Client Alert: Failure to Prevent Fraud – What Do You Need to Know About the New Corporate Offence? (Part 2)
On 11 April 2023, the UK Home Office tabled an amendment to the Economic Crime and Corporate Transparency Bill (the Bill), which is currently making its way through the UK Parliament. The amendment introduces a much anticipated and long awaited new corporate offence of “failure to prevent fraud”. In Part 1 of this article, we covered the key things companies around the world need to know about the proposed offence and how they should prepare for it coming into force. In Part 2, we take a closer look at some interesting legal issues around the new offence, including what it seeks to achieve, its jurisdictional reach, and approach to defences.
What does the offence seek to achieve?
The current Director of the Serious Fraud Office (SFO) has commented that the offence would be a “game changer” for law enforcement, helping the SFO “crack down on fraudulent enterprises, compensate their victims and ultimately protect the integrity of our economy”. Interestingly, despite this optimism, the government’s impact assessment states that the main benefit of the legislation is deterrence as a result of increased awareness and a “significant increase in prosecutions is not expected”.
The impact of the “failure to prevent” model, first introduced under the Bribery Act 2010, undoubtedly marked a shift in corporate compliance culture; companies have increasingly become more concerned with their internal compliance controls, adopting more rigorous procedures and providing more in-depth training to employees and associated persons. The government is clearly seeking to double down on this cultural change with the new offence, encouraging companies to prevent fraud happening in the first place.
Narrower jurisdictional scope
As explored in Part 1 of this article, it appears that the jurisdictional scope of the failure to prevent offence will depend on that of the underlying substantive fraud offence.
In respect of all the substantive underlying offences, jurisdiction under UK law can only be established either: (i) by reference to the standard common law position, i.e., that jurisdiction will arise only if the offence (including a constituent element of the offence and in some cases the result of an offence) takes place in England and Wales; or (ii) in respect of certain offences where there are specific statutory rules in relation to jurisdiction, where a “relevant event”, essential to the commission of the offence, occurs in England and Wales.[1] In respect of substantive fraud offences under the Fraud Act 2006, this includes the crystallisation of the loss or gain intended by the offender.[2]
Taken together, this means that the jurisdictional reach of the new failure to prevent fraud offence is somewhat narrower than that of failure to prevent bribery, which applies to organizations incorporated in or carrying on business in the UK, but would apply irrespective of whether the acts or omissions of bribery took place in the UK or elsewhere. The failure to prevent bribery offence has an extensive territorial reach: it applies to a business formed or incorporated outside the UK, but that carries on part of its business in the UK, where the bribery is conducted entirely outside the UK by an associated person who has no connection with the UK and who is performing services outside the UK.
The wide territorial reach of the failure to prevent bribery offence had a significant impact on global companies’ approach to compliance. It promoted cross-jurisdictional compliance frameworks with companies implementing their anti-bribery and corruption policies and procedures consistently across all subsidiaries globally. As such, most companies have already overhauled their compliance programmes. Notwithstanding the fact that the new offence does not apply to misconduct taking place outside the jurisdiction, it is likely that most companies will already have in place global systems and controls to ensure accurate record-keeping and prevent financial misconduct.
Broader benefit scope
The new failure to prevent fraud offence is also different to the previous failure to prevent offences in other respects. Specifically, liability for failure to prevent fraud can be attributed to a company if a person “associated” with that company commits a substantive fraud offence intending to benefit either that company or any person to whom, or to whose subsidiary, the associate provides services on behalf of the company (emphasis added). This means that organisations could be liable “if the conduct was intended to benefit it indirectly by assisting a client (but not if the intention was to harm the organisation itself)”.[3]
By contrast:
- The failure to prevent bribery offence requires that a bribe is paid by a person associated with a company for the purpose of obtaining or retaining business or an advantage in the conduct of business for that company[4] – it does not capture bribes paid for the benefit of another person.
- The failure to prevent tax evasion offence does not specify for whose benefit the underlying tax evasion must have been committed.[5]
“Reasonable” or “adequate” procedures – what is the difference?
