In Supply Chains: 7 Early Warning Signs to Fix Now

By: Tiago Santana - Founder & CEO, Gray Group International • Serial entrepreneur and growth strategist who has built and scaled multiple companies across technology, media, and consulting. Expert in growth strategist and editorial voice for a global think tank building companies that advance the human experience

Related reading: Corruption Control: Strengthening Integrity and Accountability | How Global Corruption Steals Trillions and Blocks Development for Billions

Key takeaways

• Corruption in supply chains is the misuse of buying power, approval rights, or supplier access for private gain.
• Early action matters because corruption compounds quietly before it explodes publicly.
• Reduce risk by redesigning workflows before you write more policy language.

How do you know a supplier problem is really corruption, not just sloppy operations?

What is corruption in supply chains?

In short: Corruption in supply chains is the misuse of buying power, approval rights, or supplier access for private gain.

Corruption in supply chains is the misuse of buying power, approval rights, or supplier access for private gain. That can happen in public contracts or private enterprise. The problem is not only bribery. It also includes kickbacks, hidden ownership, tailored specifications, bid steering, false invoicing, and conflicts of interest.

Transparency International's Corruption Perceptions Index 2025 reports that more than two-thirds of countries score below 50 and that the global average has fallen to a new low of 42. That matters for operators because many growth companies buy across borders. Risk tends to rise fastest where local agents control permits, customs clearance, or site access. A common mistake is treating those intermediaries as just admin support.

A useful way to think about exposure is Porter's Five Forces turned inward. Supplier power rises when few vendors can serve a need quickly. Buyer controls weaken when one manager owns specs, selection, and sign-off. Rivalry drops when bids are steered. That design failure creates room for private gain.

How do bribes and kickbacks show up?

Bribes rarely arrive labeled as bribes. They often show up as marketing support, success fees, travel upgrades, inflated rebates, or consulting retainers with no clear output. The payment route changes so the intent stays hidden.

Third parties such as agents, distributors, and consultants sit at the center of many foreign bribery cases brought under the U.S. Foreign Corrupt Practices Act. Channel partners and local fixers often carry the highest hidden risk.

Where do shell vendors hide fraud?

Shell vendors hide best where vendor onboarding is weak and master data controls are loose. They can sit inside maintenance work orders, low-value marketing buys, customs support services, or temporary labor invoices. Many teams review price but ignore beneficial ownership.

Procurement corruption raises costs and degrades service quality, and corruption is a common occupational fraud scheme in organizations of every kind. Fake or related-party vendors often first appear in categories no one thinks are strategic.

Why should leaders act early?

In short: Early action matters because corruption compounds quietly before it explodes publicly.

Early action matters because corruption compounds quietly before it explodes publicly. One bad vendor relationship can spread into pricing distortions, weak forecasting, poor service outcomes, tax issues, legal exposure, and staff cynicism. That said, leaders often wait for proof instead of acting on patterns.

Corruption and inefficiency can inflate procurement costs well beyond what any single invoice shows. Take a company with $20 million in external spend: even a 10% distortion would mean $2 million of lost capacity each year. Those losses crowd out hiring, product quality, and impact goals.

The Siemens bribery case shows how large the bill can get. According to the U.S. Department of Justice, Siemens AG agreed in 2008 to pay $800 million to U.S. authorities, and more than $1.6 billion in combined fines, penalties, and disgorgement once a related case brought by the Munich Public Prosecutor's Office was included. The lesson is not only legal severity. It is how far bribery can spread across subsidiaries and intermediaries when controls are weak.

Why does procurement face the highest risk?

Procurement faces high risk because it combines money flow with discretion under time pressure. One team writes requirements. Another team reviews bids unevenly. Then someone signs off exceptions for speed. Meanwhile, suppliers know exactly who influences each step.

Public procurement is especially exposed because it accounts for a large share of spending in many economies. That scale attracts collusion and bid rigging naturally. Private firms mirror that risk whenever capex projects or urgent sourcing compress oversight.

How do inflated invoices raise costs?

Inflated invoices hurt more than gross margin because they poison your baseline data for future planning. If fake urgency fees become normal spend history, next quarter's budget starts from a false number. Corruption rewrites what your company thinks market price means.

