Skip to content
Spectra Forensics, Investigation Specialist

Fraud investigation

Procurement Fraud Red Flags: How to Spot Bid Rigging, Kickbacks and Fictitious Vendors

Red flags for procurement fraud at each stage of the procure-to-pay cycle, from rigged specifications and bid rigging to kickbacks and inflated invoices.

Spectra Forensics7 min read

Procurement fraud red flags are warning signs, in documents, data or behaviour, that the buying process is being manipulated for someone's personal gain. They appear at every stage of the procure-to-pay cycle: specifications written around one supplier, bids that follow suspicious patterns, contracts amended after award, goods that are never fully received and invoices that do not match. Spotting them early depends on knowing what to look for at each stage and on having someone independent of the buying team review the data.

This post works through the cycle stage by stage. The focus is on detecting manipulation of the buying process itself, often with insider involvement; for supplier-side scams, see vendor fraud.

Why is procurement so exposed to fraud?

Procurement combines large spend, discretion and information asymmetry. Buyers decide specifications, shortlists and evaluation criteria, and vendors have strong incentives to influence those decisions.

The ACFE's Occupational Fraud 2026: A Report to the Nations found corruption, which includes kickbacks, bid rigging and conflicts of interest, in 45% of cases, with a median loss of USD 150,000. Procurement fraud typically combines corruption with billing schemes, so losses compound over the life of a contract.

Stage 1: What are the red flags in needs identification and specifications?

Fraud often starts before any vendor is approached.

  • Requirements that are unnecessary, excessive or duplicate existing stock.
  • Specifications that match one supplier's product or brand exactly, without justification.
  • Unusually narrow technical or experience criteria that exclude capable competitors.
  • Estimates prepared with help from a prospective bidder.
  • Requirements split into several smaller purchases that each fall below approval or tender thresholds.

Split purchases are visible in data: several orders to the same vendor, on the same or consecutive days, each just below a limit. Our post on data analytics for fraud detection explains how to test for them.

Stage 2: What are the red flags in sourcing and tendering?

This is where bid rigging and favouritism are most visible.

Bid rigging patterns

Bid rigging is collusion between bidders to decide the outcome in advance. Common forms:

Scheme How it works What it looks like
Cover bidding Losers submit deliberately high or non-compliant bids Same firms always lose by wide margins; bids lack effort
Bid suppression Competitors agree not to bid or to withdraw Fewer bids than expected; late withdrawals
Bid rotation Firms take turns to win Winners follow a predictable sequence
Market allocation Firms divide customers or regions Bidders never compete in each other's areas

Other red flags in bids:

  • Identical errors, formatting, wording or calculation mistakes across "competing" bids.
  • Bid documents with the same author, template or creation metadata.
  • Bidders sharing addresses, phone numbers, directors or bank accounts.
  • Losing bidders later appearing as subcontractors or suppliers to the winner.
  • Prices that cluster tightly, or that fall sharply when a new bidder enters.

Under s. 3(3)(d) of the Competition Act 2002, agreements between competitors that result in bid rigging or collusive bidding are presumed to have an appreciable adverse effect on competition. Bid rigging is defined to include agreements that eliminate or reduce competition for bids or manipulate the bidding process. The Competition Commission of India's lesser penalty (leniency) regime encourages cartel members to come forward, which means a buyer's evidence may later matter in proceedings.

Insider manipulation

  • Shortlists that repeatedly exclude qualified vendors or include unknown ones.
  • Tender documents issued late or to selected bidders only.
  • Bid deadlines extended for one bidder, or late bids accepted.
  • Bids opened before the deadline, or without the required witnesses.
  • Single-source or emergency justifications used frequently by the same buyer.

For government procurement, Rule 175 of the General Financial Rules 2017 sets a Code of Integrity prohibiting bribery, collusion, bid rigging and undisclosed conflicts of interest, and the Central Vigilance Commission recommends pre-bid Integrity Pacts monitored by Independent External Monitors.

Stage 3: What are the red flags in evaluation and award?

  • Evaluation criteria or weightings changed after bids are opened.
  • Scoring that is inconsistent with the documents, or not documented at all.
  • The same evaluator always favouring the same vendor.
  • Award to a bidder that did not meet mandatory criteria.
  • The winning price is close to an internal estimate that should have been confidential.
  • Undisclosed relationships between evaluators and the winner. See our guide on investigating employee-vendor conflicts of interest.

Stage 4: What are the red flags in contracts and change orders?

Low bids can be recovered later through amendments.

  • A winning bid well below others, followed by frequent change orders or price escalations.
  • Variations approved by the same person who selected the vendor.
  • Scope added without fresh competition, or contracts extended repeatedly.
  • Advance payments that are unusual for the industry or not linked to milestones.
  • Contract terms more favourable to the vendor than the company's standard terms.

Stage 5: What are the red flags in receipt and inspection?

  • Goods receipts entered by the same person who raised the purchase order.
  • Receipts recorded for services that are hard to verify, such as consultancy, marketing or maintenance.
  • Quantity or quality shortfalls that are accepted without deduction.
  • Delivery addresses that are not company locations.
  • Receipts posted in bulk at period end.

