Anti-Corruption Law: FCPA, Penalties, and Whistleblower Awards

Anti-corruption law in the United States runs on two parallel tracks: the Foreign Corrupt Practices Act, which criminalizes bribes to foreign government officials, and domestic statutes led by 18 U.S.C. 201, which criminalizes the corruption of federal public officials. A 2024 addition, the Foreign Extortion Prevention Act, now also reaches foreign officials who demand bribes. Penalties climb from fines in the tens of thousands to prison terms of up to 20 years, and civil fines in major cases regularly run into the hundreds of millions once disgorgement and gain-based multipliers are applied.

What the FCPA Prohibits

The FCPA, enacted in 1977, makes it illegal to pay or offer anything of value to a foreign government official to win business or gain an improper advantage.¹ “Anything of value” is broad. Cash is the obvious case, but gifts, travel, entertainment, charitable donations routed to an official’s preferred cause, and even a job offer for an official’s relative all count.

A company does not need to hand money directly to a foreign official to violate the statute. Funneling a payment through a consultant, agent, or joint-venture partner triggers liability if the company knows or has reason to know the money will reach a foreign official.² Most enforcement actions start there. Investigators look at whether an agent was requested by the foreign official, whether the agent is a relative or associate of the official, whether commissions are unusually large, whether services are vaguely described, and whether payment goes to offshore accounts. Companies that ignore those signs cannot claim ignorance later.

Who the Statute Reaches

The FCPA applies to three groups. “Issuers” are companies with securities registered on a U.S. stock exchange or that file reports with the SEC.² “Domestic concerns” are U.S. citizens, permanent residents, and businesses organized under U.S. law or with their principal place of business in the United States.³ A third category catches everyone else, including foreign nationals and foreign companies, when any act in furtherance of the corrupt payment happens on U.S. soil or uses U.S. mail or interstate commerce.⁴

That third bucket gives the law extraordinary reach. A foreign company that routes a single wire transfer through a U.S. bank in connection with a bribe can fall within U.S. jurisdiction, even if neither the payer nor the recipient ever set foot in the country.

Books, Records, and Internal Controls

The FCPA’s second pillar applies only to issuers and operates independently of the anti-bribery rules. Companies must keep books, records, and accounts that accurately and fairly reflect their transactions in reasonable detail, and maintain internal accounting controls sufficient to provide reasonable assurances that transactions occur only with management’s authorization and are properly recorded.⁵

These provisions have real teeth. Recording a bribe as a “consulting fee” or “commission” violates the books-and-records requirement even if prosecutors cannot prove the underlying payment was corrupt. Enforcement based solely on accounting failures is common, in part because the government does not need to prove corrupt intent toward a foreign official.

The Narrow Exception and the Two Defenses

The FCPA carves out one exception and provides two affirmative defenses. All three are narrower than they sound.

Small payments made to speed up routine, nondiscretionary government actions are exempt from the anti-bribery provisions. The statute limits “routine governmental action” to tasks such as processing permits and visas, providing police protection, connecting utilities, scheduling inspections, and delivering mail. The exception does not cover any decision about whether to award or continue business with a party.² Even payments that qualify must be accurately recorded, so the accounting rules still apply. Many companies avoid relying on this exception because the line between expediting and influencing is thin, and many foreign countries prohibit the payments under their own laws.

The first affirmative defense allows a defendant to show that the payment was lawful under the written laws and regulations of the foreign official’s country.² The written law has to permit the conduct, not merely fail to punish it, and few countries do. The second defense covers reasonable, bona fide expenditures like travel and lodging directly related to promoting products, demonstrating services, or performing a contract with a foreign government. The primary purpose of the trip must be business, and the company should pay vendors directly rather than handing cash to the official. The burden is on the company to prove the expenses were legitimate.

