Right Corporate Criminal Law

Economic crimes in companies: 9 signals that a situation may turn criminal

Economic crimes in companies rarely arrive announced. They show up as an operational exception, a supplier urgently recommended, a payment with no clear supporting document or an accounting reconciliation nobody wants to review. By the time the situation reaches a complaint, an investigation by the Fiscalía (Colombia's Prosecutor's Office) or the pages of the press, the discussion is no longer only financial: it is criminal, reputational and a matter of governance.

This guide is intended for management teams, boards of directors, shareholders and compliance teams that detect red flags and need a clear route for telling a business mistake apart from conduct that is criminally relevant, before making decisions that cannot be reversed. It does not replace advice on specific documents, but it helps to organize the conversation and to arrive at that consultation with better information.

The structure of the offense

Not every loss is an offense: how criminal liability is built

Before reviewing the signals, it is worth understanding what the Fiscalía needs in order to charge an offense. In articles 9 to 12, the Código Penal sets out a three-part structure that all punishable conduct must meet: typicity, unlawfulness and culpability.

The boundary between an administrative infraction, a breach of contract and an economic offense is not always obvious. An accounting error with no intent to deceive is a matter for internal audit. A forgery of documents that someone uses to obtain a payment is an offense (art. 289 CP). The difference lies in the deceit, the intent, the abuse of one's functions, the improper benefit and the traceability of the decisions.

The heart of the article

The 9 red flags that may indicate an economic offense

These signals are not, on their own, proof of an offense. They are patterns that, when they appear in a company's operations, call for an orderly review with documentary support before any decision is made. Acting late, or acting without sufficient information, usually makes the situation worse.

Statutory reference

The most frequent statutory offenses in corporate economic crime

Each red flag can connect with one or more specific statutory offenses. This table is not a closed list, but it organizes the offenses most frequently seen in the Colombian corporate setting, with their articles verified against the Código Penal.

Immediate diagnosis

Is this a completed offense, or is there still room to act?

Not every red flag corresponds to a completed offense. The answer depends on whether the conduct has already been carried through, on whether evidence has been preserved, and on whether those responsible have taken decisions that make the situation worse. This table helps to guide the first reading before consulting a lawyer.

No improvising

How to act without contaminating the evidence

The initial reaction largely determines the room for maneuver the company and its executives will have in the weeks that follow. The most costly mistakes do not happen during the event, but during the first hours after it is detected.

• Delete nothing. Deleting emails, chats, documents or accounting records may amount to destruction of evidence and worsen the criminal position of whoever orders it. Even if the content looks compromising, the original is always worth more than its absence.
• Do not question employees informally. Direct questions with no legal framework behind them can contaminate the testimony and close off the possibility of obtaining cooperative statements later on.
• Do not circulate unsupported internal versions of events. An email sent to the whole company explaining "what happened" can become a spontaneous statement that the Fiscalía uses as a starting point.
• Preserve and secure the digital evidence. Extract copies of the relevant emails, accounting records, contracts and approvals, with their metadata, before anyone modifies or deletes them.
• Designate a single legal channel. All communication with the authorities, the opposing party or the press must go through the company's criminal lawyer. Improvised answers from executives in informal conversations are a recurring source of problems.
• Separate critical functions. If the person under investigation has access to bank accounts, active contracts or accounting records, that access must be suspended as a documented precautionary measure for as long as the review lasts.

Who decides what

The decision map: the board, management, compliance and the criminal lawyer

When a red flag for a possible economic offense appears, the first confusion is usually about roles: who investigates, who decides, who communicates? Without clarity on this, decisions overlap, messages contradict one another and mistakes multiply.

Article 29 of the Código Penal provides that co-principals are those who, by means of a common agreement, act with a division of criminal labor, having regard to the importance of each contribution. In a corporate setting, this means that several executives can be brought into the same criminal proceedings if each took a partial decision that, taken together, made up the conduct. That is why clarity about roles and about the documentation of decisions is not merely an exercise in corporate governance: it is a defense tool.

