Categories
Daily Compliance News

Daily Compliance News: August 3, 2026, The SkyNet Aware Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Is AI scheming against us, or is SkyNet now self-aware? (NYT)
  • New ESPN 30 for 30 pod reviews the corruption case of Ohtani’s translator. (ESPN)
  • Ex-Peru President released from prison. (BBC)
  • CapOne fired the Trump Organization for AML deficiencies. (Reuters)

To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out Tom’s latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on Amazon.com.

Categories
AI Today in 5

AI Today in 5: August 3, 2026 the Is Your AI Scheming Edition

Welcome to AI Today in 5, the newest edition to the Compliance Podcast Network. Each day, I will bring to you 5 stories about AI stories to start your day. Sit back, enjoy a cup of morning coffee and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership or general interest about AI.

  1. Is AI scheming against us or is SkyNet now self-aware.  (NYT)
  2. AI compliance starts in your browser. (EBR)
  3. The EU comes for the bots. (FT)
  4. AI is creating a 2-speed job market. (Bloomberg)
  5. AI adding new risk for AML compliance. (AmericanBanker)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game. You can purchase a copy of the book on Amazon.com. To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out my latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on Amazon.com

Categories
Trekking Through Compliance

Trekking Through Compliance: Episode 64 – Untangling the Unknown: Investigative Excellence from ‘The Tholian Web’”

If you ask any veteran compliance professional what separates the ordinary from the extraordinary, the answer is almost always the same: the ability to investigate under pressure. In a world of shifting facts, unseen dangers, and cross-functional confusion, true investigative skill is what keeps organizations ethical, transparent, and resilient. Few stories illustrate this as vividly as “The Tholian Web,” an iconic episode from Star Trek: The Original Series.

Lesson 1: Investigate With a Cool Head—Leadership Under Duress

Illustrated By: After Kirk’s sudden disappearance, Spock assumes command. Crew anxiety spikes, tempers flare, and Dr. McCoy challenges Spock’s decisions..

Compliance Lesson: In crises, whether a whistleblower allegation, data breach, or fraud discovery, panic is a natural response. The best investigators, like Spock, recognize that emotional decision-making clouds judgment. They follow procedure, remain analytical, and never let pressure override the investigative process.

Lesson 2: Document Everything—The Importance of the Record

Illustrated By: Early in the investigation, Spock reviews and references Captain Kirk’s standing orders and last log entries. He later records his log, explicitly noting the crew’s condition, the timeline, and his rationale for each major decision.

Compliance Lesson: Thorough documentation is the lifeblood of effective investigations. Records create an objective narrative, protect the organization, and provide transparency for auditors, regulators, or stakeholders. If Spock had not documented his actions, later review, internal or external, would have been impossible.

Lesson 3: Test Hypotheses—Don’t Jump to Conclusions

Illustrated By: McCoy believes the interdimensional “space sickness” is a kind of infection, while Spock hypothesizes it is a function of spatial instability. Rather than making snap judgments, both test their theories with scientific rigor, running medical scans, experiments, and simulations until they converge on the facts.

Compliance Lesson: Good investigators approach every matter as a hypothesis to be tested and not a foregone conclusion. By seeking corroborating (or conflicting) evidence, compliance professionals ensure they arrive at the truth, not just a convenient story.

Lesson 4: Manage External Interference—Defend the Integrity of the Investigation

Illustrated By: The Tholians appear and begin imposing their agenda, demanding that the Enterprise leave the area. Under threat, Spock must weigh the crew’s safety against the risk of abandoning the investigation and Kirk. He stands firm, communicating clearly with the Tholians but refusing to let external pressure dictate internal process.

Compliance Lesson: Legal, business, or even cultural pressures can tempt organizations to curtail, rush, or steer investigations for expediency or self-protection. The role of compliance is to defend the integrity of the process, ensuring objectivity, completeness, and independence even when it’s inconvenient.

Lesson 5: Foster Teamwork and Resilience—No One Investigates Alone

Illustrated By: Tension between Spock and McCoy is palpable, but when faced with Kirk’s absence and the ship’s peril, they collaborate—combining scientific and medical expertise, pooling resources, and supporting one another.

Compliance Lesson: The most effective compliance investigations harness the diverse skills and perspectives of a multidisciplinary team. Unity, support, and open communication are force multipliers in a web of uncertainty.

