The email arrived on a Thursday afternoon. No name. An anonymous account. Three attachments: a billing invoice, a subcontractor work order, and an internal project status report.

The sender said only this: “These numbers don’t match. Someone should look.”

We looked.

What we found over the next four months was a government contract fraud scheme that had been running for nearly three years fake subcontractor invoices, inflated cost allocations, and services billed to a federal contract that had been delivered, if at all, to a private client. Total false billings to the government: approximately $12 million.

The contractor was a mid sized professional services firm with federal contracts across multiple agencies. They had a compliance department. They had signed certifications. They had everything that looks like a legitimate operation except accurate invoices.

This is how three documents started it all, and what every government contractor, compliance officer, and employee who suspects fraud needs to understand about what happens next.

What the Three Documents Actually Showed

The power of the whistleblower’s three documents wasn’t that any one of them proved fraud. It was that together they revealed an inconsistency that shouldn’t have existed.

Document one: a billing invoice submitted to the government agency. It described specific professional services delivered during a particular month, by a named subcontractor, at an agreed rate. Total billed: approximately $340,000.

Document two: the internal subcontractor work order for the same month. The work order an internal document not intended for the agency described a completely different scope of work, performed for a different client, under a different project code.

Document three: a project status report. It documented the actual activities of the team during the relevant period. The government contract appeared nowhere in the status report. The team’s work that month was entirely directed toward a commercial client.

One document says services were delivered to the government. Another says the team was working for someone else. A third confirms the team’s actual activity matched neither the invoice nor the government contract scope.

This is what fraud investigators call a “triangle inconsistency” three independent documents that, when compared, make the same transaction impossible to explain innocently. No administrative error produces this pattern. No miscommunication between departments creates a work order, an invoice, and a status report that all contradict each other in ways that consistently benefit one party.

The inconsistency was sufficient to begin a formal investigation. It was not, by itself, sufficient to establish fraud. That’s what the investigation was for.

How Government Contract Fraud Actually Works

Government contract fraud takes many forms, but the pattern we encountered billing the government for work performed for a commercial client is among the most documented in federal enforcement actions.

The mechanics are straightforward in cost plus or time and materials contracts: the contractor is reimbursed for allowable costs plus a percentage. If those costs can be inflated by allocating commercial project hours to the government contract, by including subcontractor invoices that don’t correspond to government work, by billing overhead rates that include expenses with no nexus to federal work the contractor captures the government’s reimbursement while delivering work (or nothing) somewhere else.

In FY2025, the DOJ recovered $6.8 billion in False Claims Act settlements and judgments the highest single year total in the statute’s history. Whistleblowers filed 1,297 qui tam lawsuits, also a record. More than $5.3 billion of those recoveries came from cases initiated by whistleblowers. The False Claims Act has, since 1986, recovered more than $85 billion in fraudulent claims against the government a number that would be substantially larger if every scheme that ran undetected had been reported.

The case we investigated fit directly into the pattern documented in major enforcement actions: AECOM paid $11.8 million to resolve allegations of false claims to FEMA for hurricane recovery contracts. Sikorsky Support Services and its subsidiary paid $70 million after a whistleblower exposed their scheme of overcharging the Navy for spare parts through an illegal cost plus percentage structure. In each of these cases, the scheme was not visible from the outside. It required someone on the inside someone who had access to the documents that didn’t match to make it visible.

What the Investigation Found

Starting from three documents, the forensic investigation expanded through five months of methodical financial analysis.

The first phase was billing record reconstruction pulling every invoice submitted to the federal agency under the relevant contracts and comparing them against the internal project records that described what was actually done and for whom. We obtained those records through the discovery process following the formal legal complaint, and through voluntary document production requested before litigation.

The pattern that emerged from the comparison was consistent and directional. Across 34 months of billing, approximately 40% of the professional services billed to the government contract corresponded to work that the internal records attributed to commercial clients. The subcontractor invoices showed a similar pattern several were nearly identical copies of commercial invoices with the client name changed and the government contract number substituted.

The second phase was cost allocation analysis. Under federal contracting regulations, indirect costs overhead, fringe benefits, G&A expenses must be allocated to government contracts only to the extent they are genuinely attributable to government work. In this case, the contractor’s overhead pool included significant marketing, client entertainment, and business development costs that were allocated to the federal contracts but had no nexus to government work. This is a documented form of government contract fraud that regulators call “unallowable cost allocation” charging the government for expenses it was never authorized to bear.

The third phase was subcontractor verification independently confirming which subcontractor services were actually delivered to the government contract. Of the eleven subcontractor relationships identified in the federal billing records, three could not be substantiated: no statements of work existed for the government contract, no deliverables could be identified, and the subcontractors themselves confirmed, when contacted through the investigation process, that their work had been for commercial projects.

