Business Identity Theft: How to Search All 50 States for Fraudulent Registrations

What Is Business Identity Theft?

Business identity theft occurs when someone uses your personal information — most often your Social Security Number (SSN) or Employer Identification Number (EIN) — to register a business entity without your knowledge or consent. The fraudulently created LLC or corporation then becomes a vehicle for opening business bank accounts, applying for credit lines, filing false tax returns, and collecting refunds — all attributed to you.

Unlike personal identity theft, which most people have at least heard of, business identity theft is far less understood — and far more damaging. A fraudulently registered LLC can carry unlimited liability exposure, generate tax debts that take years to unravel, and create credit blemishes that affect your ability to borrow long after the entity is dissolved.

The scale of the problem is staggering. California alone reported over 800 cases of fraudulent LLC registrations in 2025 — a figure that represents only the cases brought to official attention. The actual number of fraudulent registrations active at any given moment, across all 50 states, is believed to be significantly higher.

How Business Identity Theft Is Discovered

Most victims don't discover the fraud through their own vigilance — they discover it because the IRS or a state revenue agency comes knocking. The most common discovery triggers are:

• IRS CP575 or EIN assignment notice for a business you never applied for. This letter confirms that an EIN has been assigned in association with your SSN — a major red flag if you didn't request it.
• Business entries on your credit report. Commercial credit bureaus like Dun & Bradstreet and Experian Business track entity credit profiles. A fraudulent LLC can build a credit history under your EIN within months of registration.
• IRS notices for unfiled or unpaid business returns (Forms 1065, 1120, 1120-S) for tax years you have no memory of.
• State notices — annual report delinquency notices, franchise tax bills, or dissolution warnings from a state where you have no business presence.
• Bank or creditor alerts about accounts opened in a business name you don't recognize but that matches your SSN or EIN.

If you've received any of these signals, don't wait. The longer a fraudulent entity remains active, the more financial and legal damage it can accumulate.

Why You Can't Just Search One State

The instinctive reaction when you suspect a fraudulent business registration is to check your home state. This is almost always the wrong move — and experienced fraudsters know it.

Business entity registration in the United States is entirely decentralized. There is no federal database of LLC registrations — each state maintains its own separate official business registry, operated independently, with no cross-state data sharing for fraud detection purposes. A fraudster can register an LLC in Wyoming using your SSN, open a business bank account in Nevada, and file taxes in Idaho, all without ever touching your home state's records.

Fraudsters specifically choose states with:

• Minimal identity verification at the time of filing (most states accept organizer information at face value)
• Anonymous LLC structures that permit nominee registered agents and omit member/manager names from public records
• Low filing fees and fast processing — some states process formations in under 24 hours with no human review
• No residency requirement — anyone can register an LLC in any state regardless of where they live

This means that searching only your home state — or even the three or four states where you have business ties — leaves you exposed. A comprehensive search requires checking all 50 official state business registries.

Step-by-Step: How to Find Fraudulent Registrations Using NAMECHECK50

NAMECHECK50 queries all 50 official state business databases simultaneously and returns results in 60–90 seconds. Here's how to use it for a fraud investigation:

1. Gather every name variant to search. Start with your full legal name (First Last, Last First), your existing business name if you have one, any DBA names you've used, and any name variations the IRS notice or credit report referenced. Fraudsters often use slight variations — "John Smith Consulting LLC" vs. "John A. Smith Consulting LLC" — to add confusion.
2. Run each name through NAMECHECK50. Enter your name or suspected business name and initiate the search. The system queries all 50 official state business registries in parallel and typically returns results within 90 seconds. You'll see a full report showing which states returned matching entities.
3. Review every result carefully. For each matching entity, examine the entity name, the state of registration, the registered agent, the filing date, and the entity status (active, dissolved, delinquent). Look for registrations you don't recognize — particularly those filed in states where you have no business presence and listing a registered agent you've never engaged.
4. Document all suspicious matches. Screenshot or save the full NAMECHECK50 report. Note the entity name, state, filing date, and registered agent for each suspicious record. This documentation becomes the foundation of your fraud affidavits and IRS filing.
5. Run additional name variants. After reviewing your initial results, search any entity names you found that you don't recognize — especially if they incorporate your name. The fraudster may have used your identity to register multiple entities with slightly different names.
6. Cross-reference with your EIN. If you have an EIN (even one you legitimately applied for years ago), contact the IRS Business & Specialty Tax Line (800-829-4933) to confirm whether any other entities have been associated with your EIN or SSN.

For attorneys assisting identity theft victims, see our Attorney's Guide to Multi-State Business Entity Search for documentation and workflow tips. For a broader overview of finding fraudulent registrations, see How to Find a Fraudulent Business Registration in Any U.S. State.

What to Do When You Find a Fraudulent Registration

Finding a fraudulent entity is alarming — but it's also the moment you regain control. Work through these steps systematically:

1. File a police report. Contact your local police department and file an identity theft report. Obtain a copy of the report number — you'll need it for nearly every subsequent step. Some states and the IRS require a police report number before processing fraud affidavits.
2. Report to FTC IdentityTheft.gov. Go to IdentityTheft.gov and complete the Business Identity Theft section. The FTC generates a personalized recovery plan and pre-fills affidavit templates you can use with creditors and state agencies.
3. File IRS Form 14039-B (Business Identity Theft Affidavit). This form alerts the IRS that your EIN or SSN has been misused to register a fraudulent business or file fraudulent returns. Mail it to the IRS address provided in the form instructions along with copies of your police report and any supporting documentation.
4. Contact each state's official business registry fraud unit. Every state has a process — some more formal than others — for flagging and administratively dissolving fraudulently registered entities. Contact the business division of each state where you found a fraudulent registration. You'll typically need to submit a fraud affidavit, your police report, and documentation proving your identity.
5. Place a fraud alert with commercial credit bureaus. Contact Dun & Bradstreet, Experian Business, and Equifax Business to place fraud alerts on your business credit profile and dispute any accounts opened by the fraudulent entity.
6. Consult a tax professional or attorney. If fraudulent business tax returns have been filed or business credit accounts opened, the downstream tax and credit consequences require professional help. An attorney or CPA experienced in business identity theft can accelerate resolution significantly.

Common Mistakes Victims Make

• Searching only their home state and assuming they're in the clear when nothing comes up.
• Delaying action while hoping the situation resolves itself — every month of delay gives the fraudster more time to accumulate debt and tax liability in your name.
• Not filing IRS Form 14039-B because they assume reporting to the state is sufficient. State and federal records are separate — state dissolution of a fraudulent LLC does not automatically alert the IRS.
• Failing to document every step, every communication, and every submission date. Resolution can take months; contemporaneous records are essential for proving your timeline if disputes arise.
• Ignoring the registered agent. The registered agent listed on the fraudulent entity may be a professional registered agent service used by thousands of companies — but the entity's contact information on file may provide leads. In some cases, fraudsters use a real address that can be traced.

Related Resources

• How to Find a Fraudulent Business Registration in Any U.S. State — Investigative step-by-step process for tracking down shell companies and fraudulent DBAs.
• How to Search All 50 State Business Databases — Overview of the US state business registration landscape and the manual search problem.
• Attorney's Guide to Multi-State Business Entity Search — For attorneys representing business identity theft victims.
• Judgment Enforcement Entity Search — When fraudulent entities hold assets that need to be reached through legal process.
• View a Sample NAMECHECK50 Report — See exactly what a 50-state search result looks like before you run your search.