Corporate fraud is the use of deliberate deception, concealment, or abuse of trust inside a business entity to take money, property, or an unfair competitive advantage. It covers everything from a CFO cooking the books to an employee wiring company funds to a fake vendor. The penalties are among the harshest in federal white-collar law: up to 25 years in prison for securities fraud and fines reaching $25 million for organizations, plus civil enforcement, shareholder lawsuits, and in some cases a permanent ban from running a public company.
What Prosecutors Have to Prove
Not every bad business outcome is fraud. Four elements have to line up before conduct crosses the legal line.
Intent. The person behind the scheme must have acted with deliberate deception or known the information was false. Honest mistakes and bad judgment, even expensive ones, do not qualify. This is often the hardest element to prove because it requires showing what someone was thinking.
Material misrepresentation. The false statement has to involve something significant enough that a reasonable investor or business partner would factor it into a decision. Overstating revenue by hundreds of millions clears that bar easily. A clerical error buried in a footnote does not.
Reasonable reliance. The victim must have actually relied on the misrepresentation. If an investor never read the financials and bought the stock for unrelated reasons, the reliance element collapses.
Measurable harm. There has to be a real monetary loss tied to the reliance. Without demonstrable damages, a fraud claim fails even when everything else is airtight.
The Most Common Forms
Financial Statement Fraud
Financial statement fraud is the deliberate falsification of a company’s records to make its financial health look better than it is. It can sustain itself for years, affecting thousands of investors and employees before anyone catches it.
One of the most common techniques is improper revenue recognition. A company might use “channel stuffing,” flooding distributors with far more inventory than they ordered to book inflated sales for the quarter. A related tactic is the “bill-and-hold” scheme, where the company records a sale before the goods leave the warehouse. Both manufacture demand that does not exist.
On the balance sheet, companies inflate asset values by overstating inventory or accounts receivable, and hide liabilities by failing to record debts or by manipulating reserves for warranty claims and loan losses. The manipulation of reserves is particularly insidious. Executives build up a hidden cushion during good quarters and quietly release it during bad ones to smooth out earnings. Auditors sometimes call this “cookie-jar accounting.”
Under the Sarbanes-Oxley Act, CEOs and CFOs of public companies must personally certify that their quarterly and annual financial reports are accurate and that internal controls over financial reporting are effective. An executive who knowingly certifies a false report faces up to 10 years in prison and a $1 million fine. If the certification is willful, the penalties jump to 20 years and $5 million.1Office of the Law Revision Counsel. 18 U.S. Code 1350 – Certification of Periodic Financial Reports
Insider Trading
Insider trading becomes illegal when someone buys or sells a security while aware of material nonpublic information about the company. The governing rule defines this as a purchase or sale made “on the basis of” such information when the trader owes a duty of trust or confidence to the source.2eCFR. 17 CFR 240.10b5-1 – Trading on the Basis of Material Nonpublic Information in Insider Trading Cases
Federal law recognizes two theories. Under the classic theory, a corporate insider like an officer or director breaches a fiduciary duty to shareholders by trading on confidential company information. The misappropriation theory, established by the Supreme Court in United States v. O’Hagan, reaches further. It applies to outsiders who steal confidential information from someone who trusted them with it and then trade on that information. The Court held that a person commits fraud “in connection with” a securities transaction when they misappropriate confidential information for trading purposes in breach of a duty owed to the source.3Justia Law. United States v. O’Hagan, 521 U.S. 642 (1997)
Insiders who want to trade without running afoul of the rules can set up pre-planned arrangements under Rule 10b5-1. The SEC tightened these plans in 2023. Directors and officers must observe a cooling-off period of at least 90 days after adopting or modifying a plan before trading can begin; for other insiders, the window is 30 days.4U.S. Securities and Exchange Commission. Fact Sheet – Rule 10b5-1 Insider Trading Arrangements and Related Disclosures Directors and officers also have to certify when adopting a plan that they are not aware of any material nonpublic information and that the plan is entered in good faith. Overlapping plans are prohibited, and individuals are limited to one single-trade plan in any 12-month period.5U.S. Securities and Exchange Commission. SEC Adopts Amendments to Modernize Rule 10b5-1 Insider Trading Plans and Related Disclosures
Embezzlement and Asset Misappropriation
Embezzlement is the theft of company assets by someone with authorized access to them. It is by far the most common type of occupational fraud, ranging from a warehouse employee pocketing cash to a CFO funneling millions through shell companies.
