EXECUTIVE FINDING

On 2 March 2023, Swedish telecommunications multinational Telefonaktiebolaget LM Ericsson agreed to plead guilty to U.S. criminal charges previously deferred under a 2019 resolution and to pay an additional $206,728,848 criminal penalty.

The immediate reason was significant.

The U.S. Department of Justice concluded that Ericsson had breached the cooperation and disclosure obligations contained in its 2019 Deferred Prosecution Agreement.

But the conduct underlying the guilty plea reached much further back.

According to the Justice Department, Ericsson admitted to a long-running scheme involving:

• bribes to government officials
• third-party agents and consultants
• sham contracts
• false invoices
• off-the-books funds
• false accounting entries
• and
• inadequate internal accounting controls

across multiple countries.

The underlying conduct spanned Djibouti, China, Vietnam, Indonesia and Kuwait, with the Justice Department describing a scheme extending from 2000 through 2016.

In Djibouti, U.S. authorities said Ericsson used a sham consulting agreement and false invoices to conceal approximately $2.1 million in bribes to high-ranking government officials in connection with a telecommunications contract worth about €20.3 million.

In China, Ericsson subsidiaries paid agents and service providers tens of millions of dollars; some of those funds were used for travel, entertainment and gifts for foreign officials, while approximately $31.5 million was paid under sham contracts for services authorities said were never performed.

In Vietnam, approximately $4.8 million was routed through a consulting company to create off-the-books funds.

In Indonesia, approximately $45 million was paid to a consulting company in a scheme authorities said was used to create slush funds and conceal payments.

The misconduct matters because corporate bribery rarely enters the accounting system under its true name.

It enters as something else.

A consulting fee.

A commission.

A market-development expense.

A subcontract.

Travel.

Entertainment.

A success fee.

A third-party invoice.

That leads to the central finding of this dossier:

THE MOST EFFECTIVE CORPORATE BRIBES ARE OFTEN DISGUISED AS PERFECTLY ORDINARY BUSINESS EXPENSES.

The investigative challenge is therefore not simply finding illicit money.

It is identifying the point at which a legitimate-looking expense stops having a legitimate commercial purpose.

THE FINDING

Corporate bribery operates differently from street corruption.

A street-level bribe may involve:

• cash
• a direct payer
• a direct recipient

and an immediate favour.

Corporate bribery must survive:

• accounting systems
• audits
• approvals
• banking controls
• procurement processes
• tax records

and potentially years of later scrutiny.

That requires paperwork.

The successful bribe therefore needs two identities.

Its economic identity:

money transferred to influence an official.

And its accounting identity:

consulting services.

Marketing.

Business development.

Commission.

Travel.

Local support.

Subcontracting.

The corruption mechanism sits in the difference between those two descriptions.

THE CORPORATE BRIBERY MACHINE

The recurring structure documented in the Ericsson case can be simplified:

The transaction may appear legitimate at every individual stage.

A company can lawfully hire consultants.

Consultants can lawfully receive commissions.

Employees can lawfully travel.

Companies can lawfully sponsor events.

Officials can lawfully attend meetings.

That is why investigators must examine economic substance.

THE KLEPTIK SUBSTANCE TEST

For every high-risk third-party payment, ask:

1. WHAT WAS PURCHASED?

Was there a specific, commercially identifiable service?

2. WHO PERFORMED IT?

Did the consultant possess the staff, expertise and capability required?

3. WHAT WAS DELIVERED?

Is there a report, analysis, introduction record, work product or measurable deliverable?

4. WHY THIS CONSULTANT?

How was the intermediary selected?

5. WHY THIS PRICE?

Is the fee commercially reasonable?

6. WHY THIS LOCATION?

Why was payment made to that particular bank account or jurisdiction?

7. WHO OWNS THE CONSULTANT?

Is the beneficial owner connected to a public official?

8. WHAT HAPPENED NEXT?

Where did the money move after receipt?

A contract answers the legal question:

Was the payment documented?

The Kleptik test asks the more important question:

DID THE DOCUMENTED SERVICE ACTUALLY EXIST?

DJIBOUTI: THE CONSULTANT

Djibouti provides one of the clearest examples.

