Anti-Bribery Law: The FCPA and UK Bribery Act

Anti-Bribery Statutes
U.S. statute	Foreign Corrupt Practices Act, 1977
U.S. accounting hook	15 U.S.C. §78m(b) — books, records & internal controls
UK statute	Bribery Act 2010
UK liability model	Section 7 — strict corporate liability
Sole UK defense	"Adequate procedures"
Notable penalties	Siemens $800M (2008); Alstom $772M (2014)
Related	AML Statutory Framework, Asset Tracing, Anti-Corruption OSINT

Anti-bribery law is the body of statute that criminalizes the payment or receipt of bribes to secure business advantage, with two regimes dominating international enforcement: the United States' Foreign Corrupt Practices Act (FCPA, 1977) and the United Kingdom's Bribery Act 2010. The two statutes take different routes to the same end. The FCPA pairs a narrow anti-bribery prohibition with a broad, independently enforceable requirement that public companies keep accurate books and records and maintain adequate internal accounting controls — a provision that has become the primary vehicle for prosecuting bribery concealed through falsified accounts. The Bribery Act imposes strict corporate criminal liability on any commercial organization that fails to prevent bribery by an associated person, leaving "adequate procedures" as the only statutory defense. Both regimes, in different ways, force a forensic accountant or OSINT investigator to trace payments through third-party intermediaries and shell-company structures, because that is precisely where the bribe is hidden.^[1]

1 The FCPA: two provisions, one statute

The Foreign Corrupt Practices Act was enacted in 1977 in the aftermath of Watergate-era investigations that uncovered widespread corporate slush funds used to bribe foreign officials, and it is codified at 15 U.S.C. §§78dd-1 et seq.^[2] The statute is best understood as two distinct legal instruments bolted together. The first is the anti-bribery provision, which prohibits U.S. persons, issuers, and certain foreign actors from corruptly offering, promising, or paying anything of value to a foreign official to obtain or retain business. The second, and for forensic-accounting purposes the more consequential, is the accounting provision at 15 U.S.C. §78m(b), added to the statute alongside the anti-bribery language and enforced primarily by the U.S. Securities and Exchange Commission rather than the Department of Justice.

This dual structure matters because the two provisions have different reach and different evidentiary demands. The anti-bribery provision requires proof of a corrupt intent to influence a foreign official — a state of mind that can be difficult to establish directly and is usually inferred from circumstantial evidence: the size and timing of a payment relative to a contract award, the involvement of an unexplained intermediary, or communications that thinly veil the purpose of a transaction. The accounting provision requires no such proof of corrupt intent at all. It asks a narrower, more mechanical question: did the company's books accurately reflect what actually happened, and did its internal controls provide reasonable assurance that transactions were recorded properly? Because that question can be answered from the ledger itself, the accounting provision has become the government's preferred charge in cases where bribery is suspected but difficult to prove beyond doubt, or where a settlement is negotiated without an admission of corrupt intent.

2 The accounting provisions in detail

Section 78m(b) imposes two related obligations on any company that registers securities with the SEC or is required to file reports under the Securities Exchange Act of 1934 (an "issuer"), regardless of whether the underlying conduct crosses a border at all:

Obligation	What it requires	Why it matters for bribery concealment
Books-and-records requirement	Make and keep books, records, and accounts that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the issuer's assets	A bribe is almost never recorded as a bribe; it is disguised as a "consulting fee," "commission," "marketing expense," or "facilitation payment" — the false label itself is the violation
Internal-controls requirement	Devise and maintain a system of internal accounting controls sufficient to provide reasonable assurance that transactions are executed and recorded as authorized, and that access to assets is permitted only in accordance with management's authorization	Weak or deliberately unenforced controls — no due diligence on third-party agents, no cap on discretionary payments, no review of intermediary invoices — are what allow disguised bribes to be recorded and paid in the first place

A critical feature of the accounting provisions is that they can be violated — and have repeatedly been charged — without any accompanying anti-bribery charge. A company can settle accounting-provision liability by admitting its books mischaracterized payments and its controls failed to prevent or detect the mischaracterization, without the government having to prove, or the company having to admit, that a specific payment was a corrupt bribe to a specific official. This is a significant strategic reality in FCPA enforcement: the accounting provisions give the SEC a lower evidentiary bar and give companies a path to resolution that avoids the reputational and collateral consequences of an anti-bribery admission. For a forensic accountant, it also reframes the investigative task — the question is not only "was a bribe paid?" but "does the recorded description of this transaction match what actually happened, and did the control environment allow that mismatch to occur?" That framing connects directly to the internal-controls literature discussed under the fraud triangle and to the broader discipline of forensic accounting, where testing the reliability of recorded transactions against underlying reality is the core method regardless of the offense being investigated.

