GSA $13 Billion Fraud Review: Self-Audit Checklist for GSA Schedule Holders

On August 25, 2026, GSA announced it had uncovered more than $13 billion in suspected contractor fraud since March 2026, working with the White House Task Force to Eliminate Fraud. That figure is suspected fraud referred for investigation, not proven liability. If you hold a GSA Schedule, the practical response is a self-audit of every representation you have made to the government.

What exactly did GSA announce about $13 billion in suspected fraud?

GSA Administrator Edward C. Forst announced on August 25, 2026 that GSA had identified more than $13 billion in suspected fraud by federal contractors since March 2026. The review is led by GSA's Office of Government-wide Policy and refers suspected cases to Inspectors General or the Department of Justice (DOJ).

Here is what the official GSA news release actually says, separated from what it does not say.

Keep the scale in perspective. Washington Technology reported that the example cases cited alongside the announcement predated the task force and involved roughly $117 million in alleged fraud settled for about $29 million. The $13 billion is a referral pipeline, not a judgment. GSA followed up with a September 24 release on COVID-era contracts, which tells you this effort is continuing.

Why should an honest GSA Schedule holder care?

Because the review runs on data matching, and data matching does not distinguish fraud from sloppy records. A stale size representation in SAM.gov, an unsupported country-of-origin claim, or unreported sales looks the same to an algorithm as intentional misrepresentation until you explain it.

The legal exposure is real even without intent. The civil False Claims Act, 31 U.S.C. 3729, defines "knowingly" to include reckless disregard and deliberate ignorance. It requires no proof of specific intent to defraud.

• Treble damages: three times the government's actual damages.
• Per-claim civil penalties: set by statute and adjusted annually for inflation.
• Every invoice counts: each claim submitted under a false representation can be a separate violation.

When I sat in the Contracting Officer seat, the files that turned into referrals were rarely master schemes. They were representations nobody had looked at in years, signed by someone who had since left the company.

Which representations should you audit first?

Start with anything you certify: your SAM.gov representations and certifications, your size and socioeconomic status, and your Trade Agreements Act compliance. Then move to money flows, meaning TDR or sales reporting and Industrial Funding Fee remittance, before reviewing cyber, subcontracting, and past performance.

Use this checklist. Assign an owner to every row and keep the evidence in one folder.

How do you verify SAM.gov and size or socioeconomic claims?

Pull your full SAM.gov entity registration, compare every NAICS size flag against your actual three- or five-year receipts or employee count including affiliates, and confirm each SBA certification is current. Any mismatch between SAM.gov, SBA, and your GSA contract file is the first thing a data review will flag.

1. Download the current SAM.gov representations and certifications PDF.
2. Recalculate size under each claimed NAICS, including affiliates.
3. Confirm 8(a), WOSB, EDWOSB, SDVOSB, or HUBZone status in SBA's certification system.
4. Check whether any merger, acquisition, or novation triggered the 30-day rerepresentation window.
5. Fix discrepancies and document the date and reason for each change.

A SAM.gov system error miscomputed NAICS size standards for registrations renewed between March 24 and July 22, 2026. If you renewed in that window, read how to check and fix SAM.gov NAICS size representations before this review reaches your file.

As a Contracting Specialist, I reviewed offers where the SAM.gov profile said one thing and the proposal said another. We did not guess which was right. We asked, and the contractor had to prove it in writing.

Are your TDR reports and IFF payments clean?

Reconcile every GSA invoice for the last 12 months against what you reported in the Sales Reporting Portal, then confirm the 0.75 percent Industrial Funding Fee was paid on all of it. Under GSAR 552.238-80, unpaid IFF is a contract debt, and falsified or missing reports are cause for termination.

• Underreporting: sales billed to a GSA order but coded as commercial.
• Late remittance: the clause requires payment within 30 calendar days after each quarter.
• Missing data elements: the TDR compliance grace period ends December 31, 2026, with enforcement starting January 1, 2027.
• Price overruns: any invoice above your awarded price is an overcharge, full stop.

If you are unsure whether the fee is yours to carry or can be passed through, see who pays the GSA Industrial Funding Fee. For the reporting timeline, read our breakdown of the TDR compliance grace period.

What about TAA, cybersecurity, and subcontracting claims?

