Categories
Compliance Into the Weeds

Compliance into the Weeds: Live from the Floor of ACI

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore it more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss their initial reflections on the first day of the recently concluded ACI-FCPA and Global Anti-Corruption Conference.

Key points include the current state of FCPA enforcement, the impact of reduced DOJ manpower, and the continued importance of robust compliance. Despite claims about ramping up enforcement, the number of staff dedicated to FCPA cases has been significantly reduced. They also touch on the DOJ’s focus on comprehensive white-collar crime enforcement, including healthcare fraud and cartel-related activities. Additionally, they discuss Severin Wirz’s new book, Bribery Beyond Borders, on the historical context of FCPA enforcement.

Key highlights:

  • FCPA Enforcement Realities
  • White Collar Crime and DOJ Priorities
  • Cartels and Corruption
  • Whistleblower Program Insights
  • Book Signing and Historical Context

Resources:

Matt in Radical Compliance

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence.

Categories
Blog

Millicom Cellular, Part 2: Lessons Learned on Cartels, Cash, and Control Failures

The Millicom Cellular FCPA enforcement action is not just another FCPA case. It is a case that signals a new frontier for compliance risk. It blends classic corrupt-payment schemes with organized crime, narcotrafficking proceeds, obstructed governance, and aggressive legislative capture. It is a wake-up call for compliance officers that the threat landscape is expanding in ways that require deeper operational controls, broader due diligence frameworks, and more sophisticated cross-functional collaboration.

In Part 1, we considered the underlying facts and FCPA violations of this matter. In Part 2, we examine what compliance professionals must take away from the case.

Lesson 1: Joint-Venture Governance Failures Are Not a Defense

Millicom Cellular held a 55 percent ownership stake in TIGO Guatemala, but the local partner exercised operational control and blocked Millicom Cellular from information and cooperation. The DOJ notes that Millicom Cellular voluntarily disclosed early concerns in 2015 but was unable to compel cooperation from local executives or obtain complete data. The result is a clear message:

Ownership without operational control equals enormous FCPA exposure.

Compliance professionals must:

  • Implement JV governance protocols that require access rights, audit rights, and cooperation language in shareholder agreements. Try to place your company’s representative as the CFO of the joint venture.
  • Establish escalation pathways if a partner obstructs investigations.
  • Treat “majority ownership without control” as a high-risk structure in compliance risk assessments.

Yet notwithstanding the foregoing, DOJ has made clear it will not accept a lack of control as an excuse for failing to detect corruption, especially when red flags are visible.

Lesson 2: Cash-Based Bribery Ecosystems Require a Different Kind of Monitoring

The bribery scheme ran almost entirely on cash: cash in duffel bags delivered by helicopter, cash laundered through drug traffickers, cash moved through shell companies, and cash withdrawn from banks in plastic bags. Traditional financial controls are almost useless in the face of an off-books cash economy. Compliance must be enhanced:

  • Controls around cash withdrawals
  • Monitoring of cash-intensive vendors
  • Patterns of invoicing irregularities
  • Real-time analytics on deviations in expense and procurement behavior

This is not a theoretical exercise. It is an operational reality for companies in high-risk jurisdictions.

Lesson 3: Cartel Exposure Is Emerging as a Corporate Compliance Obligation

This case represents one of the most explicit linkages between FCPA violations and narco-trafficking cash flows. The scheme not only involved bribes; it also involved bribes financed by organized crime. Compliance officers must now assume that criminal networks may view legitimate multinationals as conduits for illicit financial flows. This demands:

  • Enhanced beneficial-ownership checks
  • Screening for cartel-linked financial intermediaries
  • Deeper diligence on bankers, lawyers, and consultants
  • Country-level threat mapping that includes cartel and organized crime indicators

The DOJ has increasingly emphasized convergence risk between corruption, money laundering, and organized crime. The Millicom Cellular enforcement action is a prime example.

Lesson 4: “Influencing Legislation” Is a Red Flag, Not a Business Strategy

TIGO Guatemala sought legislative outcomes that would alter the national telecom law. That in itself is not illegal. What is unlawful is tying legislative outcomes to cash bribes, helicopter deliveries, and cartel-funded transactions. Compliance teams must scrutinize:

  • Payments to lobbyists, political consultants, and intermediaries
  • Relationships with legislators and political parties
  • Sponsorships, charitable donations, and community programs with political beneficiaries

Any effort to “shape legislation” must come with strict controls.