Money laundering in detail

Article 323 of the Código Penal: what companies need to know

Money laundering is the economic offense carrying the highest penalties in the Colombian criminal system for the corporate setting: imprisonment of ten to thirty years and a fine of one thousand to fifty thousand monthly statutory minimum wages. Its breadth leaves many companies exposed without their realizing it. In a family business it is best to start with the seven risk signals that are usually overlooked.

Three aspects are especially relevant for executives and compliance teams:

• The offense is autonomous. The Fiscalía does not need a prior conviction for the offense that generated the funds. It only has to show the link between the assets and the unlawful activities. That means a company may be laundering assets without knowing it if it receives payments from a counterparty whose money comes from unlawful activities.
• It operates even if the underlying offense took place abroad. If the funds enter Colombia from an unlawful activity carried out in another country, the offense of money laundering can be charged in Colombia.
• The unlawful activities that generate it are broad. They range from drug trafficking to smuggling, customs fraud, terrorist financing, offenses against the financial system and offenses against public administration.

For executives of financial institutions and savings and credit cooperatives, failure to apply the control mechanisms over cash transactions —the SARLAFT— may also constitute the offense of failure to apply controls under article 325, with imprisonment of thirty-eight to one hundred and twenty-eight months, by the mere conduct of failing to apply the control, without any requirement that the laundering have been completed.

Document forgery

Article 289 of the Código Penal: forgery of a private document in a corporate setting

Forgery of a private document is one of the most frequent offenses in corporate economic investigations, and also one of the most misunderstood. Article 289 of the Código Penal is precise about its elements:

In the context of corporate economic crime, article 289 appears most frequently in three scenarios:

• Board or shareholders' meeting minutes altered to change the outcome of a vote, add an item that was never discussed, or alter capital or profit figures.
• Contracts modified unilaterally after signature, without the consent of the other party, to change price, term or liability conditions.
• False powers of attorney used to represent the company, a shareholder or an executive in transactions they would not have authorized.

Important: do not confuse article 289 with article 315 of the Código Penal. Article 315 defines unauthorized transactions with shareholders or associates —an offense specific to executives of entities subject to the control of the superintendencias— and has nothing to do with document forgery. Any citation that equates forgery of a private document with article 315 is incorrect.

Colombia has no criminal liability for legal entities

Can the company be charged? The answer that changes everything

This is the question any corporate criminal lawyer is asked most often, and the answer has immediate practical consequences for deciding how to respond to an investigation.

However, the fact that the company cannot be criminally charged does not mean it is free of consequences. The following can fall on the legal entity:

• Administrative penalties from the Superintendencia de Sociedades, the Superfinanciera, the DIAN or the Procuraduría, depending on the sector.
• Extinción de dominio (asset forfeiture) over company assets linked to unlawful activities, a proceeding that is autonomous from the criminal one and does not require a conviction.
• Civil liability for the harm caused to third parties, shareholders or the company itself by the conduct of its officers.
• Contractual and reputational consequences that can be as serious as the criminal ones: loss of contracts, exclusion from public tenders, banking blocks.

Article 29 of the Código Penal, in regulating principal liability, provides that a person who acts as representative or officer of a legal entity is a principal in the offense even though the special elements of the statutory offense are present not in that person but in the company. This creates an important asymmetry: the company does not go to prison, but its executives can, even when they acted "for the benefit" of the company.

Audit checklist

Basic internal audit checklist for detecting criminal risks

Use this list as an initial review. It does not replace a forensic audit or a legal diagnosis, but it makes it possible to identify the most vulnerable points quickly, before they turn into a crisis. Check off each point as you verify it.