Final ComplianceLog Reflections

The Tholian Web” is more than a science fiction adventure. It is a case study in investigative excellence under extraordinary pressure. The crew’s ability to stick to the process, document facts, test hypotheses, defend their mission against outside interference, and come together as a team mirrors the best practices in modern compliance investigations.

Resources:

⁠⁠Excruciatingly Detailed Plot Summary by Eric W. Weisstein⁠⁠

⁠⁠MissionLogPodcast.com⁠⁠

⁠⁠Memory Alpha

Timothy is an AI generated voice

Categories
FCPA Compliance Report

FCPA Compliance Report – Matt Ellis Wrap-Up from Cartels, FTO Risk, and Corporate Compliance Conference

In this episode, Tom Fox welcomes back Matt Ellis of Miller & Chevalier to recap ACI’s inaugural two-day Cartel Conference in Washington, DC, highlighting an unusually collaborative, high-energy atmosphere around emerging cartel/TCO/FTO compliance risks in Latin America. They discuss DOJ’s Scoular FCPA action as illustrating the long tail of enforcement and a high bar for managing cartel-related and national security risks, while noting the DPA’s remedial steps focus more on traditional anti-corruption controls than TCO/FTO-specific guidance. Government participants emphasized a “whole of government” approach, voluntary disclosure, and potential public-private engagement (including embassy attachés and Treasury) in high-risk scenarios. Key themes included narrow duress defenses, complex “imposter” risks, evolving due diligence beyond traditional screening using data/anomaly detection and local intelligence, and the need to integrate compliance across AML, sanctions, security, and supply chain given severe reputational and business consequences of terrorist or cartel support.

Key Highlights

  • Conference Vibe and Energy
  • Scoular FCPA Case Takeaways
  • When to Engage Government
  • Duress Defense and Safety Payments
  • Cartel Focused Due Diligence
  • AML Lessons for Banks
  • Breaking Silos in Compliance
  • Parallels to Early FCPA Era
  • National Security Stakes

Resources

ACI National FCPA and Global Anti-Corruption Conference, December 10-11 at the Gaylor National Resort

Matt Ellis on LinkedIn

 

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out my latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on Amazon.com

Categories
Blog

Investigative Integrity in a Web of Uncertainty: Lessons from “The Tholian Web”

If you ask any veteran compliance professional what separates the ordinary from the extraordinary, the answer is almost always the same: the ability to investigate under pressure. In a world of shifting facts, unseen dangers, and cross-functional confusion, actual investigative skill is what keeps organizations ethical, transparent, and resilient. Few stories illustrate this as vividly as “The Tholian Web,” an iconic episode from Star Trek: The Original Series.

Set against the backdrop of interdimensional crisis and escalating hostilities, “The Tholian Web” tests the Enterprise crew’s resourcefulness, resolve, and unity. As compliance professionals, we can draw rich lessons from how Captain Spock, Dr. McCoy, and their team navigate uncertainty, gather facts, resist outside interference, and stick to the investigative process. Let’s step into the anomaly-riddled void and explore five key investigative lessons every compliance officer should internalize, drawn directly from the plot, dialogue, and drama of “The Tholian Web.”

While answering a distress call from the USS Defiant, the Enterprise finds the missing starship phasing in and out of reality, trapped in a deadly interdimensional rift. Captain Kirk vanishes while leading a boarding party, leaving Spock in command just as the hostile Tholians appear and begin constructing their mysterious, menacing web. The crew must contend not only with Kirk’s disappearance but also with mounting pressure, psychological stress, and a complex puzzle that puts lives and the ship itself at risk.

Lesson 1: Investigate With a Cool Head—Leadership Under Duress

Illustrated By: After Kirk’s sudden disappearance, Spock assumes command. Crew anxiety spikes, tempers flare, and Dr. McCoy challenges Spock’s decisions. Instead of reacting emotionally, Spock insists on sticking to established protocol and methodical investigation.

Compliance Lesson: In crises, whether a whistleblower allegation, data breach, or fraud discovery, panic is a natural response. The best investigators, like Spock, recognize that emotional decision-making clouds judgment. They follow procedure, remain analytical, and never let pressure override the investigative process.

What should you do now? Train compliance teams to default to protocols, not panic. Create and rehearse “crisis checklists” so responses become second nature. Encourage a culture of mutual respect, even under stress, so disputes are resolved constructively, not destructively.

