For any U.S. company operating internationally, corruption risk is not an abstract concept — it is a day-to-day operational reality that carries severe legal and financial consequences. The Foreign Corrupt Practices Act (FCPA), enacted in 1977 and enforced jointly by the Department of Justice (DOJ) and the Securities and Exchange Commission (SEC), prohibits U.S. persons and companies — as well as foreign companies listed on U.S. stock exchanges — from bribing foreign government officials for the purpose of obtaining or retaining business. Violations can result in criminal fines running into the hundreds of millions of dollars, debarment from government contracting, reputational damage, and personal criminal liability for individual executives.

Yet the FCPA does not operate in a vacuum. Its reach is activated by the realities on the ground in the countries where U.S. businesses operate. Some jurisdictions have deeply embedded cultures of public-sector corruption, weak rule-of-law institutions, opaque regulatory processes, and a chronic reliance by underpaid government officials on informal payments. For U.S. businesses doing business in — or even transacting with companies based in — those jurisdictions, the corruption risk is commensurately elevated. Understanding which countries present the highest risk, why, and what that means for your compliance program is essential.

This article surveys the jurisdictions that present the greatest corruption risk for U.S. businesses, drawing on widely accepted risk measurement tools, enforcement history, and regional patterns. It is intended as a practical resource for in-house counsel, compliance officers, and business leaders making decisions about where and how to operate abroad.

How Corruption Risk Is Measured

Before turning to specific countries, it is worth understanding the frameworks that practitioners use to assess corruption risk. The most widely referenced benchmark is Transparency International’s Corruption Perceptions Index (CPI), published annually. The CPI scores countries on a scale of 0 (highly corrupt) to 100 (very clean) based on expert assessments and business surveys. Countries scoring below 40 are generally considered to pose elevated corruption risk, and those scoring below 30 represent the highest-risk tier.

The World Bank’s Worldwide Governance Indicators (WGI) provide another layer of analysis, measuring dimensions such as rule of law, regulatory quality, and control of corruption across more than 200 countries. The TRACE Matrix — developed specifically for business compliance purposes — combines government and social interactions, anti-bribery laws, transparency of government data, and other factors into a single bribery risk score.

U.S. enforcement history is also instructive. Companies operating in jurisdictions that appear repeatedly in DOJ and SEC FCPA enforcement actions — think Brazil, China, Nigeria, Mexico, and Venezuela — should treat that history as a serious warning signal. When the government resolves a case, the factual recitations in the non-prosecution agreements (NPAs) and deferred prosecution agreements (DPAs) provide vivid descriptions of how corruption actually operates in a given country. These documents are publicly available and constitute some of the most useful country-level risk intelligence available to compliance professionals.

No single metric is dispositive, and practitioners are well advised to use multiple sources in combination. Country risk also varies substantially by sector: the extractive industries, construction, defense, and telecommunications tend to face higher corruption risk than, say, retail or software, because those industries involve larger transactions, more government licensing, and more points of interaction with public officials.

Sub-Saharan Africa

Sub-Saharan Africa contains some of the world’s most corruption-prone jurisdictions, and it is a region of growing commercial importance to U.S. businesses in sectors ranging from energy and mining to infrastructure and telecommunications. Several countries warrant particular attention.

Nigeria, the continent’s largest economy, consistently scores poorly on the CPI — typically in the 24-26 range — and has generated numerous high-profile FCPA enforcement actions. The oil and gas sector, dominated by the state-owned Nigerian National Petroleum Corporation (NNPC), has been a particularly fertile ground for bribery allegations. The Halliburton/KBR matter, which resulted in nearly $579 million in combined penalties, involved payments to Nigerian officials to obtain contracts for the construction of liquefied natural gas facilities. More recently, the industry’s reliance on third-party agents and customs brokers has been a recurring source of FCPA liability, as intermediaries frequently make unofficial payments on behalf of foreign principals who prefer not to ask too many questions.

