Insights · Anti-bribery

FCPA and Foreign Companies: Managing U.S. Anti-Bribery Risk in Cross-Border Business

A practical guide for foreign companies on FCPA exposure, foreign-official risk, third parties, books and records, investigations, remediation, and current DOJ enforcement priorities.

What foreign companies should understand about the FCPA

The Foreign Corrupt Practices Act is not only a concern for U.S.-headquartered multinationals. Foreign issuers, foreign subsidiaries, international joint ventures, executives, intermediaries, and companies that create a sufficient U.S. nexus can encounter FCPA risk when business development intersects with government decision-making. The practical question is therefore not simply whether a company is American. It is whether the transaction, parties, conduct, securities status, communications, payments, or use of U.S. channels create exposure under U.S. anti-bribery or accounting rules.

For an international company, FCPA risk usually appears in ordinary commercial activity: obtaining permits, dealing with customs, securing public-sector contracts, using local consultants, entering state-influenced sectors, reimbursing travel, hiring agents, making charitable contributions, or acquiring a business with weak controls. These are not automatically unlawful activities. The risk arises when something of value is offered, promised, authorized, or provided corruptly to influence an official act or obtain an improper business advantage, or when records and controls conceal or fail to detect improper payments.

Axon Point Advisory approaches the issue as a business-control problem as much as a legal one. A company needs to understand where government touchpoints exist, who is acting on its behalf, how payments are approved, what documentation exists, and whether management can detect warning signs before a transaction becomes an investigation.

The FCPA has two principal compliance dimensions

The anti-bribery provisions prohibit covered persons and entities from corruptly offering or providing things of value to foreign officials for an improper purpose. The accounting provisions, applicable to issuers, require accurate books and records and a system of internal accounting controls. For international businesses, the accounting side can be as important as the payment itself because misconduct is often hidden through vague invoices, inflated commissions, marketing expenses, consulting fees, petty cash, rebates, or off-book arrangements.

Companies should therefore avoid treating anti-bribery compliance as a policy document that sits apart from finance. The control environment should connect sales, procurement, treasury, expense reimbursement, onboarding, contract approval, and audit functions. If the compliance process does not influence how money actually moves, it is unlikely to detect sophisticated misconduct.

Foreign officials and state-linked counterparties require careful analysis

The term foreign official can extend beyond ministers and civil servants. Risk may arise through employees of state-owned or state-controlled entities, public hospitals, government universities, customs authorities, regulators, licensing bodies, public utilities, sovereign investment structures, and other institutions whose status may not be obvious from a commercial name. International companies should identify government ownership and control during counterparty diligence rather than waiting until a payment is questioned.

The Foreign Extortion Prevention Act adds another dimension by criminalizing certain demands or acceptance of bribes by foreign officials. From a compliance perspective, the important point is that a company should document and escalate solicitation or extortion demands rather than improvising a payment response through local personnel.

Third parties remain one of the highest-risk areas

Agents, distributors, consultants, introducers, customs brokers, lobbyists, and local business-development representatives can create significant anti-bribery exposure. A third party may have legitimate value, but vague services, unusually high commissions, requests for cash, offshore payment destinations, personal relationships with officials, lack of relevant experience, or resistance to compliance terms should trigger additional review.

A defensible third-party process generally includes risk-based diligence, beneficial-ownership review, conflict checks, documented business rationale, written scope, commercially reasonable compensation, anti-corruption representations, audit or information rights where appropriate, invoice review, and periodic monitoring. The depth should match the risk. A low-risk vendor does not require the same review as an intermediary paid to secure government approvals.

Joint ventures, acquisitions, and successor risk

Cross-border investments can inherit compliance problems. An investor entering a joint venture may have limited operational control but still face reputational, contractual, financing, or enforcement consequences if the venture relies on improper payments. An acquirer may discover that revenue was generated through conduct that the buyer would never have approved.

Anti-bribery diligence should therefore examine more than whether a target has an anti-corruption policy. Review should include government-facing revenue, use of intermediaries, payment channels, high-risk jurisdictions, unusual commissions, sponsorships, charitable contributions, gifts and travel, past allegations, whistleblower activity, audit findings, and the quality of financial controls. Where problems are identified, transaction documents and integration plans should address them directly.