Lesson 5: Data Gaps Are Compliance Gaps

Millicom’s inability to obtain information access within its own joint venture delayed detection and undermined the credibility of its initial self-disclosure. Compliance professionals must demand:

  • Rights to data
  • Rights to conduct investigations
  • Rights to interview employees
  • The right to require cooperation from partners

A partner who denies access creates liability.

Lesson 6: Remediation Must Be Conducted Like a Corporate Transformation

Millicom’s remediation was extensive. It included:

  • Replacing senior personnel
  • Centralizing compliance oversight
  • Enhancing third-party onboarding and continuous monitoring
  • Adding data analytics
  • Conducting control testing across more than 250 transactions
  • Creating an ephemeral-messaging retention policy
  • Increasing compliance headcount by 800 percent (pages 5–6)

The DOJ’s description reads less like remediation and more like organizational reinvention. That is the expectation now. Compliance must treat remediation as a fully integrated operational overhaul.

Lesson 7: The DOJ Will Reopen Cases When New Evidence Emerges

The DOJ initially closed the investigation in 2018. It reopened the case in 2020 after uncovering new evidence from outside sources, including cartel-linked transactions. The message is clear:

  • Self-disclosure is not a shield when the company lacks visibility into misconduct.
  • Failure to detect ongoing wrongdoing can undermine trust and credit for cooperation.
  • Compliance must ensure continuous monitoring even after perceived risk has been reduced.

Conclusion: The New Compliance Mandate

The Millicom Cellular enforcement action demonstrates that compliance risk is no longer confined to corrupt payments. It now involves organized crime, cash-based bribery systems, cross-border laundering, political capture, and governance obstructions. Compliance professionals must operate with a broader risk lens, encompassing cartel risk, cash-economy vulnerabilities, high-risk political interactions, and joint-venture control structures. This is a key enforcement effort of the Trump Administration.

The future of compliance is not about preventing bribery alone. It is about defending the corporation from becoming an unwitting partner in a criminal enterprise.

Categories
Blog

Millicom Cellular Part 1: Bribery by Helicopter – Unpacking the Full Extent of the FCPA Violations

The Millicom Cellular enforcement action stands out as one of the most interesting Foreign Corrupt Practices Act (FCPA) cases in recent memory. It sits at the intersection of telecom, political corruption, joint-venture governance failures, and international criminal cartels. For compliance professionals, this matter is not simply about bribery. It is about understanding how criminal ecosystems infiltrate legitimate business chains, how corporate governance can be weaponized, and how cash-based bribery systems can bypass formal controls entirely. It also demonstrates the Trump Administration’s clear enforcement priorities for FCPA enforcement going forward.

In Part 1, we will consider the facts: what the Department of Justice uncovered, how the bribery schemes operated, and why cartel money ended up in a major telecom enterprise. In Part 2, we will focus on the lessons learned for the compliance professional.

The Scheme: Bribery at Scale to Influence National Legislation

According to the Statement of Facts, between at least 2012 and 2018, Comunicaciones Celulares S.A. (TIGO Guatemala) engaged in a widespread and prolonged bribery scheme to influence Guatemalan legislators and secure favorable laws, regulatory decisions, and business advantages for the company. The scheme was orchestrated by:

  • TIGO Guatemala Executive 1;
  • Former Chief Corporate Affairs Officer Acisclo Valladares;
  • Shareholder 1, owner of the Panama-based joint-venture partner; and
  • Numerous intermediaries and employees who facilitated cash movements and interactions with government officials

The benefits sought were substantial. TIGO Guatemala paid bribes to secure support for the renewal of valuable radiofrequency usufruct titles for a twenty-year term. The company also paid bribes to secure passage of “Ley TIGO,” a telecommunications law that disproportionately benefited the company by giving it preferential infrastructure authorization rights at the national, rather than municipal, level. The company earned at least USD 58 million in profits from these schemes.

In short, these were not sporadic acts of misconduct. They were deliberate, sustained, and intended to shape the legal and commercial landscape of an entire national industry.

The Mechanics: How the Bribes Were Paid

The bribery system relied almost entirely on cash. That fact alone created multiple operational and legal vulnerabilities. But the methods used to generate, transport, and disguise that cash reveal the depth of the misconduct.

1. Helicopter Deliveries of Cash

Early in the scheme, cash was transported in duffel bags flown by helicopter to the TIGO Guatemala helipad, where Valladares retrieved it and stored it in his office (page A-6). Government officials or their security teams visited the TIGO offices in person to collect payments. This unusual method came to an abrupt stop when one helicopter made an emergency landing at a military base. Cash-filled duffel bags were discovered by the base commander, triggering inquiries.