The Democratic Republic of Congo (DRC) presents some of the most acute corruption risks on the continent. With a CPI score in the low 20s and a government apparatus that has historically been characterized by institutional fragility and endemic graft, the DRC’s vast mineral wealth — particularly cobalt, critical to battery technology — has attracted significant investment interest at precisely the time when scrutiny of supply chains has intensified. Companies sourcing minerals from the DRC face not only FCPA risk but also potential exposure under the Dodd-Frank conflict minerals provisions.

Angola, Mozambique, Chad, and Guinea are similarly high-risk jurisdictions in the extractive space, each featuring opaque licensing regimes, powerful state-owned enterprises, and limited judicial independence. South Africa, while traditionally viewed as a more rule-of-law-oriented jurisdiction, experienced a significant deterioration in governance indicators during the period of so-called ‘state capture’ associated with the Zuma administration, and U.S. businesses should not treat a more developed economy as automatically lower risk.

Latin America

Latin America has generated an extraordinary volume of FCPA enforcement activity and, in recent years, some of the most consequential anti-corruption investigations in legal history. The region’s endemic corruption is a product of structural factors — including institutional weakness, income inequality, resource dependence, and a culture in some countries of impunity for the politically connected — that have proved deeply resistant to reform.

Brazil is perhaps the single most instructive example. The Lava Jato (Operation Car Wash) investigation, which began as a money-laundering probe in 2014, metastasized into an unprecedented exposure of corruption across Brazil’s political and corporate establishment. The state oil company Petrobras sat at the center of a scheme in which contractors paid hundreds of millions of dollars in bribes to company officials and politicians in exchange for inflated contracts. The resulting FCPA enforcement actions — including resolutions with Odebrecht (fines exceeding $2.6 billion across three jurisdictions), SBM Offshore, and Braskem — represent some of the largest anti-bribery penalties ever imposed. Although the Lava Jato investigation has wound down, the structural vulnerabilities that enabled those schemes have not been fully resolved.

Mexico presents a complex and multifaceted risk environment. FCPA cases involving Mexico have touched on diverse industries including mining, telecommunications, retail, and pharmaceuticals. The concentration of economic power in state-owned enterprises such as Pemex (oil and gas) and the CFE (electricity), combined with a customs environment that has historically been susceptible to unofficial payment demands, makes regulatory and border-crossing interactions particularly fraught. The rise of organized crime as an unofficial parallel power structure in certain regions of Mexico also creates risks for companies operating in areas where cartel influence over local government and enforcement is significant.

Venezuela represents one of the highest-risk environments globally, not merely for corruption but for the full range of political, economic, and legal risks. The collapse of institutions under the Maduro government, the catastrophic deterioration of the rule of law, and the weaponization of state power against private business make Venezuela an exceptionally dangerous jurisdiction for U.S. companies. Separate from FCPA risk, U.S. companies must navigate an extensive sanctions regime, and the two sets of legal exposure interact in ways that require careful legal counsel. Colombia, Ecuador, and Guatemala also present elevated corruption risk, particularly in public contracting and the extractive sector.

Asia-Pacific

The Asia-Pacific region encompasses an extraordinary range of governance environments, from the highly transparent Singapore and New Zealand to some of the world’s most systemically corrupt jurisdictions. For U.S. businesses with operations in or supply chains running through certain Asian countries, the FCPA risks are substantial.

China remains one of the most significant sources of FCPA exposure for U.S. companies, both because of the scale of U.S. business activity there and because of the structural features of the Chinese economy. The pervasive role of state-owned enterprises (SOEs) — and the corresponding difficulty of distinguishing ‘government officials’ from ‘business counterparties’ — is a central compliance challenge. In China, many ostensibly commercial actors are, as a matter of FCPA law, foreign officials because they work for entities owned or controlled by the state. Enforcement actions involving China have spanned pharmaceuticals, financial services, engineering, and technology, with recurring themes including improper payments to hospital administrators who are government employees, payments to obtain regulatory approvals, and the misuse of travel and entertainment programs that were nominally legitimate but functioned as vehicles for bribery.

Indonesia, with one of Southeast Asia’s largest economies, scores in the low-to-mid 30s on the CPI and has appeared in multiple FCPA enforcement actions. The country’s complex web of local licensing requirements, its reliance on agents and local partners for market access, and the significant role of local government officials in investment approvals create recurring compliance challenges. Vietnam, Cambodia, and Laos present similar risk profiles, with particularly acute issues around customs, land use rights, and operating licenses.