These usually indicate weak segregation of duties.

Stage 6: What are the red flags in invoicing and payment?

  • Invoices without purchase orders, or with purchase orders raised after the invoice date.
  • Prices above contract or market rates, or rising without justification.
  • Duplicate or sequential invoice numbers from a vendor that claims many customers.
  • Vendors with no GSTIN, a residential address, or a bank account that changes frequently.
  • Payments released urgently, outside normal runs, or approved by override.
  • Vendor bank accounts matching employee bank accounts.

Fictitious and shell vendors are paid at this stage; our knowledge base entry on vendor fraud explains these schemes in more detail.

What behavioural red flags suggest kickbacks?

A kickback is a payment or benefit given to an insider in return for steering business. Because the payment is made by the vendor, it rarely appears in the buyer's books. Look for:

  • A buyer who resists rotation, refuses leave or insists on handling a vendor personally.
  • Close social contact with a vendor, gifts or hospitality beyond policy.
  • Lifestyle inconsistent with known income.
  • Vendors that are reluctant to deal with anyone else in the company.
  • Complaints from losing bidders about unfair treatment.

India has no dedicated offence of private-to-private bribery. The Prevention of Corruption Act 1988 applies where a public servant is involved. Private-sector kickbacks are typically pursued as criminal breach of trust, cheating or criminal conspiracy under the Bharatiya Nyaya Sanhita 2023, or under company, money-laundering or tax law, alongside employment action and civil recovery.

Which data tests catch procurement fraud?

Many of the red flags above can be tested across all transactions rather than found by chance. Useful procure-to-pay tests include:

  • purchase orders raised after the invoice date;
  • orders split to stay below approval or tender thresholds;
  • vendors whose share of a category rises sharply after a change of buyer;
  • price per unit for the same item compared across vendors and periods;
  • change orders as a percentage of original contract value, by buyer and vendor;
  • vendor bank account, PAN, address and phone matches with employees;
  • bidders sharing directors, addresses or bank accounts across tenders.

Results are leads to be tested against documents, not conclusions in themselves.

What should you do when red flags cluster?

One red flag may have an innocent explanation. Several around the same buyer, vendor or contract justify a structured response:

  1. Preserve tender files, email, ERP data and approval records before raising concerns.
  2. Analyse spend by vendor, buyer and category; test for splits, duplicates and vendor-employee matches.
  3. Profile vendors through corporate registry, GST and open-source checks, applying vendor due diligence techniques to existing suppliers.
  4. Compare bids across tenders for metadata, pricing and ownership links.
  5. Interview procurement staff and, where appropriate, vendors.
  6. Quantify overpayments and identify recovery routes.

How Spectra Forensics can help

Our fraud and whistleblower investigation service covers procurement fraud investigations from data review to interviews and reporting. Our forensic accounting and data analytics team runs procure-to-pay analytics, and our anti-bribery and corruption service covers controls and third-party risk. With 1,250+ investigations over 19+ years, we work from Pune across India and internationally. To discuss a procurement concern, contact us.

Frequently asked questions

What is the most common type of procurement fraud?

Corruption schemes, including kickbacks and conflicts of interest, are among the most frequent. The ACFE's Occupational Fraud 2026 report found corruption in 45% of cases, with a median loss of USD 150,000. In procurement these schemes often combine with others, such as a favoured vendor who receives inside information and then inflates invoices or delivers less than ordered.

Is a kickback between two private companies a crime in India?

India has no dedicated private-to-private bribery offence. The Prevention of Corruption Act 1988 targets bribery involving public servants. Private-sector kickbacks are usually pursued as criminal breach of trust, cheating or criminal conspiracy under the Bharatiya Nyaya Sanhita 2023, or under company, money-laundering or tax law, alongside disciplinary and civil recovery action. The right route in a given case needs specific legal advice.

How can a company tell whether bidders are colluding?

Look at patterns across many tenders rather than one. Warning signs include the same firms always bidding but taking turns to win, bids with identical errors or formatting, documents created by the same author or device, losing bidders working as subcontractors to the winner, and bid prices moving together. Comparing metadata, addresses, directors and bank details across bidders often reveals connections.

Who should own procurement fraud monitoring?

Ownership is usually shared. Procurement maintains controls and vendor onboarding, finance controls payments, and internal audit or a fraud risk function runs independent analytics and reviews. The Audit Committee should receive periodic reporting on exceptions and investigations. Whatever the structure, someone outside the buying team must be able to see the full procure-to-pay data.

Sources

  1. ACFE, Occupational Fraud 2026: A Report to the Nations (2026) link
  2. Competition Commission of India, Competition Act 2002 and Lesser Penalty Regulations 2024 link
  3. Government of India, Prevention of Corruption Act 1988 link
  4. Government of India, Bharatiya Nyaya Sanhita 2023 (2023) link

Newsletter

Get new insights by email

About one email a week with new articles on fraud, investigations and compliance in India. Unsubscribe with one click.

Confidential enquiry