According to the Justice Department, Ericsson used a consulting company in connection with payments intended for high-ranking Djiboutian officials.

Authorities said an Ericsson subsidiary entered into a sham consulting contract and approved fake invoices to conceal approximately $2.1 million in bribe payments related to a telecommunications contract valued at roughly €20.3 million.

The case contained another highly significant red flag.

The owner of the consulting company was married to a high-ranking government official.

U.S. authorities said Ericsson personnel prepared due-diligence material that failed to disclose that relationship.

That detail illustrates why beneficial ownership alone is not enough.

Investigators need relationship ownership.

THE RELATIONSHIP MAP

A company may disclose:

Consulting Company X

Owned by:

Person A

That information appears complete.

But the risk picture changes if Person A is:

• married to
• related to
• business partners with
• financially dependent upon
• or acting for

a public official.

The proper due-diligence map is therefore:

A corporate register provides the first layer.

Investigative due diligence must construct the second.

THE ECONOMICS OF THE DJIBOUTI TRANSACTION

The alleged numbers themselves warrant analysis.

Approximate contract value:

€20.3 million

Approximate bribes:

$2.1 million

The relevant investigative question is not simply the percentage.

It is:

What commercial return did the payment allegedly purchase?

Where a relatively small payment can secure or preserve a substantially larger public contract, corruption becomes economically rational from the perspective of a dishonest actor.

That is why bribery controls must change the cost equation.

Without enforcement, the internal calculation may look like:

Improper payment < expected contract profit

With effective enforcement:

Improper payment + criminal penalties + debarment + monitorship + reputational loss + prosecution > expected profit

Anti-bribery enforcement attempts to reverse the economics.

CHINA: THE EXPENSE ACCOUNT

The China conduct reveals a different mechanism.

According to DOJ, from approximately 2000 through 2016 Ericsson subsidiaries paid agents, consultants and service providers tens of millions of dollars.

A portion funded an expense account used for:

• gifts
• travel
• and entertainment

for foreign officials connected with state-owned customers.

The investigation therefore moves beyond obvious cash transfers.

HOSPITALITY AS VALUE

Travel and entertainment are legitimate business expenses.

But they can also become a mechanism for transferring value.

The relevant spectrum is:

LEGITIMATE

Reasonable travel directly connected to a product demonstration.

↓

HIGH RISK

Luxury travel substantially exceeding legitimate business need.

↓

IMPROPER

Travel, entertainment or benefits provided to influence official action.

The invoice may say:

• Customer Development
• or
• Business Hospitality

The investigative file should ask:

• Who travelled?
• Where?
• Why?
• What meetings occurred?
• Were family members included?
• What class of travel?
• What hotel?
• What entertainment?
• What government decision followed?
• Who approved the expense?

THE $31.5 MILLION QUESTION

DOJ also said Ericsson subsidiaries in China paid approximately $31.5 million to third-party service providers under sham contracts for services that were never performed between about 2013 and 2016.

This is the ideal forensic trigger.

A payment for a service that never occurred has no legitimate commercial explanation.

Once investigators establish that no genuine service existed, the next question becomes:

WHAT WAS THE MONEY REALLY FOR?

The forensic sequence should be:

If Steps 2 through 6 are empty but Step 7 shows millions moving, the invoice is no longer documentation.

It is camouflage.

VIETNAM: THE SLUSH FUND

In Vietnam, DOJ said Ericsson subsidiaries paid approximately $4.8 million to a consulting company in order to create off-the-books slush funds.

Authorities said those funds were then used to make payments to third parties that would not have passed Ericsson’s due-diligence process.

This is an especially important control failure.

The purpose of third-party due diligence is to prevent a company from doing business with unacceptable intermediaries.

The alleged structure effectively inverted the system:

The compliance control still appears to function.

The company technically pays an approved vendor.

But the economic beneficiary is someone else.

THE PROXY VENDOR

Kleptik calls this structure the:

PROXY VENDOR

The proxy vendor exists between the company and the actual beneficiary.

Its purpose may be to provide:

• banking access
• an invoice
• due-diligence clearance
• contractual legitimacy

or distance.

The key investigative question becomes:

Did the approved vendor retain the economic benefit?

