Categories
From the Editor's Desk

From The Editor’s Desk: Episode 37: Season 2 – Reflections from February and Insights into March for Compliance Week

In this episode of ‘From the Editor’s Desk,’ Tom Fox visits with Aaron Nicodemus to discuss highlights from Compliance Week in January and February and take a look at what is coming down the pike in March, including the upcoming “Inside the Mind of the CCO” survey. They also begin to preview the 2026 National Conference in May.

Key highlights:

  • February Story Roundup
  • March AI Coverage Plans
  • CCO Survey Early Findings
  • Long Form Investigations Ahead
  • AI Governance Reality Check
  • TPRM Conference Teaser

Resources:

Aaron Nicodemus on LinkedIn

Compliance Week

Categories
AI Today in 5

AI Today in 5: February 27, 2026, The Have It Your (AI) Way at BK Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. Monitoring AI comms for forensic compliance. (FinTechGlobal)
  2. Pairing AI Voice Compliance with other types of Compliance. (UCToday)
  3. Banks are using AI to flag suspicious trades. (Bloomberg)
  4. A faster Nano Banana. (Bloomberg)
  5. BK uses AI to monitor employees’ friendliness. (Yahoo!)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game, is available. You can purchase a copy of the book on Amazon.com.

Categories
2 Gurus Talk Compliance

2 Gurus Talk Compliance – Episode 71 – The Dog Bite Edition

What happens when two top compliance commentators get together? They talk compliance, of course. Join Tom Fox and Kristy Grant-Hart in 2 Gurus Talk Compliance as they discuss the latest compliance issues in this week’s episode!

Stories this week include:

  • The Sony Hack and the consequences of a bad decision. (WSJ)
  • What CEOs are most worried about. (NYT)
  • The dog bite defense fails as a former coal executive is convicted of FCPA violations. (Law360)
  • A KPMG partner was fired for using AI to cheat on a test about AI. (FT)
  • What is compliance reconciliation? (FinTechGlobal)
  • Terrorists: What Is the Risk Landscape for Multinationals Operating in Mexico? – (Corporate Compliance Insights)
  • Messy Retaliation Allegations at Binance – (Radical Compliance)
  • The Many Risks of Mandating Employee AI Usage – (Radical Compliance)
  • Workers Are Afraid AI Will Take Their Jobs. They’re Missing the Bigger Danger – (WSJ)
  • BODYCAM: Florida man arrested after bizarre forklift and ATM joyride through streets – (CBS 12)

Resources:

Kristy Grant-Hart on LinkedIn

Prove Your Worth

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: February 27, 2026, The Tariff Payback Time Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Goldstein convicted. (WSJ)
  • Tariff payback time is here for the Trump Administration. (FT)
  • Evolution of Caremark. (UC)
  • Ex-Nigerian oil minister jailed for 87 months for accepting bribes. (Vanguard)
Categories
Blog

The Hobson FCPA Trial: Five Operational Lessons for the Compliance Professional

If you want to see how an FCPA case gets built in real time, you could do a lot worse than studying what came out at trial in the Hobson matter. The evidence presented to the jury did not turn on a single suspicious invoice or an isolated payment. It was the aggregation of ordinary commercial mechanics (commissions, pricing pressure, contract awards) with extraordinary risk indicators (coded language, commission splits tied to named initials, informal transfer channels, and documentation gymnastics). That is exactly why the Hobson trial matters to in-house compliance professionals: it shows how day-to-day operational decisions can be reframed as corrupt intent when the surrounding facts align.

Today, we consider five lessons learned for the compliance professional, each grounded in trial evidence and framed as operational indicators you can use in your program tomorrow morning.

Lesson 1: High commissions are not a “commercial issue.” They are an anti-corruption control failure waiting to happen.

One of the most important themes in the testimony was the economics of commissions. One witness described the agent’s commission levels as unusually high in the industry, citing a long-term arrangement in the range of $7 to $7.50 per metric ton, in contrast to what he described as a far lower norm for international sales agents. That is not a mere “sales comp” debate. In a high-risk market, the commission structure becomes the channel through which influence can be purchased.

The operational problem is not simply that the commission is high. It is that the commission becomes hard to explain as legitimate, and easy to justify internally as “what it takes” to win. In the testimony, jurors heard about internal communications implying there were “a few” people the agent had to “take care of,” and the witness described being shocked at how openly the subject was discussed.