The forensic report documented false billings of approximately $12 million across the contract period. Combined with applicable False Claims Act treble damages and per claim civil penalties, the contractor’s potential exposure exceeded $40 million. Our post on how government contractors hide fraud through shell companies covers the more sophisticated structural techniques used in larger scale procurement fraud.

What Happened to the Whistleblower

Under the False Claims Act’s qui tam provisions, a whistleblower who files a formal complaint on behalf of the government is entitled to receive between 15% and 30% of any recovery. In FY2025, whistleblowers received more than $400 million in relator shares from settlements and judgments.

In this case, the whistleblower was a mid level project manager who had raised concerns internally before contacting us and had been ignored. After the investigation was complete and the contractor settled with the government, the whistleblower received a relator’s share that represented a meaningful personal recovery.

The False Claims Act also prohibits retaliation against whistleblowers who report government contract fraud. Employees who are demoted, terminated, harassed, or otherwise penalized for reporting fraud are entitled to reinstatement, double back pay, and attorney fees. This protection exists specifically because internal reporting often fails and because the government’s most powerful fraud detection tool is the employee who already knows what the documents show.

Our post on whistleblower retaliation covers the legal protections in detail, and our guide to reporting corporate fraud anonymously explains what options are available to employees who aren’t ready to file formally.

What Government Contractors Must Do Right Now

Government contract fraud is not exclusively a criminal matter. The False Claims Act is a civil statute, and civil liability applies to any contractor that knowingly submits a false claim whether or not there was intent to defraud in the criminal sense. “Deliberate ignorance” and “reckless disregard” of the truth are explicitly covered under the statute.

This means compliance isn’t optional and it doesn’t protect you unless it actually works. The contractor in this case had a compliance department. What it didn’t have was a compliance process that compared internal project records against federal billings before submission.

The controls that would have prevented this scheme:

Invoice reconciliation against internal project records. Before any government invoice is submitted, the services described should be compared against the internal records that document what was actually done. When the two don’t match, the invoice doesn’t go out.

Subcontractor verification protocols. Every subcontractor invoice billed to a government contract should correspond to a signed statement of work, a deliverable, and an internal record confirming the work was performed in support of that specific contract not another project.

Unallowable cost review before overhead allocation. The Federal Acquisition Regulation (FAR) Part 31 defines what costs are allowable on government contracts. A compliance review of the overhead pool before finalized billing specifically looking for marketing, entertainment, and business development costs prevents the cost allocation fraud that compounded losses in this case.

An internal reporting channel that actually works. The whistleblower in this case tried to raise concerns internally before contacting us. That internal path failed. Had it worked had an internal compliance hotline resulted in a genuine investigation the contractor might have self corrected before federal investigators became involved. Understanding how anonymous tips trigger fraud investigations is as relevant for government contractors as for any organization.

Conclusion: Three Documents Changed Everything

The whistleblower who sent those three documents didn’t know they were starting a $12 million government contract fraud investigation. They knew something was wrong and decided that mattered.

The False Claims Act gave that decision legal force. The forensic investigation gave it evidentiary structure. The government’s enforcement machinery gave it consequence.

For contractors: the enforcement environment in 2025 and 2026 is the most active in the False Claims Act’s history. Whistleblowers are filing more cases than ever. Qui tam attorneys are better resourced and more experienced than they’ve ever been. And the documents that reveal fraud the billing records, the internal work orders, the project status reports are created by your own people, in your own systems, every day.

If you’re a contractor and your billing process doesn’t include a comparison of internal project records against federal invoices before submission, that gap isn’t a compliance issue. It’s an exposure.

And if you’re an employee who has seen something that doesn’t add up, you have more legal protection than you may realize. Three documents were enough to start this investigation. Sometimes that’s all it takes.

Frequently Asked Questions

1. What is qui tam, and how does a whistleblower file a government contract fraud case? A qui tam lawsuit is filed under the False Claims Act by a private individual called a relator on behalf of the U.S. government. The whistleblower files the complaint under seal, giving the DOJ an opportunity to investigate and intervene. If the case is successful, the relator receives between 15% and 30% of the government’s recovery. In FY2025, whistleblowers received more than $400 million in relator shares across cases filed under the False Claims Act.

2. What types of government contract fraud are most commonly investigated? Overbilling for services not rendered, inflated cost allocations, substitution of inferior materials or subcontractors, and kickbacks affecting contract awards are among the most frequently prosecuted forms of government contract fraud. Billing the government for work performed for commercial clients as in this case is a specific variant of overbilling that appears regularly in federal enforcement actions involving professional services and defense contractors.