If not:

Who received it?

INDONESIA: THE $45 MILLION SLUSH FUND

The Indonesia conduct was even larger.

The Justice Department said an Ericsson subsidiary paid a consulting company approximately $45 million between about 2012 and 2015 to create off-the-books slush funds. Authorities said sham contracts were used for services that were not actually performed and that Ericsson took steps to conceal the payments.

The scale is significant.

A $45 million consulting arrangement should create a substantial documentary footprint.

One would ordinarily expect:

• staff
• reports
• technical work
• meetings
• travel
• deliverables
• correspondence
• expense records

and measurable commercial output.

Where tens of millions are paid and that footprint is absent, the anomaly should be visible.

That leads to another Kleptik test:

THE DOCUMENT-TO-DOLLAR RATIO

The larger the payment, the larger the expected evidentiary footprint.

A $5,000 consultancy may produce limited documentation.

A $45 million consultancy should produce a mountain of it.

If the amount grows while evidence of actual work remains minimal, risk rises sharply.

KUWAIT: INSIDE INFORMATION AND A TENDER

The Kuwait conduct demonstrates another form of corruption risk.

DOJ said an Ericsson sales agent provided an employee with inside information concerning a tender to modernise the radio-access network of a state-owned telecommunications company.

An Ericsson subsidiary ultimately won a contract valued at approximately $182 million.

Ericsson subsequently made a $450,000 payment to a consulting company and improperly recorded that payment in its books.

This shifts the corruption analysis from:

payment for approval

to

payment for informational advantage.

INFORMATION HAS VALUE

A corrupt payment does not need to purchase a contract directly.

It can purchase:

• bid specifications
• competitors’ pricing
• evaluation criteria
• confidential deadlines
• technical requirements

or advance knowledge.

The resulting contract may still go through a formal tender.

The process can look competitive.

But one bidder possesses information the others do not.

That is why procurement corruption cannot be identified solely by checking whether multiple bids existed.

The correct question is:

DID EVERY BIDDER COMPETE WITH THE SAME INFORMATION?

THE FIVE-COUNTRY PATTERN

The importance of Ericsson is not any single jurisdiction.

It is repetition.

Djibouti.

China.

Vietnam.

Indonesia.

Kuwait.

Different markets.

Different business units.

Different intermediaries.

But recurring mechanisms:

• consultants
• sham agreements
• false invoices
• off-book funds
• government-linked customers

and inadequate controls.

When the same control failure appears across multiple countries, investigators should stop treating each event as an isolated employee problem.

They should examine the system.

ROGUE EMPLOYEE OR BUSINESS MODEL?

Companies facing misconduct frequently distinguish between:

the corporation

and

the individuals who violated policy.

Sometimes that distinction is valid.

A company can have strong controls that an employee deliberately evades.

But repeated conduct across:

• years
• jurisdictions
• subsidiaries
• and seniority levels

creates a different question.

Was misconduct occurring:

• despite the corporate system
• or
• through weaknesses in the corporate system?

DOJ’s 2019 resolution said the conduct extended across 17 years and at least five countries and involved high-level executives.

That is why the case became an internal-controls prosecution, not merely a collection of individual bribery allegations.

BOOKS AND RECORDS

The accounting component of foreign bribery is often overlooked.

The FCPA does not only prohibit certain corrupt payments.

For issuers, it also imposes accounting obligations.

A corporation must maintain books and records that accurately reflect transactions and maintain reasonable internal accounting controls.

That means the accounting description matters.

If a payment is really intended to influence an official but is recorded as:

• consulting
• marketing
• commission
• travel
• or technical service,

the books themselves become part of the concealment mechanism.

THE ACCOUNTING LAYER

The money trail therefore contains two parallel records.

ECONOMIC REALITY

ACCOUNTING REALITY

The purpose of forensic accounting is to reconcile the two.

A false invoice does more than authorise a payment.

It creates a false history.

Years later, an auditor sees:

invoice.

contract.

approval.

bank transfer.

expense entry.

Everything looks complete.

Unless someone asks:

WHAT ACTUALLY HAPPENED?

INTERNAL CONTROLS

Controls are not policies.

Policies are statements.

Controls are mechanisms that prevent or detect conduct.

