Business Lending
Overview
Business lenders face unique verification challenges centered on credit risk assessment and default prevention. Unlike marketplaces or payment processors, lenders must thoroughly evaluate a business's financial health, legal standing, and ability to repay before extending credit. The underwriting process balances speed-to-funding with comprehensive risk assessment.
Key challenges for lenders:
- Credit risk assessment: Evaluating ability and willingness to repay
- Legal exposure: Identifying existing liens, litigation, and bankruptcy risk
- Fraud prevention: Detecting synthetic businesses and serial defaulters
- Regulatory compliance: Meeting CDD requirements and AML obligations
- Portfolio management: Monitoring borrowers for signs of financial distress
This guide provides a standard verification workflow optimized for business lending underwriting teams, from initial application through ongoing portfolio monitoring.
Verification Workflow Overview
A typical business lending verification flow includes six key checks plus an optional monitoring add-on:
- Fraud & Digital Intelligence: Detect repeat fraud and application velocity (Baselayer + Partner/s)
- Industry Screening: Verify industry compliance and assess early distress signals (Baselayer)
- Consumer Credit Check: Verify business owner identity and credit (Partner/s)
- Business Verification: Validate business identity and registration (Baselayer)
- Legal Check: Identify liens, litigation, and bankruptcy risk (Baselayer)
- Final Review: Identity verification and financial underwriting (Partner/s)
- Add-On: Portfolio Monitoring: Continuous monitoring of approved borrowers (Baselayer)
Each check uses a combination of Baselayer endpoints and third-party verification tools to build a complete credit risk picture.
Step 1: Fraud & Digital Intelligence
Purpose: Identify fraudulent applications early by analyzing business identity patterns, application velocity, and consortium intelligence.
Required Tools
- Fraud screening provider (for device/identity signals and digital intelligence)
- Baselayer: Business identity network and fraud consortium
Baselayer Endpoints
POST /searches
GET /businesses/{business_id}/applicationsNote: Baselayer is developing a standalone fraud check product launching in Q1 2026 that will streamline this step. The current approach uses the business search endpoint combined with application tracking.
Verification Logic
// Submit business search
response = POST /searches with business details
// Check application velocity
applications = GET /businesses/{business_id}/applications
// Count recent applications
applications_last_7_days = count(applications where submitted_at >= today - 7 days)
applications_last_30_days = count(applications where submitted_at >= today - 30 days)
// Evaluate velocity flags
IF applications_last_7_days >= 4:
flag = "RED"
reason = "High application velocity - 4+ applications in 7 days"
ELSE IF applications_last_30_days >= 4:
flag = "YELLOW"
reason = "Elevated application velocity - 4+ applications in 30 days"
// Check fraud consortium
IF COUNT(response.fraud_consortium_hits) > 0:
flag = "RED"
reason = "Business or individual in Baselayer Fraud Consortium"
// Combine with third-party fraud screening
IF fraud_screening_provider.risk_score > threshold:
flag = "RED"
reason = "Failed fraud screening"Note: Baselayer fraud consortium is only available for member entities who contribute regularly to the fraud database.
Context
Fraud screening for lenders is critical given the financial exposure. Application velocity tracking catches credit stacking and repeat fraudsters attempting to secure multiple loans simultaneously across different lenders.
Step 2: Industry Screening
Purpose: Verify the business operates in an acceptable industry and assess optional digital distress signals.
Required Tools
- Baselayer: Industry prediction
- Optional: Social media & reviews (for distress signals)
Baselayer Endpoints
POST /web_presence_requestsTip: The web presence request has 20-30 second latency. Consider initiating this request early in your workflow (e.g., during Check 1) to improve applicant experience.
Verification Logic
Industry Screening
// Extract industry prediction from /web_presence_requests response
industry = response.industry_prediction
// Check for prohibited industries
IF industry.keywords CONTAINS ANY prohibited_keyword:
flag = "RED"
reason = "Prohibited industry keyword detected"
// Check prohibited NAICS codes with confidence threshold
IF industry.code IN prohibited_naics_list:
IF industry.accuracy >= 0.75:
flag = "RED"
reason = "Prohibited industry with high confidence"
ELSE:
flag = "YELLOW"
reason = "Potential prohibited industry, needs review"Note: Prohibited keyword and NAICS code lists are proprietary and available to Baselayer customers upon request. Contact your account representative for access.
Social Media & Reviews (Optional - Emerging Practice)
An increasing number of lenders are incorporating social media and review analysis as early warning indicators of business distress. Sudden drops in review ratings, negative sentiment spikes, or dormant social accounts can signal operational problems before they appear in financial statements.
For lenders interested in this emerging practice, basic signals include:
- Low review ratings
- Prolonged social media inactivity
- Surge in negative customer complaints
For comprehensive guidance on implementing social media and review monitoring, see Online Presence: Best Practices.
