Third-Party Risk — FCPA Intermediary Risk & Distributor Red Flags

A Local Distributor in a High-Risk Market Wants a Percentage Paid to a Third Account and Mentions a Government Connection Casually. “That’s Just How Business Works Here.” Is It?

A real FCPA third-party risk scenario — with three decision options and the right answer.

Quick Answer

When a distributor in a high-risk market requests unusual payment terms, routing to a third account, and mentions connections to government officials — and attributes this to local business custom — does that create an FCPA and compliance risk that requires immediate escalation?

Yes — unambiguously. The combination of factors described — unusual payment routing, a third-account request, and a casual mention of government connections — is the signature pattern of a bribery facilitation arrangement under FCPA and UK Bribery Act enforcement actions. “That’s how business works here” is the most common rationalization for FCPA violations and is specifically identified in DOJ enforcement guidance as a red flag rather than a defense. Cultural custom is not a compliance defense under any anti-bribery framework. The moment these red flags appear together, the employee’s obligation is to stop, not to proceed.

The Situation

A regional business development manager at a multinational technology company is working to enter a new market in Southeast Asia. A trusted contact in the region — a former colleague — has introduced them to a local agent who claims to have strong relationships with both private sector companies and government procurement offices in the target country. The agent presents as professional and well-connected.

In early discussions about terms, the agent mentions that their standard arrangement involves 12% of deal value, with 4% paid to a separate consulting company “for government relations support.” When the business development manager asks about this structure, the agent says: “This is completely standard here — you need people who know how things work. This is how every foreign company that succeeds in this market operates.” The agent casually mentions that one of the consulting company’s directors previously served as a senior official in the ministry that oversees government procurement.

The market opportunity is significant. The business development manager’s annual targets depend heavily on this region. Their manager is excited about the opportunity.

What Should the Business Development Manager Do?

Choice AContinue the relationship. The agent was introduced by a trusted contact, the structure may reflect genuine market custom, and the market opportunity is too significant to abandon based on an arrangement that may be completely legitimate. Proceed with enhanced monitoring.

Choice BStop all discussions with the agent immediately and escalate to Legal and Compliance with a full written account of the conversation — the payment structure, the third account, the government relations description, and the former official connection. Do not continue negotiations until Compliance has reviewed and cleared the relationship.

Choice CAsk the agent to restructure the arrangement — a single consolidated payment rather than a split with a separate consulting company — and if they agree, proceed with the due diligence process. The restructured payment would eliminate the most visible red flag.

The Right Call

Choice B — Stop immediately and escalate to Legal and Compliance in writing.

Choice A proceeds with a relationship that exhibits the textbook pattern of an FCPA bribery channel — third-account payment routing, government official connections, and cultural normalization. “Enhanced monitoring” does not mitigate FCPA liability once the payment structure is established. Choice C is more dangerous than it appears: asking the agent to restructure the payment and then proceeding is evidence that the company was aware of the red flags, attempted a cosmetic fix, and proceeded anyway — which courts and the DOJ treat as willful blindness. The only defensible response when these red flags appear simultaneously is a complete stop and immediate escalation. The business opportunity is not a mitigating factor in the FCPA analysis.

Why This Is Harder Than It Looks

“That’s how business works here” is a compliance red flag — not a cultural explanation.

Cultural relativism is the most common rationalization for FCPA intermediary risk failures. It sounds reasonable because it acknowledges genuine differences in business practice across markets. But the FCPA, UK Bribery Act, and most anti-corruption frameworks explicitly reject local custom as a defense. “Everyone does it here” is not a compliance argument — it is a description of a market environment where bribery is normalized, which is exactly the environment where FCPA enforcement is most active. The DOJ has prosecuted organizations specifically for using cultural custom as justification for bypassing anti-bribery due diligence.

The combination of red flags in this scenario is the FCPA intermediary pattern — not a coincidence.

Third-account payment routing, a percentage split described as “government relations,” and a former government official connection are not individually suspicious elements that happen to occur together. They are the structural components of a bribery facilitation arrangement — a channel designed to route payments to government officials through an intermediary that provides legal distance from the payer. The DOJ’s FCPA Resource Guide specifically describes this pattern. An employee who has received compliance training should recognize it immediately.

The trusted introduction does not reduce the risk — it may increase it.

FCPA enforcement cases are full of arrangements introduced through trusted intermediaries. The social credibility provided by a personal introduction is exactly what makes this kind of arrangement feel safe to proceed with. A business development manager who would immediately escalate an approach from an unknown party may proceed with the same arrangement introduced by a former colleague — because the trust relationship filters the risk signal. Recognizing that the trusted introduction is not a substitute for due diligence is the key training moment in this scenario.


Frequently Asked Questions

What are the FCPA red flags that should trigger immediate escalation in a third-party relationship?

The DOJ’s FCPA Resource Guide identifies a consistent set of red flags: unusual payment structures including third-account routing, fees described as “government relations” or “facilitation,” connections to government officials or their family members, requests for cash payments or non-standard payment methods, vague descriptions of services to be provided, fees disproportionate to the services described, and operation in jurisdictions with high corruption risk ratings. The presence of multiple red flags simultaneously — as in this scenario — requires immediate escalation. Individual red flags warrant heightened due diligence. Multiple red flags together warrant a stop.

Is “local business custom” a defense to an FCPA violation?

No. The FCPA explicitly provides that local law permitting a payment is not a defense, and the DOJ has consistently rejected local custom arguments in enforcement actions. The UK Bribery Act similarly provides no local custom defense. The argument that “everyone operates this way here” describes a market environment — it does not create a legal exception to anti-bribery obligations. Organizations that rely on this rationalization to proceed with high-risk third-party arrangements typically face the strongest enforcement scrutiny because it suggests awareness of the risk and deliberate decision to proceed.

What should an employee do if their manager is enthusiastic about a business opportunity that has FCPA red flags?

Escalate to Legal or Compliance in writing — not through the manager who is commercially invested in the opportunity. The FCPA red flags identified in this scenario require Legal and Compliance assessment regardless of commercial enthusiasm. Document the specific red flags clearly. If the manager pushes back on the escalation, that pressure is itself a governance concern that should be included in the escalation note. The employee’s personal FCPA liability does not depend on what their manager wanted them to do.

How to Use This Scenario in Training

Recommended for business development, sales, and market entry teams operating in international markets — particularly employees working in FCPA high-risk jurisdictions. Also essential for managers who authorize third-party relationships in high-risk markets. The key recognition skill is identifying the combination of red flags as the FCPA intermediary pattern — not as isolated unusual requests that might be culturally normal.

For related scenarios covering FCPA anti-corruption compliance, see the Anti-Corruption and FCPA scenario cluster →

This scenario demonstrates the cultural relativism rationalization pattern from the Decision Readiness Engine™. Decision-ready employees recognize that “that’s how it works here” is not a compliance analysis — it is the rationalization that precedes the most serious FCPA violations in the enforcement record.

More Third-Party Risk & FCPA Scenarios

Anti-Corruption / FCPA

Browse all anti-corruption and FCPA compliance training scenarios.

Due Diligence Pressure

A senior leader is pushing to skip vendor due diligence. “We’ve worked with them for years.”

Full Cluster

Browse all third-party risk compliance training scenarios.

Want FCPA and Third-Party Risk Scenarios in Your Program?

Xcelus builds scenario-based anti-corruption and third-party risk training covering FCPA intermediary risk, distributor red flags, high-risk market due diligence, and the cultural rationalization patterns that precede the most serious enforcement actions.

View the Compliance Reinforcement Kit →
Contact Xcelus

© 2005–2026 Xcelus LLC. All rights reserved. Scenario content is original work protected by copyright. You may link freely — reproduction or adaptation without written permission is prohibited.