A defence is available if an organisation can show that it had “reasonable” fraud prevention procedures in place or if it was not reasonable in all the circumstances to expect the organisation to have any prevention procedures in place. Organisations will be eagerly anticipating anything that might shed light on how rigorous their procedures need to be, to ensure that they are sufficient for the purposes of the offence while remaining proportionate to their size and inherent fraud risk of their business. It should be noted in this context that government guidance published to accompany the offence of failure to prevent facilitation of tax evasion states that, “in some limited circumstances it may be unreasonable to expect a relevant body to have prevention procedures in place.”
Whether there is a difference in practice between “reasonable” and “adequate” is still unclear – there has yet to be any judicial commentary on the distinction, and companies are therefore still somewhat in the dark. It is possible that the government is choosing to move away from adequate [VE1] and towards reasonable due to concerns that adequate could, in hindsight, be interpreted too stringently, leading to unfairly harsh decisions.
Conclusion
Despite these differences, the new failure to prevent fraud offence marks a substantial development in corporate criminal liability and will undoubtedly achieve the government’s aim of increasing awareness of the risks around fraud. While the Bill has yet to receive Royal Assent and is therefore some way off becoming law, companies should take advantage of this time lag to consider and test the effectiveness of their existing compliance framework, ensuring that training on the impact of the legislation and any new procedures or controls is provided throughout the organization. That being said, the new offence is unlikely to result in a drastic shift in corporate compliance programmes; many organisations will be able to leverage their existing framework, with tweaks, enhancements, and new controls where necessary.
What does the offence seek to achieve?
The current Director of the Serious Fraud Office (SFO) has commented that the offence would be a “game changer” for law enforcement, helping the SFO “crack down on fraudulent enterprises, compensate their victims and ultimately protect the integrity of our economy”. Interestingly, despite this optimism, the government’s impact assessment states that the main benefit of the legislation is deterrence as a result of increased awareness and a “significant increase in prosecutions is not expected”.
The impact of the “failure to prevent” model, first introduced under the Bribery Act 2010, undoubtedly marked a shift in corporate compliance culture; companies have increasingly become more concerned with their internal compliance controls, adopting more rigorous procedures and providing more in-depth training to employees and associated persons. The government is clearly seeking to double down on this cultural change with the new offence, encouraging companies to prevent fraud happening in the first place.
Narrower jurisdictional scope
As explored in Part 1 of this article, it appears that the jurisdictional scope of the failure to prevent offence will depend on that of the underlying substantive fraud offence.
In respect of all the substantive underlying offences, jurisdiction under UK law can only be established either: (i) by reference to the standard common law position, i.e., that jurisdiction will arise only if the offence (including a constituent element of the offence and in some cases the result of an offence) takes place in England and Wales; or (ii) in respect of certain offences where there are specific statutory rules in relation to jurisdiction, where a “relevant event”, essential to the commission of the offence, occurs in England and Wales.[1] In respect of substantive fraud offences under the Fraud Act 2006, this includes the crystallisation of the loss or gain intended by the offender.[2]
Taken together, this means that the jurisdictional reach of the new failure to prevent fraud offence is somewhat narrower than that of failure to prevent bribery, which applies to organizations incorporated in or carrying on business in the UK, but would apply irrespective of whether the acts or omissions of bribery took place in the UK or elsewhere. The failure to prevent bribery offence has an extensive territorial reach: it applies to a business formed or incorporated outside the UK, but that carries on part of its business in the UK, where the bribery is conducted entirely outside the UK by an associated person who has no connection with the UK and who is performing services outside the UK.
The wide territorial reach of the failure to prevent bribery offence had a significant impact on global companies’ approach to compliance. It promoted cross-jurisdictional compliance frameworks with companies implementing their anti-bribery and corruption policies and procedures consistently across all subsidiaries globally. As such, most companies have already overhauled their compliance programmes. Notwithstanding the fact that the new offence does not apply to misconduct taking place outside the jurisdiction, it is likely that most companies will already have in place global systems and controls to ensure accurate record-keeping and prevent financial misconduct.
Broader benefit scope
The new failure to prevent fraud offence is also different to the previous failure to prevent offences in other respects. Specifically, liability for failure to prevent fraud can be attributed to a company if a person “associated” with that company commits a substantive fraud offence intending to benefit either that company or any person to whom, or to whose subsidiary, the associate provides services on behalf of the company (emphasis added). This means that organisations could be liable “if the conduct was intended to benefit it indirectly by assisting a client (but not if the intention was to harm the organisation itself)”.[3]
By contrast:
- The failure to prevent bribery offence requires that a bribe is paid by a person associated with a company for the purpose of obtaining or retaining business or an advantage in the conduct of business for that company[4] – it does not capture bribes paid for the benefit of another person.
