Twenty dollars. That is the filing fee in California for a statement of information, the form that tells the state who runs an LLC. Can a stranger file one against your company? Yes. Online, today, no questions asked. Filing offices record paperwork, they do not vet the person submitting it. California’s Secretary of State keeps a standing alert about this exact crime: bogus filings that swap a company’s registered address or its listed officers, so a thief can use the clean record and the good credit behind it to open accounts and credit lines.
The ugly part is who finds out first. Not the owner. A funder’s fraud desk finds out, or a decline letter does, or a vendor calls about equipment nobody at the real company ever ordered. By then the thief has had months of runway.
The hijack is a paperwork job
The pattern is boring on purpose. The thief picks an entity in good standing, often one that went quiet. The Identity Theft Resource Center lists the takeover of dormant or expired business registrations as a standard form of business identity theft, because a company nobody watches gives the longest head start. One cheap amendment moves the registered address and swaps in a new officer name, and now the state’s own website backs the thief’s story. It is a Trojan horse made of paperwork: it gets through the gate because the gate’s job is to accept paperwork.
From there it is a shopping trip. Vendor credit, business credit cards, equipment leases, working capital, all applied for under a real name with real history. The scale is real too: a fraud study from the equipment finance industry’s research foundation found impersonation of real business owners up 13 percent year over year, and fraud using legitimate business credentials up 10 percent.
Here is the frank part from someone who reads files all day. The state record is check one, not the whole check. A good desk also matches the driver’s license, the voided check, how the bank statements read, and sometimes a plain phone call to the business, so plenty of these die in underwriting. The ones that slip through land on your record, not the thief’s. The default, the lien, the collections trail, the burned vendor accounts, every piece carries your business name. Your next real application inherits that file.
The 20-minute lockdown
California’s official advice is to check your record at least once a year. That is light. Quarterly, 20 minutes, here is the whole routine:
- Pull your company on your state’s business entity search and read every field: registered agent, address, officer names, entity status. California’s search is free with no login, and most states run something close.
- Turn on your state’s filing alert if one exists. Ohio’s is free and emails you whenever anything touches your record. Search your state’s site for its version.
- Run your business name through the state UCC search. A lien you do not recognize is a loud alarm.
- Pull a business credit report and scan for inquiries and tradelines you never opened.
- Confirm the mailing address and email on file with the state still reach you. Redirected mail is how owners stay blind for a year.
One more thing while you are in there. If you own an old entity you stopped using, do not just walk away from it. A company sitting in good standing with nobody watching is exactly what this crime wants. Dissolve it formally or keep the alert running.
If you find a filing you did not make
Order a certified copy of the fraudulent filing before you fix anything. California’s Secretary of State says it straight: that certified copy is your evidence in court. Then correct the record and file a police report. Notify your bank and anyone who extended credit against the fake information.
And if you are mid-application anywhere, tell the funder the same day. A documented fraud file with a police report attached reads completely differently than a quiet default sitting under your business credit profile. An underwriter can work with that; an unexplained default just reads as risk.
The two-minute version starts now: open your state’s business search and pull your own company. Read the officer names. If every one is a name you put there, great, set a reminder for January and move on. If one is not, you just found it months before a decline letter would have told you.