2. Millicom’s Put-Call Agreement Fee Used as a Bribery Slush Fund

In late 2013, Shareholder 1 informed a Millicom executive that part of the USD 15 million “execution fee” for a put-call agreement would be used to pay bribes and fund political campaigns. Although Millicom did not control TIGO Guatemala at the time and objected to the practice, the fee was used to reimburse bribes previously paid and to create additional liquidity for further corrupt payments.

3. Inflated and Backdated Contracts

In 2014, TIGO Guatemala Executive 1 executed a grossly inflated USD 12 million contract with an entity associated with Shareholder 1 to generate a slush fund. Shell companies then backdated invoices to create the appearance of legitimate legal or consulting services. Funds were funneled to Valladares, including into his personal bank account in the United States.

4. Cartel-Linked Cash Through a Money-Laundering Banker

The most alarming element involved the use of narcotrafficking proceeds. Beginning in 2014, banker Álvaro Estuardo Cobar Bustamante laundered cash for drug traffickers and funneled that cash to Valladares for TIGO Guatemala’s bribe payments (pages A-8 to A-10). In one instance, Cobar laundered USD 1 million for a narcotics trafficker, then delivered the cash to be used for bribes. In 2017, Valladares wired USD 350,000 from his U.S. account to one of Cobar’s accounts as part of a cross-border laundering operation that served both TIGO’s bribery needs and cartel objectives.

The fact that cartel money entered the corporate bloodstream of a multinational telecom enterprise is extraordinary. It transforms this case from a classic FCPA scenario into one that also implicates money laundering, organized crime, and regional security threats.

Millicom’s Partial Self-Disclosure and Its Limitations

Millicom, the parent company and majority owner since 2015, self-disclosed concerns in 2015. But Millicom did not have operational control over the joint venture and was blocked from accessing key information. As a result:

  • Millicom received partial self-disclosure credit.
  • The DOJ closed the first phase of the investigation in 2018.
  • The investigation was later reopened in 2020 after independent evidence emerged that the scheme had continued, including cartel-linked cash flows.

These dynamics highlight the vulnerabilities of joint ventures, in which a local partner holds operational control and may intentionally obstruct visibility into corruption risks.

The Resolution

Under the deferred prosecution agreement, TIGO Guatemala agreed to:

  • Pay a USD 60 million criminal penalty;
  • Forfeit USD 58,198,343;
  • Implement extensive remediation and compliance enhancements; and
  • Cooperate in ongoing investigations.

The DOJ credited Millicom Cellular for extensive remediation after acquiring full operational control in 2021, including overhauling compliance resources, enhancing third-party monitoring, building data analytics systems, and significantly increasing compliance staffing.

Conclusion

The Millicom Cellular enforcement action reveals a corporate ecosystem in which political corruption, weak joint venture governance, and cartel money combined to create a perfect storm of FCPA risk. Join us tomorrow for Part 2, where I will examine what this means for compliance professionals, including the emerging expectation that compliance programs incorporate cartel-risk mapping and cross-border illicit finance detection.

Categories
ACI FCPA Conference 2025

ACI-FCPA Conference Speaker Preview Series – DOJ and FCPA Enforcement Update with David Last

In this episode of the ACI-FCPA and Global Anti-Corruption Conference Speaker Podcasts series, David Last discusses his fireside chat at the event with David Fuhr, current head of the FCPA Unit at the DOJ. Their presentation is titled “Year in Review with DOJ: The Big Picture of Enforcement for 2026.

Some of the issues the panel will discuss are:

  • Changes in FCPA enforcement in 2026;
  • End of monitorships? and
  • Where will enforcement be headed for 2026 and beyond?

I hope you can join me at the ACI–FCPA Conference. This year’s event will take place on December 3-4 at the Gaylord National Resort & Convention Center in National Harbor, Maryland, near Washington, D.C. The lineup of this year’s event is simply first-rate, featuring some of the top FCPA professionals, white-collar attorneys, and compliance practitioners in the field.

The 2025 program is being completely redesigned to help your organization stay agile, responsive, and ahead of the curve. Expect a dynamic agenda shaped by real-world priorities, practical takeaways, and the most cutting-edge thinking in compliance—led by a faculty of global practitioners with boots on the ground, encountering the very risks that come across your desk.

Please join me at the event. For information on the event, click here. Listeners of this podcast will receive a discount by using the code D10-999-CPN26.

Categories
ACI FCPA Conference 2025

ACI-FCPA Conference Speaker Preview Series – Dan Kahn on the New DOJ Enforcement Priorities

In this episode of the ACI-FCPA and Global Anti-Corruption Conference Speaker Podcasts series, Dan Kahn discusses his panel at the event, “Unpacking the DOJ’s New FCPA Enforcement Guidelines and Priorities: Practical Takeaways for Updating Risk Management, Internal Investigations, and Compliance Strategies.”

