When the OECD talks about Colombia’s anti-bribery system, it is not handing out gold stars and a polite sticker that says “needs improvement.” It is raising a very public alarm. In its latest review, the OECD Working Group on Bribery said Colombia still needs to urgently fix serious deficiencies in foreign bribery enforcement, including one especially glaring weakness: the country still lacks a comprehensive whistleblower protection framework. In plain English, that means people who spot corruption may still have too few safe ways to report it, too little protection if they do, and too many reasons to stay quiet.

That criticism is bigger than any single scandal, but the Odebrecht saga gives it a painfully human face. The scandal was never just about dirty contracts and padded invoices. It was also about what happens when insiders, auditors, compliance staff, and witnesses find themselves standing too close to a machine built on money, influence, and fear. Colombia’s experience with Odebrecht shows why anti-bribery enforcement is not only a question of laws on paper. It is also a question of whether people on the inside can speak before the damage becomes irreversible.

The OECD’s message: this is not just a paperwork problem

The OECD’s most recent assessment was blunt. Colombia has achieved only limited enforcement progress, detection levels remain low, mutual legal assistance is underused, and the country has still never attempted to prosecute a natural person for foreign bribery. The Working Group also highlighted weak coordination among institutions and ongoing concerns about the independence of investigations and prosecutions. That is a rough report card even before whistleblowers enter the picture.

Once whistleblowers do enter the picture, the gap becomes even harder to ignore. The OECD has been warning Colombia about this for years. Back in its Phase 3 review, it regretted the continued absence of whistleblower protection legislation and said the environment for whistleblowers was perceived as hostile. In the 2021 follow-up, the OECD said Colombia still had not implemented the recommendation to urgently adopt clear, comprehensive protections against retaliation across both the public and private sectors. Worse, a bill that originally included whistleblower provisions lost them during the legislative process. That is the legal equivalent of remembering an umbrella only after the thunderstorm has moved into your living room.

To be fair, the OECD did not say Colombia has done nothing right. It noted some positive developments, including progress in anti-money laundering compliance checks and prior recommendations implemented by Bancóldex. But the central takeaway remained unmistakable: Colombia still needs a real whistleblower protection framework, not a patchwork, not a slogan, and not a future promise with suspiciously flexible deadlines.

Why the Odebrecht scandal still hangs over Colombia

Odebrecht, now known as Novonor, became one of the most infamous corporate corruption stories in modern history. In its 2016 U.S. plea deal, the company admitted paying more than $788 million in bribes across multiple countries to win public contracts. Colombia was one of the countries named in that settlement. According to the U.S. charging documents, Odebrecht made more than $11 million in corrupt payments in Colombia between 2009 and 2014 to secure public works contracts, generating more than $50 million in benefits.

That alone would have been enough to stain the record. But the Colombia story did not stop there. In 2023, U.S. authorities announced major resolutions involving Grupo Aval and its subsidiary Corficolombiana. The DOJ and SEC said Corficolombiana conspired with Odebrecht to pay more than $23 million in bribes to high-ranking Colombian officials to obtain the Ocaña-Gamarra extension to the Ruta del Sol II highway project. The SEC further said at least $28 million in illicit payments were made with the knowledge and assistance of the former president of Corficolombiana, and that sham invoices and poorly documented third-party payments helped fund the scheme.

In other words, this was not a simple case of one rogue envelope sliding across one desk in one dimly lit office. It was a sophisticated, multi-layered bribery structure involving fake contracts, weak controls, political access, and major infrastructure money. When corruption is this organized, detection almost never depends on luck alone. It depends on somebody noticing, documenting, and speaking up.

Pizano, fear, and the cost of speaking up

That is where the name Jorge Enrique Pizano becomes impossible to ignore. Pizano was an auditor linked to the Ruta del Sol II concession and a key figure in the Odebrecht-related corruption controversy in Colombia. Reuters reported that he had been assisting prosecutors investigating allegations that Odebrecht paid millions in bribes tied to Colombian infrastructure contracts. In November 2018, Pizano died at his home; authorities later said he died of a heart attack. Two days later, his son died after drinking from a bottle on his father’s desk that was found to contain cyanide. Reuters also reported that Pizano had told a television outlet he feared for his safety and did not want an interview aired until he was outside Colombia or dead.