A corporation can maintain a 100-page anti-bribery manual and still have weak controls.

The relevant questions are operational.

• Can a salesperson select a consultant?
• Can the business unit approve the consultant?
• Can the same unit approve the invoice?
• Can payments be made to another company’s bank account?
• Can compliance veto the relationship?
• Can management override compliance?
• Are overrides logged?
• Are high-risk intermediaries re-screened?
• Is beneficial ownership independently verified?
• Are deliverables checked before payment?
• Do internal auditors test third-party expenditures?

THE FOUR-EYES PROBLEM

An effective system should prevent one person from controlling:

• vendor creation
• contract approval
• invoice approval

and payment.

The basic architecture should look like:

• BUSINESS UNIT
• requests vendor
• ↓
• COMPLIANCE
• screens vendor
• ↓
• LEGAL
• reviews agreement
• ↓
• PROCUREMENT
• checks commercial rationale
• ↓
• FINANCE
• validates invoice
• ↓
• TREASURY
• executes payment
• ↓
• INTERNAL AUDIT
• tests transactions

If one executive can influence all seven steps, formal separation exists only on paper.

THIRD-PARTY RISK

The Ericsson case demonstrates why anti-bribery enforcement focuses heavily on intermediaries.

A multinational corporation may be unwilling to transfer money directly to a public official.

A consultant creates distance.

That distance produces deniability.

The contract says:

consulting services

The bank sees:

commercial payment

The accounting system sees:

professional fee

The recipient receives:

corporate money

The investigator must reconstruct what happened afterward.

THE HIGH-RISK INTERMEDIARY PROFILE

Kleptik should flag a consultant where several indicators converge:

• recently incorporated
• little visible operating history
• few employees
• unusually high fee
• success-based compensation
• introduced by public official
• beneficial owner connected to government
• bank account in unrelated jurisdiction
• vague scope of work
• retroactive agreement
• large advance payment
• cash withdrawal after receipt
• substantial onward transfer
• lack of deliverables

refusal to identify subcontractors.

No single factor proves corruption.

Multiple factors materially increase risk.

THE 2019 RESOLUTION

On 6 December 2019, Ericsson entered into a Deferred Prosecution Agreement with U.S. authorities.

An Ericsson subsidiary, Ericsson Egypt Ltd., pleaded guilty to conspiracy to violate the anti-bribery provisions of the FCPA.

The overall 2019 U.S. resolution exceeded $1 billion, consisting of a criminal penalty of approximately $520.7 million and approximately $540 million in disgorgement and prejudgment interest paid in connection with the SEC resolution.

Ericsson also agreed to:

• cooperate with continuing investigations
• improve its compliance programme
• strengthen internal accounting controls

and retain an independent compliance monitor.

A Deferred Prosecution Agreement is effectively an institutional second chance.

The government agrees not to proceed immediately with prosecution if the company satisfies defined obligations.

That makes the 2023 development particularly significant.

THE SECOND-CHANCE FAILURE

DOJ concluded that Ericsson breached its 2019 DPA.

The department said Ericsson failed to truthfully disclose all factual information and evidence concerning aspects of the Djibouti and China schemes and other potential FCPA violations.

DOJ also said Ericsson failed to promptly report and disclose evidence and allegations relating to business activities in Iraq that potentially implicated the FCPA.

This introduces another dimension:

CORPORATE COOPERATION RISK

A company under investigation has two separate responsibilities.

First:

address past misconduct.

Second:

tell the government what it discovers.

Failure at the second stage can create a new enforcement crisis even where the conduct itself occurred years earlier.

WHAT ERICSSON SAID

Ericsson publicly stated on 2 March 2023 that the resolution concerned breaches of the 2019 DPA and that DOJ had not alleged or charged new criminal misconduct arising after the original resolution.

The company said its guilty plea concerned previously deferred charges relating to conduct predating 2017.

That distinction is important.

The 2023 penalty did not mean prosecutors had discovered a brand-new bribery scheme committed in 2023.

It meant Ericsson lost the benefit of the earlier deferred disposition after failing to satisfy its cooperation and disclosure obligations.

