoing annual certifications and reporting obligations, and the completeness and accuracy of COVID-era loan records including forgiveness applications. Companies that received EIDL or PPP funds should reconcile their forgiveness applications against actual payroll and eligible expense documentation — if that reconciliation reveals a discrepancy, voluntary disclosure and repayment before an SBA inquiry arrives consistently produces significantly better outcomes than defending an initiated administrative investigation. The cost of a pre-emptive audit and, where necessary, voluntary disclosure is almost always lower than the cost of a contested administrative FCA proceeding. Seeking legal counsel before making any voluntary disclosure is advisable given the administrative FCA process's compressed procedural timelines and the limited discovery rights that distinguish it from federal civil litigation under the standard False Claims Act framework.
