How to Respond to an Anti‑corruption Investigation in Austria, a Step‑by‑step Guide for Companies & Directors

Last reviewed: July 21, 2026

Knowing how to respond to an anti-corruption investigation in Austria is now an operational priority for every company and director with exposure to Austrian jurisdiction. The Federal Bureau of Anti‑Corruption (BAK) has intensified its investigative activity throughout 2025–26, working alongside public prosecutors, the Anti‑Fraud Office (ABB) within the Federal Ministry of Finance, and, in matters affecting the EU budget, the European Public Prosecutor’s Office (EPPO). Austria’s OECD Phase 4 evaluation, published on 10 October 2024, called for stronger enforcement of foreign bribery offences and greater use of corporate liability mechanisms, and industry observers expect those recommendations to translate into a measurably higher number of company-facing probes during 2026 and beyond.

This guide provides general counsel, compliance officers, in‑house teams and board members with a structured, step‑by‑step playbook, from the first 24 hours through to resolution, covering evidence preservation, raid management, self‑reporting strategy, timelines and costs.

Overview of the Anti‑Corruption Investigation Process and Who It Applies To

Anti-corruption investigations in Austria can target companies, individual directors, senior managers and employees. The principal criminal offences are defined in the Austrian Penal Code (Strafgesetzbuch, StGB), which criminalises both active bribery (offering, promising or granting an undue advantage) and passive bribery (soliciting or accepting such an advantage) in the public and private sectors. Corporate entities may face liability under the Verbandsverantwortlichkeitsgesetz (VbVG), Austria’s Corporate Criminal Liability Act, whenever an offence is committed for the benefit of, or in connection with, the company by a decision‑maker or an employee whose conduct could have been prevented by adequate organisational measures.

Several authorities may lead or contribute to an anti-corruption investigation in Austria. The BAK acts as Austria’s specialist anti‑corruption law‑enforcement body and serves as the national Single Point of Contact (SPOC) for international corruption inquiries. Public prosecutors at the Wirtschafts- und Korruptionsstaatsanwaltschaft (WKStA), the Central Prosecutor’s Office for Economic Crimes and Corruption, direct investigations and decide on charges. The ABB within the Federal Ministry of Finance handles financial fraud aspects, while the Financial Intelligence Unit (FIU) may flag suspicious transaction reports that trigger or supplement a probe. For offences affecting EU financial interests, EPPO may exercise concurrent jurisdiction.

Triggers and Prerequisites, When an Investigation Begins

An anti-corruption investigation Austria rarely arrives with advance warning. Common triggers include:

• Whistleblower reports. Internal or external tip‑offs, increasingly channelled through Austria’s whistleblower protection framework, are a leading source of initial intelligence.
• Suspicious transaction reports. The FIU may identify payments or patterns linked to corruption and refer the matter to prosecutors or BAK.
• Cross‑border cooperation. Foreign authorities, EPPO, or OECD mutual legal assistance channels may share evidence implicating Austrian‑based companies or directors.
• Media or audit findings. Internal audit anomalies, press reporting, or regulatory inspections that reveal irregularities can prompt formal investigations.

Corporate criminal liability under the VbVG is engaged where a “decision‑maker” (Entscheidungsträger), a director, managing board member, or person with comparable authority, committed the offence, or where an employee committed it and the company failed to implement adequate preventive measures. Directors face personal criminal liability when they are directly involved in the corrupt conduct. Signs that a company is under genuine investigative risk include receipt of a formal Auskunftsersuchen (information request), service of a search warrant, or an approach from counsel representing a co‑suspect.

Step‑by‑Step Procedure for Responding to an Anti‑Corruption Investigation in Austria

Step 1, Immediate Actions: The First 24 Hours

1. Engage external criminal defence counsel. Retain Austrian defence counsel experienced in economic and anti‑corruption criminal law immediately upon receiving notification, discovering a whistleblower report, or learning of a BAK investigation. Do not rely solely on general corporate counsel.
2. Issue a written litigation hold notice. Direct IT, finance and relevant business units to suspend all auto‑deletion policies (email purges, document retention schedules, recycling of backup tapes) with immediate effect. This notice must be documented and acknowledged.
3. Restrict access to key systems. Limit access to potentially relevant databases, shared drives, and financial systems to prevent inadvertent or deliberate alteration. Record who currently has access and who has accessed systems in the preceding period.
4. Identify key custodians. Compile a preliminary list of individuals likely to hold relevant evidence, directors, deal‑team members, procurement staff, finance controllers, agents and intermediaries.
5. Prepare a brief internal notice. Inform the CEO, chairperson and general counsel. Keep the circle narrow. Avoid providing details in writing that could later be seized. Counsel should manage all privilege‑sensitive communications.
6. Notify D&O and criminal defence insurers. Most policies require notification within a defined window, typically within days of becoming aware of a claim or circumstance. Early notification preserves coverage rights.