THE IRAQ QUESTION

The Justice Department said Ericsson failed to promptly disclose evidence and allegations associated with its business activities in Iraq that might constitute FCPA violations.

Ericsson separately stated that its internal Iraq investigation and cooperation with authorities concerning those matters remained open and were not covered by the March 2023 plea agreement.

For Kleptik, this means Iraq should not be folded casually into the adjudicated five-country bribery scheme.

Its evidentiary status is different.

It belongs in a separate future dossier.

FOLLOW THE CONTRACT

The best corporate-corruption investigation often begins not with the payment but with the commercial opportunity.

For every suspect payment, build the timeline backward:

• PUBLIC CONTRACT AWARD
• ↑
• evaluation
• ↑
• tender
• ↑
• bid preparation
• ↑
• consultant hired
• ↑
• consultant introduced
• ↑
• relationship established

Then build forward:

The corruption theory becomes powerful when both timelines meet.

FOLLOW THE CONSULTANT

The consultant investigation should contain:

• Corporate registry
• Who owns it?
• Banking
• Where is it paid?
• Employees
• Can it actually perform the work?
• Website
• Does it represent itself as providing the relevant service?
• Prior clients
• Is there commercial history?
• Government connections
• Does ownership overlap with PEPs?
• Contract
• What exactly was promised?
• Invoices
• Are they specific or generic?
• Deliverables
• Do they exist?
• Onward transfers
• Where does the money go?

The consultant is often the bridge between the corporate ledger and the corruption allegation.

FOLLOW THE PUBLIC OFFICIAL

Investigators must also understand the recipient side.

For each relevant official:

• position
• decision-making authority
• family
• business interests
• declared assets
• companies
• real estate
• banking exposure where lawfully available
• government decisions
• travel
• gifts

and chronology.

The objective is not simply to discover whether the official received money.

It is to determine whether the official possessed the authority capable of producing the commercial result.

STATE-OWNED ENTERPRISES

Several international bribery investigations involve state-owned companies rather than ministries.

This is critical.

A commercial organisation can look like an ordinary telecommunications operator while legally constituting an instrumentality of a foreign government for FCPA purposes.

The 2019 Ericsson charging documents identified state-owned telecommunications companies in Djibouti, China and Kuwait as government instrumentalities.

This creates a major compliance risk.

Sales personnel may think:

customer executive.

The law may see:

foreign official.

THE SOE TEST

Before entertaining or compensating anyone associated with a customer, determine:

• Who owns the customer?
• Does the government control it?
• Does government appoint directors?
• Does it perform a public function?
• Are its employees treated as public officials under relevant law?

This is particularly important in:

• telecommunications
• energy
• aviation
• transport
• banking
• mining
• defence

and infrastructure.

The line between commercial counterparty and government actor is often much thinner than it appears.

THE COST OF CORRUPTION

Ericsson’s financial consequences extended far beyond the alleged bribes themselves.

The 2019 U.S. resolution exceeded $1 billion.

The 2023 penalty added approximately $206.7 million.

There were also:

• legal costs
• investigations
• compliance remediation
• monitoring
• management time
• reputational damage

and potential commercial consequences.

DOJ required Ericsson’s independent compliance monitor to remain in place for an additional year, and the company was subject to probation and continuing obligations.

The direct bribe is therefore only the first number in the cost equation.

THE REAL CORRUPTION P&L

A company’s internal economics may initially show:

• Improper payment: $X
• Contract revenue: $Y
• Profit: $Z

But the full calculation is:

• Improper payment
• government penalty
• disgorgement
• legal fees
• investigation cost
• monitoring
• compliance remediation
• lost contracts
• financing impact
• reputational damage
• executive distraction
• =

TRUE COST OF CORRUPTION

This is the number boards should understand before misconduct occurs.

CHRONOLOGY

2000–2016

According to DOJ, Ericsson engages in FCPA-related misconduct involving third-party agents, consultants, bribery, false accounting and inadequate controls across multiple jurisdictions.

2010–2014

In Djibouti, authorities say approximately $2.1 million in bribes are paid to high-ranking government officials in connection with a telecommunications contract valued at roughly €20.3 million.

2012–2015

In Vietnam, approximately $4.8 million is paid through a consulting company to create off-the-books funds.