What current DOJ policy means for companies

DOJ continues to emphasize voluntary self-disclosure, cooperation, remediation, individual accountability, and the effectiveness of corporate compliance programs. The department-wide Corporate Enforcement and Voluntary Self-Disclosure Policy issued in March 2026 makes the quality and timing of a company response particularly important when potential criminal conduct is identified. Companies should not assume that simply retaining counsel or issuing a litigation hold is a complete response. They need an organized factual assessment, preservation strategy, root-cause analysis, and remediation plan.

DOJ also issued FCPA enforcement guidelines in June 2025. International companies should expect enforcement decisions to consider the seriousness of the conduct, U.S. interests, impact on American companies and markets, national-security considerations, and whether the conduct involves sophisticated or systemic corruption. The practical lesson is not that FCPA risk has disappeared. It is that companies need a fact-specific assessment rather than relying on headlines about enforcement policy.

Building a practical anti-bribery control system

An effective program begins with a documented risk assessment. The company should map where it deals with governments, relies on intermediaries, operates in higher-risk sectors, obtains licenses, clears goods through customs, or uses discretionary marketing and consulting budgets. Controls should then be designed around those risks.

Core measures typically include management responsibility, written standards, third-party diligence, approval thresholds, payment controls, training, confidential reporting, investigation protocols, periodic testing, and remediation. Senior management should understand the program well enough to make decisions when a commercial opportunity conflicts with a compliance concern.

For smaller international companies, proportionality matters. A concise, actually used control framework is better than a multinational-style manual nobody follows. The objective is to create evidence that the company understood its risks and implemented reasonable controls around them.

When to conduct an internal review

A review may be appropriate when a payment description does not make sense, an intermediary refuses to provide ownership information, a government-connected consultant demands unusual compensation, employees bypass approval channels, or an audit reveals repeated documentation gaps. The review should be scoped to determine what happened, who knew, what records exist, whether the issue is isolated, and whether similar transactions occurred elsewhere.

Where potential legal exposure is significant, the company should coordinate with qualified legal counsel regarding privilege, reporting obligations, and government strategy. Axon Point Advisory can support factual development, document analysis, transaction reconstruction, compliance assessment, and remediation planning under an appropriate engagement structure.

How Axon Point Advisory Can Help

Axon Point Advisory assists companies, investors, boards, and professional advisers with cross-border risk assessments, factual investigations, counterparty and transaction due diligence, compliance-program design, remediation planning, and coordination of complex matters involving the United States, Armenia, and international markets. Where a matter requires legal advice, legal representation, or a formal legal opinion, that work should be handled under a separate engagement with appropriately licensed counsel.

Frequently Asked Questions

Can a non-U.S. company face FCPA risk?

Yes. Jurisdiction depends on the company, persons involved, issuer status, U.S. nexus, conduct, and other facts. Foreign entities should not assume they are outside U.S. enforcement solely because they are incorporated abroad.

Are payments to state-owned companies risky?

They can be. The status of the entity and the person receiving the benefit matters, and state ownership or control should be assessed during diligence.

Is using an agent safer than dealing with officials directly?

No. Third-party intermediaries can create liability and are a recurring source of anti-bribery risk.

Should every suspected issue be reported immediately to the government?

That is a legal and strategic decision requiring qualified counsel. Companies should first preserve evidence and obtain an organized factual understanding without delaying unnecessarily.

Selected official sources

  • DOJ/SEC FCPA Resource Guide, Second Edition: Official source
  • DOJ Corporate Enforcement and Voluntary Self-Disclosure Policy, March 2026: Official source
  • DOJ Select Publications - FCPA Enforcement Guidelines, June 2025: Official source

This article is provided for general informational and business-advisory purposes and does not constitute legal advice. Laws, regulations, sanctions, and enforcement policies change. Legal advice should be obtained from appropriately licensed counsel for a specific matter.

Discuss Regulatory Risk

Discuss U.S. Regulatory & Compliance Advisory

If this analysis addresses a problem your company, investment, or client is confronting, contact Axon Point Advisory to discuss the specific facts, jurisdictions, timing, and business objective.