Skimming is one of the harder schemes to detect because the stolen cash never enters the accounting system. An employee intercepts customer payments before they are recorded, leaving no paper trail. Fraudulent expense reports are more straightforward: reimbursement claims for personal purchases or fabricated business expenses. At the executive level, a common pattern involves creating a shell company that submits invoices for consulting or services that were never performed, with payments flowing into accounts the executive controls.
Business email compromise has become one of the fastest-growing methods for diverting corporate funds. Attackers impersonate trusted contacts, often a CEO, vendor, or outside counsel, to trick employees into wiring money to fraudulent accounts. They either compromise a legitimate email account or create convincing forgeries that mimic real addresses. In many cases, the attacker modifies a legitimate invoice with new routing details, making the fraud nearly invisible until the real vendor calls about a missing payment. Gift card schemes, where an employee is told to urgently buy gift cards for an executive, account for a surprising share of these attacks because they rely on volume and speed rather than large individual payouts.
Bribery and the FCPA
Corporate bribery involves offering something of value to improperly influence a business or government decision. Domestic bribery is prosecuted under various federal statutes, but when foreign government officials are involved, the Foreign Corrupt Practices Act takes center stage.
The FCPA makes it illegal for U.S. companies, their officers, and their agents to pay or offer anything of value to a foreign government official to obtain or retain business.6U.S. Department of Justice. About the Foreign Corrupt Practices Act Unit “Anything of value” does not require a briefcase full of cash. Travel expenses, charitable donations at an official’s request, and internships for an official’s family members have all triggered enforcement actions. The statute also requires publicly traded companies to maintain accurate books and records and to implement adequate internal controls.
A companion statute, the Foreign Extortion Prevention Act enacted in 2024, criminalizes the conduct of foreign officials who demand or accept bribes from U.S. businesses.6U.S. Department of Justice. About the Foreign Corrupt Practices Act Unit
Who Investigates and Enforces
The same conduct can trigger parallel civil and criminal cases, which is why multiple agencies often work the same facts.
The Securities and Exchange Commission is the primary civil enforcement body for securities-related fraud. Its Division of Enforcement files hundreds of actions each year, seeking monetary penalties and injunctions.7Securities and Exchange Commission. About the Division of Enforcement The SEC can seek disgorgement of ill-gotten gains and has the authority to permanently bar individuals from serving as officers or directors of any public company when the conduct demonstrates unfitness.8Office of the Law Revision Counsel. 15 U.S. Code 78u – Investigations and Actions
The Department of Justice handles criminal prosecution under federal wire fraud, mail fraud, and securities fraud statutes.9Department of Justice. Corporate Crime The FBI provides investigative resources and often builds parallel cases with the SEC. For corporate defendants, the DOJ frequently resolves cases through Deferred Prosecution Agreements or Non-Prosecution Agreements, in which the company admits wrongdoing, pays a substantial fine, and accepts an independent monitor to oversee reforms.10U.S. Government Accountability Office. Corporate Crime – DOJ Has Taken Steps to Better Track Its Use of Deferred and Non-Prosecution Agreements
The IRS Criminal Investigation division becomes involved when corporate fraud touches tax evasion or false filings. IRS compliance employees refer cases to CI when they find affirmative acts of fraud or willful tax violations.11Internal Revenue Service. IRM 25.1.3 Criminal Referrals
The Financial Industry Regulatory Authority oversees broker-dealers and their associated persons. FINRA can impose fines, suspensions, permanent bars from the securities industry, and orders to pay restitution.12Financial Industry Regulatory Authority. Enforcement It cannot impose criminal penalties, but a FINRA bar effectively ends a career in the brokerage business.
Whistleblower Rewards and Protection
The SEC’s whistleblower program, established under the Dodd-Frank Act, has become one of the most effective tools for uncovering corporate fraud. Individuals who provide original information leading to a successful enforcement action with sanctions over $1 million are entitled to 10% to 30% of the monetary sanctions collected.13Office of the Law Revision Counsel. 15 U.S. Code 78u-6 – Securities Whistleblower Incentives and Protection Some awards have reached hundreds of millions of dollars.14Securities and Exchange Commission. Whistleblower Program
SOX Section 806 separately protects employees of public companies from retaliation for reporting fraud. An employer cannot fire, demote, suspend, threaten, or discriminate against an employee who reports conduct the employee reasonably believes violates federal fraud statutes or SEC rules. An employee who faces retaliation can file a complaint with the Department of Labor within 90 days. Remedies include reinstatement, back pay with interest, and compensation for litigation costs and attorney fees.15U.S. Department of Labor. Sarbanes-Oxley Act of 2002, Section 806
Criminal Penalties
Federal criminal penalties for corporate fraud are among the most severe in white-collar law, and prosecutors routinely stack multiple counts.