- The failure to prevent tax evasion offence does not specify for whose benefit the underlying tax evasion must have been committed.[5]
“Reasonable” or “adequate” procedures – what is the difference?
A defence is available if an organisation can show that it had “reasonable” fraud prevention procedures in place or if it was not reasonable in all the circumstances to expect the organisation to have any prevention procedures in place. Organisations will be eagerly anticipating anything that might shed light on how rigorous their procedures need to be, to ensure that they are sufficient for the purposes of the offence while remaining proportionate to their size and inherent fraud risk of their business. It should be noted in this context that government guidance published to accompany the offence of failure to prevent facilitation of tax evasion states that, “in some limited circumstances it may be unreasonable to expect a relevant body to have prevention procedures in place.”
Whether there is a difference in practice between “reasonable” and “adequate” is still unclear – there has yet to be any judicial commentary on the distinction, and companies are therefore still somewhat in the dark. It is possible that the government is choosing to move away from adequate [VE1] and towards reasonable due to concerns that adequate could, in hindsight, be interpreted too stringently, leading to unfairly harsh decisions.
Conclusion
Despite these differences, the new failure to prevent fraud offence marks a substantial development in corporate criminal liability and will undoubtedly achieve the government’s aim of increasing awareness of the risks around fraud. While the Bill has yet to receive Royal Assent and is therefore some way off becoming law, companies should take advantage of this time lag to consider and test the effectiveness of their existing compliance framework, ensuring that training on the impact of the legislation and any new procedures or controls is provided throughout the organization. That being said, the new offence is unlikely to result in a drastic shift in corporate compliance programmes; many organisations will be able to leverage their existing framework, with tweaks, enhancements, and new controls where necessary.
[1] Section 2(1), Criminal Justice Act 1993
[2] Section 2(1A), Criminal Justice Act 1993
[3] Corporate Criminal Liability – summary of the options paper
[4] Section 7, Bribery Act 2010
[5] Sections 44 and 45, Criminal Finances Act 2017
Footnotes
[1] Section 2(1), Criminal Justice Act 1993
[2] Section 2(1A), Criminal Justice Act 1993
[3] Corporate Criminal Liability – summary of the options paper
[4] Section 7, Bribery Act 2010
[5] Sections 44 and 45, Criminal Finances Act 2017
Related Attorneys
Related Capabilities
© 2026 Jenner & Block LLP. Attorney Advertising. Jenner & Block LLP is an Illinois Limited Liability Partnership including professional corporations. This publication, presentation, or event is not intended to provide legal advice but to provide information on legal matters and/or firm news of interest to our clients and colleagues. Readers or attendees should seek specific legal advice before taking any action with respect to matters mentioned in this publication or at this event. The attorney responsible for this communication is Brent E. Kidwell, Jenner & Block LLP, 353 N. Clark Street, Chicago, IL 60654-3456. Prior results do not guarantee a similar outcome. Jenner & Block London LLP, an affiliate of Jenner & Block LLP, is a limited liability partnership established under the laws of the State of Delaware, USA and is authorised and regulated by the Solicitors Regulation Authority with SRA number 615729. Information regarding the data we collect and the rights you have over your data can be found in our Privacy Notice. For further inquiries, please contact dataprotection@jenner.com.
On 11 April 2023, the UK Home Office tabled an amendment to the Economic Crime and Corporate Transparency Bill (the Bill), which is currently making its way through the UK Parliament. The amendment introduces a much anticipated and long awaited new corporate offence of “failure to prevent fraud”. In Part 1 of this article, we covered the key things companies around the world need to know about the proposed offence and how they should prepare for it coming into force. In Part 2, we take a closer look at some interesting legal issues around the new offence, including what it seeks to achieve, its jurisdictional reach, and approach to defences.
What does the offence seek to achieve?
The current Director of the Serious Fraud Office (SFO) has commented that the offence would be a “game changer” for law enforcement, helping the SFO “crack down on fraudulent enterprises, compensate their victims and ultimately protect the integrity of our economy”. Interestingly, despite this optimism, the government’s impact assessment states that the main benefit of the legislation is deterrence as a result of increased awareness and a “significant increase in prosecutions is not expected”.
The impact of the “failure to prevent” model, first introduced under the Bribery Act 2010, undoubtedly marked a shift in corporate compliance culture; companies have increasingly become more concerned with their internal compliance controls, adopting more rigorous procedures and providing more in-depth training to employees and associated persons. The government is clearly seeking to double down on this cultural change with the new offence, encouraging companies to prevent fraud happening in the first place.
Narrower jurisdictional scope
As explored in Part 1 of this article, it appears that the jurisdictional scope of the failure to prevent offence will depend on that of the underlying substantive fraud offence.
In respect of all the substantive underlying offences, jurisdiction under UK law can only be established either: (i) by reference to the standard common law position, i.e., that jurisdiction will arise only if the offence (including a constituent element of the offence and in some cases the result of an offence) takes place in England and Wales; or (ii) in respect of certain offences where there are specific statutory rules in relation to jurisdiction, where a “relevant event”, essential to the commission of the offence, occurs in England and Wales.[1] In respect of substantive fraud offences under the Fraud Act 2006, this includes the crystallisation of the loss or gain intended by the offender.[2]
Taken together, this means that the jurisdictional reach of the new failure to prevent fraud offence is somewhat narrower than that of failure to prevent bribery, which applies to organizations incorporated in or carrying on business in the UK, but would apply irrespective of whether the acts or omissions of bribery took place in the UK or elsewhere. The failure to prevent bribery offence has an extensive territorial reach: it applies to a business formed or incorporated outside the UK, but that carries on part of its business in the UK, where the bribery is conducted entirely outside the UK by an associated person who has no connection with the UK and who is performing services outside the UK.
The wide territorial reach of the failure to prevent bribery offence had a significant impact on global companies’ approach to compliance. It promoted cross-jurisdictional compliance frameworks with companies implementing their anti-bribery and corruption policies and procedures consistently across all subsidiaries globally. As such, most companies have already overhauled their compliance programmes. Notwithstanding the fact that the new offence does not apply to misconduct taking place outside the jurisdiction, it is likely that most companies will already have in place global systems and controls to ensure accurate record-keeping and prevent financial misconduct.
Broader benefit scope
The new failure to prevent fraud offence is also different to the previous failure to prevent offences in other respects. Specifically, liability for failure to prevent fraud can be attributed to a company if a person “associated” with that company commits a substantive fraud offence intending to benefit either that company or any person to whom, or to whose subsidiary, the associate provides services on behalf of the company (emphasis added). This means that organisations could be liable “if the conduct was intended to benefit it indirectly by assisting a client (but not if the intention was to harm the organisation itself)”.[3]
By contrast:
- The failure to prevent bribery offence requires that a bribe is paid by a person associated with a company for the purpose of obtaining or retaining business or an advantage in the conduct of business for that company[4] – it does not capture bribes paid for the benefit of another person.
- The failure to prevent tax evasion offence does not specify for whose benefit the underlying tax evasion must have been committed.[5]
“Reasonable” or “adequate” procedures – what is the difference?
A defence is available if an organisation can show that it had “reasonable” fraud prevention procedures in place or if it was not reasonable in all the circumstances to expect the organisation to have any prevention procedures in place. Organisations will be eagerly anticipating anything that might shed light on how rigorous their procedures need to be, to ensure that they are sufficient for the purposes of the offence while remaining proportionate to their size and inherent fraud risk of their business. It should be noted in this context that government guidance published to accompany the offence of failure to prevent facilitation of tax evasion states that, “in some limited circumstances it may be unreasonable to expect a relevant body to have prevention procedures in place.”
Whether there is a difference in practice between “reasonable” and “adequate” is still unclear – there has yet to be any judicial commentary on the distinction, and companies are therefore still somewhat in the dark. It is possible that the government is choosing to move away from adequate [VE1] and towards reasonable due to concerns that adequate could, in hindsight, be interpreted too stringently, leading to unfairly harsh decisions.
Conclusion
Despite these differences, the new failure to prevent fraud offence marks a substantial development in corporate criminal liability and will undoubtedly achieve the government’s aim of increasing awareness of the risks around fraud. While the Bill has yet to receive Royal Assent and is therefore some way off becoming law, companies should take advantage of this time lag to consider and test the effectiveness of their existing compliance framework, ensuring that training on the impact of the legislation and any new procedures or controls is provided throughout the organization. That being said, the new offence is unlikely to result in a drastic shift in corporate compliance programmes; many organisations will be able to leverage their existing framework, with tweaks, enhancements, and new controls where necessary.
What does the offence seek to achieve?
The current Director of the Serious Fraud Office (SFO) has commented that the offence would be a “game changer” for law enforcement, helping the SFO “crack down on fraudulent enterprises, compensate their victims and ultimately protect the integrity of our economy”. Interestingly, despite this optimism, the government’s impact assessment states that the main benefit of the legislation is deterrence as a result of increased awareness and a “significant increase in prosecutions is not expected”.
The impact of the “failure to prevent” model, first introduced under the Bribery Act 2010, undoubtedly marked a shift in corporate compliance culture; companies have increasingly become more concerned with their internal compliance controls, adopting more rigorous procedures and providing more in-depth training to employees and associated persons. The government is clearly seeking to double down on this cultural change with the new offence, encouraging companies to prevent fraud happening in the first place.
Narrower jurisdictional scope
As explored in Part 1 of this article, it appears that the jurisdictional scope of the failure to prevent offence will depend on that of the underlying substantive fraud offence.
In respect of all the substantive underlying offences, jurisdiction under UK law can only be established either: (i) by reference to the standard common law position, i.e., that jurisdiction will arise only if the offence (including a constituent element of the offence and in some cases the result of an offence) takes place in England and Wales; or (ii) in respect of certain offences where there are specific statutory rules in relation to jurisdiction, where a “relevant event”, essential to the commission of the offence, occurs in England and Wales.[1] In respect of substantive fraud offences under the Fraud Act 2006, this includes the crystallisation of the loss or gain intended by the offender.[2]
Taken together, this means that the jurisdictional reach of the new failure to prevent fraud offence is somewhat narrower than that of failure to prevent bribery, which applies to organizations incorporated in or carrying on business in the UK, but would apply irrespective of whether the acts or omissions of bribery took place in the UK or elsewhere. The failure to prevent bribery offence has an extensive territorial reach: it applies to a business formed or incorporated outside the UK, but that carries on part of its business in the UK, where the bribery is conducted entirely outside the UK by an associated person who has no connection with the UK and who is performing services outside the UK.
The wide territorial reach of the failure to prevent bribery offence had a significant impact on global companies’ approach to compliance. It promoted cross-jurisdictional compliance frameworks with companies implementing their anti-bribery and corruption policies and procedures consistently across all subsidiaries globally. As such, most companies have already overhauled their compliance programmes. Notwithstanding the fact that the new offence does not apply to misconduct taking place outside the jurisdiction, it is likely that most companies will already have in place global systems and controls to ensure accurate record-keeping and prevent financial misconduct.
Broader benefit scope
The new failure to prevent fraud offence is also different to the previous failure to prevent offences in other respects. Specifically, liability for failure to prevent fraud can be attributed to a company if a person “associated” with that company commits a substantive fraud offence intending to benefit either that company or any person to whom, or to whose subsidiary, the associate provides services on behalf of the company (emphasis added). This means that organisations could be liable “if the conduct was intended to benefit it indirectly by assisting a client (but not if the intention was to harm the organisation itself)”.[3]
By contrast:
- The failure to prevent bribery offence requires that a bribe is paid by a person associated with a company for the purpose of obtaining or retaining business or an advantage in the conduct of business for that company[4] – it does not capture bribes paid for the benefit of another person.
- The failure to prevent tax evasion offence does not specify for whose benefit the underlying tax evasion must have been committed.[5]
“Reasonable” or “adequate” procedures – what is the difference?
