Categories
Everything Compliance

Everything Compliance: Episode 162, The Numbers, Numbers, Numbers Edition

Welcome to this Edition of award-winning Everything Compliance. In this episode, we have the quartet of Matt Kelly, Jonathan Marks, and special guests Lisa Fine and Dr. Hemma Lomax with Tom Fox, the Compliance Evangelist, as host.

1. Matt Kelly looks at the recent Millicom Cellular FCPA enforcement action.  He shouts out to the ChatGPT em-dash and rants about the federal government’s attempts to ban all state regulation of AI.  

2. Jonathan Marks reviews the failures of internal controls in the NBA and MLB around the ongoing betting scandals. He shouts out MacKenzie Scott for her $70 million donation to Historically Black Colleges and Universities (HBCUs) in 2025, continuing her support after a $560 million donation to 27 HBCUs in 2020. 

3. Special Guest Panelist Dr. Hemma Lomax considers where Agentic AI in compliance is heading. She rants about ChatGPT em dashes and shouts out recent legal tech conferences.  

4. Special Guest Panelist Lisa Fine looks at three key issues on her mind about compliance for 2026. She shouts out to the Compliance Week survey, Inside the Mind of the CCO, and encourages all listeners to participate.  

5. Tom Fox shouts out to Gen Z and their play with the numbers 6 and 7 and traces the use of numerology in texts back to the Book of Genesis and the ancient text of Gilgamesh.  

The members of Everything Compliance are:

The host, producer, and sometimes panelist of Everything Compliance is Tom Fox, the Voice of Compliance. He can be reached at tfox@tfoxlaw.com.  The award-winning Everything Compliance is a part of the Compliance Podcast Network.

Categories
Blog

Millicom Cellular, Part 2: Lessons Learned on Cartels, Cash, and Control Failures

The Millicom Cellular FCPA enforcement action is not just another FCPA case. It is a case that signals a new frontier for compliance risk. It blends classic corrupt-payment schemes with organized crime, narcotrafficking proceeds, obstructed governance, and aggressive legislative capture. It is a wake-up call for compliance officers that the threat landscape is expanding in ways that require deeper operational controls, broader due diligence frameworks, and more sophisticated cross-functional collaboration.

In Part 1, we considered the underlying facts and FCPA violations of this matter. In Part 2, we examine what compliance professionals must take away from the case.

Lesson 1: Joint-Venture Governance Failures Are Not a Defense

Millicom Cellular held a 55 percent ownership stake in TIGO Guatemala, but the local partner exercised operational control and blocked Millicom Cellular from information and cooperation. The DOJ notes that Millicom Cellular voluntarily disclosed early concerns in 2015 but was unable to compel cooperation from local executives or obtain complete data. The result is a clear message:

Ownership without operational control equals enormous FCPA exposure.

Compliance professionals must:

  • Implement JV governance protocols that require access rights, audit rights, and cooperation language in shareholder agreements. Try to place your company’s representative as the CFO of the joint venture.
  • Establish escalation pathways if a partner obstructs investigations.
  • Treat “majority ownership without control” as a high-risk structure in compliance risk assessments.

Yet notwithstanding the foregoing, DOJ has made clear it will not accept a lack of control as an excuse for failing to detect corruption, especially when red flags are visible.

Lesson 2: Cash-Based Bribery Ecosystems Require a Different Kind of Monitoring

The bribery scheme ran almost entirely on cash: cash in duffel bags delivered by helicopter, cash laundered through drug traffickers, cash moved through shell companies, and cash withdrawn from banks in plastic bags. Traditional financial controls are almost useless in the face of an off-books cash economy. Compliance must be enhanced:

  • Controls around cash withdrawals
  • Monitoring of cash-intensive vendors
  • Patterns of invoicing irregularities
  • Real-time analytics on deviations in expense and procurement behavior

This is not a theoretical exercise. It is an operational reality for companies in high-risk jurisdictions.

Lesson 3: Cartel Exposure Is Emerging as a Corporate Compliance Obligation

This case represents one of the most explicit linkages between FCPA violations and narco-trafficking cash flows. The scheme not only involved bribes; it also involved bribes financed by organized crime. Compliance officers must now assume that criminal networks may view legitimate multinationals as conduits for illicit financial flows. This demands:

  • Enhanced beneficial-ownership checks
  • Screening for cartel-linked financial intermediaries
  • Deeper diligence on bankers, lawyers, and consultants
  • Country-level threat mapping that includes cartel and organized crime indicators

The DOJ has increasingly emphasized convergence risk between corruption, money laundering, and organized crime. The Millicom Cellular enforcement action is a prime example.

