Quick answer
Vendor kickbacks survive when procurement controls, auditor red flags and safe reporting are missing. In India, the Prevention of Corruption Act 1988, as amended in 2018, punishes giving an undue advantage to a public servant with up to seven years' imprisonment (s.8) and makes a company liable under s.9 unless it had adequate procedures.
Key takeaways
- The kickback scheme at "Spectrum" ran for 24 months and survived three internal audits.
- Auditors saw a 9 to 11% material cost premium but had no rule that made it an escalation trigger.
- The direct loss was about ₹28 lakhs; the client, investor and insurance fallout cost far more.
- The fix was role-specific training, a third-party hotline, segregation of duties and auditor red-flag training.
This is the story of "Spectrum Infrastructure Solutions" (name changed), a mid-sized engineering company based in Mumbai that handled civil construction projects across western India. On the surface, they were solid, good balance sheet, growing order book, respected in their industry. But for 24 months, they were bleeding money through a vendor kickback scheme that almost no one saw coming.
How did the vendor kickback scheme start?
It started with a vendor offer made under deadline pressure: inflate invoices by 8 to 12% and split the difference in cash.
Pradeep, a procurement manager at Spectrum, was tasked with sourcing steel and concrete for a major highway project. Q4 targets were aggressive. The project timeline was tight. Cost was critical. His manager had made it clear: find the best deal, hit the timeline, and keep the project profitable.
A vendor, "Durga Steel Ltd," approached him with an offer. They could supply high-quality steel at competitive rates. They could also deliver faster than anyone else in the market. The catch? Durga wanted Pradeep to approve inflated invoices, adding 8-12% to the actual price, and they would split the difference with him personally. Cash. Quarterly.
Pradeep's response: "Let me think about it."
Here's what likely convinced him: his compliance training that year covered anti-bribery in 20 slides, mostly generic. It talked about "not accepting bribes," but never explained what counted as bribery versus standard business practice. There was no mechanism to report pressure without his name getting out. There was no conversation with his manager about ethical boundaries. And most critically, no one had explained what actually happens when a company allows this, not morally, but practically.
Three weeks later, he said yes to Durga Steel.
How did the scheme stay hidden for 24 months?
Every invoice looked complete, and each audit accepted the finance team's explanation for higher material costs instead of testing it.
What did the kickback scheme cost the company?
By the time Spectrum's board discovered the scheme, the company had lost approximately ₹28 lakhs (₹2.8 million) to inflated material costs over 24 months. But that was the smallest cost.
The bigger hits:
Regulatory Risk: The company self-reported to the MCA and CBI. Both Pradeep and Vikram faced potential charges under the Prevention of Corruption Act. Pradeep's career was essentially over. Vikram negotiated a settlement requiring him to repay funds and accept a 2-year industry ban.
Reputational Damage: News leaked to two major clients. Both put Spectrum on a "compliance review watch." One delayed a ₹8 crore contract renewal pending additional due diligence.
Board and Investor Confidence: The company's PE investor (who owned 25% stake) questioned governance. New compliance and audit requirements were imposed, adding ₹15 lakhs annually in overhead. The investor also demanded a board-level compliance committee, which hadn't existed before.
Insurance: D&O insurance premium jumped 40%. General liability policy excluded fraud-related claims.
Why did three internal audits miss the kickbacks?
Because the auditors had no red-flag checklist, tested paperwork rather than amounts, had no vendor-fraud training, trusted the procurement team and worked in silos.
The real question: why did internal auditors see the cost anomaly three times and not escalate?
Root causes:
1. No defined red flags: The audit team didn't have a checklist. "Material costs 10-11% higher than market" wasn't in their escalation matrix. It was treated as judgment call, not a trigger.
2. Weak procurement testing: Auditors didn't compare actual supplier quotes to approved invoices. They reviewed completeness of documentation, not accuracy of amounts.
3. No procurement training for auditors: The internal audit team had never been trained on vendor fraud schemes. They didn't know what to look for.
