Guide
Guide · Fraud Investigation

How to Find a Fraudulent Business Registration in Any U.S. State

Whether you're a tax professional, an attorney, or an individual who suspects someone has registered a business using your identity, this guide walks you through the investigative process — how fraud happens, where to look, what to look for, and what to do when you find it.

Common Fraudulent Business Registration Patterns

Fraudulent business registrations take several common forms. Understanding the pattern helps you know what to search for:

  • Shell company registered under victim's SSN. The most common pattern. A fraudster uses a victim's Social Security Number to file an LLC or corporation with a state official business registry. They then apply for an EIN from the IRS (which is issued based on the SSN, without independent verification), open business bank accounts, apply for business credit, or file fraudulent business tax returns to claim refunds. The victim discovers it months or years later through IRS notices or credit alerts.
  • Fraudulent DBA (fictitious business name) filings. A fraudster registers a doing-business-as name under the victim's personal name or existing business name without forming a separate entity. This can be used to open accounts or create a fraudulent paper trail at a lower filing cost than full entity formation.
  • Nominee registered agent schemes. Fraudsters use commercial registered agent services — which have no knowledge of whether the person filing the entity is who they claim to be — to create a veneer of legitimacy. The registered agent's address becomes the entity's official address, creating geographic distance between the fraud and the victim.
  • Multi-state entity proliferation. Sophisticated fraud operations register multiple entities across several states using the same victim's identity, creating a web of shell companies that is harder to trace and more damaging to unwind. Each entity can independently accumulate debt, tax obligations, and credit history.
  • Business impersonation. A fraudster registers a business with a name nearly identical to a legitimate existing business — sometimes the victim's own business — to fraudulently receive payments, sign contracts, or deceive customers. This differs from identity-SSN fraud in that it targets the business brand rather than the owner's personal identity.

Who Searches for Fraudulent Business Registrations

This type of investigation is conducted by three main groups, each with a slightly different starting point:

  • Tax professionals (CPAs, enrolled agents, tax attorneys). Often the first professional a victim contacts when they receive a suspicious IRS notice. The tax professional needs to locate every fraudulent entity associated with the client's SSN or EIN to complete IRS Form 14039-B accurately and to advise on the scope of fraudulent returns that may need to be addressed.
  • Business attorneys. Called in when the fraud has already created legal exposure — open credit accounts, fraudulent contracts, or state dissolution proceedings. The attorney needs a complete picture of all entities registered under the victim's identity to pursue dissolution, issue cease-and-desist communications, and document the fraud for law enforcement. See our Attorney's Guide to Multi-State Entity Search for workflow details.
  • Individual victims. Often acting without professional help in the initial stages. They need a simple, fast way to search all 50 states and understand what they've found before deciding whether to engage a professional. NAMECHECK50 is designed to be accessible to non-professionals, returning clear results that non-attorneys can interpret and act on.

The Core Challenge: 50 State Registries, No Central Database

The fundamental reason fraudulent business registrations are so hard to find is structural: there is no central federal database of business entity registrations in the United States. LLC and corporation registrations are handled entirely at the state level, by 50 separate official business registry systems, with no data sharing between them for fraud detection purposes.

A fraudster who registers an entity in Wyoming using your SSN is invisible in the California, Texas, and Florida official business databases. An investigator who searches only those three states — which might be reasonable if you live in California, have business ties in Texas, and were born in Florida — will not find the Wyoming registration.

Searching all 50 states manually takes 3–5 hours per search: 50 separate portal interfaces, different search UX designs, different result formats, and occasional fees or CAPTCHA barriers. NAMECHECK50 automates this process, querying all 50 official state business databases simultaneously and returning consolidated results in 60–90 seconds.

Step-by-Step Investigative Process Using NAMECHECK50

Follow this investigative sequence to build a complete picture of fraudulent registrations associated with a victim's identity:

  1. Compile all name variants to search. For an individual victim: full legal name (First Middle Last, First Last, Last First), all known business names, all DBA names ever used, and any name variations the IRS notice or credit report referenced. For a business impersonation case: the exact business name, the business name without entity designator, and phonetically similar name variants.
  2. Run the first search in NAMECHECK50. Enter the most likely variant — usually the victim's full legal name — and initiate the search. The system queries all 50 official state business registries in parallel. Review the full results list: note every state that returned a match, the entity name, entity status, registered agent, and filing date.
  3. Evaluate each result. For each matching entity, ask: Do I recognize this entity? Did I register this business? Is the filing date consistent with any business formation I actually undertook? Is the registered agent one I engaged? Is this state one where I have any business presence? Any entity that fails these tests is a candidate for fraud investigation.
  4. Document every suspicious match immediately. Screenshot or export the full NAMECHECK50 report. For each suspicious entity, record: entity name, state of registration, entity status (active, dissolved, delinquent), registered agent name and address, filing date, and entity type. This documentation is the foundation of your fraud affidavits.
  5. Run additional searches using variant names. After reviewing initial results, search the names of any unrecognized entities that appeared. The fraudster may have used your identity to register additional entities under related names — for example, if your name produced a result for "Smith Digital Services LLC," also search "Smith Digital Services" and "Smith DS LLC" to catch variations.
  6. Drill down on suspicious entities using the state's official database. For each entity flagged as suspicious in NAMECHECK50, go to that state's official business registry website and pull the full entity record. Look for: organizer information (sometimes disclosed in formation documents), annual reports (which may include member/manager names and addresses), and any amendments filed after formation. This deeper record may contain the fraudster's contact information or address.
  7. Cross-reference with IRS EIN records. Contact the IRS Business & Specialty Tax Line (800-829-4933) to confirm whether any EINs have been assigned in association with your SSN that you didn't apply for. The IRS can flag your SSN for enhanced review and initiate the business identity theft resolution process.
  8. Compile the complete fraud picture before taking action. Before filing fraud reports, make sure you have a comprehensive list of all fraudulent entities across all states. Submitting a fraud report and then discovering additional entities later requires re-opening each state's investigation — a less efficient process than submitting a complete picture the first time.

