SMB Lending Fraud & KYB: A Pre-Underwriting Checklist

Credit analysis asks whether a real business can repay. Fraud controls first ask whether the business, people, documents, accounts, and transactions are what they claim to be.

Combining the two too early wastes underwriter time and can allow persuasive financial narratives to distract from basic inconsistencies.

What should an SMB lender verify before underwriting?

Before credit analysis begins, verify that the applicant is a real, active business; identify the people who own or control it under the lender's applicable policy; confirm signer authority and the operating bank account; test invoices, counterparties, payment instructions, and source documents for consistency; and route unresolved conflicts through a documented fraud or compliance review.

KYB and fraud screening do not establish repayment capacity, and a credit score does not establish identity. Keep the verification gate distinct from the credit decision, record the source and date of each material check, and apply the institution's current legal, regulatory, product, and risk requirements rather than treating a generic checklist as a compliance determination.

Legal entity, registration status, address, tax identifiers, and operating history

Beneficial ownership, control, signer authority, and related entities

Bank-account ownership, deposits, existing obligations, and payment-instruction changes

Invoice parties, delivery or performance evidence, duplicates, disputes, and account consistency

Document provenance, period continuity, calculations, metadata, and unexplained alterations

Sanctions, fraud, identity, and escalation checks required by current policy and applicable law

Verify the entity and control structure

Match legal name, registration number, address, status, officers, beneficial owners, tax identifiers, and operating history across authoritative records and the application.

Entity active and in good standing

Ownership and signer authority consistent

Address and contact channels independently verified

Related companies and prior entities identified

Verify the money path

Confirm that the operating account belongs to the applicant, deposits match the claimed business, and outgoing payments do not reveal undisclosed lenders. For invoice-backed facilities, validate seller, buyer, delivery, and payment instructions.

Test documents for internal consistency

Compare periods, opening balances, fonts, formulas, metadata, account numbers, and totals across statements. Automation can flag anomalies, but material discrepancies should be resolved with primary-source data.

Keep fraud flags distinct from credit weaknesses

Low liquidity may be a credit risk. An altered statement may be a fraud risk. The escalation route, evidence standard, and access controls should differ, even when both affect the final decision.

A short, consistent verification gate protects analyst capacity and ensures the underwriting decision is based on a borrower and data set the lender can trust.

What should an SMB lender verify before underwriting?

Verify the legal entity and operating status, ownership and control, signer authority, bank-account ownership, invoice and counterparty evidence, document consistency, and any fraud, sanctions, identity, or escalation checks required by the institution's current policy and applicable law. Record the source, date, result, and unresolved conflict for each material check.

Are KYB checks the same as credit underwriting?

No. KYB and fraud controls test whether the business, people, accounts, documents, and transactions are what they claim to be. Credit underwriting evaluates repayment, structure, collateral, risk, and policy. A file should clear the appropriate verification gate before persuasive financial analysis is allowed to obscure an identity or evidence conflict.

How should beneficial ownership be checked for an SMB loan?

Use the institution's current customer-due-diligence policy and the rules that apply to its charter, product, customer, and jurisdiction. For covered U.S. financial institutions, FinCEN's current CDD materials include 2026 account-opening relief and risk-based update conditions, so teams should not rely on an older generic rule summary.

What should happen when KYB evidence conflicts?

Pause the affected decision step, preserve the conflicting evidence, verify the fact through an authoritative or primary source, assign an accountable reviewer, and record the resolution or escalation. Automation may flag a conflict, but it should not silently choose the identity, owner, bank account, or invoice evidence that supports approval.