4. Trust in procurement team: Pradeep and Vikram had clean compliance records. No flags in their employment history. Auditors believed they had no motive.
5. Siloed reporting: Finance, audit, procurement, and legal teams didn't cross-check findings. If they had pooled observations, the pattern would have been obvious.
What controls did the company put in place afterwards?
After the forensic audit, Spectrum completely restructured their compliance approach. They implemented:
Mandatory training: Not just anti-bribery slides, but scenarios. Case studies of what happened at other companies. Role-specific training for procurement (what counts as kickback, how to say no, how to report) and for auditors (red flag detection).
Confidential reporting: A third-party hotline where employees could report suspicions anonymously. Actually used, with no retaliation.
Procurement controls: Segregation of duties. No single person could approve invoices above 5 lakhs without a second review. Random audits of 10% of material receipts.
Auditor training: Both internal and external auditors were trained on vendor fraud red flags. Annual refresher on emerging schemes.
| Gap that let the scheme run | Control put in place |
|---|---|
| Generic 20-slide anti-bribery training | Scenario-based, role-specific training for procurement and auditors |
| No way to report pressure without being named | Third-party hotline for anonymous reports, with no retaliation |
| One person could approve inflated invoices | Segregation of duties: a second review for invoices above ₹5 lakhs |
| Auditors checked documents, not amounts | Random audits of 10% of material receipts |
| Auditors untrained on vendor fraud | Red-flag training for internal and external auditors, with an annual refresher |
Eighteen months after implementing these changes, Spectrum's next audit cycle ran clean. Material costs normalized. Two years after that, when they went through a regulatory compliance review, the inspector noted their anti-bribery program as "exemplary for their size."
What should compliance teams learn from this case?
That kickback schemes are a system failure: generic training, unclear escalation and weak procurement controls let a person under pressure rationalise a bad decision.
The story of Spectrum Infrastructure isn't about evil people. Pradeep wasn't a criminal, he was a person under pressure who rationalized a bad decision. The system let him do it. Auditors were competent, but they weren't trained to connect the dots.
The two-year scheme survived three audits because the company treated compliance as a checkbox, not a culture. Training was generic. Escalation paths were unclear. Procurement controls were weak. And most critically, no one had explained to Pradeep in real terms what "kickback schemes" actually are and what they cost.
This budget season, as your teams are finalizing vendor contracts and Q4 targets are getting real, ask yourself: would a Pradeep in your company know to say no? And if they did, would they feel safe doing it?
Learn how to build an anti-bribery program that catches schemes before they start, or see what our Anti-Bribery and Corruption course covers for procurement and audit teams.
Frequently asked questions
Can a company be prosecuted in India for a bribe paid by its staff or agents?
Yes, where the bribe goes to a public servant. Since the 2018 amendment, section 9 of the Prevention of Corruption Act 1988 makes a commercial organisation punishable with a fine if a person associated with it gives or promises an undue advantage to a public servant to obtain or retain business for it.
What defence does a company have under section 9?
It is a defence for the commercial organisation to prove that it had adequate procedures in place, in line with government guidelines, to prevent people associated with it from bribing. Training, controls and a working hotline are the evidence of those procedures.
Can directors and managers be personally liable?
Under section 10, if a section 9 offence is committed with the consent or connivance of a director, manager, secretary or other officer, that person is also liable to imprisonment of three to seven years and a fine.
What procurement red flags should internal audit escalate?
In this case the signals were material costs 9 to 11% above competitor benchmarks, the same vendor winning repeated tenders and the same explanation offered at every audit. Comparing actual supplier quotes with approved invoices is what exposed the gap.
Who needs anti-bribery training beyond the procurement team?
Internal and external auditors, managers who set targets and approve vendors, and finance teams who process invoices. Each of them saw part of this scheme and none was trained to connect the dots.
Sources
Stop Vendor Fraud Before It Takes Root
Strong training. Clear controls. Cultures where saying no is the default.
Book a Free Demo💬 WhatsApp Us