Lesson 2: Document Everything—The Importance of the Record

Illustrated By: Early in the investigation, Spock reviews and references Captain Kirk’s standing orders and last log entries. He later records his log, explicitly noting the crew’s condition, the timeline, and his rationale for each major decision.

Compliance Lesson: Thorough documentation is the lifeblood of effective investigations. Records create an objective narrative, protect the organization, and provide transparency for auditors, regulators, or stakeholders. If Spock had not documented his actions, later review, internal or external, would have been impossible.

What should you do now? Require contemporaneous notes during all investigative interviews and key meetings. Preserve all relevant evidence (emails, logs, CCTV, etc.). Institute a system for secure, indexed investigative files accessible only to authorized personnel.

Lesson 3: Test Hypotheses—Don’t Jump to Conclusions

Illustrated By: McCoy believes the interdimensional “space sickness” is a kind of infection, while Spock hypothesizes it is a function of spatial instability. Rather than making snap judgments, both test their theories with scientific rigor, running medical scans, experiments, and simulations until they converge on the facts.

Compliance Lesson: The temptation to accept the first “obvious” answer is strong, especially under time pressure. But good investigators approach every matter as a hypothesis to be tested—not a foregone conclusion. By seeking corroborating (or conflicting) evidence, compliance professionals ensure they arrive at the truth, not just a convenient story.

What should you do now? Create a habit of brainstorming multiple plausible causes for any compliance breach or allegation. Use data analytics, forensic testing, and independent interviews to verify facts. Foster an environment where challenging assumptions is seen as diligence, not defiance.

Lesson 4: Manage External Interference—Defend the Integrity of the Investigation

Illustrated By: The Tholians appear and begin imposing their agenda, demanding that the Enterprise leave the area. Under threat, Spock must weigh the crew’s safety against the risk of abandoning the investigation and Kirk. He stands firm, communicating clearly with the Tholians but refusing to let external pressure dictate internal process.

Compliance Lesson: Investigations are rarely free from outside influence. Legal, business, or even cultural pressures can tempt organizations to curtail, rush, or steer investigations for expediency or self-protection. The role of compliance is to defend the integrity of the process, ensuring objectivity, completeness, and independence even when it’s inconvenient.

What should you do now? Define clear boundaries between the investigative team and external stakeholders. Ensure compliance has direct, independent reporting lines to the Board or Audit Committee. Communicate the investigation’s process, milestones, and rationale to key internal/external parties without compromising confidentiality.

Lesson 5: Foster Teamwork and Resilience—No One Investigates Alone

Illustrated By: Tension between Spock and McCoy is palpable, but when faced with Kirk’s absence and the ship’s peril, they collaborate—combining scientific and medical expertise, pooling resources, and supporting one another. When Kirk’s last message appears, it provides encouragement and guidance, reinforcing the importance of unity.

Compliance Lesson: Investigative work can be isolating, especially under duress or when the stakes are high. However, the most effective compliance investigations harness the diverse skills and perspectives of a multidisciplinary team. Unity, support, and open communication are force multipliers in a web of uncertainty.

What should you do now? Build cross-functional investigation teams that blend legal, compliance, audit, HR, and IT expertise. Create channels for confidential peer support and knowledge sharing. Celebrate examples of effective teamwork in post-investigation reviews and training.

Final ComplianceLog Reflections

The Tholian Web” is more than a science fiction adventure. It is a case study in investigative excellence under extraordinary pressure. The crew’s ability to stick to process, document facts, test hypotheses, defend their mission against outside interference, and come together as a team mirrors the best practices in modern compliance investigations.

As compliance professionals, we often find ourselves navigating webs of ambiguity, complexity, and risk. Our mission, like that of the Enterprise, is to ensure integrity, discover truth, and protect the greater good even when the pressure mounts and the path ahead seems uncertain.

Remember: It’s not about avoiding the “webs”; rather, it is about learning to move through them with courage, clarity, and commitment to the investigative craft.

Resources:

⁠⁠Excruciatingly Detailed Plot Summary by Eric W. Weisstein⁠⁠

⁠⁠MissionLogPodcast.com⁠⁠

⁠⁠Memory Alpha

Categories
Blog

The Scoular DPA: Part 1 – From Suelo to the Bribery System at Scoular

My earlier analysis of The Scoular Company FCPA enforcement action necessarily relied on the Department of Justice Press Release. That release described the government’s allegations. The formal Deferred Prosecution Agreement (DPA) expands the footing of the discussion. We are no longer working only from a prosecutor’s summary. We now have a detailed chronology of facts the company formally admitted.