Foreign Officials Who Demand Bribes: FEPA

Until 2024, U.S. law only punished the supply side of foreign bribery. The Foreign Extortion Prevention Act, enacted in July 2024 and codified at 18 U.S.C. 1352, closed that gap. FEPA makes it a federal crime for a foreign official to demand, seek, or accept a bribe from an issuer, domestic concern, or other person covered by the FCPA, so long as the official uses U.S. mail or interstate commerce in connection with the demand. The penalty is up to 15 years in prison and a fine of up to $250,000 or three times the value of the bribe, whichever is greater.⁶

Bribery of Federal Officials Under 18 U.S.C. 201

The primary federal domestic bribery statute is 18 U.S.C. 201, which covers the corruption of federal public officials. “Public official” includes members of Congress, officers and employees of any federal agency or branch of government, anyone acting on behalf of the United States in an official capacity, and jurors.⁷ The definition also reaches anyone nominated, appointed, or officially informed they will be nominated for such a position.

Section 201 draws a critical line between two offenses. Bribery requires corrupt intent: offering something of value to influence a specific official act, induce a violation of duty, or commit fraud against the United States. The penalty is up to 15 years in prison and a fine of up to three times the monetary value of the bribe, plus possible disqualification from federal office.⁷

An illegal gratuity is a lesser offense. It involves giving or receiving something of value “for or because of” an official act, without the specific corrupt intent to influence the outcome. A reward after the fact, not a bribe before it. Gratuities carry up to two years in prison.⁷ The distinction matters enormously at sentencing, and proving the difference between “I gave this to influence your vote” and “I gave this because you voted my way” is often one of the hardest calls in a corruption case.

The Hobbs Act, the Travel Act, and State Law

Section 201 is not the only tool. The Hobbs Act, 18 U.S.C. 1951, criminalizes extortion, including obtaining property “under color of official right,” which reaches officials who leverage their position to extract payments.⁸ Unlike Section 201, the Hobbs Act is not limited to federal officials and has been used extensively against state and local corruption.

The Travel Act, 18 U.S.C. 1952, makes it a federal crime to use interstate commerce, including phone calls, emails, or wire transfers, to carry out activities that violate state bribery laws. That allows federal prosecutors to reach private-sector commercial bribery involving no government official at all, so long as the underlying conduct is illegal under state law and someone used interstate facilities to advance it. Every state also has its own anti-corruption statutes for state and local officials, with penalties and definitions varying by jurisdiction.

Criminal Penalties

Under the FCPA, an individual convicted of an anti-bribery violation faces up to five years in prison and a criminal fine of up to $100,000. A company faces up to $2,000,000. The statute prohibits companies from paying fines imposed on their employees, officers, or agents.⁹

Accounting violations carry steeper criminal penalties. An individual who willfully falsifies books and records or circumvents internal controls faces up to 20 years in prison and a fine of up to $5,000,000. A corporate entity faces up to $25,000,000.⁹ The gap is historical: accounting violations fall under the Securities Exchange Act’s general penalty provisions, which Congress has repeatedly increased.

The statutory maximums are often just a starting point. Under 18 U.S.C. 3571, a court can impose a fine of up to twice the gross gain the defendant derived from the offense or twice the gross loss it caused, whichever is greater.¹⁰ For a multinational that won a billion-dollar contract through bribery, that provision can push criminal fines into the hundreds of millions. It is the single biggest reason FCPA penalties have grown so dramatically.

Civil Enforcement by the SEC

The DOJ handles criminal prosecutions. The SEC pursues civil enforcement of both the anti-bribery and accounting provisions against issuers and their personnel, and the two agencies coordinate closely. Major FCPA cases often involve parallel criminal and civil proceedings.

The FCPA authorizes a civil penalty of up to $26,262 per violation, an inflation-adjusted figure, for anti-bribery offenses by issuers or their agents.¹¹ The SEC also brings civil actions under the broader Securities Exchange Act penalty framework, which allows significantly larger fines depending on severity and investor losses. Civil actions typically include disgorgement of all profits obtained through the corrupt scheme, which in major cases dwarfs the penalties themselves. The SEC can also seek injunctions barring individuals from serving as officers or directors of public companies, impose independent corporate monitors, and trigger debarment from federal contracting.