Some of the issues the panel will discuss are:

  • How does the current DOJ guidance inform compliance?
  • How to recalibrate your compliance program based on the updated Guidance.
  • What does the DOJ FCPA Guidance say about enforcement priorities? 

I hope you can join me at the ACI–FCPA Conference. This year’s event will take place on December 3-4 at the Gaylord National Resort & Convention Center in National Harbor, Maryland, near Washington, D.C. The lineup of this year’s event is simply first-rate, featuring some of the top FCPA professionals, white-collar attorneys, and compliance practitioners in the field.

The 2025 program is being completely redesigned to help your organization stay agile, responsive, and ahead of the curve. Expect a dynamic agenda shaped by real-world priorities, practical takeaways, and the most cutting-edge thinking in compliance—led by a faculty of global practitioners with boots on the ground, encountering the very risks that come across your desk.

Please join me at the event. For information on the event, click here. Listeners of this podcast will receive a discount by using the code D10-999-CPN26.

Categories
ACI FCPA Conference 2025

ACI-FCPA Conference Speaker Preview Series – Chuck Duross on Internal Investigation Strategies

In this episode of the ACI-FCPA and Global Anti-Corruption Conference Speaker Podcasts series, Chuck Duross discusses his panel at the event, “Rethinking Your Internal Investigations Playbook: Adapting Processes and Protocols to New Risk Realities from Anti-Corruption to Fraud, Trade, and Beyond.”

Some of the issues the panel will discuss are:

  • Reassessing investigation triggers;
  • Better identifying risk signals;
  • Coordinating investigations across multiple risk functions.

I hope you can join me at the ACI–FCPA Conference. This year’s event will take place on December 3-4 at the Gaylord National Resort & Convention Center in National Harbor, Maryland, near Washington, D.C. The lineup of this year’s event is simply first-rate, featuring some of the top FCPA professionals, white-collar attorneys, and compliance practitioners in the field.

The 2025 program is being completely redesigned to help your organization stay agile, responsive, and ahead of the curve. Expect a dynamic agenda shaped by real-world priorities, practical takeaways, and the most cutting-edge thinking in compliance—led by a faculty of global practitioners with boots on the ground, encountering the very risks that come across your desk.

Please join me at the event. For information on the event, click here. Listeners of this podcast will receive a discount by using the code D10-999-CPN26.

Categories
Great Women in Compliance

Great Women in Compliance – Insights from ACI FCPA and Global Anti-Corruption Conference

In this episode of Great Women in Compliance, co-hosts Lisa Fine and Hemma Lomax get a special preview of the 42nd Annual ACI Conference on the FCPA and Global Anti-Corruption. They are joined by two of the conference’s distinguished speakers: Sandra Moser, Partner at Morgan, Lewis & Bockius and former Chief of the DOJ’s Fraud Section, and Kimberly Parker, Partner and Co-Chair of the White-Collar Defense & Investigations practice at WilmerHale.

Sandra and Kimberly share their personal journeys into the white-collar and compliance space, discuss why this conference is a “must-attend” event in the anti-corruption world, and dive deep into their upcoming session topics. Kimberly explores how companies are re-evaluating resource allocation as global priorities evolve, while Sandra tackles the critical compliance challenges of operating in China amid geopolitical tensions.

This episode is a must-listen for practical insights on shifting DOJ expectations, the future of compliance, and tips for any first-time attendees.

 Highlights include:

* Sandra and Kimberly’s Journeys to Compliance

* Spotlight on the ACI FCPA Conference:

* Evolving Priorities & Resource Allocation

* Navigating Compliance in China

* The Future of Compliance

Resources:  

ACI’s 42nd Annual Conference on the FCPA and Global Anti-Corruption (December, Washington, DC – https://www.americanconference.com/fcpa-dc/

* Morgan, Lewis & Bockius: https://www.morganlewis.com/bios/sandramoser

* WilmerHale: https://www.wilmerhale.com/en/people/kimberly-parker

Biographies

Sandra Moser is a corporate investigations authority and trial lawyer who co-leads the firm’s global white collar and investigations practice. She is former chief of the US Department of Justice’s (DOJ’s) Criminal Division, Fraud Section in Washington, DC, and a former Assistant US Attorney (AUSA) for the District of New Jersey. She defends companies, boards, and executives in a wide range of matters—including healthcare and federal program fraud, the False Claims Act (FCA), the Foreign Corrupt Practices Act (FCPA), securities, commodities, and anti-money laundering—involving the DOJ, state attorneys general offices, US Securities and Exchange Commission (SEC), Commodity Futures Trading Commission (CFTC), US Congress, and other domestic and international enforcement agencies.