Operational indicators to take away

  • A third-party commission materially above benchmark, especially when defended as “market practice” without evidence.
  • Business rationales that drift from services rendered into “this is what it takes to get the deal.”
  • Commission tied to award timing, acceptance, or “sorting things out” with a committee-like body at the counterparty.

Program moves

  • Require commission benchmarking and documented justification for outliers, with Compliance signoff for deviations.
  • Treat commission letters and renewals as high-risk events: refresh due diligence, re-paper services scope, and re-evaluate the payment model.
  • Add a “commission-to-service” test: what services were delivered, how were they evidenced, and how do they map to the payment amount.

Lesson 2: The third party is not the risk. The relationship ownership model is the risk.

The defense narrative emphasized distance: the company hired the agent, the company paid the agent, and once the agent was paid, the payer did not control what happened next. Compliance people have heard this argument in conference rooms for twenty years, usually dressed up as “commercial reality.”

But what the trial evidence highlights is a different issue: relationship ownership. The cooperating witness testified that the defendant took the lead on the relationship because of his contact with the agent. That is a control issue. When a single commercial leader “owns” the third party informally, the organization often loses the ability to enforce discipline: who approves what, who monitors what, and who escalates what.

Operational indicators to take away

  • A relationship that is “owned” by one person, with limited transparency and limited cross-functional involvement.
  • Commission approvals and payment pressure are driven by a single commercial voice rather than by a documented governance process.
  • Escalations framed as “help me pay him so we do not lose the business,” rather than “help me validate services and risks.”

Program moves

  • Assign “relationship ownership” formally: business owner, finance owner, and compliance owner, each with defined decision rights.
  • Require periodic third-party business reviews that are not sales calls: services delivered, invoices, payment routes, red flags, and counterparty risk.
  • Put “single-threaded third-party management” on your audit plan. It is a quiet failure mode.

Lesson 3: Communications are evidence, and code words are a control signal you can detect.

The most operationally actionable evidence from the trial is the communications that Hobson used with Ahmed. Jurors heard about messages that mixed coal pricing negotiations with discussions of who would receive parts of a commission, including initials corresponding to individuals connected to the state-affiliated buyer. This is the classic compliance trap: people treat messaging as informal chatter, while prosecutors and juries treat it as evidence of intent.

Even more pointed, testimony described the use of coded language for money, including references to “Mr. Yen,” and urgency about when the money would be available and in what currency. Whether a company can see those messages at the time is a separate question. The compliance lesson is that coded language almost always sits atop a known risk: someone believes the underlying conduct would not survive daylight.

Operational indicators to take away

  • Pricing plus commission allocation discussed in the same thread, especially where there is talk of who “needs to be paid” to keep contracts.
  • Code words for money, urgency cues, and currency references.
  • Language that treats counterparty actors as extracting “shares” tied to deal economics.

Program moves

  • Train sales and trading teams on “what will read badly to a jury” without being melodramatic. Show examples of risky phrasing and rewrite them.
  • Build a targeted communications surveillance protocol for the highest-risk channels and roles, consistent with local law and internal policy.
  • Add “coded language and euphemisms” to your investigation playbook as an escalation trigger, not an afterthought.

Lesson 4: Money movement patterns are where the story crystallizes.

The government’s evidence leaned heavily on how money moved: informal transfer mechanisms, travel touchpoints, offshore entities, and a money trail that could be explained individually but looked incriminating when sequenced.

For in-house compliance, this is the heart of operational control. The trial coverage covered Western Union transfers, travel to Dubai, cash declarations, and an entity structure involving a Dubai company and a US affiliate sharing the same address. It also described an “invoice construction” episode: drafting an invoice for a substantial payment, struggling to reproduce an official seal, then sending a wire and having the funds transferred.

You do not need to be a prosecutor to see the compliance problem: if you cannot explain who is being paid, why they are being paid, what they did, and where the money went, you do not have controls in place. You have hope.

Operational indicators to take away

  • Use of informal transfer services, cash, or complex routing in connection with third-party compensation.
  • Offshore entities are introduced late in the process, especially where documentation is improvised.
  • Payment routes that create distance between the payer, the payee, and the ultimate beneficiary.