3 Siemens and Alstom: the accounting hook in practice

Two of the largest FCPA resolutions in history illustrate how the accounting provisions operate at scale, and both involved bribery schemes so extensive that off-book concealment became an institutionalized business practice rather than an isolated lapse.

Siemens AG settled FCPA and related charges in December 2008 for approximately $800 million in combined U.S. penalties — at the time the largest FCPA settlement ever — on top of a further roughly $800 million paid to German authorities, for a bribery scheme that U.S. and German investigators found had operated across dozens of countries over a period of years, funded by billions of dollars routed through slush funds, off-book accounts, and consulting arrangements with no genuine business purpose. The scale of the scheme meant that mischaracterized payments and inadequate controls were not incidental to the case; they were the mechanism through which the bribery was funded and concealed, which is why the accounting provisions of the FCPA sat at the center of the resolution alongside the anti-bribery charges.

Alstom SA, the French power-and-transport conglomerate, pleaded guilty and settled FCPA charges in December 2014 for $772 million — the largest criminal fine of its kind by a foreign company at the time — over a bribery scheme spanning multiple countries in which the company used consultants and intermediaries to funnel bribes to government officials to win power, grid, and transportation contracts. As with Siemens, the payments to intermediaries were recorded on Alstom's books as legitimate consulting or agency fees, and the case turned in significant part on establishing that those descriptions were false and that the company's internal controls did not catch, and in some tellings actively facilitated, the mischaracterization.

Both cases share a structural lesson: penalties of this magnitude are not simply the price of bribery itself but reflect years of accumulated accounting-provision exposure — every mischaracterized invoice and every control failure is, in principle, its own instance of non-compliance, and prosecutors and regulators have consistently used that cumulative exposure as leverage in negotiating record-setting settlements.

4 The UK Bribery Act 2010

The Bribery Act 2010 came into force in the United Kingdom in July 2011 and is frequently described as a stricter and more far-reaching anti-corruption statute than the FCPA. It creates four principal offenses: bribing another person (Section 1), being bribed (Section 2), bribing a foreign public official (Section 6), and — the provision of greatest relevance to corporate compliance and forensic investigation — the corporate offense of failure of a commercial organization to prevent bribery (Section 7).

Two features distinguish the Bribery Act from the FCPA. First, the Act contains no exception for "facilitation payments" — small payments to expedite routine government action, which occupy a narrow but real carve-out under the FCPA. Under the Bribery Act, a facilitation payment is simply a bribe. Second, the Act reaches private-sector, commercial bribery as well as bribery of public officials, whereas the FCPA's anti-bribery provisions are limited to payments to foreign government officials. Both features tend to widen the population of transactions a compliance or investigative review must examine.

5 Section 7 and the adequate-procedures defense

Section 7 is the Bribery Act's most consequential innovation for corporate liability. It makes a "relevant commercial organization" — broadly, any UK company or partnership, and any foreign company that carries on business or part of a business in the UK — criminally liable if a person "associated with" the organization (an employee, agent, subsidiary, or other party performing services for or on the organization's behalf) bribes another person intending to obtain or retain business or a business advantage for the organization.

The offense is strict liability in the sense that the organization need not have known about, authorized, or intended the bribery; the prosecution does not have to prove corporate fault or knowledge at all, only that an associated person committed bribery for the organization's benefit. This is a materially lower bar than the FCPA's anti-bribery provisions, which generally require proof that the company itself, through its officers or with corporate knowledge, engaged in or authorized the corrupt conduct. Under Section 7, a single rogue agent's bribe, paid without any executive's knowledge, can expose the entire organization to criminal liability.

