PPP Loan Scams - Here’s What to Watch For

At Capitol Federal®, protecting your business is our priority. In some cases, scammers are using publicly available Paycheck Protection Program (PPP) loan information to target businesses with highly believable messages.

Because some loan details are public, criminals may already know basic information about your business and use that to sound legitimate and create urgency.

How PPP Loan Scams Work

Scammers may contact you pretending to be from a government agency, law enforcement, your bank, or even a “PPP specialist.”

They might claim:

  • Your loan is under review or flagged for fraud
  • You missed a deadline or need to act immediately
  • You must verify information or make a payment

These messages are designed to feel urgent and convincing. Their goal is to get you to act quickly without verifying.

Red Flags to Watch For

If you’re contacted about a PPP loan, be cautious of:

  • Urgency or pressure to act right away
  • Threats of fines, penalties, or legal action
  • Requests for sensitive information, like passwords, codes, or debit card details
  • Unexpected calls, texts, or emails about your loan
  • Contact details that don’t match official sources

Reminder: Capitol Federal® will never call, text, or email asking for your passwords, PINs, or one-time security codes.

How to Protect Your Business

The best response is a disciplined one: Pause. Reflect. Protect. 

  • Pause. If the contact is unexpected, stop the interaction. Do not click links, do not call the number provided in the message, and do not share information in the moment. 
  • Reflect. Ask whether the message is reasonable. Did you expect to hear from anyone about a PPP loan now? Does the request make sense? Is the caller pushing fear, secrecy, or urgency?
  • Protect. End the communication and verify the situation yourself using official contact information. Contact your bank directly through a trusted number or official website. 

Think It Might Be a Scam? Here’s What to Do

Scammers use urgency and believable details to pressure businesses into acting quickly. Taking a moment to pause, verify, and use trusted contact information can help protect you.

If you receive a suspicious message or shared personal information, act quickly.

  • Contact Capitol Federal® at 1-888-822-7333 or visit your local branch
  • Report the incident to your local law enforcement and the Federal Trade Commission
  • For suspected cybercrime, you may also report it through the FBI’s IC3

Make sure to monitor your accounts regularly and report any unusual activity, keep alerts turned on, and use strong, unique passwords and enable multi-factor authentication.