Government Contracting Fraud: Penalties, Reporting & Whistleblowers

Government contracting fraud is any scheme to obtain federal contract dollars through deception, and it exposes the people and companies involved to triple damages under the False Claims Act, per-claim civil penalties, criminal prosecution with prison time, and exclusion from future federal work. The conduct ranges from rigged bids and kickbacks to fake invoices, substituted materials, and lies about a company’s small-business status. The rules that govern it also give insiders a direct financial stake in reporting what they see.

What the Schemes Look Like

Bid rigging is a secret agreement among competitors about who will win a solicitation. Firms take turns as the designated winner, submit intentionally high cover bids to make the chosen offer look competitive, or sit out entirely. The government never sees a real market price.

Kickbacks are payments or gifts routed to a government official or a prime contractor in exchange for steering work to a particular vendor. Federal law prohibits providing, soliciting, or accepting a kickback tied to a government contract or subcontract.¹ They are often disguised as consulting fees moving through shell companies.

Product substitution is delivering inferior goods while certifying that they meet the contract’s specifications. A contractor building a bridge might install commercial-grade steel where a higher-strength grade was required, then forge the inspection paperwork. The cost is not only financial; substituted materials in safety-critical work create real risks and shorten the useful life of the finished project.

Overbilling means charging for hours nobody worked, tasks nobody performed, or materials nobody bought. A related tactic, cross-charging, shifts costs off a fixed-price contract onto a cost-plus contract where the government reimburses every expense, letting the company pocket the difference. Finding it requires forensic comparison of timecards and invoices across several contracts.

Status misrepresentation targets set-aside programs. The federal government reserves a portion of contracts for small businesses, service-disabled veteran-owned businesses, and other disadvantaged groups. Large firms sometimes stand up or acquire small-business fronts to capture those awards, diverting money from the companies the programs exist to help.

Country-of-origin fraud arises on GSA Schedule contracts, where products must originate in the United States or a designated country under the Trade Agreements Act. Some contractors certify compliance while sourcing from non-compliant countries.²

What the Government Has to Prove

A False Claims Act case turns on three elements: knowledge, falsity, and materiality.

Knowledge, or scienter, means the contractor acted knowing the claim was false or with reckless disregard for whether it was true. A clerical mistake or a good-faith misreading of a complicated rule does not qualify. Prosecutors typically build intent from internal emails, whistleblower testimony, and patterns of conduct.

Falsity is the concrete question of whether the claim was actually untrue: an invoice for goods that were never delivered, a certification that a product passed an inspection it failed, or a billing record listing hours nobody worked.

Materiality asks whether the false statement was the kind of thing that would naturally influence the government’s decision to pay. If the payment would have gone out either way, the case is weaker.³

Implied Certification

A contractor does not have to make an openly false statement to be liable. Under the implied certification theory, recognized by the Supreme Court in Universal Health Services, Inc. v. United States ex rel. Escobar (2016), the act of submitting a claim can itself imply compliance with the contract’s material requirements. Billing for work while quietly violating a safety regulation that would have affected the government’s willingness to pay can be a false claim, whether or not the contract labels that regulation as a payment condition. The controlling question is still materiality.

Civil Penalties Under the False Claims Act

Contractors who lose a False Claims Act case pay on two tracks. First, treble damages: three times the government’s actual loss. A contractor that overbilled by $1 million owes $3 million. Second, a separate per-claim penalty for every individual false claim submitted, set within a statutory range that is adjusted for inflation each year. In schemes involving hundreds of invoices, the per-claim penalties alone can exceed the value of the contract.³

The civil standard of proof is preponderance of the evidence: more likely than not, rather than beyond a reasonable doubt. That lower bar is what makes civil enforcement practical in cases where the evidence is strong but might not carry a criminal jury.

Criminal Penalties

When conduct is deliberate and large in scale, the Department of Justice can bring criminal charges. Prosecutors often stack counts from more than one statute.

The Major Fraud Act reaches schemes to defraud the United States on contracts, grants, or other federal assistance worth $1 million or more. A conviction carries up to 10 years in prison and a fine of up to $1 million. The fine ceiling rises to $5 million when the government’s gross loss or the defendant’s gross gain is $500,000 or more, or when the offense creates a risk of serious personal injury.⁴

The False Statements Act covers lying to federal investigators or submitting false documents during audits, and it applies broadly to any materially false statement or concealment within a matter under federal jurisdiction. The maximum sentence is five years.⁵ It is a frequent add-on charge when a contractor lies during the investigation of the underlying fraud.

