Three days after you sent bank statements to one broker, your phone fills with calls from companies you have never contacted, each of them somehow knowing your revenue, your bank balance and how much you asked for. You did not get unlucky. Your file was backdoored: passed to people you never chose, by someone in the chain you trusted with it.
Backdooring is one of this industry's ugliest open secrets, and also one of its most preventable. This article explains what the practice is, the specific ways a file leaks, what it costs you when it does, and the concrete steps that keep your application where you sent it.
What backdooring actually means
Backdooring is the unauthorized shopping of your funding application. You gave your file, your statements, revenue, balances, ownership details and contact information, to one party for one purpose, and someone moved it somewhere else without your consent: to another broker, another funder, or a buyer of leads. The name fits because the file leaves through a door you did not know existed.
It matters to be precise about the boundary. A broker legitimately submits your file to funders in order to get you offers; that is the job, and a good broker tells you which funders those are. Backdooring is different in kind: it is distribution you did not agree to, usually for someone else's commission, and usually discovered only when strangers start calling with details they should not have.
How a file leaks: the mechanics
Understanding the leak paths is most of the defense, because each path corresponds to a question you can ask in advance.
- Sub-broker chains. The "broker" you called is actually reselling files to other shops who do the real placement, each layer adding calls, and sometimes cost, you never see. Your file changes hands twice before it reaches a single funder.
- Employees moonlighting. A rep inside a brokerage or funder quietly sends files to a friend's shop for a cut. The company may be honest while an individual inside it is not.
- Declined-file resale. A file that gets declined, or funds elsewhere, still has market value as a lead. Unscrupulous shops sell their dead files in batches, which is why the calls sometimes start weeks later.
- Loose submission practices. Statements emailed around with no agreement about confidentiality, forwarded funder to funder, land in inboxes nobody controls. Not always malicious, just careless, and the result for you is identical.
What it costs you when it happens
The obvious cost is the phone: weeks of relentless calls and texts from shops working your file cold. The less obvious costs are worse.
Your negotiating position erodes. Every shop holding your file knows your balances and how much you need, and shops that bought a backdoored file tend to pitch fast, expensive deals, because they paid for the lead and want their money back. Some will pitch a second advance on top of the one you are negotiating, and stacked advances are how daily payments outgrow revenue; we walk through that spiral in what happens if you can't make your MCA payments.
Underwriting can also read the aftermath badly. Funders check for recent UCC filings and inquiry activity around a business, and a file that has been shopped everywhere can look, from the inside of an underwriting department, like a business applying desperately in ten places at once. The leak, not your business, created that impression, but you are the one explaining it.
And beneath all of it sits the plain fact that your bank statements, with account numbers and daily balances, are now held by an unknown number of strangers with no obligation to you at all.
Why the industry has this problem
Backdooring exists because a funding file is a commodity with a price. Commissions on a funded deal run to thousands of dollars, a complete application with statements is the hardest part of the sale already done, and the merchant has no way to see where the file travels. High commission value, zero visibility, minimal consequences: the incentive math explains the behavior, the same way compensation structure explains most of what this industry does. We laid out that larger picture in how MCA brokers get paid.
It follows that the fix is not finding a shop that lacks the incentive; every shop has the incentive. The fix is choosing counterparties who constrain themselves in writing, and verifying instead of trusting.
The warning signs your file has already leaked
The classic tell is specificity: cold callers who know your requested amount, your monthly revenue or your bank. Generic spam knows your industry; a backdoored file knows your numbers. Other signs: offers arriving from funders your broker never named, texts referencing "your application" with companies you never applied to, and calls that begin days after you sent documents and surge again weeks later, when a declined or funded file gets resold.
If this is happening, act on two fronts. Demand from your broker, in writing, the complete list of everywhere your file was sent; the response, or the refusal, tells you what you need to know about them. Then tighten the target: tell callers plainly to remove you from their lists, never confirm or expand the details they hold, and route any monitoring alerts on your business credit so new inquiries and UCC filings do not surprise you.
What a clean submission process looks like
You cannot supervise anyone's inbox, but you can insist on a process with accountability built in, and honest shops will not resist this, because it is how they already work. A clean process has three properties: you know the names of the funders being approached before submission happens, the number of funders is small and justified rather than a blast to everyone with an email address, and confidentiality is a written commitment rather than a vibe.
For what it is worth as a benchmark rather than a boast: when we take a file, it goes to funding providers being considered for that specific request, and you can ask us where it went and get a straight answer. That is not heroism. It is the minimum, and you should demand the minimum from anyone who holds your statements, including us.
Preparation reduces exposure too. The fewer times you send a full document package, the fewer copies exist, so know what a complete file looks like before you send anything; the document readiness checker shows you exactly what a given funding type requires so one organized submission can do the work of four scattered ones.
How to protect your application from backdooring
Ask where the file goes before you send it
Before submitting anything, ask the broker to name the funders they intend to approach and roughly how many. You are not asking for trade secrets; you are asking where your bank statements will physically be. Refusal to answer is your answer.
Get the distribution commitment in writing
One email is enough: "Please confirm my application and documents will be sent only to funders you name to me, and to no other party without my consent." A legitimate shop confirms without friction. Keep the reply.
Work one channel at a time
Sending your file to several brokers at once multiplies copies and makes any later leak untraceable. Pick one channel, give it a defined window to produce offers, and move on cleanly if it fails, so you always know who held your file when.
Send documents deliberately
Submit through a portal rather than open email where one exists, and send exactly what is requested rather than a lifetime of statements. Prepare the package once, completely, using the document checklist, so you are not drip-feeding sensitive paper to a widening audience.
Log what you sent and when
Keep a dated note of every recipient, every document and every named funder. If strangers start calling in week two, your log tells you exactly which door the file went out of, which turns a vague suspicion into a specific accountable party.
React fast if the calls start
Demand the full submission list from your broker in writing, decline to confirm any detail with cold callers, and watch your business credit for inquiries and UCC filings you did not authorize. A leak you catch early is a nuisance; one you ignore shapes your next funding round.
Frequently asked questions
Is backdooring illegal?
It is not governed by one specific statute, which is part of why it thrives, but that does not make it consequence-free. Depending on the facts, misuse of your information can breach contract terms, confidentiality obligations or consumer protection and data laws. Practically, prevention through written commitments and a documented submission trail protects you far better than legal remedies after a leak.
How is a broker submitting my file to funders different from backdooring?
Consent and visibility. Submitting your file to funders in order to obtain offers is the service you hired; a legitimate broker can tell you which funders received it. Backdooring is distribution you never agreed to, usually to other brokers or lead buyers, for someone else's gain, and you typically learn about it from the cold calls rather than from the person you trusted.
Why am I getting funding calls weeks after I applied?
Late-arriving call waves often mean a file was resold after the fact: declined files and funded files both have resale value as leads, and batches change hands on their own schedule. Ask the broker who handled your application, in writing, for the complete list of everywhere your file was sent, and be much less generous with your documents in the next round.
Should I apply through multiple brokers at once to get more offers?
It is usually counterproductive. Multiple simultaneous channels mean more copies of your statements in more inboxes, untraceable leaks, and funders seeing the same file arrive from different directions, which reads as desperation rather than diligence. One accountable channel, a defined window, and a complete document package typically gets you real competing offers with a fraction of the exposure.