Lesson 4: “Influencing Legislation” Is a Red Flag, Not a Business Strategy

TIGO Guatemala sought legislative outcomes that would alter the national telecom law. That in itself is not illegal. What is unlawful is tying legislative outcomes to cash bribes, helicopter deliveries, and cartel-funded transactions. Compliance teams must scrutinize:

  • Payments to lobbyists, political consultants, and intermediaries
  • Relationships with legislators and political parties
  • Sponsorships, charitable donations, and community programs with political beneficiaries

Any effort to “shape legislation” must come with strict controls.

Lesson 5: Data Gaps Are Compliance Gaps

Millicom’s inability to obtain information access within its own joint venture delayed detection and undermined the credibility of its initial self-disclosure. Compliance professionals must demand:

  • Rights to data
  • Rights to conduct investigations
  • Rights to interview employees
  • The right to require cooperation from partners

A partner who denies access creates liability.

Lesson 6: Remediation Must Be Conducted Like a Corporate Transformation

Millicom’s remediation was extensive. It included:

  • Replacing senior personnel
  • Centralizing compliance oversight
  • Enhancing third-party onboarding and continuous monitoring
  • Adding data analytics
  • Conducting control testing across more than 250 transactions
  • Creating an ephemeral-messaging retention policy
  • Increasing compliance headcount by 800 percent (pages 5–6)

The DOJ’s description reads less like remediation and more like organizational reinvention. That is the expectation now. Compliance must treat remediation as a fully integrated operational overhaul.

Lesson 7: The DOJ Will Reopen Cases When New Evidence Emerges

The DOJ initially closed the investigation in 2018. It reopened the case in 2020 after uncovering new evidence from outside sources, including cartel-linked transactions. The message is clear:

  • Self-disclosure is not a shield when the company lacks visibility into misconduct.
  • Failure to detect ongoing wrongdoing can undermine trust and credit for cooperation.
  • Compliance must ensure continuous monitoring even after perceived risk has been reduced.

Conclusion: The New Compliance Mandate

The Millicom Cellular enforcement action demonstrates that compliance risk is no longer confined to corrupt payments. It now involves organized crime, cash-based bribery systems, cross-border laundering, political capture, and governance obstructions. Compliance professionals must operate with a broader risk lens, encompassing cartel risk, cash-economy vulnerabilities, high-risk political interactions, and joint-venture control structures. This is a key enforcement effort of the Trump Administration.

The future of compliance is not about preventing bribery alone. It is about defending the corporation from becoming an unwitting partner in a criminal enterprise.

Categories
Blog

Millicom Cellular Part 1: Bribery by Helicopter – Unpacking the Full Extent of the FCPA Violations

The Millicom Cellular enforcement action stands out as one of the most interesting Foreign Corrupt Practices Act (FCPA) cases in recent memory. It sits at the intersection of telecom, political corruption, joint-venture governance failures, and international criminal cartels. For compliance professionals, this matter is not simply about bribery. It is about understanding how criminal ecosystems infiltrate legitimate business chains, how corporate governance can be weaponized, and how cash-based bribery systems can bypass formal controls entirely. It also demonstrates the Trump Administration’s clear enforcement priorities for FCPA enforcement going forward.

In Part 1, we will consider the facts: what the Department of Justice uncovered, how the bribery schemes operated, and why cartel money ended up in a major telecom enterprise. In Part 2, we will focus on the lessons learned for the compliance professional.

The Scheme: Bribery at Scale to Influence National Legislation

According to the Statement of Facts, between at least 2012 and 2018, Comunicaciones Celulares S.A. (TIGO Guatemala) engaged in a widespread and prolonged bribery scheme to influence Guatemalan legislators and secure favorable laws, regulatory decisions, and business advantages for the company. The scheme was orchestrated by:

  • TIGO Guatemala Executive 1;
  • Former Chief Corporate Affairs Officer Acisclo Valladares;
  • Shareholder 1, owner of the Panama-based joint-venture partner; and
  • Numerous intermediaries and employees who facilitated cash movements and interactions with government officials

The benefits sought were substantial. TIGO Guatemala paid bribes to secure support for the renewal of valuable radiofrequency usufruct titles for a twenty-year term. The company also paid bribes to secure passage of “Ley TIGO,” a telecommunications law that disproportionately benefited the company by giving it preferential infrastructure authorization rights at the national, rather than municipal, level. The company earned at least USD 58 million in profits from these schemes.

In short, these were not sporadic acts of misconduct. They were deliberate, sustained, and intended to shape the legal and commercial landscape of an entire national industry.

The Mechanics: How the Bribes Were Paid

The bribery system relied almost entirely on cash. That fact alone created multiple operational and legal vulnerabilities. But the methods used to generate, transport, and disguise that cash reveal the depth of the misconduct.

