The Kenyan Distributor with a Cousin at the Ministry
Meridian Power Systems is a UK-headquartered grid-equipment manufacturer whose shares trade on the NYSE through an ADR programme. It is bidding for a $14 million, three-year rural electrification framework with Kenya's state utility and wants to appoint Savannah Grid Ltd as exclusive local distributor. Diligence turns up the following. Savannah was incorporated fourteen months ago. Its registered address is a Nairobi mailbox. It has two employees, no warehouse, and no technical service capability. Its sole director, Amina Wanjiru, declines to disclose any beneficial owner beyond herself. Her cousin heads procurement at the state utility. Savannah wants a 22% distributor margin against Meridian's usual 8-12%, and a 50% advance paid to a Cyprus bank account in the name of a different company, which Amina calls a tax-planning arrangement. Both references she supplies are companies she also directs. The regional sales director says the tender closes in six weeks and a competitor has already flown to Nairobi. A junior analyst has rated Savannah medium risk and cleared it on a desktop check.
1. Identify the red flags in this file and explain what each indicates about bribery risk. Why is a medium-risk desktop clearance indefensible here?
Read the worked answer
Mailbox address, fourteen months old, two staff, no warehouse or service capability. A distributor with no logistics or technical function is not being paid for logistics or technical function. The only thing left that it can supply is access to the buyer's decision-maker, and that is exactly the service a bribery statute prohibits paying for.
Refusal to disclose beneficial owners. Without ownership data you cannot screen for politically exposed persons, sanctions, or adverse media, and you cannot test the cousin relationship. A refusal at the first request, on a $14m tender, is itself a finding.
A relative heading procurement at the state utility. Any benefit flowing to Savannah is a potential benefit flowing to the family of the person who controls the award. This is the classic indirect-payment structure.
22% against a market norm of 8-12%. The excess margin is the pool from which an unofficial payment can be made without the principal noticing. It is the single most reliable financial red flag in distributor schemes.
50% advance to a Cyprus account in a third company's name. Payment diversion with no audit trail and no counterparty contractual privity. There is no legitimate reason for the payee to differ from the contracting party.
Related-party references. References that cannot be independently verified are worthless; they are evidence of a diligence process being managed rather than tested.
A desktop check rates the file on what is present, not on what is missing. Under a risk-based programme, each of the items above independently escalates the relationship to high risk and requires enhanced due diligence with senior compliance sign-off before any commitment.
2. What must happen before any appointment, and what contractual and payment terms would you require? What do you do if the sales director escalates to the CEO and the CEO overrules you in writing?
Read the worked answer
Before appointment. Enhanced due diligence: registry and beneficial-ownership search through an independent provider; identity and PEP, sanctions and adverse-media screening on Amina, her cousin, and the Cyprus entity; a physical site visit with photographs; verification of the two references through unconnected third parties; a capability and tax review; an interview-based questionnaire signed by Amina with certifications; confirmation of whether the cousin has any role in evaluating this tender, and a check of the tender documentation for whether an intermediary is even permitted. If any of that cannot be obtained, the answer is no.
Structure. No advance, or an advance capped and secured by a bank guarantee. Commission or margin within market range and tied to milestones. Payment only to the bank account of the contracting counterparty in the country of incorporation. Express anti-bribery representations, audit rights over Savannah's books relating to Meridian business, training obligations, a right to terminate for a red flag, and a right to withhold payment pending investigation. Consider instead a fixed-fee technical support agreement or direct participation in the tender.
If the CEO overrules you in writing. The compliance officer does not own the commercial decision, but must (a) record the advice in writing, (b) confirm the matter is escalated to the audit committee chair and group legal, and (c) ensure the risk is documented for the board. A CEO override does not transfer liability or create an adequate-procedures defence; it destroys it, because it shows the controls were optional. Keep the record and consider whether the audit committee needs a formal notification.
3. Assume Savannah is appointed and, eight months later, a Kenyan newspaper reports that a utility procurement official received KES 30 million from a grid-equipment intermediary. Set out Meridian's potential liability under the UK Bribery Act and the FCPA, and the defences genuinely available.
Read the worked answer
UK Bribery Act. Meridian is a UK-headquartered commercial organisation, so section 7 applies to conduct anywhere in the world by persons associated with it. Savannah performs services for Meridian and is therefore an associated person under section 8. If Savannah paid a bribe intending to obtain or retain business for Meridian, Meridian is liable on a strict-liability basis for failure to prevent bribery. Individuals involved face section 1 or 6 liability, and a senior officer consenting or conniving can trigger section 14. Penalty is an unlimited fine, and a conviction invites discretionary exclusion from public contracts.
The section 7(2) defence is that Meridian had adequate procedures. That defence is decided on the six principles, but a file showing six ignored red flags, a knowingly inadequate risk rating, and a CEO override will not support it.
FCPA. Meridian is an issuer through its ADRs, so the anti-bribery provisions apply. Third-party payments are attributed where Meridian knew or consciously disregarded a high probability that the payment would occur; the red-flag file supplies the knowledge element and undermines any good-faith argument. If the Cyprus advance or the excess margin was booked as a commission without accurate description, the books-and-records and internal-controls provisions are separately engaged, and those have no knowledge requirement and no materiality threshold for the accounting controls.
Genuine defences are narrow: adequate procedures for the UK Act; for the FCPA, a bona fide, documented, proportionate payment that was not corruptly intended. Neither is realistically available where the diligence file itself identified the risk and was overridden. Expect also exposure under Kenya's Bribery Act 2016 and possible individual liability for the approving executives.