Those facts reveal a scheme connecting stricter Mexican inspections, commercial pressure, employees, multiple customs brokers, a meeting at a company office, invoices, wire payments, WhatsApp, and millions in avoided costs. The central compliance lesson is normalization. A corrupt proposal became a repeatable business process. Over the next four blog posts I will be taking a deep dive into the DPA, what it tells us and what we must speculate on.

The Scheme Began With a Change in Enforcement

Scoular transported corn and other agricultural products from the United States into Mexico. Those trains were inspected by Mexico’s Secretariat of Agriculture and Rural Development, referred to in the DPA by its former name, SAGARPA.

Inspectors looked for dirt, soil, and other impurities, sometimes described as “suelo.” SAGARPA approval was required before a train could enter Mexico. When inspectors detected suelo, the agency could delay entry, and the shipment could incur fumigation and demurrage costs.

Beginning around 2013, Mexican authorities conducted the inspections more rigorously. The result was more soil findings in Scoular shipments and greater exposure to delay, fumigation, and demurrage. This legitimate business problem called for better product controls and contingency planning. It also created pressure that made a corrupt alternative attractive.

Compliance failures often begin here. Regulation becomes more rigorous, costs increase, and delivery commitments are threatened. The governance question is whether management improves the process or finds a way around the control. This demonstrates why a continuous risk assessment is so critical; when your risks change you need to perform and updated risk assessment.

The Proposal Was a Guarantee Against Adverse Decisions

In June 2013, customs broker Carlos Leopoldo Alvelais contacted a Scoular sales employee and a Scoular senior manager. According to the DPA, he proposed a procedure under which Scoular would pay a fee on every train. The purpose was not ambiguous. The proposal was designed to ensure that Scoular would “not have a single risk of adverse determinations from Mexican inspectors.” That sentence captures the scheme.

A legitimate broker can prepare documents, coordinate an inspection, and challenge an incorrect result. It cannot guarantee that a regulated company will never receive an adverse decision. A promise of zero regulatory failure should be treated as a red flag, not a service level. James Min made this clear with his risk matrix for assessing risk in custom broker clearance rates. If a customs broker offers you 100% success rate – to quote Monty Python from The Holy Grail; Run Away Run Away, do not walk away.

The DPA says that, later in June 2013, Alvelais traveled to Scoular’s Kansas office and met with Scoular employees and others. After that meeting, he began paying bribes to Mexican officials and invoicing Scoular for reimbursement. The invoices described the payments as “REVISION SAGARPA PROCESS,” (Reinspection Fees herein) generally in round amounts of $2,000.

The Kansas meeting is a significant new fact. The arrangement was not confined to an informal exchange between a local employee and a broker at a remote border crossing. The broker presented the approach at a company office. After the meeting, the payments began. This speaks to a serious failure in an overall compliance program; failure in communication, failure in training, failure in risk assessments, failure in internal controls and failure in overall compliance visibility into the business operations of an organization it is supposed to keep in compliance.

At a minimum, when a high-risk third party visits a company office to propose a government-facing payment process, the arrangement should require a documented business rationale, legal and compliance review, a payment protocol, and supporting evidence. Without those controls, the meeting can move misconduct into the company’s operating structure. This basic failure led to catastrophe for Scoular Company.

The Payment Process Was Replicated

The DPA places a sales employee and a senior manager who worked on international grain sales and shipments at the center of the conduct. They authorized reimbursement of Reinspection Fees to Alvelais and his companies while knowing that at least part of the money would be used to bribe Mexican border officials. The objective was to ensure that Scoular trains passed inspection without the fumigation, demurrage, and other costs associated with soil findings and failed inspections.

But it got worse from there. Scoular then replicated the approach with two other customs brokers. That replication is critical. This was not simply a broker corrupting a customer. Company personnel took a method used with one broker and extended it to additional agents. The model followed the business.