1. Helicopter Deliveries of Cash

Early in the scheme, cash was transported in duffel bags flown by helicopter to the TIGO Guatemala helipad, where Valladares retrieved it and stored it in his office (page A-6). Government officials or their security teams visited the TIGO offices in person to collect payments. This unusual method came to an abrupt stop when one helicopter made an emergency landing at a military base. Cash-filled duffel bags were discovered by the base commander, triggering inquiries.

2. Millicom’s Put-Call Agreement Fee Used as a Bribery Slush Fund

In late 2013, Shareholder 1 informed a Millicom executive that part of the USD 15 million “execution fee” for a put-call agreement would be used to pay bribes and fund political campaigns. Although Millicom did not control TIGO Guatemala at the time and objected to the practice, the fee was used to reimburse bribes previously paid and to create additional liquidity for further corrupt payments.

3. Inflated and Backdated Contracts

In 2014, TIGO Guatemala Executive 1 executed a grossly inflated USD 12 million contract with an entity associated with Shareholder 1 to generate a slush fund. Shell companies then backdated invoices to create the appearance of legitimate legal or consulting services. Funds were funneled to Valladares, including into his personal bank account in the United States.

4. Cartel-Linked Cash Through a Money-Laundering Banker

The most alarming element involved the use of narcotrafficking proceeds. Beginning in 2014, banker Álvaro Estuardo Cobar Bustamante laundered cash for drug traffickers and funneled that cash to Valladares for TIGO Guatemala’s bribe payments (pages A-8 to A-10). In one instance, Cobar laundered USD 1 million for a narcotics trafficker, then delivered the cash to be used for bribes. In 2017, Valladares wired USD 350,000 from his U.S. account to one of Cobar’s accounts as part of a cross-border laundering operation that served both TIGO’s bribery needs and cartel objectives.

The fact that cartel money entered the corporate bloodstream of a multinational telecom enterprise is extraordinary. It transforms this case from a classic FCPA scenario into one that also implicates money laundering, organized crime, and regional security threats.

Millicom’s Partial Self-Disclosure and Its Limitations

Millicom, the parent company and majority owner since 2015, self-disclosed concerns in 2015. But Millicom did not have operational control over the joint venture and was blocked from accessing key information. As a result:

  • Millicom received partial self-disclosure credit.
  • The DOJ closed the first phase of the investigation in 2018.
  • The investigation was later reopened in 2020 after independent evidence emerged that the scheme had continued, including cartel-linked cash flows.

These dynamics highlight the vulnerabilities of joint ventures, in which a local partner holds operational control and may intentionally obstruct visibility into corruption risks.

The Resolution

Under the deferred prosecution agreement, TIGO Guatemala agreed to:

  • Pay a USD 60 million criminal penalty;
  • Forfeit USD 58,198,343;
  • Implement extensive remediation and compliance enhancements; and
  • Cooperate in ongoing investigations.

The DOJ credited Millicom Cellular for extensive remediation after acquiring full operational control in 2021, including overhauling compliance resources, enhancing third-party monitoring, building data analytics systems, and significantly increasing compliance staffing.

Conclusion

The Millicom Cellular enforcement action reveals a corporate ecosystem in which political corruption, weak joint venture governance, and cartel money combined to create a perfect storm of FCPA risk. Join us tomorrow for Part 2, where I will examine what this means for compliance professionals, including the emerging expectation that compliance programs incorporate cartel-risk mapping and cross-border illicit finance detection.

Categories
Compliance Into the Weeds

Compliance into the Weeds: Uncovering FCPA Violations: Millicom’s Complex Case Involving Drug Cartel Funds

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss the intricate details of a recent FCPA enforcement action against Millicom Cellular, a Luxembourg-based telecommunications company with operations in Guatemala.

The discussion uncovers how Millicom’s joint venture, Comunicaciones Celulares (CommCell), became embroiled in bribery and corruption involving duffel bags of drug cartel cash used to pay off Guatemalan officials. Despite the DOJ’s earlier pause on FCPA enforcement, the emergence of narco-trafficking aspects led to a reopened investigation and significant penalties for Millicom. Key points include the case timeline, the lack of Millicom’s operational control and visibility, and the broader implications for due diligence in joint ventures and cross-border operations in high-risk regions.

Key highlights:

  • Details of the FCPA Enforcement Action
  • Millicom’s Joint Venture in Guatemala
  • Self-Disclosure and DOJ’s Response
  • Timeline of Events and Corruption Details
  • Drug Trafficking and Bribery Connections
  • Implications and Compliance Lessons

Resources:

Matt in Radical Compliance

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence.