Published September 11, 2026 | TIKC NewsWire
The government’s favorite fraud-fighting tool just had its biggest year ever. In January 2026, the Department of Justice announced that False Claims Act (FCA) settlements and judgments exceeded $6.8 billion in fiscal year 2025 — the largest single-year total in the statute’s history, and roughly 136% above FY2024. For every contractor that touches federal dollars, this is the enforcement climate you’re now operating in.
The Numbers That Matter
Record whistleblowers. A record 1,297 qui tam (whistleblower) lawsuits were filed — shattering the prior record — and relator-driven cases accounted for about $5.3 billion of the total. Defense fraud surged. DOD-related procurement-fraud recoveries jumped more than six-fold over FY2024 to nearly $634 million — the second-highest ever. Cyber is a live front. DOJ’s Civil Cyber-Fraud Initiative produced more than $52 million across nine settlements, several tied to false certifications of cybersecurity compliance.
Why This Reaches Small Contractors
You don’t have to be a prime to face FCA exposure. Every certification you make — cybersecurity compliance, set-aside eligibility, Buy American, labor standards, or the accuracy of an invoice — is a potential false claim if it’s wrong and you knew or recklessly disregarded that it was wrong. The penalties are severe: treble damages plus per-claim civil penalties ranging from $14,308 to $28,619 per claim at current adjusted rates. And because the FCA’s qui tam provision lets a whistleblower — often a current or former employee — sue on the government’s behalf and share the recovery, the record 1,297 filings mean the risk increasingly starts inside your own organization.
The Four Certification Categories Under Active Enforcement
Cybersecurity. SPRS scores, NIST 800-171 compliance representations, and DFARS certifications are all live FCA targets — the Hillmer indictment and LOGZONE settlement both confirm the theory works at scale. Antidiscrimination/DEI. IBM’s $17.1 million settlement in April 2026 established that employment practices characterized as discriminatory create FCA liability when attached to antidiscrimination certifications in federal contracts. Trade and customs. Country-of-origin misrepresentations and 1260H supply chain certifications are a growing DOJ focus. Operational performance. False milestone certifications and inflated invoices remain the foundation of traditional FCA enforcement, still active and still producing cases.
How to Protect Your Business
Treat every certification as a sworn legal statement. Before any certification is signed — cybersecurity compliance, set-aside eligibility, antidiscrimination compliance — someone with actual knowledge of the firm’s practices needs to verify it. A certification signed without that review is a certification you may not be able to defend.
Build an internal reporting channel. The record 1,297 qui tam filings means the risk increasingly originates inside your own organization. Employees who see a problem and have no internal channel to report it become whistleblowers. Employees who have an internal channel and trust it report internally first — giving you the chance to fix the problem and, if necessary, voluntarily disclose it to the government before a qui tam suit does it for you.
Document your compliance so you can show good faith. When something looks wrong, investigate it fast. The difference between a mistake and fraud often comes down to what you did once you knew.
The Bottom Line
$6.8 billion. 1,297 whistleblower suits. Six-fold surge in defense fraud recoveries. The False Claims Act is no longer primarily a billing-fraud statute — it is a certification-integrity statute being used across antidiscrimination compliance, cybersecurity, trade, and operational performance simultaneously. The exposure calculation for a small contractor is no longer just: did we overbill? It is: did every certification we made as a condition of every payment we received accurately reflect what we were actually doing? Brick by brick — the honest firm has nothing to fear.
Frequently Asked Questions
What actually triggers the False Claims Act?
Knowingly submitting — or causing the submission of — a false or fraudulent claim for federal payment, or a false certification tied to one. “Knowingly” includes deliberate ignorance and reckless disregard, not just intent. Treble damages and per-claim civil penalties apply from the first invoice submitted under a false certification.
Can an employee really sue my company under the FCA?
Yes. Under the qui tam provision, a whistleblower can file suit on the government’s behalf and receive 15–30% of any recovery. That is why relator filings hit a record 1,297 in FY2025 — and why an internal ethics reporting program is one of the most cost-effective compliance investments a contractor can make.
Does FCA enforcement apply to small businesses?
Fully. The FCA applies to any person or entity that submits a false claim, regardless of size. Small businesses are at elevated risk from certification-based theories because they often lack the compliance infrastructure to verify representations — making it easier for the government to argue reckless disregard. The LOGZONE settlement ($507,144 on two Navy contracts) confirmed there is no minimum contract size below which enforcement applies.
References
Holland & Knight. (2026, January). Government contracts enforcement: DOJ publishes fiscal year 2025 False Claims Act statistics. https://www.hklaw.com
Morgan Lewis. (2026, January 21). DOJ announces highest-ever annual False Claims Act recoveries: Over $6.8 billion in fiscal year 2025. https://www.morganlewis.com
U.S. Department of Justice. (2026, January 16). False Claims Act settlements and judgments exceed $6.8B in fiscal year 2025 [Press release]. https://www.justice.gov
About the Author
Melanie Patterson
Founder & CEO of Team Integrity Knowledge Center and creator of GovCon iSource. Former nurse turned entrepreneur with over 10 years guiding small, women-owned, and minority-owned businesses to over $10 million in government awards. Build, grow, scale — brick by brick. Contact