Key Fields to Examine in Search Results

When reviewing search results, these are the fields that matter most for a fraud investigation:

  • Entity name: Exact match to your name, close variant, or your actual business name used without your authorization?
  • Entity status: Active entities are the highest priority. Dissolved or revoked entities may have already done their damage but are lower urgency if no credit or tax activity is present.
  • Filing date: Does this date align with any legitimate business formation activity you undertook? A filing date that precedes any business formation you authorized is a strong fraud indicator.
  • Registered agent: Is this a commercial registered agent service you've never engaged, or an individual's name you don't recognize? Commercial agents provide no identity information, but an individual's name may be a lead.
  • State of formation: Is this a state where you have any business, residential, or personal ties? If not, why would a legitimate business be formed there?

What to Do When You Find a Match

Once you've identified fraudulent registrations, work through these steps:

  1. File a police report with your local law enforcement and obtain the report number.
  2. Report to the FTC at IdentityTheft.gov — complete the Business Identity Theft section.
  3. File IRS Form 14039-B (Business Identity Theft Affidavit) with the IRS, attaching your police report and documentation of all fraudulent entities.
  4. Contact the fraud unit of each state's official business registry where a fraudulent entity was found. Submit a fraud affidavit requesting administrative dissolution.
  5. Alert commercial credit bureaus — Dun & Bradstreet, Experian Business, Equifax Business — and place fraud alerts on your business credit profile.
  6. Consult a professional if fraudulent returns have been filed, credit accounts opened, or if multiple entities are involved across several states.

For victims dealing with a broader business identity theft situation, see our comprehensive Business Identity Theft Guide. For attorneys managing this process on behalf of clients, see the Attorney's Guide to Multi-State Entity Search.

Related Resources

Search all 50 state registries for fraudulent registrations

Real-time results in 60–90 seconds. $7.50 per search. No subscription.

Start your search →

Frequently asked questions

What is the first thing I should do if I suspect a fraudulent business registration?

Start with a name search. Use NAMECHECK50 to search your full name, any business names you've used, and any name variants you suspect across all 50 official state business databases simultaneously. This gives you a complete picture in 60–90 seconds and identifies which states warrant further investigation. Do not wait — every day an active fraudulent entity can accumulate additional debt, tax liability, or credit damage in your name.

Who is most at risk for fraudulent business registrations?

Small business owners (who already have an EIN and business credit history to exploit), sole proprietors who have filed Schedule C income on their personal returns (making their SSN-business connection visible), tax professionals who have handled business formation for clients (and whose SSNs appear in filing records), and individuals who have been the target of data breaches that exposed SSN and business formation information.

Can someone register a business using my SSN without my knowledge?

Yes. Most states' official business registration processes do not verify the SSN or EIN provided by the organizer at the time of filing. The information is accepted at face value. This is a known vulnerability in the decentralized US business registration system. The IRS assigns EINs based on SSN without independently verifying that the SSN holder authorized the application, which means fraudulent EIN procurement can happen quickly and with minimal friction for the fraudster.

What does "registered agent" information tell me in a fraud investigation?

The registered agent listed on a fraudulent entity is often a commercial registered agent service — meaning it provides little identifying information about the actual person who filed the entity. However, the registered agent's state and the entity's filing address may provide geographic clues. Additionally, a pattern of fraudulent entities using the same registered agent across multiple states can be a useful lead for law enforcement. Note and document all registered agent information for every suspicious entity you find.

Should a tax professional search all 50 states for a client who receives an unexpected IRS notice?

Yes, and immediately. When a client receives an unexpected CP575 (EIN assignment notice), a Form 1065 K-1, or any IRS notice related to a business they don't recognize, the first step is a comprehensive 50-state entity search to determine where the fraudulent entity was registered. This information is essential for completing IRS Form 14039-B (Business Identity Theft Affidavit) and for filing state fraud reports with the correct official business registry offices.

How do I know if a business registration is fraudulent vs. a business I just forgot about?

If you're a sole proprietor who has never formally formed an entity, any business registration under your name that you don't recognize is suspicious. If you have formed entities in the past, check your records against what appears in the search results. Key indicators of fraud: entity registered in a state where you have no presence, registration date you don't recognize, registered agent you never engaged, business name you've never used, and entity type (LLC, corporation) that doesn't match your formation history.

Can I have a fraudulent business dissolved without an attorney?

For some states with streamlined fraud reporting processes, yes. Several states have established dedicated business fraud hotlines or online fraud reporting forms that allow victims to initiate administrative dissolution proceedings without legal representation. However, if multiple entities are involved, if fraudulent tax returns have already been filed, or if the fraudster has opened credit accounts in the entity's name, working with an attorney who specializes in identity theft or business fraud law will significantly accelerate and improve outcomes.

Will searching for my name on NAMECHECK50 reveal DBAs (fictitious business names)?

NAMECHECK50 searches official state business entity databases, which in most states include both formal entities (LLCs, corporations, partnerships) and fictitious business name registrations (DBAs) that are filed at the state level. However, DBA registrations in some states are handled at the county level rather than the state level and may not appear in the state-level database. For a thorough fraud investigation, county-level DBA records in states where the fraudster may be operating should be checked as well.