Kimberly A. Parker’s practice focuses on white-collar criminal matters, internal corporate investigations, and compliance counseling. Ms. Parker is vice chair of the firm’s Litigation/Controversy Department, co-chair of the White Collar Defense and Investigations Practice, and co-leads the Foreign Corrupt Practices Act (FCPA) and Anti-Corruption Practice. Ms. Parker is also co-chair of the firm’s Pro Bono and Community Service Committee.

Ms. Parker represents clients in a range of criminal and enforcement matters and also provides compliance and governance advice. She has conducted internal investigations in the United States, Asia, Africa, Europe, and Latin America. She has represented companies and individuals in a variety of FCPA enforcement matters. She also regularly counsels clients facing difficult FCPA issues in a variety of business contexts, and assists clients in developing and implementing FCPA compliance programs and conducting FCPA training. She is a regular speaker at FCPA events.

Categories
ACI FCPA Conference 2025

ACI-FCPA Conference Speaker Preview Series – Michael Harper on Reading the Tea Leaves for FCPA Enforcement Going Forward

In this episode of the ACI-FCPA and Global Anti-Corruption Conference Speaker Podcasts series, Michael Culhane Harper discusses his panel at the event, “Reading the Prosecutorial Tea Leaves: What the DOJ’s FCPA Case Pipeline and Go/No-Go Decisions Reveal About the Road Ahead.”

Some of the issues the panel will discuss are:

  • Analyzing recent DOJ pronouncements and enforcement actions;
  • Did Smartmatic change the self-disclosure calculus?
  • How voluntary disclosures and internal investigations are being assessed.

I hope you can join me at the ACI–FCPA Conference. This year’s event will take place on December 3-4 at the Gaylord National Resort & Convention Center in National Harbor, Maryland, near Washington, D.C. The lineup of this year’s event is simply first-rate, featuring some of the top FCPA professionals, white-collar attorneys, and compliance practitioners in the field.

The 2025 program is being completely redesigned to help your organization stay agile, responsive, and ahead of the curve. Expect a dynamic agenda shaped by real-world priorities, practical takeaways, and the most cutting-edge thinking in compliance—led by a faculty of global practitioners with boots on the ground, encountering the very risks that come across your desk.

Please join me at the event. For information on the event, click here. Listeners of this podcast will receive a discount by using the code D10-999-CPN26.

Categories
FCPA Compliance Report

FCPA Compliance Report – Navigating the Complexities of Self-Disclosure Amidst Political and Legal Uncertainties

In this episode, Tom Fox welcomes back Hughes Hubbard partner Mike DeBernardis to explore the unprecedented criminal indictment of Smartmatic and its implications on self-disclosure policies under the current administration. They discuss the rare occurrence of a company facing criminal charges and how it complicates the risk assessment for potential self-disclosure. The conversation covers the unpredictable nature of DOJ actions, the impact of political influence, and the challenges this situation presents for legal advisors and their clients. They also explore the broader implications for corporate compliance, including the increased complexity in predicting outcomes and the necessity for thorough internal investigations.

Key highlights:

  • Discussion on Smartmatic Indictment
  • Challenges in Self-Disclosure
  • Political Influence and Risks
  • Client Conversations and Risk Assessment

Resources: 

Hughes Hubbard & Reed

Mike DeBernardis on LinkedIn

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
From the Editor's Desk

From the Editor’s Desk: Compliance Week’s Insights and Reflections for October and into November 2025

In this episode of ‘From The Editor’s Desk’ podcast, hosts Tom Fox and Aaron Nicodemus delve into key compliance issues featured in Compliance Week. Tom and Aaron discuss the top stories from Compliance Week in October, look at some stories that will appear in November, and provide a preview of upcoming content and events.

They discuss the insights from a case study on Lafarge’s anti-bribery issues linked to cartels and terrorist organizations, as well as challenges in business due diligence in high-risk areas. The episode also covers recent trends around DOJ compliance monitorship under different administrations, insights into Foreign Corrupt Practices Act (FCPA) enforcement, and evolving compliance issues related to artificial intelligence (AI). Finally, they highlight upcoming Compliance Week initiatives and webinars, focusing on career pathways in compliance, the importance of due diligence in high-risk environments, and the practical applications of AI in the compliance field.

Resources:

Aaron Nicodemus on LinkedIn

Compliance Week