AP reporting added another unsettling layer. A recording aired after Pizano’s death appeared to capture a conversation in which then-lawyer Néstor Humberto Martínez, who later became attorney general, discussed suspicious payments that Pizano had flagged while serving as an internal auditor. Whether one views the episode as evidence of institutional blindness, elite caution, or something worse, the broader message to any future whistleblower was hardly encouraging. If you speak up, the process may be slow, politically tangled, professionally dangerous, and emotionally punishing. That is not exactly a recruitment poster for public integrity.

This is also why whistleblower protection cannot be treated as a technical sidebar. In corruption cases, especially large cross-border cases, witnesses and reporters are not decorative extras. They are often the people holding the first thread that can unravel the whole sweater. If they fear retaliation, public humiliation, job loss, legal threats, or worse, many will choose silence. And silence is corruption’s favorite bodyguard.

Why whistleblower protection matters in anti-bribery enforcement

The OECD and Transparency International have long made the same point: whistleblowing is one of the most effective ways to uncover corruption, fraud, and related misconduct. Strong systems do more than collect tips. They create safe internal and external channels, protect confidentiality, shield people from retaliation, and offer remedies when retaliation happens anyway. Good laws also make clear who is protected, what can be reported, and which institutions are responsible for responding.

Colombia’s problem has been the opposite. For years, the OECD has warned that the country lacked clear legislation protecting whistleblowers across both sectors. Reporting channels have not inspired broad confidence, and public channels for foreign bribery have historically been underused. A hostile reporting environment is bad enough in ordinary times. In a country wrestling with politically sensitive corruption cases and a long legacy of violence and impunity, it becomes far more serious.

Put differently, an anti-bribery law without whistleblower protection is like installing a smoke detector and then removing the batteries because the beeping might make powerful people uncomfortable. Yes, technically you still have a detector. No, it is not doing the job.

Colombia’s legislative stumbles made the OECD’s frustration easy to understand

One reason the OECD’s tone has sharpened is repetition. This is not the first warning. In 2019, the OECD told Colombia to urgently adopt whistleblower protection legislation. In 2021, it said the recommendation remained unimplemented and noted that Bill 341/2020 lost its whistleblower provisions during debate. More recent reporting from the whistleblowing community indicates the pattern has continued: a bill introduced in 2023 reportedly passed Colombia’s House of Representatives but failed to advance in the Senate, and by mid-2025 observers were still noting that multiple whistleblower initiatives since 2017 had failed.

That legislative pattern matters because it signals more than delay. It suggests political hesitation about building a system that could expose wrongdoing earlier and more often. That hesitation may be understandable from the perspective of officials who dislike scandal, but it is disastrous from the perspective of public accountability. The longer a country delays protection, the more it encourages a grim workplace lesson: do not rock the boat, even if the boat is clearly on fire.

What stronger enforcement would actually look like

If Colombia wants to answer the OECD with something better than a shrug in formal attire, the path is not mysterious. First, it needs comprehensive whistleblower legislation that clearly covers both public- and private-sector reporting of corruption and foreign bribery. That legislation should provide confidential reporting channels, anti-retaliation protections, interim relief, compensation, and an independent body with the authority to act.

Second, reporting systems must work in practice, not just in legal theory. Companies involved in public contracting should have credible internal reporting systems, trained compliance teams, and real oversight of third-party payments. The SEC’s description of sham invoices and weak documentation in the Corficolombiana case shows exactly what happens when controls become more decorative than functional.

Third, Colombia needs better coordination between the institutions that detect, investigate, and sanction foreign bribery. The OECD has repeatedly criticized siloed agencies and weak information-sharing. When institutions operate like distant cousins who only communicate through awkward holiday messages, bribery cases fall through the cracks.

