Defense Contractor Fraud: Schemes, False Claims Act, and Penalties

Defense contractor fraud is any scheme in which a company receiving federal defense dollars lies to get paid: delivering cheaper parts than it billed for, padding its hours, rigging bids, faking small-business status, or falsely certifying it meets security rules. The federal government’s main tool against it is the False Claims Act, a Civil War–era statute that imposes triple damages, lets private whistleblowers sue on the government’s behalf, and runs alongside criminal charges and debarment from future contracts.¹

What the Schemes Look Like

Fraud on defense contracts tends to fall into a handful of recognizable patterns. Some target the quality of what’s delivered. Others inflate the price. Others corrupt how the contract was awarded in the first place.

Product Substitution

A contractor bills for high-grade, specification-tested material and ships something cheaper, substandard, or counterfeit. Parts get certified as meeting military specifications when they were never tested, or commercial-grade components are swapped in for military-grade ones. In weapons systems, aircraft, and body armor, the consequences can be fatal.

Mischarging and Cost Inflation

Mischarging uses deceptive accounting to inflate reimbursements: billing for labor that was never performed, padding hours, loading unrelated overhead onto a government contract. A common variant is cross-charging, where expenses are moved off a fixed-price contract (which the contractor would have to absorb) and onto a cost-plus contract (where the government pays actual costs plus profit). The Defense Contract Audit Agency reviews contractor books specifically to catch these patterns.²

Bid Rigging and Kickbacks

Procurement fraud corrupts the award process. In bid rigging, competitors coordinate so a predetermined company wins at an inflated price, with the others submitting intentionally high bids to simulate competition. Kickbacks involve a contractor or subcontractor paying a bribe to a government official or prime contractor employee to steer business its way. Federal law makes it a crime to provide, attempt to provide, offer, solicit, or accept a kickback tied to a government contract.

Small Business Set-Aside Fraud

The government reserves a share of contracts for small businesses, including those owned by women, veterans, service-disabled veterans, and businesses in economically distressed areas. Fraud happens when a company misrepresents eligibility, often by setting up a shell entity that looks small on paper while the real company runs operations and collects the money. Falsely claiming veteran ownership, overstating economic disadvantage, or misrepresenting operations in a qualifying zone all count. Those certifications are treated as false claims.

Cybersecurity Compliance Fraud

Defense contractors that handle controlled information must comply with federal cybersecurity standards and self-report their compliance scores. The Department of Justice launched its Civil Cyber-Fraud Initiative in October 2021 to pursue contractors that misrepresent that posture, and no data breach is required: the false certification is itself the violation. In 2025, one company paid $4.6 million for falsely claiming full implementation of required cybersecurity controls, and another paid $8.4 million for certifying compliance it had not actually achieved. Discrepancies between self-reported scores and independent assessments are used as evidence.

Civil Liability Under the False Claims Act

A contractor violates the False Claims Act by knowingly submitting a false claim for payment, or causing someone else to submit one.¹ The statute also covers reverse false claims: knowingly hiding or avoiding an obligation to pay money back to the government. A contractor that discovers it was overpaid and sits on the money has committed a separate violation.³

“Knowingly” is broader than most people think. The government doesn’t have to show a specific intent to defraud. Actual knowledge, deliberate ignorance, or reckless disregard of a claim’s accuracy is enough.⁴ You can’t escape liability by refusing to look.

The money consequences are severe. A contractor found liable owes three times the government’s damages plus a per-claim penalty that is inflation-adjusted each year. As of 2025, that penalty runs from $14,308 to $28,619 per claim.⁵ In a case involving thousands of invoices, the per-claim penalties alone can outweigh the underlying damages.

Whistleblower Lawsuits and the Qui Tam Share

The False Claims Act’s qui tam provision lets a private person, called a relator, sue on behalf of the United States. Most relators are employees or insiders who saw the fraud firsthand. The complaint is filed under seal, hidden from both the public and the defendant, for at least 60 days while the Justice Department investigates.¹ Courts routinely extend the seal, and multi-year investigations before a case becomes public are common.

After investigating, DOJ decides whether to intervene. If it does, the relator receives 15% to 25% of the recovery depending on their contribution. If DOJ declines and the relator proceeds alone, the share rises to 25% to 30%.⁶ Declined cases succeed less often, and the larger share reflects the greater risk.

One important limit: a relator generally can’t base a qui tam suit on fraud already disclosed through federal investigations, hearings, audits, or news reports. The exception is being an “original source” with independent knowledge that materially adds to what’s public, shared with the government before filing.