2012–2015

In Indonesia, approximately $45 million is paid through a consulting company in connection with off-the-books slush funds.

2013–2016

In China, Ericsson subsidiaries pay approximately $31.5 million to third-party service providers under sham contracts for services DOJ says were not performed.

6 December 2019

Ericsson enters into a Deferred Prosecution Agreement with DOJ.

Ericsson Egypt Ltd. pleads guilty.

The combined DOJ and SEC resolution exceeds $1 billion.

2019–2022

Ericsson operates under DPA cooperation obligations and an independent compliance monitor.

October 2021 / March 2022

Ericsson publicly acknowledges DOJ notifications concerning failures to provide information and documents in a timely manner and inadequate reporting relating to its Iraq internal investigation.

2 March 2023

DOJ announces Ericsson has agreed to plead guilty to the previously deferred charges and pay an additional $206,728,848 following DPA breaches.

21 March 2023

Under the resulting plea arrangement, Ericsson pleads guilty to conspiracy to violate the FCPA’s anti-bribery provisions and conspiracy concerning internal-controls and books-and-records provisions.

DOCUMENTARY RECORD

2019 DEFERRED PROSECUTION AGREEMENT

The 2019 DPA is the foundational document.

It records the government’s factual basis, Ericsson’s obligations and the reasons an independent compliance monitor was imposed.

2019 DOJ RESOLUTION

DOJ’s December 2019 announcement provides jurisdiction-by-jurisdiction descriptions of the conduct in Djibouti, China, Vietnam, Indonesia and Kuwait.

2023 DOJ BREACH RESOLUTION

The 2 March 2023 resolution establishes that DOJ concluded Ericsson breached its cooperation and disclosure obligations and therefore would plead guilty and pay an additional criminal penalty.

ERICSSON’S OWN DISCLOSURE

Ericsson’s public filing states that the March 2023 plea concerned conduct predating 2017 and that no new criminal misconduct was alleged or charged as part of that resolution.

WHAT THE AUTHORITIES SAY

The Justice Department characterises the underlying conduct as a long-running international bribery and accounting scheme involving third-party agents, false invoices and inadequate controls.

It says Ericsson’s 2023 guilty plea resulted from the company’s failure to comply with the cooperation and disclosure obligations that allowed it to avoid immediate prosecution in 2019.

DOJ’s position is therefore twofold:

the original misconduct was serious;

and

the subsequent cooperation failure was serious enough to revoke the practical benefit of the DPA.

WHAT ERICSSON SAYS

Ericsson has emphasised that the 2023 resolution did not involve allegations of new criminal misconduct after the conduct covered by the original DPA.

The company stated that the guilty plea concerned previously deferred charges relating to conduct before 2017 and that the DPA breaches themselves were non-criminal.

That distinction should be preserved.

Kleptik should not suggest that Ericsson admitted to committing a new bribery scheme in 2023.

It did not.

WHAT THIS DOSSIER DOES NOT ESTABLISH

This dossier does not establish that:

every Ericsson consultant participated in corruption;

every Ericsson employee knew of the misconduct;

every state-owned telecommunications customer involved in the relevant countries was corrupt;

• every government official interacting with Ericsson received improper benefits
• every consulting agreement was fictitious
• every high commission is a bribe
• every payment to an offshore jurisdiction is suspicious

or every corporate-control failure involves intentional criminal conduct.

The report also does not treat Iraq-related allegations as adjudicated components of the five-country scheme resolved through the plea.

Their status is materially different.

RIGHT OF REPLY

Before publication, Kleptik should seek comment from:

Telefonaktiebolaget LM Ericsson

relevant subsidiaries identified in any transaction-specific investigation

consulting companies Kleptik proposes to identify by name

former Ericsson personnel where individual conduct is examined

relevant state-owned telecommunications companies

relevant government ministries or anti-corruption authorities

For any intermediary not convicted or formally charged, questions should identify:

• the contract
• the amount
• the relevant public record
• the ownership relationship

and precisely what Kleptik intends to report.

A third party should not be labelled a conduit merely because it received money from Ericsson.

The onward trail matters.

UNANSWERED QUESTIONS

The criminal resolution documents substantial misconduct.