- Securities fraud under 18 U.S.C. § 1348: up to 25 years in prison per count for executing or attempting to execute a scheme to defraud in connection with a registered security or commodity.16Office of the Law Revision Counsel. 18 U.S. Code 1348 – Securities and Commodities Fraud
- Wire fraud under 18 U.S.C. § 1343: up to 20 years per count, or 30 years and a $1 million fine if the scheme affects a financial institution.17Office of the Law Revision Counsel. 18 U.S. Code 1343 – Fraud by Wire, Radio, or Television
- Mail fraud under 18 U.S.C. § 1341: the same structure as wire fraud, 20 years ordinarily and 30 years when a financial institution is involved.18Office of the Law Revision Counsel. 18 U.S. Code 1341 – Frauds and Swindles
- Securities Exchange Act violations under 15 U.S.C. § 78ff: willful violations carry up to 20 years and fines up to $5 million for individuals or $25 million for entities.19Office of the Law Revision Counsel. 15 U.S. Code 78ff – Penalties
- False certification of financial reports under 18 U.S.C. § 1350: knowing violations up to 10 years and $1 million; willful violations up to 20 years and $5 million.1Office of the Law Revision Counsel. 18 U.S. Code 1350 – Certification of Periodic Financial Reports
Convicted individuals also face mandatory restitution to victims and forfeiture of proceeds. For corporate defendants, criminal fines can dwarf the illegal profits, and the reputational damage from a guilty plea or conviction often proves more costly than the penalties themselves.
Civil Penalties and Private Lawsuits
Civil enforcement runs on a parallel track and often results in bigger numbers than the criminal fines. The SEC routinely seeks disgorgement, forcing fraudulent parties to surrender all profits from the illegal activity.8Office of the Law Revision Counsel. 15 U.S. Code 78u – Investigations and Actions On top of disgorgement, the SEC imposes civil monetary penalties that can reach tens of millions for a single action.
Private litigation adds another layer. Shareholder class actions allow injured investors to sue the company and its executives for losses tied to the fraud. These cases routinely settle for hundreds of millions of dollars, and in extreme cases, settlements have exceeded a billion. The combined financial fallout from SEC disgorgement, civil penalties, and private settlements often dwarfs whatever the perpetrators gained.
Government Contractor Debarment
Companies that depend on federal contracts face an extra consequence. Under federal acquisition rules, a conviction for fraud, embezzlement, bribery, or false statements in connection with a government contract is cause for exclusion from all federal contracting, typically for three years. The debarment extends government-wide and can reach subcontractors and their key personnel.20Acquisition.GOV. FAR 9.406-2 – Causes for Debarment For defense contractors and major federal service providers, debarment can be an existential threat.
How Long Prosecutors and Plaintiffs Have
Time limits govern how long after the conduct a case can be brought, and the deadlines are different for civil and criminal actions.
The general federal criminal statute of limitations for most offenses is five years. Congress carved out a longer window for securities fraud: prosecutors have six years from the date of the offense to bring charges.21Office of the Law Revision Counsel. 18 U.S. Code 3301 – Securities Fraud Offenses The extension was part of SOX and reflected the fact that complex accounting schemes often take years to unravel.
Private civil securities fraud claims must be brought within two years after the plaintiff discovers the facts constituting the violation, but no later than five years after the violation occurred, whichever comes first.22Office of the Law Revision Counsel. 28 U.S. Code 1658 – Time Limitations on the Commencement of Civil Actions The two-year discovery clock means a plaintiff who ignores obvious red flags cannot sit on a claim indefinitely.
The SEC operates under its own timeline for disgorgement. For violations involving intentional fraud, the agency has up to ten years from the latest date of the violation. For other violations, the window is five years.8Office of the Law Revision Counsel. 15 U.S. Code 78u – Investigations and Actions Missing those deadlines is one of the few ways a clear-cut fraud case can completely fall apart.