Protection From Retaliation

Reporting fraud at a defense contractor is a career-level decision, and the statute puts specific protections around it. An employee, contractor, or agent who is fired, demoted, suspended, harassed, or otherwise punished for reporting fraud or participating in a False Claims Act case is entitled to be made whole.⁶ The remedies are reinstatement to the same position with the seniority the employee would have had, double back pay plus interest, and special damages including litigation costs and reasonable attorney fees.

A retaliation claim must be filed within three years of the retaliatory act.⁶ Miss the deadline and the claim is gone, no matter how obvious the retaliation.

Criminal Prosecution

Individuals involved in defense contract fraud also face criminal charges, with penalties scaled to the scale and sophistication of the scheme. Submitting a false claim to a federal agency carries up to five years in prison. When multiple people coordinate, conspiracy to defraud the government doubles that exposure to ten years.⁷

The heaviest penalties sit under the major fraud statute, which applies when the contract or federal assistance involved is worth $1 million or more. Conviction carries up to ten years and a fine of up to $1 million for an individual. If the loss or defendant’s gain exceeds $500,000, the fine can reach $5 million, with a $10 million cap across multiple counts in a single prosecution.⁸ Prosecutors routinely add wire fraud and false statements charges on top.

Debarment and Loss of Future Contracts

For a company that lives on federal work, administrative penalties can hurt more than the fine. Debarment bars the contractor from new federal contracts and subcontracts for a set period. Under the Federal Acquisition Regulation, debarment is generally limited to three years, but it can be shorter or longer depending on severity.⁹ The stated purpose is protecting the government, not punishing the contractor, but for a company whose revenue depends on federal work the distinction doesn’t matter much.¹⁰

Suspension is the shorter-term version. A contractor can be suspended immediately on adequate evidence of misconduct, before any conviction, and the suspension lasts until the underlying proceedings resolve. Any time already served under suspension counts toward a later debarment.⁹ On top of that, a fraud conviction can mean lost security clearances, terminated contracts, and exclusion from classified programs. For a defense-focused company, losing clearances can end the business even without formal debarment.

The Duty to Self-Report

Contractors face consequences not only for committing fraud but for failing to report it. Under the Federal Acquisition Regulation, contractors with contracts worth $5.5 million or more (or lasting over 120 days) must promptly disclose in writing to the agency’s Inspector General any credible evidence that an employee, agent, or subcontractor has committed fraud, bribery, or a False Claims Act violation.¹¹ That obligation runs until three years after final payment.

The same rule requires a written code of business ethics within 30 days of award, distributed to every employee on the contract. Non-small-business contractors must also stand up a formal ethics awareness and compliance program within 90 days, with periodic training and an internal reporting channel.¹¹ Failing those requirements is itself grounds for suspension or debarment. Significant overpayments must also be disclosed; hiding one can become a reverse false claim.

Deadlines for Filing

A civil False Claims Act case must be brought within six years of the violation, or within three years of when the responsible government official knew or should have known the material facts, whichever is later. No case can be filed more than ten years after the violation, no matter when it surfaces.¹²

Because qui tam complaints sit under seal and the government’s investigation can run for years, a defendant may first learn about a lawsuit well after the limitations window would appear to have closed. The filing date, not the unsealing date, is what controls. Anyone holding evidence of fraud should not assume time is on their side.

1
U.S. Department of Justice. The False Claims Act
2
Defense Contract Audit Agency. Home
3
Office of the Law Revision Counsel. 31 USC 3729 – False Claims
4
Office of the Law Revision Counsel. 31 USC 3729 – False Claims
5
Federal Register. Civil Monetary Penalties Inflation Adjustments for 2025
6
Office of the Law Revision Counsel. 31 USC 3730 – Civil Actions for False Claims
7
Office of the Law Revision Counsel. 18 USC 286 – Conspiracy to Defraud the Government With Respect to Claims
8
Office of the Law Revision Counsel. 18 USC 1031 – Major Fraud Against the United States
9
Acquisition.GOV. FAR 9.406-4 – Period of Debarment
10
Acquisition.GOV. Federal Acquisition Regulation Subpart 9.4 – Debarment, Suspension, and Ineligibility
11
Acquisition.GOV. Contractor Code of Business Ethics and Conduct
12
Office of the Law Revision Counsel. 31 USC 3731 – False Claims Procedure