When the CARES Act was passed in early 2020, its primary vehicle for business support was the Paycheck Protection Program (PPP). Designed to keep employees on payroll, the program relied on “self-certification” of eligibility—a feature that saved millions of jobs but also invited unprecedented levels of fraud.
As of January 16, 2026, the Department of Justice announced that False Claims Act settlements and judgments for the 2025 fiscal year exceeded $6.8 billion, the highest single-year total in the Act’s history. A significant portion of this recovery is attributed to the “long tail” of COVID-19 relief investigations.
The Shifting Target: From “Mules” to Multi-Million Dollar Corporations
In the immediate years following the pandemic (2021–2023), enforcement largely focused on blatant criminal acts: individuals using stolen identities to secure loans for luxury goods. However, the current wave of 2025–2026 litigation focuses on corporate “legal falsity.”
This involves established entities that:
- Manipulated Affiliate Rules: Large corporations claiming to be “small businesses” by hiding their relationship to parent companies or international affiliates.
- Misrepresented Economic Necessity: Well-capitalized firms certifying that “current economic uncertainty makes this loan request necessary” while simultaneously issuing dividends or executing stock buybacks.
- Abused PRF Funding: Healthcare providers using the Provider Relief Fund (PRF) for capital expansions or executive bonuses rather than pandemic-related expenses or lost revenue.
Key Case: United States v. Carson Tahoe Health System (2025)
A prominent example of this shift is the $8.8 million settlement with Carson Tahoe Health System (March 2024–2025). The DOJ alleged that the hospital system falsely certified its eligibility for $7.2 million in PPP loans by failing to disclose that it exceeded the Small Business Administration’s (SBA) 500-employee size limit when accounting for its affiliates.
This case established a critical precedent: even if a loan is technically “forgiven” by the SBA, that forgiveness does not insulate a company from FCA liability if the initial application was fraudulent.
The Legal Mechanics: The False Claims Act (31 U.S.C. §§ 3729-3733)
The FCA remains the government’s most potent civil weapon. It allows for treble damages (3x the government’s loss) and statutory penalties that, as of 2026, range between $13,946 and $27,894 per false claim.
The “Knowledge” Requirement and the SuperValu Standard
A central battleground in COVID fraud litigation is the definition of “knowing.” Many defendants argue they were confused by the rapidly changing guidance issued by the SBA and Treasury in 2020. However, the Supreme Court’s decision in United States ex rel. Schutte v. SuperValu Inc., 598 U.S. 739 (2023) fundamentally altered this defense.
The Court held that the FCA’s scienter (intent) requirement focuses on what the defendant subjectively believed at the time of the claim. If internal emails or board minutes show that a company suspected it was ineligible but applied anyway, it cannot rely on a later “objectively reasonable” legal interpretation to escape liability. This has become the “smoking gun” standard for 2026 pandemic trials.
The Power of the Whistleblower: Qui Tam Actions
The DOJ’s record-breaking 2025 was driven by 1,297 new qui tam (whistleblower) lawsuits. In these cases, private citizens—often former employees, accountants, or competitors—sue on behalf of the government.
United States ex rel. Relator LLC v. iLink Employers Company (2025)
In November 2025, the Ninth Circuit issued a landmark ruling in iLink Business Management, 2025 WL 3066301 (2025), reviving a whistleblower suit that alleged a company secured over $6 million in PPP loans by claiming hundreds of non-existent employees. This ruling clarified that whistleblowers do not need to have “eyewitness” proof of every single false claim at the filing stage; rather, they must provide a “plausible” and “particularized” allegation of the scheme under Rule 9(b) of the Federal Rules of Civil Procedure.
The 10-Year Clock: No Escaping the Audit
Many businesses believed they were “in the clear” after the initial three-year audit window. However, Congress took the rare step of extending the statute of limitations specifically for pandemic fraud.
- The PPP and Bank Fraud Enforcement Harmonization Act of 2022: Extended the statute of limitations for criminal and civil PPP fraud to 10 years.
- Recover Fraudulent COVID Funds Act (S. 121, 2025-2026): Current legislation in the 119th Congress seeks to standardize this 10-year window across all COVID-related programs, including EIDL and PRF.
This extended timeline means that a loan taken in 2020 can be prosecuted until 2030. As data analytics improve, the DOJ’s “COVID-19 Fraud Enforcement Task Force” is now using AI to cross-reference tax filings against loan applications from half a decade ago.
Industry-Specific Enforcement: Healthcare and Customs
The DOJ’s 2026 strategy has integrated pandemic fraud into broader “Health Care Fraud Takedowns.” In June 2025, the National Health Care Fraud Takedown resulted in charges against 324 defendants involving $14.6 billion in intended losses.
Furthermore, a new frontier has emerged in Trade and Customs Fraud. The DOJ is now pursuing companies that imported substandard PPE (Personal Protective Equipment) by misclassifying goods to avoid tariffs or “Buy American” requirements.
Lessons for the Corporate Sector
As we move further into 2026, the “COVID defense” is failing in court. To mitigate risk, entities that received federal relief should:
- Preserve All Documentation: Under the 10-year statute, records from 2020 are still “active” legal evidence.
- Audit Self-Certifications: Compare the initial “necessity” certification against the company’s actual financial performance during that quarter.
- Investigate Internal Red Flags: The 2025 surge in whistleblower filings suggests that “disgruntled” employees are more likely than ever to report discrepancies to the DOJ’s National Center for Disaster Fraud (NCDF).
Record $6.8B FCA Recoveries Show No Expiration on Corporate Integrity
The $556 million Kaiser settlement and the record-shattering $6.8 billion in 2025 FCA recoveries signify a permanent shift in federal enforcement. The government has proven that it has the patience and the technological tools to unwind complex fraud schemes years after the money has been spent. In 2026, the message is clear: there is no “expiration date” on corporate integrity.
Disclaimer: This post is for informational and educational purposes only and does not constitute legal advice. If your organization is facing a DOJ inquiry or a False Claims Act investigation, please contact a qualified defense attorney immediately.