These are the claims most likely to live in marketing copy rather than in evidence. Get written country-of-origin documentation for every product, match every cybersecurity statement to an implemented control, and calculate your limitations on subcontracting compliance on each set-aside order.

• TAA: a reseller's word is not documentation. Get manufacturer letters and keep them current.
• Cyber: DOJ runs a Civil Cyber-Fraud Initiative, and GSA named cybersecurity false claims as a focus area. Never describe a certification you do not hold.
• Subcontracting: under FAR 52.219-14, you cannot pay non-similarly situated subcontractors more than 50 percent of the amount paid to you on services or supplies set-asides.
• Labor categories: every person billed must meet the education and experience minimums on your awarded labor category descriptions.

What if your self-audit finds a problem?

Stop, preserve the records, and get counsel involved before you change anything. FAR 52.203-13 requires timely written disclosure to the agency Office of Inspector General, with a copy to the Contracting Officer, when you have credible evidence of certain criminal violations or a civil False Claims Act violation.

Under FAR 52.203-13, a problem tied to a multiple-award schedule order requires notice to the OIG of the ordering agency and the IG of the agency responsible for the basic contract. That disclosure duty runs at least three years after final payment.

In eighteen years of federal acquisition as both a Contracting Specialist and a Contracting Officer, I saw the difference disclosure makes. A contractor who comes forward with the facts and a fix is treated very differently from one the government finds on its own.

What should you do now?

• Download your SAM.gov reps and certs today and have a named owner verify every size and status claim.
• Reconcile 12 months of GSA invoices against TDR reports and IFF payments.
• Collect country-of-origin letters for every product on your schedule.
• Strip any cybersecurity or certification claim you cannot prove from proposals and your website.
• Review your CPARS record and respond within the 14-day comment window on new evaluations.
• If you find something serious, call counsel before you call anyone else.

I am Pedro Rubio, a former GSA Contracting Officer with FAC-C Level III certification, a Harvard Master of Liberal Arts, and 18 years across GSA, IRS, DoD, DOI, HHS, FTC, and Energy. My team has supported 70+ GSA contract awards, and we run this exact review for Schedule holders every quarter through our GSA Schedule maintenance program, so your representations, reports, and fees stay defensible before anyone asks.

Frequently Asked Questions

Did GSA find $13 billion in actual fraud?

No. GSA announced on August 25, 2026 that it had identified more than $13 billion in suspected fraud since March 2026. Suspected cases are referred to Inspectors General or DOJ for investigation, and press coverage noted that the example cases cited were far smaller and largely predated the task force.

Who is running the GSA fraud review?

GSA says the review is led by its Office of Government-wide Policy in collaboration with the White House Task Force to Eliminate Fraud. Suspected fraud is referred to the Office of Inspector General or the Department of Justice.

Does the fraud review create a new reporting deadline for GSA contractors?

No. The announcement did not create a new certification or filing requirement. It increases scrutiny of obligations you already have, such as annual SAM.gov updates under FAR 4.1201, TDR reporting, and IFF remittance under GSAR 552.238-80.

Can an honest mistake create False Claims Act liability?

Under 31 U.S.C. 3729, knowingly includes reckless disregard and deliberate ignorance, and no specific intent to defraud is required. A pure clerical error is generally not fraud, but ignoring a known problem can cross the line, which is why a documented self-audit matters.

When must a GSA contractor make a mandatory disclosure?

FAR 52.203-13 requires timely written disclosure to the agency OIG, with a copy to the Contracting Officer, when the contractor has credible evidence of certain federal criminal violations or a civil False Claims Act violation. For schedule orders, notify both the ordering agency OIG and the IG responsible for the basic contract.

How often do I need to update SAM.gov representations?

FAR 4.1201 requires registrants to review and update SAM.gov representations and certifications as necessary, but at least annually. FAR 52.219-28 separately requires size rerepresentation within 30 days after a merger, acquisition, or novation.

What is the IFF payment deadline on a GSA Schedule?

GSAR 552.238-80 requires the Industrial Funding Fee to be remitted within 30 calendar days after the end of each reporting quarter. GSA currently sets the fee at 0.75 percent of reported sales, and unpaid IFF is treated as a contract debt.