A defence is available if an organisation can show that it had “reasonable” fraud prevention procedures in place or if it was not reasonable in all the circumstances to expect the organisation to have any prevention procedures in place. Organisations will be eagerly anticipating anything that might shed light on how rigorous their procedures need to be, to ensure that they are sufficient for the purposes of the offence while remaining proportionate to their size and inherent fraud risk of their business. It should be noted in this context that government guidance published to accompany the offence of failure to prevent facilitation of tax evasion states that, “in some limited circumstances it may be unreasonable to expect a relevant body to have prevention procedures in place.”
Whether there is a difference in practice between “reasonable” and “adequate” is still unclear – there has yet to be any judicial commentary on the distinction, and companies are therefore still somewhat in the dark. It is possible that the government is choosing to move away from adequate [VE1] and towards reasonable due to concerns that adequate could, in hindsight, be interpreted too stringently, leading to unfairly harsh decisions.
Conclusion
Despite these differences, the new failure to prevent fraud offence marks a substantial development in corporate criminal liability and will undoubtedly achieve the government’s aim of increasing awareness of the risks around fraud. While the Bill has yet to receive Royal Assent and is therefore some way off becoming law, companies should take advantage of this time lag to consider and test the effectiveness of their existing compliance framework, ensuring that training on the impact of the legislation and any new procedures or controls is provided throughout the organization. That being said, the new offence is unlikely to result in a drastic shift in corporate compliance programmes; many organisations will be able to leverage their existing framework, with tweaks, enhancements, and new controls where necessary.
[1] Section 2(1), Criminal Justice Act 1993
[2] Section 2(1A), Criminal Justice Act 1993
[3] Corporate Criminal Liability – summary of the options paper
[4] Section 7, Bribery Act 2010
[5] Sections 44 and 45, Criminal Finances Act 2017
Footnotes
[1] Section 2(1), Criminal Justice Act 1993
[2] Section 2(1A), Criminal Justice Act 1993
[3] Corporate Criminal Liability – summary of the options paper
[4] Section 7, Bribery Act 2010
[5] Sections 44 and 45, Criminal Finances Act 2017
Related Attorneys
Related Capabilities
© 2026 Jenner & Block LLP. Attorney Advertising. Jenner & Block LLP is an Illinois Limited Liability Partnership including professional corporations. This publication, presentation, or event is not intended to provide legal advice but to provide information on legal matters and/or firm news of interest to our clients and colleagues. Readers or attendees should seek specific legal advice before taking any action with respect to matters mentioned in this publication or at this event. The attorney responsible for this communication is Brent E. Kidwell, Jenner & Block LLP, 353 N. Clark Street, Chicago, IL 60654-3456. Prior results do not guarantee a similar outcome. Jenner & Block London LLP, an affiliate of Jenner & Block LLP, is a limited liability partnership established under the laws of the State of Delaware, USA and is authorised and regulated by the Solicitors Regulation Authority with SRA number 615729. Information regarding the data we collect and the rights you have over your data can be found in our Privacy Notice. For further inquiries, please contact dataprotection@jenner.com.
News and Insights
Publications
Supreme Court Clarifies Scope of Private Rights of Action Under the Investment Company Act, Private Equity Law Report
Partners Charles Riely, Todd C. Toral, and Martin Glass authored a guest article for Private Equity Law Report examining the US Supreme Court's June 11, 2026, ruling on the scope of private rights of action under the Investment Company Act of 1940.
July 14, 2026
Publications
Emily Loeb Discusses Congressional Oversight Preparedness in Bloomberg Law
Partner Emily Loeb, co-chair of Jenner & Block's Congressional Investigations Practice, spoke with Bloomberg Law article about how companies can prepare for potential oversight exposure ahead of this fall's midterm elections.
July 7, 2026
Publications
In New York Law Journal, The True Lender Doctrine and the OppFi Decision
Partners Jeremy Creelan, Michael Ross, Megan Poetzel, and Laurel Loomis Rimon, and Associate Molly Oberstein-Allen authored an article for the New York Law Journal examining the "True Lender" doctrine in light of a May 2026 California decision that provides the most detailed judicial framework to date for evaluating bank-nonbank lending partnerships.
July 1, 2026
Event
Partner Michael Vernick to Speak at NACUA's 2026 Annual Conference
On July 1, Partner Michael Vernick will speak on a panel at the National Association of College and University Attorneys (NACUA) 2026 Annual Conference in Nashville.
July 1, 2026