• Traceability of cash payments: do all cash payments have supporting documentation of the beneficial owner, the purpose and approval by the right person?
• Supplier validation: do all active suppliers have a RUT (Colombia's tax registry number), verified operating capacity and an identified legal representative?
• Loans between related companies: do all loans between related companies have a loan agreement, a market rate and a documented use of funds?
• Integrity of the minutes: do the board and shareholders' meeting minutes match the decisions taken at the meetings, and are they signed by everyone who attended?
• Control over legal representation: does the legal representative have defined monetary limits above which prior approval by the board or the shareholders is required?
• Payment channels to suppliers: are all payments made into bank accounts in the supplier's name, and not into personal accounts of staff or representatives?
• Beneficial owner: does the company keep its Registro Único de Beneficiarios (RUB) up to date with the DIAN, and does it match the reality of who controls the company?
• SAGRILAFT alerts: are there documented controls over unusual transactions, and are they reported within the time limits the applicable rules require?
• Internal reporting channel: do employees have a secure channel for reporting irregularities without fear of retaliation, and does that channel have a defined owner?

Mistakes that make the case worse

What should not be done when an economic red flag appears

In practice, much of the damage suffered by executives caught up in criminal investigations does not come from the original event, but from the decisions they took in the hours and days that followed. These are the most frequent mistakes and their consequences.

Signals and the decision route

Risk traffic light: how to classify the urgency of each signal

Not all signals carry the same urgency. This traffic light helps to prioritize the response according to the level of perceived risk.

When to file a complaint and when to negotiate

The decision to file a complaint: when it helps and when it can do harm

Filing a complaint may be necessary, and in some cases it is a legal obligation. But a complaint brought without sufficient evidence, without clarity about the facts, or for the purpose of pressuring an opposing party can turn against whoever files it and close the door to more efficient solutions.

• The criminal investigation is mandatory for the Fiscalía. Article 66 of the Código de Procedimiento Penal provides that the Fiscalía may not suspend, interrupt or waive criminal prosecution once it has begun, except in the cases where the law authorizes applying the principio de oportunidad (the statutory power to refrain from prosecuting in defined cases). That means a complaint sets in motion a proceeding the company cannot stop at will.
• The evidence must be organized before filing a complaint. A complaint filed without clear documentary support may be shelved, or may give rise to a misdirected investigation that ends up harming the person who filed it.
• Negotiating does not mean covering up. In many cases a civil or commercial solution —returning the money, terminating the contract, a confidentiality agreement— can resolve the underlying problem more quickly and with less reputational exposure. That is only possible if there is no legal duty to file a complaint and if the conduct does not implicate third parties or the financial system.
• Before filing a complaint or negotiating, protect the evidence. Substantive decisions —to file a complaint, to negotiate or to wait— must be taken with a complete document file and with criminal law advice. The right sequence is: preserve, diagnose, decide.

The documents that matter

Which documents to preserve from the very first moment

The quality of the defense —or of the complaint— depends largely on how well the evidence was preserved from the moment the red flag was detected. This list organizes the most relevant documents.

• Contracts with the supplier or contractor involved, in every version, including amendments and otrosíes (contract addenda).
• Invoices, purchase orders, deliverables and acceptance records relating to the questioned payments.
• Banking records: statements, disbursement vouchers, payment instructions and transfer confirmations.
• Board or shareholders' meeting minutes in which the transactions or the related charges were approved.
• Emails, text messages and corporate chats with date and sender metadata.
• System access logs: ERP, accounting, online banking and document repositories.
• Internal audit, statutory audit or compliance reports in which earlier alerts were mentioned.
• Notarial powers of attorney, representations and authorizations relating to the transactions under review.
• A reconstructed timeline of the relevant decisions, payments and external communications.

Extinción de dominio

Extinción de dominio: the proprietary consequence that goes beyond the criminal proceeding

Extinción de dominio is a proprietary consequence that can fall on company assets even where there is no criminal conviction, even while the criminal proceeding is under way, and even where those under investigation are individuals. It is an autonomous proceeding governed by Ley 1708 de 2014, and it can reach bank accounts, real property, vehicles, company shares and any asset linked to unlawful activities.