Against that strict standard, Parliament provided exactly one statutory defense: the organization can avoid conviction if it proves it had "adequate procedures" in place designed to prevent persons associated with it from engaging in bribery. The UK Ministry of Justice's statutory guidance on adequate procedures sets out six principles commonly cited in compliance practice: proportionate procedures, top-level commitment, risk assessment, due diligence on associated persons, communication and training, and monitoring and review. Because the defense places the burden on the organization to prove its procedures were adequate, Section 7 functions less like a traditional criminal offense and more like a compliance-audit standard backed by criminal sanction — an organization is, in effect, required to be able to demonstrate a documented, risk-based anti-bribery compliance program at the time an offense is alleged, not construct one afterward.

6 Why these statutes require tracing intermediaries and shells

Both statutes converge on the same investigative reality: bribery is rarely paid directly from a company to an official. It is routed through third-party intermediaries — sales agents, consultants, distributors, joint-venture partners — and frequently through shell-company structures that exist to receive a payment, obscure its ultimate destination, and generate a paper trail that superficially resembles a legitimate commercial transaction. This is not incidental to bribery schemes; it is the mechanism that makes the FCPA's accounting-provision violation and the Bribery Act's Section 7 exposure possible in the first place, because a direct, undisguised payment from a company to a foreign official would be trivially detectable and would leave no ambiguity for a mischaracterized "consulting fee" to exploit.

For a forensic accountant or investigator, this means the anti-bribery statutes cannot be enforced, and cannot be investigated, by reading the anti-bribery clause in isolation. The practical work is asset tracing applied to the corruption context: identifying intermediaries who received payments disproportionate to any plausible legitimate service, testing whether an entity has the substance of a real business (employees, premises, an arm's-length pricing history) or is a shell with none of these, and following the funds an intermediary received to see whether they were passed on, in whole or in part, to an official or the official's associates. This is precisely the beneficial-ownership and shell-company detection work described in Asset Tracing, and it is reinforced from the open-source side by the techniques described in Anti-Corruption OSINT — watchlist and adverse-media screening of intermediaries, and the observation that officials and their relatives frequently display unexplained wealth publicly, which can corroborate a paper trail that a shell structure was built to obscure. Because both the FCPA's accounting provisions and the Bribery Act's Section 7 liability turn on documentary and control evidence rather than solely on proof of a corrupt handshake, the investigator's product in an anti-bribery matter looks very much like a standard forensic accounting engagement: a link-by-link, document-supported narrative connecting a recorded payment to its true economic substance.

7 FCPA and Bribery Act compared

Feature	FCPA (US, 1977)	Bribery Act (UK, 2010)
Core anti-bribery target	Foreign government officials	Any person; separate offense for foreign public officials
Private-sector (commercial) bribery	Not covered by anti-bribery provisions	Covered (Sections 1 & 2)
Facilitation payments	Narrow statutory exception	No exception — treated as bribery
Corporate liability standard	Generally requires corporate knowledge/authorization for anti-bribery liability	Strict liability for failure to prevent bribery by an associated person (Section 7)
Available defense	No equivalent standalone defense to anti-bribery liability	"Adequate procedures" — the sole statutory defense to Section 7
Distinct accounting exposure	Yes — 15 U.S.C. §78m(b), enforced by the SEC, no proof of corrupt intent required	No direct equivalent; UK companies with US issuer status may face both regimes
Primary enforcers	DOJ (anti-bribery, criminal) and SEC (accounting provisions, civil/administrative)	Serious Fraud Office and Crown Prosecution Service

The practical consequence of this comparison is that a multinational company can face parallel exposure under both regimes for the same underlying conduct — a UK-incorporated subsidiary's failure to prevent an agent's bribery can trigger Section 7 liability for the group, while the same mischaracterized payment on a US-listed parent's consolidated books can independently trigger FCPA accounting-provision liability, without either regulator needing to prove the other's elements.

8 See also

See also: AML Statutory Framework, Asset Tracing, Anti-Corruption OSINT, Forensic Accounting, Fraud Triangle.

References

1. Digital Forensics, Forensic Science Validity, and Standards: A Research Synthesis (internal research report), Part V §25.6, "Anti-Bribery Statutes: FCPA and UK Bribery Act."
2. Foreign Corrupt Practices Act of 1977, 15 U.S.C. §§78dd-1 et seq., 78m(b). U.S. Department of Justice. justice.gov/criminal/criminal-fraud/foreign-corrupt-practices-act
3. Bribery Act 2010, c. 23 (United Kingdom). legislation.gov.uk/ukpga/2010/23/contents