Context
Industry screening ensures lending to businesses in acceptable risk categories. While lenders historically haven't focused on online presence, social media and review monitoring is emerging as a valuable early-warning system for portfolio distress, complementing traditional financial indicators.
Step 3: Consumer Credit Check
Purpose: Verify the identity and creditworthiness of the business owner or principal officer.
Required Tools
- KYC provider (for identity verification and AML screening)
- Credit bureau (for personal credit score - FICO or equivalent)
Context
For most SMB lending, the business owner's personal credit and identity are critical underwriting factors. Small businesses often lack established credit history, making the owner's personal credit behavior the strongest available predictor of the business's capacity and willingness to repay.
Personal guarantees are common, further reinforcing the importance of individual creditworthiness and identity verification in the lending decision.
Baselayer works with hundreds of partners and can recommend ideal providers for every product and case.
Step 4: Business Verification
Purpose: Validate business identity, registration status, and compliance.
Required Tools
- Baselayer: Business search
Baselayer Endpoints
POST /searchesTip: You can re-use the API response from the
POST /searchesrequest from Step 1 and avoid extra charges.
Verification Logic
This workflow assumes only registered businesses are approved. If sole proprietorships are also eligible, we recommend setting up a separate route as explained in our Sole Prop Verification guide.
// Extract match signals from /searches response
business_id = response.business.id
name_match = response.business_name_match
address_match = response.business_address_match
tin_matched = response.tin_matched
registrations = response.business.registrations
watchlist_hits = response.watchlist_hits
months_in_business = response.business.months_in_business
// Check Baselayer match
IF business_id == NULL:
flag = "RED"
reason = "No business match" // skip all other steps
// Check name and address matching
name_address_approved = FALSE
IF name_match == "EXACT" AND address_match IN ["EXACT", "CITY", "STATE"]:
name_address_approved = TRUE
ELSE IF name_match == "SIMILAR" AND address_match == "EXACT":
name_address_approved = TRUE
IF NOT name_address_approved:
flag = "RED"
reason = "Weak name/address match"
// Verify TIN
IF tin_matched == NULL:
# IRS outage - handle per policy
# See [IRS Outage Handling Guide](#) for detailed guidance
flag = "YELLOW"
reason = "TIN verification unavailable (IRS outage)"
ELSE IF tin_matched == FALSE:
flag = "RED"
reason = "TIN does not match business name"
// Check registrations
domestic_active = FALSE
FOR EACH registration IN registrations:
IF registration.type == "domestic" AND registration.status == "active":
domestic_active = TRUE
domestic_state = registration.state
IF NOT domestic_active:
flag = "RED"
reason = "No active domestic registration"
// If business operates in different state, verify foreign registration
// Operating state is usually the one from the application address
IF operating_state != domestic_state:
foreign_active = FALSE
FOR EACH registration IN registrations:
IF registration.type == "foreign" AND registration.state == operating_state AND registration.status == "active":
foreign_active = TRUE
IF NOT foreign_active:
flag = "YELLOW"
reason = "No active foreign registration in operating state"
// Check watchlists
IF COUNT(watchlist_hits) > 0:
flag = "RED"
reason = "Positive sanctions or watchlist match"
// Optional: Check business age (common lending requirement)
IF months_in_business < 12:
flag = "YELLOW"
reason = "Business less than 12 months old - higher risk"Context
Business verification for lenders requires stringent identity matching to ensure the entity exists, is properly registered, and is not on sanctions lists. Many lenders also require minimum business age (typically 6-12 months) as a credit risk factor.
Step 5: Legal Check
Purpose: Identify existing liens, active litigation, and bankruptcy filings that indicate legal or financial distress.
Required Tools
- Baselayer: Lien search, litigation & bankruptcy search (docket search)
Baselayer Endpoints
POST /lien_searches
POST /docket_searchesVerification Logic
Lien Search
// Submit lien search using business_id from Step 4
lien_response = POST /lien_searches with business_id
// Extract lien details
lien_details = lien_response.liens
// Evaluate lien risk
FOR EACH lien IN lien_details:
IF lien.status == "active":
// Check for tax liens (highest priority - red flag)
IF lien.type IN ["TAX_LIEN", "FEDERAL_TAX_LIEN"]:
flag = "RED"
reason = "Active tax lien found"
ELSE:
// Any other active lien is a yellow flag
flag = "YELLOW"
reason = "Active lien found"Note: This logic provides basic lien risk assessment. For more advanced lien analysis including document review and other detailed lien review strategies, see Lien Search: Best Practices.
Lien search can be scoped to the domestic state only or expanded to all registered states (including foreign registrations). Most lenders search only the domestic state.
