LONDON, KENTUCKY WOMAN SENTENCED TO 44 MONTHS FOR STEALING $1 MILLION IN COVID RELIEF LOANS AND BLOWING IT ON PLASTIC SURGERY AND VIKING CRUISES

Another day, another PPP fraudster getting fitted for a jumpsuit. Nicole Pennington, a 50-year-old woman from London, Kentucky, has been sentenced to 44 months in federal prison for her role in a scheme to steal more than $1 million in COVID-19 relief loans from the Small Business Administration. She pleaded guilty to wire fraud and conspiracy to commit money laundering, because apparently the American Dream in 2020 was filling out fake loan applications and then booking a Viking River Cruise with the proceeds.

Let that sink in. While actual small business owners were drowning, watching their life's work collapse in real time, Nicole Pennington was shopping for a new face and a European vacation. While restaurant workers were getting evicted and barbers were wondering how to feed their families, this woman was renovating her kitchen with money that was supposed to keep Main Street alive. This is what the SBA's "relief" program looked like in practice: a buffet for grifters and a middle finger to everyone who played by the rules. If you've been following our ongoing coverage of SBA fraud, none of this will surprise you.

THE SCHEME: 30 APPLICATIONS, 6 APPROVALS, $1 MILLION STOLEN

Here's how this operation worked, and honestly, the sheer audacity is almost impressive if it weren't so infuriating. Between March 2020 and May 2022, Nicole Pennington submitted approximately 30 fraudulent applications for both Economic Injury Disaster Loans (EIDL) and Paycheck Protection Program (PPP) loans. Thirty. She sat down at her computer thirty separate times, fabricated business information, created fake tax returns, manufactured financial statements, and hit "submit" like she was entering sweepstakes.

Six of those 30 applications were approved. That means the SBA, in its infinite bureaucratic wisdom, managed to reject 24 of them but still let six slip through the cracks to the tune of $1,090,398.35. If you're doing the math, that's roughly $182,000 per approved application. The applications were tied to both real businesses and completely fabricated ones. She literally invented companies out of thin air, gave them fake financials, and the SBA just wrote her checks. No visit. No verification. No phone call. Just: "Looks good, here's a million dollars."

The applications contained "materially false information" supported by "fraudulent tax returns, financial statements, and other records," according to federal prosecutors. In other words, she built an entire paper universe of fake businesses and fake revenue, and the SBA's vetting process was apparently to squint at it, shrug, and reach for the checkbook. This isn't just a failure of one person's morality. This is a systemic indictment of a program that was designed to be exploited.

HOW SHE SPENT YOUR TAX MONEY

And now for the part that should make your blood boil. After securing over a million dollars in money that was earmarked for struggling small businesses during the worst public health crisis in a century, Nicole and Joshua Pennington laundered the proceeds through a series of transactions of $10,000 or more. And what did they buy with your tax dollars?

Plastic surgery. A Viking River Cruise. Let those two items bounce around in your skull for a moment. Somewhere in Kentucky, a real small business owner with a real payroll and real employees was denied a PPP loan or got a fraction of what they needed, while Nicole Pennington was getting work done and floating down the Rhine. The PPP program was supposed to be a lifeline. Instead, for people like the Penningtons, it was a lottery ticket with no downside, or so they thought.

The money laundering wasn't exactly subtle either. They moved funds in chunks exceeding $10,000, which is specifically the threshold that triggers mandatory bank reporting. It's almost like they read the "How Not to Launder Money" chapter of a crime novel and decided to do exactly that. These weren't criminal masterminds. They were just greedy and confident that nobody was watching. And for two years, they were right.

A FAMILY AFFAIR: HUSBAND GETS 22 MONTHS

Nicole wasn't working alone. Her husband, Joshua Pennington, was previously sentenced to 22 months in federal prison for his role in the money laundering conspiracy. So this was a family business, just not the kind of family business that the PPP program was designed to protect. While millions of actual family businesses were fighting for survival, the Pennington family was running a fraud factory out of London, Kentucky.