The Anti-Kickback Act separately criminalizes providing, soliciting, or accepting a kickback in connection with a government contract or subcontract, with fines and imprisonment on top of civil recovery of the kickback itself.¹

Losing the Right to Bid

Debarment bars a company or individual from bidding on or receiving federal contracts for a fixed period. Under the Federal Acquisition Regulation, that period generally should not exceed three years, though drug-free workplace violations can stretch it to five.⁶ For a business that lives on federal work, three years off the eligible list can end the company.

Suspension is a temporary exclusion imposed while an investigation or legal proceeding is still going. It rests on adequate evidence that a cause for debarment may exist, a lower threshold than the preponderance standard that supports a final debarment.⁷ A suspended contractor cannot receive new awards while the case plays out.

How Long the Government Has to Sue

The False Claims Act statute of limitations runs on two tracks, and whichever falls later controls:

Six years from the date the fraud was committed, or
Three years from the date a responsible government official knew or should have known about it, capped at a hard outer limit of ten years from the violation.

The government gets whichever period gives it more time.⁸ A well-concealed scheme is not safe at year seven. The discovery track may still be live, up to the ten-year ceiling. The same deadlines apply to qui tam suits filed by whistleblowers.

Reporting Fraud as an Insider

Most contracting fraud reaches the government because someone on the inside reports it. Employees, subcontractors, and competitors can file suit on the government’s behalf under the qui tam provisions of the False Claims Act.⁹ The relator files under seal, and the complaint stays confidential while the Department of Justice investigates and decides whether to intervene.

If the government intervenes and the case succeeds, the whistleblower receives 15 to 25 percent of the recovery, depending on how much they contributed. If the government declines and the whistleblower pursues the case alone and wins, the share is 25 to 30 percent.⁹ On a $10 million recovery, that is $1.5 million to $3 million.

Retaliation Protections

Federal law prohibits retaliation against employees, contractors, and agents who report contracting fraud or take part in a False Claims Act case. Protected people who are fired, demoted, suspended, threatened, or harassed can recover:

Reinstatement with the seniority they would have accrued
Two times back pay, with interest
Special damages, litigation costs, and reasonable attorney’s fees

A retaliation claim must be filed within three years of the retaliatory act.⁹ Double back pay is a penalty on the employer, not just compensation for the worker.

The Public Disclosure Bar

A qui tam case can be dismissed if the same allegations were already publicly disclosed through a federal hearing, a congressional or Government Accountability Office report, or the news media. The government should not have to pay a bounty for information it already had. The exception is the “original source”: a relator who either voluntarily gave the information to the government before the public disclosure, or has knowledge that is independent of and materially adds to what was publicly disclosed and shared that knowledge with the government before filing suit.⁹

What Contractors Themselves Must Do

Federal contractors are not simply punished after the fact. They are required to prevent and report fraud on their own. Under the Federal Acquisition Regulation, a contractor with credible evidence that a principal, employee, agent, or subcontractor committed fraud, bribery, or a False Claims Act violation must disclose that evidence in writing to the agency’s Office of the Inspector General.¹⁰ Failing to disclose is an independent basis for suspension or debarment, and that obligation continues for three years after final payment on the contract.¹¹

Larger contractors also carry structural compliance duties. Within 30 days of award, the company must adopt a written code of business ethics and give it to every employee working on the contract. Within 90 days, it must stand up a compliance training program and an internal control system that includes an anonymous reporting channel, periodic audits, discipline for misconduct, and full cooperation with investigators.¹⁰ Small businesses and contracts for commercial products are exempt from the internal control requirement, but the mandatory disclosure duty still applies.

The rule creates a real choice for a company that discovers fraud in its own ranks. Self-report and pursue leniency, or stay quiet and risk debarment later if the conduct surfaces through another channel. Enforcement officials have treated voluntary disclosure as a mitigating factor in setting penalties and concealment as an aggravating one.

1
Office of the Law Revision Counsel. United States Code Title 41 Section 8702 – Prohibited Conduct
2
GSA Vendor Support Center. Trade Agreement Act (TAA) Compliance
3
Office of the Law Revision Counsel. United States Code Title 31 Section 3729 – False Claims
4
Office of the Law Revision Counsel. United States Code Title 18 Section 1031 – Major Fraud Against the United States
5
Office of the Law Revision Counsel. United States Code Title 18 Section 1001 – Statements or Entries Generally
6
Acquisition.GOV. FAR 9.406-4 Period of Debarment
7
eCFR. eCFR Section 180.605 – How Does Suspension Differ From Debarment
8
Office of the Law Revision Counsel. United States Code Title 31 Section 3731 – False Claims Procedure
9
Office of the Law Revision Counsel. United States Code Title 31 Section 3730 – Civil Actions for False Claims
10
eCFR. Code of Federal Regulations Title 48 Section 52.203-13 – Contractor Code of Business Ethics and Conduct
11
Acquisition.GOV. FAR 3.1003 Requirements