Program moves

  • Tighten payment controls for third parties: no payment without a validated contract scope, documented services evidence, and verified bank account ownership.
  • Require screening for beneficial ownership and “connected parties” among third-party entities, including affiliates and payment intermediaries.
  • Implement a red-flag workflow for travel-linked payments, cash, and informal transfers: automatic review by Compliance and Finance.

Lesson 5: Investigation readiness is not a crisis skill. It is a design choice.

Finally, the verdict and the path to it underscore a point compliance professionals sometimes miss: your program is being built for a future fact-finder. In this case, the prosecution presented an overall theory built from messages, financial records, and a cooperating witness; the jury returned guilty findings across FCPA-related counts and related conspiracy and laundering charges.

The operational compliance lesson is not about litigation tactics. It is about what your systems retain and what your systems can explain. If your third-party file includes evidence of benchmarking, due diligence, contract scope, and monitoring, you have a fighting chance of showing legitimate intent. If your file is thin and the communications are ugly, the story will be told for you, in the immortal words of the Compliance Evangelist-Document Document Document.

Operational indicators to take away

  • Repeated internal discomfort expressed without escalation or remediation; IE., the “we know this is strange, but we need the deal” pattern.
  • Documents created to facilitate payment rather than to evidence legitimate services.
  • Controls that rely on “we did not know” rather than “we can show what we did and why.”

Program moves

  • Update your investigations protocol to integrate commercial data: pricing, commissions, and contract award timing, not just payment logs.
  • Build a rapid response kit for third-party risk: document hold, device preservation process, and review checklist for messaging platforms.
  • Treat high-risk third-party relationships as living files: quarterly updates, not annual check-the-box refreshes.

The Hobson trial is a reminder that compliance does not fail in the abstract. It fails in the seams: a commission justified without evidence, a relationship owned by one person, a payment routed because “it is easier,” and a set of messages that people assumed would never be read out loud in a courtroom. If you want your program to prevent the next case, focus on those seams, because prosecutors, juries, and regulators will, too.

Resources:

Articles by Matthew Santoni in Law360

Coal Exec Knew Egyptian Broker Paid Bribes, Jury Told

Coal Exec’s Co-Worker Says Emails Hinted At Egypt Bribes

Egypt’s ‘Social Law’ Doesn’t Endorse Bribery, Jury Told

Coal Exec Used ‘Mr. Yen’ To Talk Kickbacks, FBI Testifies

Coal Exec ‘Had No Ability’ To OK Paying Bribes, Jury Told

Jury Finds Ex-Coal Exec Guilty Of Authorizing Bribes

 

Categories
Daily Compliance News

Daily Compliance News: February 26, 2026, The Why So Few Women CEOs Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • What happens when companies demand that employees use AI? (WSJ)
  • Why so few women CEOs? (FT)
  • eBay finally settles Steiner harassment suit. (Reuters)
  • Alfred Sloan and objective organizations. (Bloomberg)
Categories
AI Today in 5

AI Today in 5: February 26, 2026, The Use AI or Lose Your Job Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. Treasury issues AI risks and compliance tools for financial services. (WVNS)
  2. EU AI Act enforcement begins. (DigWatch)
  3. Human in the Loop is needed for AI in healthcare. (HealthcareITNews)
  4. What happens when companies demand that employees use AI? (WSJ)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game, is available. You can purchase a copy of the book on Amazon.com.

Categories
Hill Country Hustlers

Hill Country Hustlers: From Podcast DM to 70-Day Merger: How Eager Plumbing Built a High-Trust, High-Tech Team in the Texas Hill Country

Host Zachary Green interviews Dalton Hatch and Steve Eager, owners of Eager Plumbing, LLC, about how their plumbing companies rapidly merged into Eager Plumbing with investor/mentor Jeff, after Steve persistently reached out to Dalton following a podcast.

They explain how Aaron Plumbing (custom home new construction, started over 30 years ago) and Hager Plumbing (service) became two divisions, and how Dalton’s service systems and culture complemented Steve’s construction-focused background in oil and gas and commercial building. They describe building a transparent, team-first culture, involving field plumbers in estimating, investing in people, and improving operations through software and AI (for estimates, customer-friendly invoice summaries, policies, training, and navigating commercial job documents). They discuss major hurdles like account transitions, fraud during an attempted school donation, building and later replacing a service price book, scaling from a small shop to about 30 people, and the workload and family sacrifices required. The episode closes with a customer pitch for service across San Antonio, Boerne, Fredericksburg, and Kerrville, a recruitment call for unhappy plumbers, and their vanity number: 830-999-PIPE.

