Reporting suspected corruption under the US False Claims Act

The US False Claims Act (FCA) is one of the most powerful tools for addressing fraud involving federal money. It can apply when a company or individual knowingly submits false claims for payment, makes false statements material to those claims, or improperly avoids an obligation to return government funds. In corruption-related matters, the statute may become relevant when bribery, kickbacks, conflicts of interest, or concealed misconduct affects a federal contract, grant, loan, healthcare reimbursement, or other government-funded program. Learn more about What The Foreign Corrupt Practices Act Means For Your Small Business Exporting To Asia D624.

Reporting suspected misconduct requires more than sending an accusation to a government agency. A credible report connects the alleged conduct to a specific legal or contractual obligation, identifies the people and entities involved, preserves reliable evidence, and avoids unsupported conclusions. The process must also protect employees from retaliation and prevent the organization from destroying evidence or interfering with a potential investigation.

The strongest response combines legal advice, internal controls, careful fact-finding, and appropriate communication with regulators. Companies operating internationally should also consider how anti-bribery laws, procurement rules, sanctions, data protection requirements, and local employment laws interact with the FCA.

Why the False Claims Act matters

The FCA is codified primarily at 31 U.S.C. §§ 3729–3733. It imposes liability on anyone who knowingly presents, or causes another person to present, a false or fraudulent claim for payment or approval by the United States. It may also cover false records used to support a claim, fraudulent avoidance of an obligation to pay the government, and certain kickback arrangements that result in claims being submitted to a federal program.

“Knowingly” does not necessarily require proof that a person had a specific intent to defraud. Actual knowledge, deliberate ignorance, or reckless disregard of the truth can be sufficient, although innocent mistakes and ordinary disagreements about interpretation generally do not meet the standard. The alleged falsehood must also be material, meaning it has a natural tendency to influence the government’s payment decision or is capable of doing so.

A private person, known as a relator, may bring a qui tam lawsuit on behalf of the United States. The complaint is normally filed under seal, giving the Department of Justice time to investigate and decide whether to intervene. The relator may receive a share of any recovery, subject to statutory rules and the quality of the information provided. Separate administrative reporting channels, such as an agency inspector general, may be appropriate when a matter does not clearly support a qui tam action or requires urgent attention.

Recognize corruption linked to a false claim

Corruption alone is not automatically an FCA violation. The key question is whether the corrupt conduct is connected to a claim for federal funds, a government payment decision, or a legal duty to repay money. For example, a bribe paid to win a federal contract may support FCA liability if the contractor falsely certified compliance with an anti-kickback rule or submitted invoices under a contract obtained through prohibited conduct.

Kickbacks in healthcare, defense procurement, infrastructure, education, and government-funded research can create similar exposure. A company may face risk when it pays an intermediary to influence an official, hides the relationship, falsely certifies compliance with procurement requirements, or bills the government for services that were not properly performed. Conduct involving foreign officials may also raise Foreign Corrupt Practices Act concerns, particularly where a US issuer, domestic concern, or person acting in US territory is involved.

For companies exporting or operating through distributors in Asia, practical anti-bribery controls should be reviewed alongside FCA exposure. The guidance on FCPA risks for exporters can help frame questions about third-party commissions, government touchpoints, books and records, and due diligence. The same facts may create parallel risks under contract law, procurement regulations, tax rules, and local criminal statutes.

Stabilize the facts and preserve evidence

Once credible allegations arise, the company should issue a focused legal hold covering emails, messaging applications, accounting records, contracts, bid materials, expense reports, invoices, approval logs, travel records, and relevant system data. The hold should identify custodians, explain what must be retained, suspend routine deletion where appropriate, and be refreshed as the investigation develops. Preservation should include personal devices and cloud platforms used for business, subject to applicable privacy and employment requirements.

An initial assessment should establish what happened, when it occurred, who was involved, which government program or contract was affected, and whether payment was made or requested. Investigators should distinguish direct evidence from hearsay and document the source, date, and reliability of each important fact. They should avoid altering original files and maintain a clear chain of custody for collected material.

An internal review must be independent enough to be credible. The company should define the scope, appoint appropriate investigators, and decide whether outside counsel, forensic accountants, translators, or technical specialists are needed. A structured internal fraud investigation guide can support a disciplined process, particularly when allegations involve senior personnel or multiple jurisdictions.

Choose the right reporting channel

The appropriate channel depends on the facts, urgency, reporting person, and relationship to the federal government. An employee may report through an ethics hotline, compliance officer, audit committee, agency inspector general, Department of Justice attorney, or private counsel. A relator considering a qui tam filing should obtain advice from an attorney experienced in FCA litigation before disclosing details broadly or filing a complaint.

Internal reporting may allow a company to stop improper payments, protect evidence, assess potential self-disclosure obligations, and cooperate with the relevant agency. It is not a substitute for independent legal advice when senior management is implicated, the organization has a conflict of interest, or there is a risk that evidence will be concealed. The reporting employee should receive a clear explanation of how the matter will be handled and who will have access to the information.