But an investigative publication should go further.

1. CONSULTANT OWNERSHIP

Who were the ultimate beneficial owners of every material intermediary?

2. FAMILY CONNECTIONS

Which consultants had family or business relationships with public officials?

3. ONWARD PAYMENTS

Where did funds move after Ericsson paid the intermediaries?

4. BANKS

Which financial institutions processed the high-risk transactions?

5. RED FLAGS

Did banks or internal compliance teams flag any of the transfers?

6. DUE DILIGENCE

What documentation was originally produced to approve each consultant?

7. OVERRIDES

Were compliance concerns overridden?

By whom?

8. DELIVERABLES

What actual work product existed for the largest consulting payments?

9. BOARD VISIBILITY

What did Ericsson’s board know about recurring third-party and corruption risks?

10. INTERNAL AUDIT

Were high-risk consultant payments tested before U.S. authorities intervened?

11. CHINA

Who ultimately benefited from the expense accounts, travel and entertainment?

12. INDONESIA

How was approximately $45 million disbursed after entering the consulting structure?

13. VIETNAM

Which third parties received funds that allegedly could not pass Ericsson’s own due-diligence process?

14. KUWAIT

Who supplied the inside tender information, and what relationship existed with the consultant receiving payment?

15. DJIBOUTI

What precise decision-making authority did the relevant government officials exercise over the €20.3 million contract?

16. PROFESSIONAL ENABLERS

Which law firms, accounting firms or company-service providers created or administered the relevant intermediary structures?

17. THE DPA BREACH

Why did information relevant to DOJ’s investigation remain undisclosed after the 2019 settlement?

18. INCENTIVES

Were sales compensation systems structured in ways that rewarded revenue without adequately pricing corruption risk?

19. CONSEQUENCES

Were individuals responsible for control failures disciplined?

20. SYSTEMIC QUESTION

Did Ericsson’s problems arise because employees circumvented the compliance system—or because the commercial system repeatedly found ways to work around compliance?

That distinction determines whether the problem was individual or institutional.

KLEPTIK INTELLIGENCE ASSESSMENT

ASSESSMENT: HIGH CONFIDENCE

Ericsson’s historical FCPA misconduct was not confined to one isolated geography or one intermediary.

The conduct resolved with U.S. authorities extended across multiple countries and included recurring use of consultants, false invoices, slush funds and accounting mischaracterisation.

ASSESSMENT: HIGH CONFIDENCE

Third-party intermediaries represented a central corruption vulnerability.

The repeated use of agents, consulting companies and service providers is directly documented in the DOJ record.

ASSESSMENT: HIGH CONFIDENCE

Accounting records were part of the concealment mechanism.

False or misleading descriptions allowed economically different transactions to appear as legitimate corporate expenses.

ASSESSMENT: HIGH CONFIDENCE

The misconduct reflected significant internal-control deficiencies rather than merely one rogue transaction.

The breadth, duration and geographic repetition strongly support this conclusion.

ASSESSMENT: HIGH CONFIDENCE

The 2023 enforcement action arose from Ericsson’s failure to satisfy cooperation and disclosure obligations after receiving the benefit of a 2019 DPA.

It did not represent an allegation of a newly committed 2023 bribery scheme.

ASSESSMENT: MODERATE-TO-HIGH CONFIDENCE

The most revealing future investigation would not focus on the ultimate bribe recipients alone.

It would reconstruct the intermediary infrastructure that allowed payments to obtain internal corporate approval and enter the financial system.

THE KLEPTIK VIEW

The popular image of bribery is misleading.

A businessman opens a briefcase.

A politician accepts cash.

A deal is done.

Large corporate corruption rarely needs to look like that.

The modern bribe can arrive with:

• a purchase order
• a contract
• an invoice
• a compliance file
• a bank transfer
• an accounting code

and management approval.

The paperwork does not merely disguise the transaction.

It gives the transaction institutional legitimacy.

That is why corporate-corruption investigations must begin with something apparently mundane:

THE INVOICE.

• Who requested it?
• Who approved it?
• Who performed the work?
• What was delivered?
• Who owned the vendor?
• Where did the money go?
• What happened immediately before the invoice?
• What happened immediately afterward?