Finally, enforcement must show that corruption has consequences for individuals as well as corporations. The OECD’s observation that Colombia has never attempted to prosecute a natural person for foreign bribery is not a footnote. It is a flashing sign. Companies do not bribe people by magic. Human beings make decisions, approve payments, disguise invoices, lobby officials, and build the machinery. If only entities pay, deterrence remains partial.

Experiences from the front lines of reporting corruption

The most revealing part of this story is not in the courtroom language or in the acronym-heavy reports. It is in the lived experience surrounding corruption reporting. In countries where whistleblower protection is weak, people who detect wrongdoing often go through the same exhausting cycle. First comes confusion: an auditor spots unexplained payments, a compliance employee sees a suspicious consultant contract, or a finance professional notices invoices that look oddly vague for very expensive “services.” Then comes denial from above, often dressed up as caution, process, or strategic patience. Nobody wants to accuse the wrong person. Nobody wants to trigger a scandal. Nobody wants to be the one who “overreacted.”

After that comes isolation. The person who raised the concern is no longer just an employee doing a job. Suddenly, that person is “difficult,” “too emotional,” “not commercially minded,” or “missing the bigger picture.” In reality, the bigger picture is usually the very thing that person is trying to protect: the institution, the public, the investors, and the rule of law. But in real workplaces, especially where powerful contracts and political relationships are at stake, the messenger often becomes the problem long before the misconduct does.

Colombia’s Odebrecht experience shows how severe that pressure can become. Even without inventing dramatic details, the known record is stark enough. An auditor raised concerns. Sensitive recordings surfaced. A key witness said he feared for his safety. Deaths around the case intensified public anxiety. Media scrutiny exploded. Political trust eroded. The result was not just another corruption headline. It was a warning flare visible to anyone considering whether to report the next suspicious payment.

There is also the psychological experience of whistleblowing that legal frameworks often underestimate. People who report corruption frequently deal with sleeplessness, professional uncertainty, strained family relationships, and the constant fear that they will be blamed for “creating chaos.” In a healthier system, the law counterbalances that burden by offering confidentiality, anti-retaliation remedies, and a clear route for action. In a weak system, the whistleblower is asked to absorb the institutional risk personally. That is not bravery supported by law. That is bravery abandoned by law.

And yet people still speak. That may be the most remarkable part. Citizens, auditors, journalists, and investigators continue to report corruption because they understand that silence is expensive. It drains public budgets, distorts infrastructure spending, undermines fair competition, and teaches the next generation that rules are for bystanders. The experience of reporting corruption is therefore deeply personal, but its impact is collective. One person’s decision to document a strange payment can expose a network of bribery. One protected disclosure can prevent years of damage. One ignored disclosure can become a scandal that costs a country millions and costs the reporter far more.

That is why Colombia’s challenge is not abstract. The OECD’s warning lands in real offices, on real desks, and in real lives. Until reporting corruption feels safer than hiding it, every anti-bribery promise will remain a little too theoretical and a little too fragile.

Conclusion

The OECD’s criticism of Colombia is serious because it is cumulative. The problem is not one missed reform, one failed bill, or one scandal from the recent past. It is a pattern: weak protection, low detection, fragmented enforcement, and repeated delays in building the legal safeguards that encourage people to speak up before corruption hardens into business as usual.

The Odebrecht story made that pattern impossible to dismiss. It showed how bribery travels through contracts, politics, and institutions, but it also showed how much depends on individuals willing to raise alarms. Colombia does not lack examples of why whistleblower protection matters. It has too many. What it has lacked is a strong enough framework to turn those lessons into lasting reform.

The OECD has now made its position unmistakable. If Colombia wants stronger anti-bribery enforcement, it needs more than speeches about integrity and more than selective progress reports. It needs real protection for the people most likely to see corruption first. Because when whistleblowers are left exposed, bribery does not just survive. It gets comfortable.

SEO Tags