FCPA Meaning: Foreign Corrupt Practices Act Rules and Penalties

The Foreign Corrupt Practices Act, or FCPA, is a 1977 federal law that makes it illegal for U.S. companies, U.S. citizens, and certain foreign persons to bribe foreign government officials to win or keep business. It also requires publicly traded companies to keep accurate books and records and maintain internal accounting controls strong enough to catch improper payments. Congress passed it after investigations revealed that hundreds of American corporations had made questionable payments to foreign political figures, and the statute now reaches far beyond the obvious briefcase-of-cash scenario most people picture.

What the Law Prohibits

At its core, the FCPA bars using any channel of U.S. commerce to corruptly offer, pay, or promise anything of value to a foreign official in order to influence that official’s decisions or secure an improper business advantage.¹ The word “corruptly” carries most of the weight. It means the person making or authorizing the payment intends to get the official to misuse their position, or to steer a business outcome that would not have happened on the merits.

“Anything of value” is read broadly. Travel expenses, expensive gifts, charitable donations made at an official’s request, internships for an official’s relatives, and luxury event tickets have all triggered enforcement actions. The law also does not require a successful outcome. If a company offers a bribe and the deal collapses anyway, the offer alone is enough for a violation.²

The payment also has to be connected to a business purpose: obtaining or keeping business, or directing business to someone.¹ Courts have read this element expansively. It covers not just winning a specific contract, but also gaining regulatory approvals, tax benefits, or customs clearances that help a business operate in a foreign market.

Payments Through Intermediaries

A company cannot insulate itself by routing bribes through a consultant, agent, distributor, or joint venture partner. The statute prohibits payments to any third party “while knowing” that all or part of the money will end up with a foreign official, and it defines “knowing” to include awareness of a “high probability” that the payment will be passed along.¹ Deliberate ignorance is not a defense. If a company hires a local fixer who charges suspiciously high fees and has close ties to the awarding ministry, looking the other way will not prevent liability.

Who the FCPA Applies To

The law reaches three categories, and each is broader than most businesspeople expect.

Issuers. Any company with securities registered under Section 12 of the Securities Exchange Act, or that files reports under the Act. This sweeps in virtually every publicly traded company on U.S. stock exchanges, along with their officers, directors, employees, agents, and stockholders acting on their behalf.¹

Domestic concerns. Any U.S. citizen, national, or resident, and any business organized under U.S. law or with its principal place of business in the United States. This category captures private companies that never touch a stock exchange.³

Foreign persons acting in U.S. territory. Under 15 U.S.C. § 78dd-3, any person who is not an issuer or domestic concern can still be prosecuted if they take any act in furtherance of a corrupt payment while physically present in the United States or while using any means of U.S. interstate commerce.⁴

That third category is where enforcement gets aggressive. The DOJ and SEC have treated a single wire transfer routed through a U.S. bank, or an email passing through a U.S. server, as sufficient to establish jurisdiction over a foreign national. Non-U.S. companies that use the American financial system carry FCPA risk even when neither party to the bribe is American.

Who Counts as a Foreign Official

The FCPA defines “foreign official” to include any officer or employee of a foreign government or any of its departments, agencies, or instrumentalities, and anyone acting in an official capacity on a government’s behalf.¹ The definition also reaches officials of public international organizations designated by executive order, such as the United Nations and the World Bank.⁵

The word “instrumentality” catches people off guard. Employees of state-owned enterprises qualify as foreign officials even when those enterprises operate commercially. A mid-level purchasing manager at a nationalized oil company, a doctor at a government-run hospital, and an engineer at a state-controlled telecommunications firm all count. In countries where the government controls major portions of the economy, the universe of “foreign officials” is far larger than the diplomatic corps.

Family members of foreign officials are not explicitly covered by the statute, but enforcement actions have treated payments to a close relative as an indirect bribe when the purpose is to influence the official. Hiring an official’s child or paying for a spouse’s travel can trigger liability if prosecutors can show the benefit was designed to curry favor with the decision-maker.

Books, Records, and Internal Controls

The FCPA’s accounting provisions operate independently from the anti-bribery rules, and in some ways they are easier for prosecutors to use. Under 15 U.S.C. § 78m, every issuer must maintain books, records, and accounts that accurately reflect the company’s transactions in reasonable detail.⁶ The “reasonable detail” standard means a level of accuracy that would satisfy a prudent person managing their own affairs.

Companies must also maintain internal accounting controls strong enough to ensure that transactions happen only with proper authorization, that assets are accessed only by authorized personnel, and that recorded asset totals are checked periodically against actual assets.⁶ Controls have to be sufficient to catch unauthorized payments before they leave the building, not simply document them afterward.

A books-and-records violation does not require proof that anyone actually paid a bribe. If a company disguises a payment as a “consulting fee” in its ledger, or lacks controls that would have flagged an unauthorized wire transfer, the accounting violation stands on its own. The SEC brings many FCPA cases on accounting grounds alone when the bribery itself is harder to prove.