Litigation & Bankruptcy Search
// Submit docket search using business_id from Step 4
docket_response = POST /docket_searches with business_id
// Evaluate litigation and bankruptcy risk
medium_risk_count = 0
FOR EACH docket IN dockets:
// Check for high-risk cases with exact match
IF docket.risk_level == "high" AND docket.match_level == "EXACT":
flag = "RED"
reason = "High-risk case with exact match (bankruptcy or significant litigation)"
// Count medium-risk cases
IF docket.risk_level == "medium":
medium_risk_count = medium_risk_count + 1
// Flag if multiple medium-risk cases
IF medium_risk_count > 2:
flag = "YELLOW"
reason = "Multiple medium-risk litigation cases found"Note: This logic provides basic docket risk assessment using Baselayer's
risk_levelandmatch_levelscoring. For more advanced litigation analysis including case type evaluation, judgment detection, timeline analysis, and bankruptcy chapter assessment, see Litigation & Bankruptcy Search: Best Practices.
Context
Legal checks are essential for lenders to understand existing creditor positions, litigation exposure, and bankruptcy risk. Liens affect collateral priority, while active litigation and bankruptcies signal financial distress and potential default risk. This check often determines loan structure, collateral requirements, and pricing.
For detailed guides on lien and docket searches, see Lien Filing Guide and Litigation & Bankruptcy Search Guide.
Step 6: Final Review
Purpose: Perform final identity verification and complete financial underwriting analysis.
Required Tools
- Identity verification provider (for enhanced identity checks)
- Financial analysis tools (for revenue verification, bank statements, tax returns)
Context
The final review combines all previous checks with financial underwriting to make the credit decision. This typically includes:
- Enhanced identity verification beyond basic KYC
- Revenue and cash flow analysis
- Bank statement review
- Tax return verification
- Financial ratio analysis
This step is highly customized to each lender's credit policy and risk appetite.
Baselayer works with hundreds of partners and can recommend ideal providers for every product and case.
Add-On: Portfolio Monitoring
Purpose: Continuously monitor approved borrowers for changes that indicate increased credit risk or default probability.
When to Use
After a business is approved and becomes a customer, add them to portfolio monitoring to track:
- New liens filed against the business
- Litigation or bankruptcy filings
- Changes in business registration status
- Officer or address changes
- Sanctions or PEP flags
- Activity through Baselayer's Identity Network
Baselayer Endpoints
POST /portfolio/itemsImplementation
// After loan is approved and funded
IF loan_status == "FUNDED":
// Add business to portfolio monitoring
portfolio_item = POST /portfolio/items {
"business_search_id": business_search_id,
"group_id": group_id // Optional: assign to risk-based group
}
// Monitoring begins automatically based on portfolio policyRecommended Monitoring Configuration
For SMB lending portfolios:
Monitoring Frequency: Monthly (standard), Weekly (high-risk)
Monitor for:
- Liens (new UCC filings)
- Litigations & Bankruptcies
- OFAC/PEP flags
- SoS Standing changes
- Business profile changes (officers, addresses)
- Identity Network activity (credit stacking detection)
Notification Frequency: Monthly for standard portfolio, Weekly for high-risk segments
Context
Portfolio monitoring transforms one-time KYB into ongoing customer due diligence (CDD). For lenders, this is particularly valuable for:
- Early warning system: Detect deteriorating credit quality before default
- Regulatory compliance: Meet ongoing CDD requirements
- Portfolio management: Identify accounts requiring increased monitoring or workout
- Loss mitigation: Intervene before situations become unrecoverable
For comprehensive guidance on portfolio monitoring configuration, start with Portfolio Monitoring: Basics.
Implementation Checklist
Use this checklist to implement the business lending verification workflow:
Setup
- Integrate fraud screening provider
- Integrate Baselayer API
- Integrate KYC provider
- Integrate credit bureau (FICO or equivalent)
- Integrate identity verification provider
- Request prohibited industry lists from Baselayer representative
- Configure portfolio monitoring policies
Step 1: Fraud & Digital Intelligence
- Implement
POST /searchesendpoint - Implement
GET /businesses/{business_id}/applicationsendpoint - Configure application velocity logic
- Configure fraud consortium check (if member)
- Integrate third-party fraud screening
Step 2: Industry
- Implement
POST /web_presence_requestsendpoint - Configure industry screening for prohibited industries
- Optional: Configure social media/review distress monitoring
Step 3: Consumer Credit
- Implement KYC/AML verification
- Implement credit bureau integration (FICO)
Step 4: Business Verification
- Implement standard KYB verification logic
- Configure business age requirements (if applicable)
- Set up sole proprietor routing (if applicable)
Step 5: Legal Check
- Implement
POST /lien_searchesendpoint - Implement
POST /docket_searchesendpoint - Configure lien search scope (domestic only vs. all states) and evaluation logic
- Configure litigation and bankruptcy evaluation logic
Step 6: Final Review
- Implement identity verification
- Structure financial underwriting analysis
- Configure manual review queues
- Set up rejection workflows
Portfolio Monitoring
- Implement
POST /portfolio/itemsendpoint - Configure monitoring policies (frequency, attributes)
- Set up notification subscriptions by team
- Create risk-based portfolio groups
For questions about implementation or to request prohibited industry lists, contact your Baselayer account representative.
Updated about 1 month ago
