The Subsidy Trap
The Context
$5 trillion. That is the staggering sum the U.S. government disbursed through pandemic relief programs. At least 6%—$300 billion—went to fraudsters. The Shuttered Venue Operators Grant (SVOG) alone handed out $14 billion. Chris Brown received $8.9 million. Lil Wayne and Marshmello also collected millions. Business Insider documented these celebrities spending SVOG money on private jets, luxury goods, and parties. The SBA inspector general concluded the agency deliberately relaxed anti-fraud controls to accelerate disbursement. Speed over verification. One employee recalled: “Everybody kept saying shut up, sit down. Process the file.” The law itself only required revenue checks, not asset checks. So wealthy musicians with multiple mansions qualified. The Senate has now advanced the SBA Fraud Enforcement Extension Act (Ernst bill) in July 2025, extending the prosecution window from 5 to 10 years. This is not a distant American problem. It is a universal governance failure.
The Risk
Directors, the liability is personal. The SBA’s decision to shift verification to post-distribution—when funds are “potentially unrecoverable”—mirrors a fundamental governance gap. Under New Zealand’s Companies Act 1993, directors have a duty of care, diligence, and skill. If your organisation administers public funds, grants, or subsidies, you cannot outsource accountability to a post-audit model. The SBA inspector general explicitly stated this approach provides “insufficient fraud prevention.” That is a direct criticism of organisational decision-making. If a similar pattern emerges here—where speed trumps verification—directors may face personal liability for breach of duty. The Ernst bill’s extension to 10 years signals that prosecutors are sharpening their tools. The question is not if the liability hook will be tested. It is when.
The Control
The arithmetic is simple. If you cannot verify eligibility before disbursement, you are not managing risk. You are deferring it. The control must be front-end verification, not back-end recovery. Build a pre-distribution audit triage: high-value grants require asset checks, not just revenue checks. Establish a real-time fraud detection system that flags anomalies—like $8.9 million to a celebrity with multiple properties. And ensure your governance framework includes a clear escalation path for employees who say “shut up, sit down.” That is the cost of silence. Silence is not compliance. It is complicity.
The Challenge
These are the critical questions you should be raising at the board table:
| What is the dollar threshold at which our organisation shifts from pre-distribution verification to post-distribution audit—and who approved that threshold? | |
| Do our grant or subsidy eligibility checks include asset verification, or only revenue checks—and if not, why is that acceptable? | |
| What is our documented process for escalating employee concerns about fraud controls being overridden for speed—and when was it last tested? |