Key highlights:

  • From First Meeting to Fast Merger
  • Building a Culture Before Building the Business
  • Modernizing a Traditional Trade
  • People First, Always
  • Partnership Without Ego
  • Using AI and Technology the Right Way
  • Customer Service as the Ultimate Differentiator

Resources:

Follow Eager Plumbing, LLC on:

Eager Plumbing, LLC Website

Facebook

LinkedIn

Instagram

Categories
Red Flags Rising

Red Flags Rising: S01 E37: Carole Basri on Subsidizing World Peace: The U.S. Experiment, and the Dynamic Relationship between National Security & Corporate Compliance

Back in January 2024, Mike and Brent had the good fortune to meet Carole Basri at an event at NYU Law School. On this episode of Red Flags Rising, they welcome her as a guest to talk about her specialties: national security, geopolitics, and corporate compliance. They specifically discuss Carole’s extensive professional background (00:59), a new treatise on National Security Law that Carole, Mike, and Brent are writing for the Practising Law Institute (PLI) (04:00), an upcoming event co-hosted by the New York State Bar Association’s International Section, Corporate Compliance Committee and Morgan Lewis, to which the new Assistant Secretary for Export Enforcement David Peters is an invited keynote speaker (08:18), why public enforcement officials remarks are relevant under U.S. export controls and other probability-based (i.e., “red flags”-driven) national security laws (09:26), how the U.S. Foreign Corrupt Practices Act (FCPA) was not only an example of that but also was really a child of an era where economic interdependency required a level of transparency and clean commerce to continue (12:00), and the relationship between Bretton Woods, Belt and Road, and Mike’s favorite book, Tales of an Economic Hitman, and what could be viewed with hindsight as effectively a U.S. policy decision to trade its own economic security for decades of (relative) world peace, increased global productivity, and increased living standards (16:52). Brent then closes out the discussion with the latest installment of his “Managing Up” segment (21:57), after which Mike makes some (further) book recommendations based on the discussion for those interested in further exploring some of the idea and concepts covered during the discussion:

More about Carole

Contact Brent: brent@redflagsrising.com

Contact Mike: michael.huneke@morganlewis.com

Interested in learning more about the March 10, 2026, event? Contact Mike & Brent at the email addresses above.

Categories
Blog

The Dog Bite Defense Fails Again – Defendant Found Guilty in FCPA Trial

To the surprise of absolutely no one, former Corsa Coal executive Charles ‘Hunter’ Hobson was found guilty last week for FCPA violations. As most readers of this blog know, I am a recovering trial lawyer. I almost always represented corporations as defense counsel during my trial lawyer career. In the trial lawyer world, there are four recognized defenses to any claim, which are known as the “Dog Bite Defenses”. They are:

  1. My dog didn’t bite you.
  2. Even if my dog did bite you, it’s because you provoked him.
  3. Even if my dog did bite you, you really aren’t injured.
  4. My dog didn’t bite you because I don’t have a dog.

The fourth version of the Dog Bite defense is certainly an ‘all-in’ move. You had either (1) better be right or (2) have some big kahunas to make that argument to a jury with a straight face.

Defense No. 1 – Hobson did not pay or direct anyone to pay.

Hobson’s attorneys said the government was overreaching by charging Hobson with FCPA violations on several grounds. His lawyer argued that Hobson did not know, pay, or direct Nassar to bribe anyone. “Mr. Hobson never saw Ahmed the broker pay any money to anyone,” his attorney told the jury in the opening. Further, Hobson never hired Ahmed, the broker, and claimed that Mr. Hobson never paid him. Corsa hired Ahmed, the broker; Corsa paid Ahmed, the broker; and Corsa approved Ahmed’s commissions, not Mr. Hobson.

Defense No. 2- Social custom in Egypt says it’s OK to pay a bribe.

