Colorado Residents Face Surge in Business Fraud Scams

Jarrett Taylor’s Longmont mailbox is a quiet monument to a noisy problem. Catalogs from shipping firms, letters from banks—all addressed to businesses that don’t exist, at least not in his home. The recycling bin gets full, fast. It started last summer, a drip that has turned into a stream of fraudulent correspondence linked to companies registered to his address with the Colorado Secretary of State. He is not alone.

Across Colorado, from suburban homes to downtown Denver office towers, residents are finding their addresses hijacked by phantom firms. One Teller County family discovered 370 fake businesses using their home. A single Denver building has seen over 12,000 entities registered to its address. This is not a clerical error. It is a calculated front for crime. Colorado Attorney General Phil Weiser put it bluntly when announcing lawsuits in May targeting such companies, which are often tied to international scams ranging from cryptocurrency schemes to romance fraud. “Fraudsters are finding new ways to trick people. A big one is registering a business and pointing people to their registered business,” Weiser stated. The facade of a legitimate state-registered entity lends a dangerous air of credibility.

The surge has roots in a well-intentioned policy. In 2022, to aid small businesses during the pandemic’s economic hangover, Colorado lawmakers temporarily slashed the fee to register a new entity to just one dollar. The move succeeded in supporting entrepreneurs. It also, inadvertently, opened a floodgate for fraud artists. The barrier to entry became almost nothing. Greg Wertsch, a special agent with the U.S. Department of Homeland Security who served on a state working group formed that year to address the issue, famously noted at the time that registering a business in Colorado could be done “for a buck here in Colorado in under 30 seconds.” He warned these entities were “created to victimize, they are created to steal, they are created to hide in the shadows.”

Since then, Colorado has scrambled to retrofit its systems with security measures. The state now requires identity verification for registered agents—the persons or companies designated to receive legal documents for a business. It also allows law enforcement to directly report fraudulent filings, not just victims. A new bill passed this legislative session aims to further streamline investigations. But the cat is out of the bag, and complaints are soaring. Since the Secretary of State’s office launched a dedicated complaint portal in 2023, it has received over 11,000 submissions.

“Honestly, we were expecting a lot fewer complaints to be filed than were filed,” Secretary of State Jena Griswold told reporters. “We were surprised by the level of fraudsters trying to take over businesses or use people’s information. So this program, I think, has been very much successful.” Success here is measured in visibility—the system is identifying a problem far larger than anticipated. But for victims, success feels different. It feels like stopping the mail.

Amanda Andrew, a Littleton resident and a banker who investigates fraud professionally, knew exactly what to do when strange business mail started arriving in March of last year. She searched the Secretary of State’s database. She found a company registered to her home address by an individual in China. After a panic-stricken check confirmed her home title was untouched, she filed a complaint. The entity was flagged as fraudulent in the state database. Yet, the mail keeps coming. “It’s been a year and a half, almost. I get mail at least every other day for this business,” Andrew said. The official flag does not stop the marketing databases of banks and shipping companies, which were harvested before the state’s intervention.

This is the frustrating limbo for Coloradans like Andrew and Taylor. They have done everything right. They have filed complaints, frozen their credit, changed passwords. The state has acted, marking the businesses as fraudulent. But the tangible nuisance—the daily reminder of their compromised personal information—persists. The system can label the tumor malignant, but it cannot yet stop the symptoms. “So it does kind of feel like there’s nowhere to go with it, other than just this is what life is now,” Taylor said.

• The economics of this fraud are depressingly simple.
• As analysis from the Federal Trade Commission and reports from the Financial Crimes Enforcement Network (FinCEN) have detailed, shell companies are the lifeblood of modern financial crime.
• They provide a veneer of legitimacy for moving money, securing merchant accounts for credit card processing, or building fake websites for scams.
• Colorado’s historically low-cost, high-speed registration process became an attractive factory for these shells.
• While the fee is now back to a more standard rate, the infrastructure for mass filings remains.
• The solution is not just about raising fees or adding verification steps, though those help.

The solution is not just about raising fees or adding verification steps, though those help. It is about velocity and data sharing. As the American Bankers Association has noted in its advisories, business registration data is often used by financial institutions to verify legitimacy during “know your customer” checks. If a fraudulent company lingers in a state database before being flagged, it has already passed that critical gate. Closing the time lag between a fraudulent filing and its widespread identification in commercial databases is the next frontier. This requires tighter integration between state registries and the financial industry—a complex but necessary partnership.

For now, the wave of mail to Colorado homes is a paper trail leading back to a digital crime wave. It is a testament to how vulnerable our systems of trust remain. Registering a business is an act of faith in the marketplace. Fraudsters have learned to exploit that faith with a one-dollar investment and thirty seconds of effort. The state is building better walls, but the aftermath for those whose addresses were already seized is a quiet, daily siege. The real cost is not just in stolen dollars, but in stolen peace of mind. Every piece of junk mail for a fake company is a reminder that your home, in the eyes of a criminal network, is just another convenient address.