Step 2, Managing a Search or Raid

If BAK officers, police or prosecutors arrive to execute a company raid procedure, the following actions should occur in rapid sequence:

• Must do:
  • Designate one senior representative and external counsel to meet the investigation team at the door.
  • Request and inspect the Hausdurchsuchungsbefehl (search warrant), confirm the scope (premises, persons, categories of items), the issuing court, and the date.
  • Accompany investigators throughout every area they enter. Assign a note‑taker to record every room searched, every item inspected, and every document or device seized.
  • Photograph or scan each seized item before it leaves the premises and obtain the investigators’ written inventory.
  • Assert privilege over documents subject to legal professional privilege, hand these to counsel for separate logging. Austrian law protects correspondence between a suspect and their defence counsel.
• Do not:
  • Obstruct, delay or confront investigators. Doing so risks charges under the Austrian Penal Code.
  • Answer substantive questions on the spot. A calm, neutral script is recommended: “We will cooperate fully. Our counsel is present to assist. We ask that all questions be directed through counsel.”
  • Permit employees to delete files, remove devices or communicate externally about the search until counsel authorises it.

Step 3, Launching an Internal Investigation and Parallel Forensic Collection

Once the immediate crisis is managed, the company must launch a structured corporate internal investigation. This step typically runs in parallel with the authorities’ own inquiry.

Privilege management is critical. In Austria, legal professional privilege protects defence counsel correspondence, but in‑house counsel communications do not enjoy the same absolute protection. All interview notes and investigation work product should be clearly marked as prepared at the direction of external counsel for the purpose of providing legal advice or preparing a defence.

Step 4, Cooperation, Leniency and Self‑Reporting

Austria does not operate a formal statutory leniency programme for bribery offences equivalent to those found in competition law. However, cooperation with prosecutors and BAK can yield tangible procedural benefits. The WKStA and courts may take into account voluntary disclosure, remedial measures and cooperation when exercising prosecutorial discretion or at sentencing. A company’s decision to self‑report, and the scope of information to disclose, should be taken by the board on the advice of external criminal counsel, after the internal investigation has produced a reliable initial factual picture.

Key considerations when pursuing leniency and self-reporting in Austria include:

• Whether disclosure is conditioned on non‑waiver of privilege over internal investigation materials.
• Whether parallel foreign regulators (e.g., US DOJ under the FCPA, UK SFO) may claim jurisdiction, requiring coordinated multi‑jurisdictional disclosure.
• The extent of remediation already undertaken, prosecutors are more receptive when companies demonstrate that they have terminated the wrongdoing, disciplined responsible individuals, and enhanced compliance systems.

Step 5, Containment, Remediation and Ongoing Communications

1. Interim compliance measures. Suspend or reassign implicated individuals. Close identified compliance gaps (e.g., third‑party due diligence deficiencies, gift policy violations).
2. Board reporting. Provide regular privileged updates to the supervisory board (Aufsichtsrat) or audit committee. Minutes should reflect that the board is actively overseeing the response.
3. Insurer communication. Provide insurers with the level of detail required to maintain coverage, guided by counsel to avoid unnecessary admissions.
4. External stakeholder plan. Prepare holding statements for investors, customers and, if the investigation becomes public, media. All external communications should be pre‑approved by counsel.

Step 6, Resolution and Post‑Investigation Tasks

Resolution of an anti-corruption investigation in Austria may take several forms: discontinuation of proceedings (Einstellung), a Diversion (an alternative resolution that avoids formal conviction, available in certain cases under the Austrian Code of Criminal Procedure), a plea or admission, or a full trial. Austria does not currently have a formal deferred prosecution agreement (DPA) mechanism equivalent to the US or UK models, early indications suggest that discussions around introducing such instruments continue but no legislative action had been taken as of mid‑2026.

Post‑resolution, the company should conduct a lessons‑learned review, update its compliance programme, re‑train affected staff and, where applicable, address any civil or regulatory follow‑on claims (e.g., exclusion from public procurement, damages actions by injured parties).

Required Documents and Evidence Preservation Checklist

Effective evidence preservation is the single most important operational task in the first hours and days. The following evidence preservation checklist covers the documents needed in virtually every anti-corruption investigation in Austria. Failure to preserve any category may expose the company to allegations of obstruction or, at minimum, deprive counsel of material needed for the defence.