In Djibouti, the consultant allegedly concealed a relationship to a senior official.

In China, service providers and expense accounts helped move value.

In Vietnam and Indonesia, consulting structures created slush funds.

In Kuwait, inside tender information preceded a major contract and subsequent consulting payment.

Different countries.

Same investigative principle.

The bribe does not need to bypass the corporate system.

Sometimes the corporate system processes it.

That is the distinction every board, auditor, regulator and investigative reporter needs to understand.

A company’s greatest corruption vulnerability may not be an employee secretly removing money from the organisation.

It may be an employee successfully convincing the organisation that an improper payment is a legitimate expense.

That is why investigators should never stop when they find an invoice.

The invoice is where the investigation begins.

FOLLOW THE CONTRACT.

FOLLOW THE CONSULTANT.

FOLLOW THE MONEY AFTER THE CONSULTANT GETS PAID.

KLEPTIK METHODOLOGY

Kleptik investigations into corporate corruption distinguish between:

• company admissions
• government allegations
• criminal convictions or guilty pleas
• regulatory findings
• accounting irregularities
• commercial relationships
• and

Kleptik analytical conclusions.

This dossier is dated 2 March 2023 and reflects the enforcement position announced on that date.

The principal sources are:

• U.S. Department of Justice FCPA case records
• the 2019 Deferred Prosecution Agreement
• the underlying criminal information and factual record
• the March 2023 breach resolution
• and

Ericsson’s own public disclosures concerning the resolution.

The report does not classify an intermediary as corrupt solely because:

• it received a large fee
• it operates in a high-risk country
• it has a government-connected customer
• it maintains an offshore bank account

or it was engaged close in time to a public contract.

Kleptik requires convergence.

Relevant evidence may include:

• lack of actual services
• false invoices
• hidden beneficial ownership
• government relationships
• onward transfers
• internal communications
• compliance overrides
• cash withdrawals
• undisclosed commissions

and a subsequent official act.

Third-party investigations should reconstruct both sides of the transaction.

CORPORATE SIDE

• Who authorised payment?
• How was it recorded?
• What commercial justification was given?

RECIPIENT SIDE

• Who owned the intermediary?
• Where did funds move?
• Who ultimately benefited?

GOVERNMENT SIDE

• What decision occurred?
• Who controlled that decision?
• What was its economic value?

Only when those three layers are combined does the complete corruption architecture become visible.

Kleptik should preserve all primary records used in a corporate-corruption dossier, including:

• contracts
• invoices
• corporate-registry extracts
• bank records where legally obtained
• tender documents
• meeting records
• emails
• internal-control policies
• audit reports

and court filings.

Document authenticity and provenance should be recorded.

Anonymous-source claims involving bribery should not be published as established facts without substantial corroboration.

Subjects facing material criticism should receive detailed right-of-reply requests.

Where a company has admitted misconduct but disputes a characterisation of later conduct, both positions should be accurately stated.

EVIDENTIARY LABELS

ESTABLISHED
Supported by guilty plea, official court record, corporate admission or independently verified documentation.

DOJ FACTUAL RECORD
Conduct described in U.S. Department of Justice charging, plea or DPA materials.

CORPORATE ADMISSION
Matter expressly acknowledged by the company.

OFFICIAL ALLEGATION
Government assertion not independently adjudicated against the particular individual or entity concerned.

THIRD-PARTY RED FLAG
Relationship or payment presenting elevated corruption risk but not establishing wrongdoing.

KLEPTIK VERIFIED
Independently corroborated by Kleptik from primary documentation.

KLEPTIK ASSESSMENT
Analytical conclusion derived from identified evidence.

INVESTIGATIVE LEAD
Matter requiring additional tracing or documentary confirmation.

UNVERIFIED
Information Kleptik cannot presently corroborate.

DOCUMENT STATUS

KLTK-2023-005

Subject: Ericsson / FCPA / Third-Party Bribery Infrastructure
Archive date: 2 March 2023
Status at archive date: Guilty-plea resolution announced following breach of 2019 DPA
Historical treatment: Fixed to report date

© KLEPTIK — Investigations into Power, Money and the Systems Designed to Hide Both