Financial technology firms at the front lines of approving loans through the Paycheck Protection Program — intended to help small businesses survive during the pandemic — lacked fraud controls, chased high fees to the detriment of some borrowers and sometimes exploited their business relationships to arrange suspect loans for the companies’ own executives.