Combined, the Penningtons are looking at 66 months of federal prison time between them. That's five and a half years of combined incarceration for a couple that decided the pandemic was their personal ATM. Joshua got the lighter sentence at 22 months, likely because his role was limited to the money laundering side rather than the actual application fraud. Nicole was the architect. She built the fake businesses, fabricated the tax returns, submitted the applications. Joshua just helped spend the money, which, to be fair, seems like the more enjoyable half of the crime.

U.S. District Judge Claria Horn Boom handed down Nicole's sentence, and 44 months for stealing over a million dollars from a program designed to help people during a pandemic feels like it should come with an asterisk. Is 44 months enough? For comparison, people have gotten longer sentences for selling marijuana. But in the world of white-collar pandemic fraud, apparently stealing a million dollars gets you less than four years. The system is working exactly as designed, which is the problem.

THE SENTENCE: 44 MONTHS OF CONSEQUENCES

Forty-four months. That's the price tag for stealing $1,090,398.35 from American taxpayers during a global pandemic. If you divide that out, it's roughly $24,782 stolen per month of prison time. Or think of it another way: Nicole Pennington will spend about 1,320 days in federal prison, which means she stole approximately $826 for every day she'll be locked up. That's a better daily rate than most people earn working honest jobs.

The sentencing sends a message, sure, but what message exactly? "Don't steal from the government because you might, eventually, years later, get caught and spend a few years in a federal facility that's probably nicer than the apartments of the small business owners you robbed"? Federal prison isn't exactly Alcatraz. We're talking about a facility with email access, a commissary, and recreational activities. Nicole Pennington committed the financial equivalent of a home invasion against struggling Americans, and her punishment is a few years in what amounts to a very boring summer camp.

Meanwhile, the legitimate small business owners who were denied loans, or who received inadequate amounts because the fund ran dry thanks to fraudsters like the Penningtons, got nothing. No apology. No supplemental funding. No justice. They just got to watch their businesses die while people like Nicole were cruising the Danube.

THE BIGGER PICTURE: 2,500+ CONVICTED AND COUNTING

Nicole Pennington isn't an anomaly. She's a data point in the largest fraud epidemic in American history. As of the most recent federal reporting, more than 2,532 defendants have been found guilty of fraud-related charges involving pandemic relief programs. Of those convicted and sentenced, 94 percent were ordered to pay restitution, with some restitution orders exceeding $71 million. Over 440 defendants were ordered to pay $1 million or more in restitution each.

And those are just the people who got caught. The Government Accountability Office and the Pandemic Response Accountability Committee have estimated that fraud across all COVID relief programs could exceed $200 billion. That's not a typo. Two hundred billion dollars, with a B, siphoned out of programs that were supposed to save the American economy. The SBA essentially opened the vault, turned off the cameras, and told everyone to be honest. Shockingly, not everyone was honest.

Just in early 2026 alone, the cases keep rolling in. In February, four defendants were sentenced in an $11.5 million COVID-19 fraud scheme. Another defendant got 97 months for orchestrating a multi-million dollar fraud operation. Eight defendants were sentenced in a $7.7 million scheme. The pipeline of pandemic fraudsters heading to prison stretches to the horizon, and we're still years away from processing all of them. The SBA created a system so broken, so ripe for exploitation, that federal prosecutors will be filing charges well into the 2030s.

The truly enraging part isn't that people like Nicole Pennington exist. Grifters have always existed. The enraging part is that the system was built to accommodate them. The SBA was told to push money out the door as fast as possible, and it did exactly that, with almost zero fraud prevention mechanisms in place. No income verification. No business inspection. Just self-certification and a prayer. They turned the United States Treasury into an honor-system candy jar and then acted shocked when people started grabbing fistfuls. We've covered dozens of these cases, and the pattern is always the same: no oversight, no verification, no consequences until years later.

So here we are in 2026, still cleaning up the mess. Nicole Pennington will report to federal prison. Her husband is already there. The million dollars they stole is gone, spent on vanity and luxury while their neighbors struggled. And somewhere in London, Kentucky, a small business owner who actually needed help during the pandemic is still paying off the debt they took on because the PPP money never came. That's the real crime. Not just what the Penningtons did, but what the system allowed. For more on how the SBA's broken systems enabled this, check out our SBA accountability archive.

FREQUENTLY ASKED QUESTIONS