The DPA describes cash payments of up to $2,000 per train. Scoular employees and agents coordinated the scheme through email, messaging applications, and other communications. Invoices were transmitted, and Scoular caused payments to be made by wire. The scheme therefore had all the components of a functioning process:

  • A recurring commercial problem
  • A third-party payment mechanism
  • Employee knowledge and authorization
  • Multiple participating brokers
  • Standard invoice descriptions
  • Company reimbursement
  • Off-channel and conventional communications
  • A measurable business benefit

Each component could look ordinary when reviewed separately. Together, they formed the bribery scheme.

The Communications Made the Purpose Clear

The admitted communications are especially instructive because they connect payment, knowledge, and outcome. In August 2015, an Alvelais employee informed a Scoular employee that inspectors had detected soil in a train. The train nevertheless had been released without delay, and the account would include a $2,000 charge. In October 2015, a Scoular employee sent a WhatsApp message to the senior manager stating that Alvelais would provide a favorable rate and guarantee that no train headed to a particular buyer would be stopped for soil. Another October 2015 communication listed “Dispatch of merchandise in the presence of soil” at $2,000 per shipment.

Later that month, a Scoular employee reported that the broker was doing everything possible to move a shipment, but an inspector’s supervisors were in town and “normal procedures” were not working. By 2018, the language was even more direct. During an exchange concerning pests detected in a shipment, an Alvelais employee wrote that the broker had offered more than it normally gave and the officials had not accepted it. A Scoular employee responded by asking why the broker was requesting double if the issue was fixed for soil.

These communications defeat any claim that employees believed they were paying published government fees. They describe adverse findings, guarantees against stopped trains, and payments beyond ordinary amounts. No single record tells the complete story. The invoice supplies the accounting description, the message supplies intent, the inspection record supplies the regulatory event, and the release time supplies the outcome. Investigations and monitoring must connect all four.

The Scheme Continued Into 2019

The DPA identifies three invoices from 2019:

  • A $3,000 “SAGARPA process” fee from an Alvelais company
  • A $1,750 “Other Inspection” fee from a second customs broker
  • A 35,000 Mexican peso “SERVICIOS DE SAGAR” fee, approximately $1,835, from a third customs broker

Scoular promptly paid each invoice.

The changing descriptions are a lesson in internal control design. A monitoring rule limited to “reinspection fee” would have missed “SAGARPA process,” “Other Inspection,” and “SERVICIOS DE SAGAR.” Compliance analytics must identify families of risk, not merely exact words.

The DPA says that internal reports alleging improper business practices connected to the SAGARPA fees arose in 2019. Scoular then changed its practices for grain shipments into Mexico and terminated direct engagement with the customs brokers involved.

That response ended the factual chronology, but it opens the next compliance question: what happened between the internal reports and the DOJ resolution, and why did Scoular receive no voluntary self-disclosure credit? That will be the focus of Part 2.

The Economics Show Why the Scheme Endured

Between approximately 2015 and 2019, Scoular authorized $414,351 in bribes to bypass inspections and secure unhindered passage into Mexico. The company avoided approximately $6,513,014 in demurrage and related costs. That is more than $15 in avoided costs for every dollar paid in bribes.

The ratio does not excuse the conduct. It explains the incentive that allowed it to become embedded. A $2,000 charge could appear small against the cost of a delayed train, while the accumulated benefit rewarded the business process that produced the misconduct. This is why compliance cannot evaluate customs payments only by individual transaction value. The relevant indicators include frequency, round amounts, timing, inspection outcome, avoided cost, broker success rate, and management awareness.

The Compliance Failure Was Normalized

The Scoular Statement of Facts shows how misconduct can become ordinary:

  • External enforcement became more rigorous.
  • The business faced higher costs and delays.
  • A broker proposed a fee-based solution.
  • The broker met with employees at a company office, and payments followed.
  • Brokers paid officials and invoiced Scoular.
  • Employees authorized reimbursement.
  • The approach expanded to other brokers.
  • Messages and invoices developed a shared vocabulary.
  • The business received predictable passage and significant avoided costs.
  • The process continued until internal reports surfaced.

The DPA does not describe a control that failed once. It describes an alternative control environment that operated for years.

The DPA sharpens the Scoular lesson. The scheme was not simply a series of border bribes. It was a business process built to eliminate the risk of adverse government decisions. When a third party offers that result, compliance should assume the risk has not disappeared. It has merely been transferred into a payment, an invoice, and a promise that deserves immediate scrutiny.

Join us tomorrow where we take a deep dive into the Scoular Company’s failure to self-disclose and the loner-term ramifications.