$400 Billion a Year. Almost No Oversight. The Arithmetic the Recruiter Never Showed You.

KBR billed the Army for headcount-based DFAC services based on troop strength rosters rather than actual meal counts. When DCAA auditors compared billed meals to actual serving-line counts, they found KBR billing for meals that were never prepared or served. The gap: approximately 22,000 phantom meals per day during peak billing periods at some installations. The Army paid. Then contested the bills. Then settled for less than full recovery.

LOGCAP III subcontractors billed for laundry services at rates that produced a unit cost of approximately $45 per bag. Congressional testimony from DoD's own Inspector General confirmed the rate. The commercial equivalent in the U.S. at the time: approximately $1–3 per pound. The cost-plus structure meant there was no incentive to negotiate the subcontract rate downward — every additional dollar spent increased the revenue base on which the profit percentage was calculated.

KBR billed for shower availability at a fixed per-slot rate, regardless of whether the slot was used. This meant that a shower facility built for 200 soldiers generated full billing even when the FOB population dropped. The structure was consistent with the contract — FOB infrastructure was billed on availability, not utilization. The design of the contract terms enabled this; the oversight mechanism that would have detected and corrected it — the Contracting Officer's Representative (COR) on the ground — was chronically understaffed.

An internal Army audit of DFAC costs at Al Asad Air Base in Anbar Province calculated an all-in cost per meal that approached $100 when KBR overhead, subcontractor markups, and transport were fully allocated. The DoD's own guidance on DFAC cost analysis produced this figure, later cited in Congressional hearings. For context: a U.S. soldier's BAS (Basic Allowance for Subsistence) was $8.10/day in 2007. The contractor fed that soldier at a cost 12× higher than the government's own estimate of what a day's food should cost.

Separate from billing fraud, KBR's electrical work in Iraq produced a series of electrocution deaths and shock injuries. A Senate Armed Services Committee investigation (2008) found that KBR had performed electrical work on U.S. facilities without required DoD inspections and with documented code deficiencies. Staff Sgt. Ryan Maseth was electrocuted in his shower at FOB Radwaniyah in January 2008. DoJ investigated. KBR was not criminally charged in connection with the deaths. The Army found KBR's electrical work deficient in 231 of 470 facilities inspected. The contract continued.

MEJA — Military Extraterritorial Jurisdiction Act (2000)

MEJA was enacted to extend U.S. criminal jurisdiction over contractors and DoD civilians who commit felonies overseas in support of DoD missions. Before MEJA, a contractor who committed a crime abroad faced a jurisdictional gap — they were subject to neither the Uniform Code of Military Justice (they are not military) nor the host nation legal system (Status of Forces Agreements often provided immunity). MEJA was meant to close that gap. In practice: the statute requires that the crime be committed "outside the special maritime and territorial jurisdiction of the United States" and that the contractor be "employed by" or "accompanying" the DoD. Contractors working for the State Department (including Blackwater guards in Iraq, who were on a DoS contract) argued — and courts partially accepted — that they were not covered by MEJA because their contract was with DoS, not DoD. This definitional gap was eventually addressed legislatively, but not before it provided the opening that allowed Nisour Square prosecutions to be contested on jurisdictional grounds.

The Blackwater Nisour Square Prosecutions

The most significant attempt to hold private military contractors criminally accountable for combat-zone violence. Four Blackwater guards were charged in connection with the September 16, 2007 killing of 17 Iraqi civilians in Nisour Square, Baghdad. The initial charges were dismissed in 2009 on grounds that prosecutors had improperly used statements the guards made under compulsion (under threat of losing their security clearances). Charges were reinstated on appeal. At trial in 2014: one guard (Nicholas Slatten) was convicted of murder; three others were convicted of voluntary manslaughter. The D.C. Circuit Court of Appeals vacated all convictions in 2017, citing prosecutorial misconduct in the handling of compelled statements. Re-trial resulted in Slatten being convicted again of first-degree murder in 2018. In December 2020, President Trump granted full pardons to all four defendants. Legal outcome: zero private military contractor has completed a prison sentence for a combat-zone killing.

Status of Forces Agreements and Host Nation Immunity

In many conflict zones, SOFAs or equivalent agreements provide U.S. personnel — including contractors — immunity from host nation prosecution. This was explicit in Iraq (CPA Order 17, signed by L. Paul Bremer in 2004 and continued under the U.S.-Iraq Security Agreement) and has been a feature of most large U.S. overseas deployments. The logic: host nation courts may be unreliable or subject to political influence. The consequence: the primary accountability mechanism for contractor misconduct is U.S. criminal law, which faces the jurisdictional and evidentiary obstacles documented above. When both U.S. and host nation accountability fail, there is no accountability.

DCAA — The Audit Agency That Cannot Keep Up

The Defense Contract Audit Agency is responsible for auditing contractor costs on cost-reimbursement contracts like LOGCAP. DCAA's backlog during peak Iraq/Afghanistan operations meant that audits were completed years after the relevant billing periods — sometimes after the contractor had already been paid in full and the FOB had closed. DCAA's own Inspector General found that audit quality was inconsistent and that auditors sometimes faced pressure to accept contractor representations without independent verification. DCAA issued approximately $2.5B in questioned costs on LOGCAP III during the peak years. The amount actually recovered through settlements and contract adjustments was significantly lower — the gap between questioned and recovered costs is not publicly reported in aggregate.

The SPOT Database Problem

The Synchronized Predeployment and Operational Tracker (SPOT) was the DoD's contractor accountability database — the system meant to track who contractors were, where they were deployed, and what they were doing. The DoD Inspector General found in multiple reviews (2009, 2011, 2013) that SPOT data was unreliable: contractors were not consistently required to register, registration data was often incomplete, and the database was not integrated with access control systems at installations. The practical result: DoD did not know, with precision, how many contractors were in-theater at any given time. Congressional inquiries to DoD about contractor headcount in Iraq and Afghanistan produced answers that varied by tens of thousands depending on which counting methodology was used.

The Counting Problem

DoD reports contractor personnel to Congress through the quarterly "Census of Contractor Personnel" report. The report counts contractors by contract — not by person. A single contractor employee supporting multiple task orders could be counted multiple times. Conversely, subcontractors (companies hired by the prime contractor) may not be reflected in the prime contractor count at all, depending on how the contract is structured. POGO (Project on Government Oversight) has repeatedly found that official DoD contractor counts understate the actual deployed contractor population. The SIGIR Final Report (2013) estimated that the contractor workforce in Iraq at its peak exceeded uniformed military personnel on a ratio of roughly 1:1, while official counts at the time suggested a ratio closer to 0.6:1.

POGO's "Bad Penny" Database

The Project on Government Oversight maintains a Federal Contractor Misconduct Database (FCMD) — nicknamed "Bad Penny" — that tracks instances of contractor misconduct by company, including criminal convictions, civil settlements, administrative actions, and investigative findings. The database documents that the top defense contractors have collectively incurred billions in penalties and settlements for fraud, overbilling, environmental violations, and labor law violations — without losing their prime contractor status. Defense contracting law does provide for "debarment" — exclusion from government contracts — but it is rarely applied to large primes. The argument: a prime contractor that employs tens of thousands and builds irreplaceable weapons systems cannot be debarred without disrupting national security. The counterargument: this makes them effectively too big to debar, which removes the most significant accountability mechanism.