Attorneys for Hobson tried to undermine the government’s expert witness by pointing to opinions he had given that bribery was not only not illegal in Egypt but actually socially acceptable. They confronted Mohamed Arafa, an adjunct professor focusing on comparative law at Cornell University, with law review articles he had previously written, where he said that corruption was “commonly accepted and had become the ‘social law’” in Egypt. The Professor distinguished the expert opinion on Egyptian law that he offered at trial and “his prior, scholarly opinions on whether people adhered to that law in modern Egypt. Santoni quoted him saying, “I’m not here to talk about that; I’m here to talk about the law,” Arafa said. ” … Saying something like that does not make the act legal.””

Defense No. 3- His bosses approved it.

Here, Hobson tried to argue that once Nassar was paid his commission, which was due and owing, it was not up to Hobson what Nassar did with it, nor was it “Corsa’s money” any longer. Hobson’s attorney also said that “Mr. Hobson never saw Ahmed, the broker, pay any money to anyone,” Price said. “Mr. Hobson never hired Ahmed the broker, Mr. Hobson never paid Ahmed the broker. Corsa hired Ahmed the broker, Corsa paid Ahmed the broker, and Corsa approved Ahmed’s commissions, not Mr. Hobson.” His counsel also said that Hobson had been tasked with opening up new foreign markets for Corsa. Having never dealt in Egypt before, he spoke with employees of a company that had recently merged with Corsa and had done business there, who connected him with Nassar.

Defense No. 4-Ahmed wasn’t a government official.

Here was the truly all-in defense (I don’t own a dog). It was that Ahmed was not a government official or did not work at an instrumentality of the Egyptian government. In his cross-examination of cooperating witness Frederick Cushmore, Jr., who worked for Hobson, his defense counsel questioned Cushmore about any indications he had that Al Nasr was affiliated with the Egyptian government. Obviously, trying to take the entire case out of an FCPA criminal action by alleging that one of the elements of an FCPA was not present. The issue is that payments are being directed to a government official or to someone at a government-affiliated company. But Cushmore said it was “industry knowledge” and pointed to a 2017 email from Hobson that said both the shipping company and Al Nasr were “Egyptian-owned companies”. Counsel then questioned whether Hobson really meant that to indicate “owned by the Egyptian government.”

Two prosecution witnesses eviscerated Hobson’s defense. The first was Frederick Cushmore Jr., who pled guilty to conspiring to violate the FCPA. He agreed to testify against Hobson, said their emails and WhatsApp messages talked about people at Al Nasr Co. for Coke and Chemicals being “taken care of” by keeping Corsa’s agent, Ahmed Nassar, paid high commissions for the sales he brought in, implying that Nassar’s higher-than-normal pay was being passed on as bribes to Al Nasr officials.

According to Matthew Santoni reporting in Law360, “Cushmore read a November 2016 email from Hobson, then a vice president of sales at the Somerset County, Pennsylvania-based coal mining company, that said there were “a few the agent has to take care of” during an early discussion of Nassar’s proposed commission payments. “I took that as people at Al Nasr who would be receiving bribes… I was shocked at how open the discussion was,” Cushmore, whom prosecutors said held various international sales positions with Corsa Coal. “I simply said, I suspected… ‘What’s he doing with all that money?’ Mr. Hobson said, ‘What do you think he’s doing with all that money?'””

The second was Mohamed Arafa, an adjunct professor focusing on comparative law at Cornell University. He made clear, in no uncertain terms, that bribery of government officials was illegal under Egyptian law, not a matter of social custom. The defense had no rebuttal for either witness’s testimony.

Although the trial lasted over one week, the jury was out for less than one day before finding the defendant guilty. The sentencing date has not been set.

Join us tomorrow, where we look at the lessons a compliance professional can draw from the Hobson trial.

Resources:

Articles by Matthew Santoni in Law360

Coal Exec Knew Egyptian Broker Paid Bribes, Jury Told

Coal Exec’s Co-Worker Says Emails Hinted At Egypt Bribes

Egypt’s ‘Social Law’ Doesn’t Endorse Bribery, Jury Told

Coal Exec Used ‘Mr.. Yen’ To Talk Kickbacks, FBI Testifies

Coal Exec ‘Had No Ability’ To OK Paying Bribes, Jury Told

Jury Finds Ex-Coal Exec Guilty Of Authorizing Bribes