Compliance Programs and Voluntary Disclosure

The DOJ’s Corporate Enforcement Policy gives companies strong reasons to come forward. A company that voluntarily discloses misconduct, fully cooperates, and takes timely steps to fix the problem can earn a complete declination, meaning no criminal charges at all. The company still pays full disgorgement and restitution but avoids a criminal fine.¹² Companies that fall short of a full declination but cooperate and remediate can receive a non-prosecution agreement with a fine reduction of at least 50 percent off the low end of the sentencing guidelines range. Companies that do not self-disclose but later cooperate can still receive up to a 50 percent reduction.

To qualify as voluntary, a disclosure must be made in good faith before the government knows about the conduct, before any imminent threat of exposure, and within a reasonably prompt time after discovery. A disclosure made only after a news article or subpoena does not count.

When prosecutors evaluate a company’s compliance program, they focus on three questions: is the program well designed, is it adequately resourced and empowered, and does it work in practice?¹³ There is no rigid checklist. A well-designed program starts with a risk assessment tailored to the company’s operations, the countries where it does business, its use of third-party agents, its interactions with foreign governments, and its approach to gifts, travel, and charitable donations. Clear policies, training, reporting lines, and enforced discipline all matter. A program that exists only on paper, or one that senior management routinely ignores, earns no credit.

Whistleblower Awards

The SEC’s whistleblower program pays financial awards to individuals who provide original information leading to an enforcement action with more than $1,000,000 in sanctions. Awards range from 10 to 30 percent of what the SEC collects.¹⁴ Because FCPA settlements often involve tens or hundreds of millions in combined penalties and disgorgement, awards in corruption cases can be large. The information must be specific, timely, and credible. The program protects whistleblowers from retaliation, and tips can be submitted anonymously through an attorney.

The Five-Year Statute of Limitations

Both criminal and civil FCPA actions are subject to a five-year statute of limitations. Criminal cases fall under the general federal catch-all at 18 U.S.C. 3282; civil cases run under 28 U.S.C. 2462. Two things extend the government’s window. When prosecutors charge a conspiracy, the five-year clock does not begin until the last act in furtherance of the conspiracy, which can push the deadline out by years. And in criminal cases, the DOJ can ask a court to pause the clock while it seeks evidence located abroad under 18 U.S.C. 3292. For domestic bribery under 18 U.S.C. 201, the same five-year criminal statute of limitations applies. Because corruption schemes tend to span years and involve ongoing relationships, the limitations period rarely expires before prosecutors learn of the conduct; the more common practical concern is the time needed to build a provable case in a foreign jurisdiction where witnesses and documents are hard to reach.

1
U.S. Department of Justice. Foreign Corrupt Practices Act Unit
2
Office of the Law Revision Counsel. 15 U.S. Code 78dd-1 – Prohibited Foreign Trade Practices by Issuers
3
GovInfo. 15 U.S. Code 78dd-2 – Prohibited Foreign Trade Practices by Domestic Concerns
4
Office of the Law Revision Counsel. 15 U.S. Code 78dd-3 – Prohibited Foreign Trade Practices by Persons Other Than Issuers or Domestic Concerns
5
Office of the Law Revision Counsel. 15 U.S. Code 78m – Periodical and Other Reports
6
Office of the Law Revision Counsel. 18 U.S. Code 1352 – Demands by Foreign Officials for Bribes
7
Office of the Law Revision Counsel. 18 U.S. Code 201 – Bribery of Public Officials and Witnesses
8
Office of the Law Revision Counsel. 18 U.S. Code 1951 – Interference With Commerce by Threats or Violence
9
Office of the Law Revision Counsel. 15 U.S. Code 78ff – Penalties
10
Office of the Law Revision Counsel. 18 U.S. Code 3571 – Sentence of Fine
11
U.S. Securities and Exchange Commission. Inflation Adjustments to the Civil Monetary Penalties
12
U.S. Department of Justice. Department of Justice Releases First-Ever Corporate Enforcement Policy for All Criminal Cases
13
U.S. Department of Justice. Evaluation of Corporate Compliance Programs
14
U.S. Securities and Exchange Commission. Whistleblower Program