India deserves special mention. Despite a robust domestic legal framework and a genuinely active anti-corruption enforcement environment under the Central Vigilance Commission and other bodies, India’s CPI score (typically in the 39-40 range, placing it at the lower edge of elevated risk) understates the operational difficulties facing foreign businesses. The Indian bureaucracy is large, and the interaction points with government — from customs clearance to environmental approvals to tax audits — are numerous. The practice of facilitation payments in lower-level interactions, while illegal under both Indian law and the FCPA, remains a persistent reality in parts of the economy.

Myanmar presents extreme risk following the 2021 military coup, with the junta in effective control of the state and the formal rule of law effectively suspended. Bangladesh and Pakistan score poorly on governance indicators and present systemic challenges in industries involving government procurement, construction, and regulated sectors.

The Middle East and North Africa

The MENA region offers significant commercial opportunities in infrastructure, energy, and professional services, but it also presents a distinctive set of corruption risks shaped by opaque government structures, the dominance of state-owned enterprises, and commercial cultures that place high value on relationship-based dealings that can blur into improper advantage.

Iraq has been one of the most consistently high-risk jurisdictions for U.S. businesses operating in the post-invasion reconstruction and energy sectors. The combination of enormous oil wealth, institutional weakness, and the legacy of conflict has produced a governance environment in which bribery of public officials is widespread. FCPA cases involving Iraq have cited payments in connection with oil contracts, customs clearances, and security arrangements. Libya, Yemen, and Syria are effectively failed states or active conflict zones and present risks that go well beyond corruption into the realm of sanctions, asset seizure, and physical safety.

Algeria, while possessed of significant hydrocarbon resources that attract foreign investment, scores poorly on transparency metrics and has a government characterized by opaque decision-making and a significant state role in the economy. Egypt presents a mixed picture: it has undertaken some anti-corruption reforms, but the security establishment’s deep involvement in the economy creates a structural risk for companies doing business in regulated sectors. Saudi Arabia’s recent anti-corruption drive under Crown Prince Mohammed bin Salman — including the 2017 Ritz-Carlton detentions of prominent businessmen and officials — reflects a genuine (if politically selective) anti-corruption initiative, but also a highly unpredictable enforcement environment in which the rules can change rapidly.

Eastern Europe and Central Asia

The former Soviet states of Central Asia — Kazakhstan, Uzbekistan, Turkmenistan, Tajikistan, and Kyrgyzstan — are among the highest-risk corruption environments in the world. Concentrated political power, state capture of natural resources, opaque regulatory frameworks, and the entrenched interests of ruling families and their associates create conditions in which doing business without exposure to corrupt demands is extraordinarily difficult. Kazakhstan, with its significant oil wealth and the long-term dominance of the Nazarbayev family over government and commerce, has appeared in FCPA enforcement actions, including the notable Kazakhgate investigation involving payments in connection with oil rights purchases.

Azerbaijan and Uzbekistan present similar profiles: resource wealth concentrated in the hands of a politically connected elite, with foreign investors needing to navigate relationships with state entities that are effectively extensions of the ruling family. Uzbekistan has undertaken some liberalization since the death of President Karimov in 2016, but the corruption risks remain substantial.

Within Eastern Europe, Ukraine — prior to the Russian invasion — had undertaken significant anti-corruption reforms driven by conditions attached to international financial assistance, including the establishment of the National Anti-Corruption Bureau (NABU). Those reforms created a more credible domestic enforcement environment than existed in the 2000s and early 2010s, but corruption remains deeply embedded and U.S. companies operating there should maintain rigorous compliance programs. Russia itself has become largely inaccessible to U.S. businesses due to the comprehensive sanctions regime in place following the invasion of Ukraine, but before that development it was consistently ranked among the highest-risk environments for FCPA purposes, with a CPI score typically in the low 30s and a legal system in which the rule of law is highly politicized.

