Call me skeptic but it's likely that banks prioritized applications of companies that have significant debt with the bank. This way the bank can essentially pay itself.
Louis Rossman reported that banks were doing this openly (explicitly saying they only allow applications from existing account holders). They have now removed that but nothing is preventing them from doing it behind closed doors anyways.
They don't /want/ companies to get a loan this way, they want companies to get a bank loan. No doubt they'll be spamming all failed applicants with offerings of "discount" bank loans soon.
They certainly did, on April 3 the day the program started of the 4 big banks only Bank of America began accepting applications with restrictions to applicants (example: must be an account holder and have pre-existing loans with the bank).
BOA was already sued by business owners in attempt to get court order to force BOA to open up the application process to everyone, and the Judge already ruled the banks have freedom to prioritize their own customers on any basis they like because the CARES Act did not prohibit the banks in anyway from doing so.
Now there have been multiple lawsuits against multiple banks, here is a link to one of the Judge's orders denying the restraining order against BOA: https://www.pierceatwood.com/sites/default/files/Order%20den...
In short the banks with get an automatic 5% of the total $350B, plus of those loans that don't get forgiven, the banks can sell them on the secondary market. So as you point out the Banks basically got $17.5B to lend money to businesses that already owe them money.
It was probably the same work to process a larger amount than a smaller one, so they were incentivized to do larger ones first. They had 5% total for the lower loans and 3% for up to 200k, but if its the same work - you do the higher ones regardless of your commission %. The average loan across the board was about 200k from what I last saw.
Should have been a flat fee. And they probably should have prevented businesses from getting a PPP loan from your current bank so they didn't have that incentive to discriminate and clean up any prior non-Covid related debt.
Chase lied about reviewing applications sequentially. We were early on April 6th. Never heard anything until this morning when they emailed saying funds were gone. Since they didn't update anyone, it probably made it easier to discriminate. If you were #1 and didn't get a loan, then they'd have to tell you that you were denied if they were really going sequential and fair, and not discriminating. I won't be surprised if there's a class action fired up.
Just one crazy example - Chase funded 20M to Ruth's Chris as they got around the 500 employee limit with a size standard loophole. I don't know anyone who gets takeout steaks. Nor will people be buying a lot of them when they can even open back up again. So dumb.
There was no way to know if your loan was looked at, if it was ever submitted to the SBA by Chase or any way to withdraw your application. And since the SBA said not to do multiple applications, Chase screwed over a lot of people.
Just last week I had a fraud alert and Chase's phone service was not operational. They went completely dark. Seemed to be all hands on deck with PPP, cleaning up balance sheet and getting that easy money in commissions.
Behind the error message I could make out the text of what appeared to be the ordinary final page of the form. The the error pane was a translucent overlay over the functioning form. I opened Chrome debugger, identified the element, and set its style to "display: none". Et voila: the glorious final page of the form, where I was able to tick off several attestations and press "Submit". About 10 hours later, I received the "application received" message.
You're Chase Bank. You have about 3 days to assemble a webapp that will accept bazillions of hits. You won't have any time to shake it down. Why in the name of Salmon P. Chase do you build a javascript-laden behemoth with a slick wizard interface with page transitions, that has a session timer but no persisted saved state (of any use to the user), using XHR file uploads, the combination of all that hot code bound to fail on any browser but Chrome (it failed to get to page 1 using Firefox)?
They could have built a plain old HTML single-page form with a POST action that would upload all the attachments. It could even have had wonderful CSS to support the branding they feel they must have. The whole thing could have run on Apache hosts with a CGI handler. Seriously.