3. Does a government contractor face criminal liability for False Claims Act violations? The False Claims Act is primarily a civil statute. Criminal healthcare and procurement fraud statutes can apply in parallel when intent to defraud can be proven, but many False Claims Act cases are resolved through civil settlements without criminal charges. The civil penalties alone treble damages plus per claim penalties can far exceed the original fraud amount, making civil liability the more immediate concern for most contractors.

4. Can a contractor’s compliance program protect it from False Claims Act liability? A compliance program can reduce liability exposure through cooperation credit and self disclosure, but it does not provide immunity. The standard for False Claims Act liability includes “reckless disregard” and “deliberate ignorance” meaning a contractor that had the tools to detect fraud but didn’t use them effectively may still face liability even if no one intended to submit false claims. Compliance programs that don’t actually compare billing against performance create a paper defense without a substantive one.

5. What protections does a whistleblower have against retaliation? The False Claims Act explicitly prohibits retaliation against employees who report government contract fraud. Protected conduct includes investigating a potential violation, filing a qui tam complaint, and providing information to a qui tam attorney. Employees who experience retaliation are entitled to reinstatement, double back pay, and attorney fees. Retaliation against a whistleblower can also increase the contractor’s legal exposure by demonstrating consciousness of guilt.

6. What should a contractor do if it discovers its own billing may have been inaccurate? Engage legal counsel immediately and consult on voluntary disclosure. The DOJ’s False Claims Act cooperation policy offers reduced penalties to contractors that self disclose misconduct, cooperate during investigation, and take effective remedial measures. Voluntary disclosure before a whistleblower files typically results in substantially better outcomes than disclosure forced by a qui tam complaint or government investigation. Do not alter records before disclosure doing so creates obstruction exposure on top of the underlying billing issues.

References

1. U.S. Department of Justice, Office of Public Affairs. (2026). False Claims Act Settlements and Judgments Exceed $6.8 Billion in Fiscal Year 2025. https://www.justice.gov/opa/pr/false claims act settlements and judgments exceed 68b fiscal year 2025
2. Holland & Knight LLP. (2026). Government Contracts Enforcement: DOJ Publishes Fiscal Year 2025 False Claims Act Statistics. https://www.hklaw.com/en/insights/publications/2026/01/government contracts enforcement doj publishes fiscal year 2025
3. Ropes & Gray LLP. (2025). False Claims Act Insights: Key Takeaways from DOJ’s Fiscal Year 2024 Cases and Recoveries. https://www.ropesgray.com/en/insights/alerts/2025/01/false claims act insights key takeaways from dojs fiscal year 2024 cases and recoveries
4. Kohn, Kohn & Colapinto LLP. (2025). Major Government Contracting Fraud Whistleblower Cases from 2024. https://kkc.com/false claims qui tam/major government contracting fraud whistleblower cases from 2024/
5. U.S. Department of Justice. (2023). AECOM Agrees to Pay $11.8 Million to Resolve Allegations of False Claims Related to FEMA Contracts. https://www.justice.gov/opa/pr/aecom agrees pay 118 million resolve allegations false claims related fema contracts
6. Association of Certified Fraud Examiners (ACFE). (2024). Occupational Fraud 2024: A Report to the Nations. https://www.acfe.com/ /media/files/acfe/pdfs/rttn/2024/2024 report to the nations.pdf
7. Holland & Knight LLP. (2024). Government Contracts Enforcement: DOJ Publishes FY 2023 False Claims Act Statistics. https://www.hklaw.com/en/insights/publications/2024/03/government contracts enforcement doj publishes fy 2023 false claims
8. Brown, LLC Whistleblower Law Firm. (2025). Top 5 Biggest Whistleblower Settlements of 2024. https://ifightforyourrights.com/blog/top 5 biggest whistleblower settlements of 2024/
9. GRF CPAs & Advisors. (2024). ACFE Study Finds Median Losses from Occupational Fraud Increasing. https://www.grfcpa.com/resource/acfe study occupational fraud/
10. Federal Bureau of Investigation (FBI). (2024). White Collar Crime Procurement Fraud. https://www.fbi.gov/investigate/white collar crime
    

Disclaimer: This article is provided for informational and educational purposes only. The investigation described is based on real world forensic experience presented in an educational context; identifying details have been modified to protect confidentiality. This content does not constitute legal, financial, or professional advice, and no professional or client relationship is created by reading it. False Claims Act requirements, whistleblower protections, and government contracting regulations vary by contract type, agency, and jurisdiction. Consult a qualified attorney experienced in government contracts and False Claims Act matters for guidance specific to your situation. For questions about FraudOrder services, visit https://fraudorder.co/