Lesson 09 of 25
Bribery & Corruption: FCPA Foundations
5 min read · CFCS
Decode the FCPA's two halves, anti-bribery and books-and-records, the elements of a violation, the narrow facilitation exception, and why third parties create the real exposure.
Corruption, and why it's tested hard
- Abuse of entrusted power for private gain
- Bribery, kickbacks, conflicts of interest
- Corrupts markets and enables other crimes
- FCPA is the anchor statute
Corruption is the abuse of entrusted power for private gain, and it shows up as bribery, kickbacks, and conflicts of interest. The CFCS tests it heavily because corruption greases nearly every other financial crime: it buys the official who waves through a shipment, the banker who ignores a red flag, the auditor who signs off. Our anchor for this lecture is the Foreign Corrupt Practices Act, the United States statute that, for decades, set the global tone on foreign bribery.
Understand the FCPA well and you have a template for the rest of the world's anti-bribery laws. Keep the distinction between bribery and a kickback handy: a bribe is paid to influence a decision in advance, while a kickback returns part of an already-awarded contract to the insider who steered it. And note that corruption proceeds still have to be hidden, so the bribe-taker becomes a launderer, which is why anti-corruption and anti-money-laundering work are so tightly linked.
The FCPA's two halves
- Anti-bribery provisions (15 U.S.C. 78dd-1 et seq.)
- Books-and-records + internal-controls provisions (78m)
- Two ways to be liable, only one needs a bribe
- Applies broadly to issuers and U.S. persons
The FCPA has two distinct halves, and missing this is a classic exam trap. The first half is the anti-bribery provisions, codified at 15 U.S.
C. sections 78dd-1 and following, which prohibit corruptly offering anything of value to a foreign official to obtain or retain business. The second half is the accounting provisions, the books-and-records and internal-controls requirements at section 78m, which require accurate records and adequate controls.
Here's the key: you can violate the accounting provisions without any bribe ever being paid, simply by keeping false books or weak controls. So there are two independent roads to liability, and the exam will test both. The accounting provisions reach issuers, companies with securities registered in the United States, and many enforcement actions resolve on the books-and-records count even where the bribery proof is thinner, because false or vague entries that disguise a payment are easier to establish.
So when a scenario shows slush funds or mislabeled expenses with no clean paper trail, reach for the accounting half before you assume a bribe must be proven.
Elements of an anti-bribery violation
- A payment or offer of anything of value
- To a foreign official, corruptly
- To obtain or retain business / improper advantage
- 'Anything of value' is broad — gifts, jobs, travel
Let's break down an anti-bribery violation. You need an offer, promise, or payment of anything of value, and anything of value is read broadly: cash, sure, but also lavish gifts, travel, internships for an official's child, or charitable donations steered to benefit them. It must go to a foreign official, which itself is broad and includes employees of state-owned enterprises.
It must be done corruptly, with wrongful intent. And the purpose must be to obtain or retain business or secure an improper advantage. Notice that an offer counts; the bribe need not succeed or even be paid for liability to attach.
Two more boundaries the exam probes: the foreign official must hold a government or public-international-organization role, so pure commercial bribery between two private companies falls outside the FCPA's anti-bribery reach even though it may breach other laws. And the obtain-or-retain-business element is read expansively to include winning a tax ruling or a favorable regulatory decision, not merely landing a contract.
Exceptions and traps
- Narrow facilitation-payment exception (routine acts)
- Affirmative defenses: lawful under local law; bona fide expense
- Third parties and agents create exposure
- Willful blindness to a red flag is no defense
Now the nuances. The FCPA has a narrow exception for facilitation payments, small sums to expedite routine, non-discretionary government actions like processing a permit, but it's narrow, widely disfavored, and illegal under many other countries' laws, so most multinationals ban it outright. There are limited affirmative defenses, for payments lawful under the written local law, or genuine bona fide promotional expenses.
The biggest real-world exposure is third parties: agents, distributors, and consultants who pay bribes on a company's behalf. Hiring an intermediary while ignoring obvious red flags, then claiming you didn't know, is willful blindness, and it is not a defense. The red flags that trigger that doctrine are concrete: an agent who demands an unusually large commission, insists on payment to an offshore account in a third country, was specifically requested by the foreign official, or refuses to certify FCPA compliance.
The exam frequently casts the violation through an intermediary precisely because that is where most real cases arise, so scrutinize the consultant, not just the company's own employees.
Enforcement, controls, and recap
- DOJ (criminal) and SEC (civil) enforce the FCPA
- Defense = robust anti-corruption compliance program
- Third-party due diligence, gifts/hospitality controls
- Recap: two halves, elements, third-party risk
Enforcement is shared: the Department of Justice handles criminal cases and the Securities and Exchange Commission handles civil enforcement, and penalties run into the hundreds of millions. The practical defense is a real anti-corruption compliance program: risk-based third-party due diligence, clear gifts-and-hospitality limits, accurate books, and a way for people to report concerns. Regulators reward genuine programs and self-reporting, and punish paper ones.
So, recap: the FCPA has two halves, anti-bribery and accounting; an anti-bribery violation turns on a corrupt offer of anything of value to a foreign official; the facilitation exception is narrow; and third parties are where the danger lives. One practical anchor from the DOJ and SEC resource guide: regulators judge a program by whether it is genuinely risk-based and actually applied, not by how thick the policy binder is, and credit for voluntary self-disclosure and cooperation can dramatically reduce penalties. Next, we go global with the UK Bribery Act and the OECD.
Test yourself first.
Sources
- Foreign Corrupt Practices Act (15 U.S.C. 78dd-1, 78dd-2, 78dd-3
- books-and-records and internal-controls provisions 15 U.S.C. 78m)
- DOJ/SEC FCPA Resource Guide
- ACFCS CFCS 'Corruption Enforcement and Investigation'
Test your knowledge
A few CFCS questions on this material — pick an answer to see the explanation.
Q1. A non-U.S. bank with no U.S. office processes a dollar-denominated payment between two non-U.S. parties. How can OFAC still assert jurisdiction?
Q2. A bank discovers it processed 47 small wire payments to a sanctioned entity over 18 months due to a gap in its screening system. The bank voluntarily discloses to OFAC before OFAC initiates an inquiry. What effect does voluntary self-disclosure typically have?
Q3. An institution's sanctions-screening system generates 500 alerts per day but analysts can review only 200 meaningfully. The CISO proposes tightening the fuzzy-match threshold to reduce alerts. What is the primary risk of setting the threshold too tight?
Q4. A foreign financial institution refuses to enter into an FFI agreement with the IRS and does not comply with FATCA. What is the direct consequence for that institution?