The Petrobras case in Brazil shows the same effect at scale. In its resolution with the U.S. Department of Justice, Petrobras admitted that its books did not accurately reflect the capitalization of property, plant, and equipment because of bribes generated by its contractors with the cooperation of certain executives. Once overbilling enters project controls early, every later report inherits bad assumptions.

What are the 7 early warning signs?

In short: Seven signs matter most because they tend to appear before formal complaints do: repeat wins by one supplier without clear advantage; vague consulting fees; rushed approvals; post-award scope changes; split invoices below approval thresholds; shared vendor-employee data points; and resistance to audit trails or e-procurement records.

Seven signs matter most because they tend to appear before formal complaints do: repeat wins by one supplier without clear advantage; vague consulting fees; rushed approvals; post-award scope changes; split invoices below approval thresholds; shared vendor-employee data points; and resistance to audit trails or e-procurement records.

Leaders often chase only the loudest sign, usually price. That's a mistake. Better results come from comparing signals side by side using a simple matrix and then testing the facts behind each one.

Are bids repeatedly won by one supplier?

Repeated wins are not proof of corruption by themselves. Some suppliers really are better or faster. Even so, concern rises when their win rate exceeds their scored advantage or when specifications keep matching their exact offer pattern round after round.

Bid tailoring and collusion are core procurement risks in sectors such as infrastructure and health spending. Concentration plus exception-based renewals is often more telling than concentration alone.

Do consulting fees mask kickbacks?

Yes, often they do when no one can explain what was delivered beyond introductions or relationship management. Consulting agreements become useful cover because they sound legitimate and sit outside line-item scrutiny applied to goods pricing.

Billing schemes and corruption are common occupational fraud methods. Kickback flows often avoid core product invoices entirely. Ask for work product samples, meeting records, milestone logic, and independent sponsor confirmation.

Are approvals rushed without documentation?

Rushed approvals become dangerous when urgency cancels evidence standards instead of adapting them sensibly. Most companies need exceptions sometimes. The problem starts when exception paths become routine for one vendor class or project owner.

How can you reduce corruption risk?

In short: Reduce risk by redesigning workflows before you write more policy language.

Reduce risk by redesigning workflows before you write more policy language. Start with money maps: who chooses vendors, who writes specs, who approves exceptions, who changes bank details, who clears invoices. Then match controls to those choke points rather than copying a generic compliance manual.

The best operating model removes steps that create opaque discretion and raises transparency around beneficial ownership, invoice evidence, and exception logging. A common mistake is overbuilding low-risk controls while leaving high-risk third parties lightly checked. A practical approach is to tier vendors by country exposure, government touchpoints, payment method, service vagueness, and contract value.

Organizations formed in the UK, or carrying on business there, face added pressure here because the UK Bribery Act's failure-to-prevent offense applies whether the conduct takes place in the UK or elsewhere, which can bring overseas partners into scope.

Which controls strengthen third party due diligence?

Strong due diligence starts before contracting, not after first payment. Screen ownership, litigation history, sanctions exposure, reputation signals, qualifications, subcontractor use, commission structure, government links, and bank account changes.

The UK Ministry of Justice's guidance on the Bribery Act 2010 sets out six principles for bribery prevention procedures: proportionate procedures, top-level management commitment, risk assessment, due diligence, communication (including training), and monitoring and review. Beneficial ownership checks plus payment-term discipline often catch more practical issues than glossy questionnaires alone.

When should forensic or legal help step in?

Bring in outside forensic or legal help when any of these appear: credible allegations, incomplete records, or senior people tied to decisions under review. Also escalate fast if public officials, customs agents, grant funds, sanctions-sensitive payments, or whistleblower retaliation enter the picture.

Internal action works for control clean-up when facts are clear and scope is narrow. Outside specialists help when privilege matters, digital evidence needs preserving, regulators may ask questions, or board trust needs independent verification.

What comes next?

In short: Most organizations do not need perfect systems tomorrow.

Most organizations do not need perfect systems tomorrow. They need clearer triage this week. Start with your top ten suppliers by spend plus all intermediaries tied to permits, customs, site access, grant distribution, or regulatory contact. Review exception logs for ninety days. Test ownership data. Reprice selected invoice lines against market benchmarks.

Key takeaways

Corruption becomes manageable once leaders stop treating it as abstract ethics talk. Map money flow. Watch clusters of warning signs. Use targeted controls where discretion meets weak evidence.