Timeline and Key Deadlines for an Anti‑Corruption Investigation in Austria

The timeline for an anti-corruption investigation in Austria varies considerably depending on complexity, cross‑border elements and the volume of evidence. The table below maps typical phases and realistic durations based on practitioner experience. Statutory limitation periods for bribery offences under the Austrian Penal Code (StGB) generally range from five to ten years depending on the severity of the offence, though the clock may be extended by certain procedural events.

Acting within the immediate time windows, 24 hours for counsel engagement, 72 hours for forensic capture, is a best‑practice recommendation, not a statutory deadline. However, delay at this stage materially increases the risk of evidence loss, privilege erosion and adverse inferences by prosecutors.

Costs, Fees and Financial Considerations

The financial burden of responding to an anti-corruption investigation in Austria can be substantial. The table below provides estimated cost ranges; actual costs depend on case complexity, data volumes and the number of jurisdictions involved. All figures are estimates unless otherwise stated.

What Changes in 2026, Regulatory and Practice Updates

Austria’s anti-corruption enforcement landscape is shifting in several respects that directly affect how companies should respond to an anti-corruption investigation in Austria during 2026:

• OECD Phase 4 implementation. The OECD’s Phase 4 report on Austria’s implementation of the Anti‑Bribery Convention, published on 10 October 2024, recommended increased enforcement of foreign bribery, better resourcing for the WKStA, and improvements in the use of corporate liability instruments. Industry observers expect the Austrian authorities to accelerate enforcement activity in 2026 as they demonstrate responsiveness to these recommendations.
• Expanded cross‑border cooperation. EPPO is now fully operational and exercising concurrent jurisdiction over corruption affecting EU funds. BAK’s role as Austria’s international SPOC means mutual legal assistance requests are processed faster, and evidence sharing with foreign authorities, particularly within the EU, is becoming routine.
• Council of Europe recommendations. GRECO and the Council of Europe have urged Austria to improve its strategy for preventing corruption risks in government and law enforcement, increasing transparency expectations that cascade into corporate investigations.

The likely practical effect for companies: faster evidence requests, shorter windows before searches occur, and greater pressure to demonstrate cooperative engagement early in the process. Companies with cross‑border operations should map their data jurisdictions now and consider retaining dual counsel (Austrian and lead foreign jurisdiction) before any investigation materialises.

Common Pitfalls and How to Avoid Them

• Destroying or altering evidence. Issue a written litigation hold within the first 24 hours. Any destruction, even pursuant to a routine retention schedule, after the company becomes aware of an investigation can constitute a separate criminal offence and will severely damage credibility with prosecutors.
• Conducting ad hoc interviews that waive privilege. Uncontrolled conversations with employees about the subject matter risk generating un‑privileged witness statements. All interviews should be conducted by or under the direction of external defence counsel, with notes marked as privileged.
• Mishandling investigators on site. Confrontation, evasion or over‑eagerness can each cause harm. Designate one company representative and have counsel present. Follow the scripted approach: cooperate, observe, record, do not volunteer.
• Issuing public statements without counsel review. Premature or inaccurate media statements can create admissions, alarm regulators or trigger parallel investigations in other jurisdictions. Use pre‑approved holding statements only.
• Delaying engagement of external counsel and forensic vendors. Every hour of delay increases the risk of evidence loss, unmanaged communications and privilege erosion. Maintain a pre‑approved panel of criminal defence counsel and forensic vendors so that engagement can happen within hours, not days.

Conclusion

Understanding how to respond to an anti-corruption investigation in Austria is no longer a contingency exercise, it is a core component of corporate risk management for any company operating in or connected to Austrian jurisdiction. The combination of increased BAK activity, OECD Phase 4 implementation pressure and expanded EPPO cooperation means that investigations are arriving faster and reaching deeper into corporate structures than in previous years. Companies that invest in preparation, pre‑approved counsel panels, tested evidence‑preservation protocols, and rehearsed raid‑response procedures, will be materially better positioned to protect their interests when a probe begins.

Sources

1. Austrian Federal Bureau of Anti‑Corruption (BAK), Official Website
2. BAK, Single Point of Contact (SPOC)
3. Bundesministerium für Justiz, OECD Phase 4 Report: Implementing the OECD Anti‑Bribery Convention (10 October 2024)
4. Council of Europe, Austria Must Improve Its Strategy to Prevent Risks of Corruption
5. Austrian Federal Ministry of Finance, Anti‑Fraud Office (ABB)
6. UNODC, Austria: Preventive Anti‑Corruption Policies and Practices