The Narrow Exception and Two Defenses

The statute contains one exception and two affirmative defenses that companies frequently misunderstand.

The exception covers “facilitating” or “expediting” payments made to speed up routine governmental actions that the official is already required to perform.¹ “Routine governmental action” includes things like processing visas and work permits, providing police protection or mail delivery, connecting utilities, and scheduling inspections tied to contract performance.³ The exception explicitly does not cover any decision about whether to award or continue business with a particular party. Paying a clerk $50 to process an already-approved permit faster falls on one side of the line; paying a contracting officer to select a bid falls on the other. Most compliance programs now tell employees to avoid facilitating payments entirely, because enforcement authorities have treated the exception skeptically and many foreign countries’ own anti-bribery laws recognize no such carve-out.

Two affirmative defenses are available after charges are filed. Both put the burden on the defendant to prove the defense applies. The local law defense requires showing that the payment was lawful under the written laws and regulations of the foreign official’s country. The payment has to be legal under actual written law, not merely tolerated by local custom or unenforced in practice. The reasonable and bona fide expenditure defense covers legitimate expenses like travel and lodging that are directly related to promoting products or services, or performing a contract with a foreign government. Flying an official to a factory tour and putting them in a reasonable hotel for the visit fits the defense. Flying them to a resort and handing them spending money does not.¹

Neither defense succeeds often. Few countries’ written laws explicitly permit bribing their own officials, and the bona fide expenditure defense requires showing both that the expense was reasonable and that it had a genuine business purpose unrelated to influencing official action.

Penalties

Penalties split based on whether the violation involves the anti-bribery provisions or the accounting provisions, and whether the defendant is an entity or an individual.

For anti-bribery violations, issuers face criminal fines up to $2,000,000 per violation. Individual officers, directors, employees, or agents of issuers face criminal fines up to $100,000 and up to five years in prison per violation.⁷ Domestic concerns and their officers face similar criminal exposure, with individual fines up to $250,000 under a separate penalty provision. The Alternative Fines Act also allows courts to impose fines of up to twice the gross gain the defendant obtained from the offense, which in large schemes pushes total fines far beyond the statutory caps.⁸

Willful violations of the accounting provisions carry heavier maximum penalties. Entities face criminal fines up to $25,000,000, and individuals face fines up to $5,000,000 and up to 20 years in prison.⁷ Companies convicted of FCPA violations are also typically required to disgorge any profits earned through the corrupt conduct, and combined totals of fines, disgorgement, and prejudgment interest in major cases regularly reach hundreds of millions of dollars.

The financial hits are not the only cost. A conviction or settlement can trigger suspension or debarment from federal government contracting, cross-debarment by multilateral development banks such as the World Bank, and the suspension or revocation of U.S. import and export licenses.⁹ For defense contractors, energy companies, and firms reliant on government business, debarment can be more damaging than the fine itself. Shareholder lawsuits, reputational harm, and the cost of independent compliance monitors imposed under settlement agreements pile on further.

Who Enforces the FCPA

Two federal agencies share enforcement. The Department of Justice handles all criminal prosecutions and can pursue issuers, domestic concerns, and foreign persons who fall under the statute’s reach. DOJ cases can lead to criminal fines, imprisonment, and deferred or non-prosecution agreements.² The DOJ’s FCPA unit sits within the Criminal Division’s Fraud Section and often coordinates with the FBI and foreign law enforcement.

The Securities and Exchange Commission handles civil enforcement, primarily against issuers and their personnel. The SEC can bring civil actions for violations of both the anti-bribery and the accounting provisions, seeking injunctions, civil monetary penalties, and disgorgement.² Because the SEC enforces the accounting provisions, a company can face civil action for sloppy recordkeeping even when the evidence falls short of proving a bribe. In 2024, the DOJ and SEC together brought 26 FCPA-related enforcement actions.

1
Office of the Law Revision Counsel. 15 USC 78dd-1 Prohibited Foreign Trade Practices by Issuers
2
U.S. Department of Justice. Foreign Corrupt Practices Act Unit
3
Office of the Law Revision Counsel. 15 USC 78dd-2 Prohibited Foreign Trade Practices by Domestic Concerns
4
Office of the Law Revision Counsel. 15 US Code 78dd-3 – Prohibited Foreign Trade Practices by Persons Other Than Issuers or Domestic Concerns
5
Office of the Law Revision Counsel. 15 US Code 78dd-2 – Prohibited Foreign Trade Practices by Domestic Concerns
6
Office of the Law Revision Counsel. 15 US Code 78m – Periodical and Other Reports – Section: Form of Report; Books, Records, and Internal Accounting; Directives
7
Office of the Law Revision Counsel. 15 USC 78ff – Penalties
8
Office of the Law Revision Counsel. 18 USC 3571 – Sentence of Fine
9
General Services Administration. Suspension, Debarment, and Agency Protests