The Corte Constitucional, in Sentencia C-374 de 1997 (C-374/1997, CC), held that extinción de dominio is an institution of a proprietary, not a criminal, nature: it declares that whoever appeared to be the owner never legitimately held that right, because the acquisition was unlawful. The judgment declaring it is merely declaratory, not constitutive, and it does not breach the prohibition of confiscation in article 34 of the Constitution, because confiscation operates on lawfully acquired property, whereas extinción de dominio operates on property whose origin was unlawful from the outset. (C-374/1997)

Two aspects are especially important for executives and shareholders:

• Extinción de dominio is independent of the criminal proceeding. It requires no prior conviction and no prior acquittal. The Fiscalía can start it even while the criminal proceeding is at the investigation stage, or even if the person under investigation was acquitted on procedural grounds.
• It protects third parties acting in good faith. If a supplier, creditor or contractor received assets or payments of unlawful origin without knowing it and while exercising due diligence, that party can show it was a third party acting in good faith. But that good faith must be verifiable: not knowing is not enough; one must have acted with the diligence the situation required.

For companies that detect red flags, the possibility that an extinción de dominio measure may fall on their assets is one more reason to act with documentation and legal advice from the very first moment, and not to move assets in ways that could be read as attempts to evade that measure.

Further reading

Related resources to go deeper

• Criminal defense lawyer in Bogotá — when the situation already involves an investigation, a summons or a precautionary measure.
• Corporate Lawyer — to review corporate governance and controls before the problem appears.
• Tax lawyer in Colombia — when the economic irregularities also have a tax dimension or a reporting dimension before the DIAN.

Evidence map

Which documents to put in order before consulting the lawyer

Arriving at the first consultation with organized documents makes the diagnosis faster and more precise. This preparation guide helps you put the essentials in order.

Communications protocol

How to communicate without making the situation worse

A significant part of the damage in corporate economic crime comes from messages sent in haste: defensive emails, explanatory voice notes, replies to banks with no supporting documentation, or family chats that end up as evidence. Before communicating, it is worth deciding on the channel, the spokesperson, the documents that may be shared and the purpose of each reply.

What we see in practice

When it is worth consulting before the next move

If the situation already touches questioned documents, banks, shareholders, authorities or reputation, an early conversation with a criminal lawyer can save months of conflict and keep a manageable signal from turning into a crisis. The consultation should arrive with verifiable facts, not with loose accounts.

In Cafore's experience, these are the moments when acting late has the most serious consequences:

• When a red flag is detected and the company waits for it to "resolve itself" without investigating or documenting.
• When a formal request for information is received from a bank, a superintendencia or the DIAN and the lawyer is not consulted before responding.
• When the decision to file a complaint is taken without having the evidence organized well enough to sustain it.
• When an agreement, a settlement or a "paz y salvo" (release certificate) is signed without checking whether it implies any acknowledgment of liability.
• When a summons from the Fiscalía is received and the person attends without a lawyer, believing that it is "only to give a statement".

Quick reference table

Statutory summary: articles of the Código Penal in economic crime

Before you act

Four questions to put the situation in order before deciding

When a red flag appears, the pressure to act immediately is usually high. These four questions help to order your thinking before making any decision that cannot be reversed.

So that you can verify it

Official sources and legislation cited

• Colombian Código Penal, Ley 599 de 2000 — arts. 9, 10, 11, 12, 29, 30, 289, 323, 325, 326. Official text: Función Pública.
• Código de Procedimiento Penal, Ley 906 de 2004 — art. 66 (who holds the criminal action, and its mandatory nature). Official text: Función Pública.
• Ley 1708 de 2014 — Código de Extinción de Dominio. Official text: Función Pública.
• Corte Constitucional, Sentencia C-374 de 1997 (M.P. José Gregorio Hernández Galindo) — extinción de dominio: its proprietary nature, the distinction from confiscation, and the protection of third parties acting in good faith. Read the judgment.
• Decreto 1074 de 2015 and the SAGRILAFT rules — money laundering and terrorist financing controls for supervised entities and for the real sector.
• Resolución DIAN 000164 de 2021 — Registro Único de Beneficiarios Finales (RUB).

Content prepared by Cafore Abogados for general guidance in Colombia. The right strategy in any given case depends on the documents, the facts and the specific decisions involved. Updated: June 2026.