Practical Implications for U.S. Businesses

Understanding which countries present elevated corruption risk is only the first step. The purpose of that assessment is to calibrate your compliance program appropriately. The DOJ and SEC have both made clear — in their FCPA Resource Guide and in the policy guidance embedded in FCPA resolutions — that a well-designed and properly implemented compliance program is both an important factor in the government’s charging decisions and a potential affirmative defense in some circumstances. A compliance program that treats a high-risk country the same as a low-risk country is not, in the eyes of the enforcement agencies, a credible program.

For high-risk jurisdictions, compliance best practices include: enhanced due diligence on all third parties (agents, distributors, consultants, joint venture partners, and local intermediaries) that interact with government officials on the company’s behalf; robust contractual anti-bribery representations and audit rights in commercial agreements; local compliance training conducted in the local language; clear escalation procedures for employees who encounter demands for unofficial payments; and heightened financial controls designed to detect the misuse of expense accounts, petty cash, and travel and entertainment budgets.

Third-party risk is the single greatest source of FCPA liability for U.S. businesses. The overwhelming majority of FCPA enforcement actions involve payments made not by company employees directly, but by local agents, consultants, or joint venture partners. The legal principle at work is straightforward: a company can be held liable for corrupt payments made by third parties if it knew or should have known that the payments were being made, or if it consciously avoided learning of them. This ‘conscious disregard’ or ‘willful blindness’ standard means that deliberately refraining from asking hard questions about an agent’s activities does not insulate the company from liability.

Mergers and acquisitions involving targets with operations in high-risk countries present particularly acute challenges. Pre-acquisition due diligence must include a thorough FCPA review, and post-acquisition compliance integration should be a defined priority with a clear timeline. Companies that acquire a target with pre-existing FCPA violations can themselves face liability for those violations if they do not move promptly to detect and remediate them. The DOJ’s guidance on successor liability has made clear that voluntary disclosure of pre-acquisition violations discovered during due diligence will be treated favorably, but only if the company acts promptly and thoroughly.

Finally, U.S. businesses should not overlook the intersection of FCPA risk with other legal regimes. Sanctions, export controls, anti-money laundering requirements, and the UK Bribery Act (which has extraterritorial reach and applies to companies doing business in or through the United Kingdom) all operate in the same risk landscape. A comprehensive global compliance program must address all of these regimes in an integrated fashion, rather than treating each as a siloed set of rules.

Conclusion

The geography of corruption risk is neither static nor uniform. Countries that appeared relatively safe a decade ago may have deteriorated, and vice versa. Geopolitical developments, changes in government, commodity price cycles, and the effectiveness of domestic anti-corruption enforcement all affect the risk landscape in ways that require continuous monitoring. U.S. businesses should treat country corruption risk as a living assessment that is updated regularly, not a one-time check-the-box exercise.

The countries discussed in this article — including Nigeria, the DRC, Brazil, Mexico, Venezuela, China, Indonesia, India, Iraq, Kazakhstan, and the Central Asian republics, among others — represent the jurisdictions that have most consistently generated FCPA enforcement actions and that score most poorly on internationally recognized corruption indices. Doing business in any of these markets is not prohibited, and many U.S. companies operate successfully and lawfully in all of them. But operating successfully requires a compliance program that is genuinely commensurate with the risk — one that is adequately resourced, credibly enforced from the top, and sophisticated enough to detect and deter corrupt conduct before it reaches the attention of federal prosecutors.

Companies that get this right protect not only themselves from enforcement risk, but also their commercial interests more broadly: corruption ultimately distorts markets, undermines fair competition, and creates the kind of legal and reputational uncertainty that destroys business value. A robust anti-corruption compliance program is both a legal obligation and a sound business investment. If your organization is reassessing its global compliance posture or preparing to enter a high-risk market, experienced legal counsel can help you design the controls and processes necessary to manage these risks effectively.

This article is intended for general informational and educational purposes only. It does not constitute legal advice and should not be relied upon as such. The application of the Foreign Corrupt Practices Act and related laws to specific facts and circumstances requires individualized legal analysis. U.S. businesses operating internationally are encouraged to seek advice from qualified legal counsel with expertise in anti-corruption compliance.