Government contractors should review the Federal Acquisition Regulation, agency-specific clauses, contract certifications, and mandatory disclosure rules. Some contracts require prompt disclosure to the agency’s inspector general and contracting officer when the company has credible evidence of certain violations. Healthcare providers, grant recipients, and defense companies may face different notice requirements. Missing a contractual deadline can create additional exposure even if the original misconduct is later corrected.

Prepare a credible disclosure

A useful report is factual, organized, and specific. It should identify the suspected scheme, the relevant federal program, the claims or invoices affected, the time period, the people and entities involved, and the reason the conduct may have influenced government payment. Where possible, it should quantify the affected amounts without presenting estimates as established facts.

The report should explain the connection between the alleged corruption and the false claim. That connection might involve a kickback-funded subcontract, a false compliance certification, an undisclosed conflict of interest, inflated invoices, payment for incomplete work, or a failure to return an overpayment. Merely stating that an employee paid a bribe is less useful than showing how the payment affected eligibility, contract award, pricing, performance, or reimbursement.

Supporting documents should be indexed and described rather than dumped into an unstructured file. A chronology, organizational chart, transaction map, list of witnesses, and schedule of relevant claims can help investigators understand the matter quickly. Sensitive personal data, privileged communications, trade secrets, and information belonging to other parties should be handled through a controlled disclosure process.

Counsel should assess whether a voluntary disclosure is appropriate, whether the organization has an obligation to notify a contracting authority, and whether disclosure to one regulator could trigger parallel inquiries. The company should avoid making admissions before the facts and legal theories have been reviewed, while also avoiding language that minimizes known misconduct or implies that evidence has been withheld.

Protect people and manage retaliation

The FCA contains anti-retaliation protections for employees, contractors, and agents who engage in protected activity, such as investigating, reporting, or helping pursue suspected fraud. Retaliation can include termination, demotion, threats, harassment, reduction in responsibilities, unfavorable scheduling, or other adverse treatment connected to the person’s protected conduct. Similar protections may arise under state whistleblower laws, sector-specific statutes, and employment agreements.

Managers should be instructed not to question a reporter aggressively, search for pretexts to discipline them, or discuss the allegations with people who do not need to know. Employment decisions involving a reporter should receive independent review, with contemporaneous documentation showing legitimate business reasons. Confidentiality should be respected, but the organization should not promise absolute secrecy where disclosure is legally required or necessary to investigate.

A company should also protect the integrity of the investigation from the opposite risk: knowingly false allegations or deliberate manipulation of evidence. The appropriate response is a fair, documented assessment of credibility and facts, not retaliation or intimidation. Training should explain reporting channels, non-retaliation expectations, conflicts of interest, and the difference between good-faith concerns and knowingly fabricated claims.

Apply practical safeguards before and after a report

Effective FCA compliance depends on routine controls that make corruption and billing irregularities easier to detect. Due diligence on agents, distributors, consultants, subcontractors, and joint venture partners should be proportionate to risk and refreshed when ownership, payment terms, geography, or government interaction changes. Contracts should include audit rights, accurate-records obligations, anti-kickback language, training requirements, and termination provisions.

Finance and compliance teams should reconcile invoices against contract deliverables, investigate unusual discounts or commissions, and monitor payments to intermediaries. Certifications should be reviewed by people with enough knowledge to support them. Training should use realistic examples involving charitable contributions, gifts, travel, hiring requests, facilitation payments, and pressure from public officials. Guidance on official donation requests is especially relevant where charitable giving may disguise an improper inducement.

Practical safeguards include:

• Maintain a confidential reporting channel with multilingual access and documented escalation rules.
• Map federal funding, contract certifications, billing processes, and responsible control owners.
• Require enhanced review for third-party payments, success fees, cash requests, and politically connected intermediaries.
• Test anti-retaliation controls through periodic audits of discipline, promotion, and termination decisions.
• Record investigation steps, evidence decisions, remedial actions, and communications with regulators.

Build a defensible response program

After a report, the company should decide whether to suspend payments, remove conflicted personnel from the investigation, enhance transaction monitoring, or restrict a third party’s access to systems and government work. Corrective action may include repayment, contract amendments, employee discipline, third-party termination, control redesign, or additional training. Remediation should address both the immediate incident and the conditions that allowed it to occur.

The board or audit committee should receive appropriately filtered updates on significant matters. Reports should explain legal and financial exposure, potential government interest, operational impact, and the status of preservation and remediation. Directors should receive enough information to exercise oversight without compromising privilege or investigative independence.

A mature compliance program treats reporting as a source of risk intelligence rather than an isolated event. Trends in hotline allegations, rejected invoices, unusual commissions, government-facing gifts, and repeated control exceptions can reveal broader weaknesses. Reviewing those patterns across countries and business units helps companies prioritize due diligence, training, monitoring, and audit resources.

When suspected corruption touches federal funds, speed and discipline matter. Establish a reporting pathway before an allegation arises, train employees to recognize the link between misconduct and government claims, preserve evidence immediately, and obtain specialized advice when a qui tam action or mandatory disclosure may be involved. Companies that respond transparently and methodically are better positioned to protect public funds, support credible investigations, and reduce the risk that a preventable control failure becomes a larger enforcement matter.