On 29 July 2026 the Comptroller General's Office published an uncomfortable figure: between 22 June and 21 July, with the pre-election restrictions lifted, national government entities signed 14,414 contracts worth COP 4.55 trillion, 22.5% more than in the same period four years earlier. More than 11,000 of those contracts were awarded by direct contracting. The Contraloría was explicit about what follows if something goes wrong: if it finds transfers without budget backing, or contracts signed without planning or without any assurance they can be performed within these five months, the matter will end in disciplinary or fiscal liability.
That sentence sums up a problem few watchdogs and citizens have resolved: disciplinary liability and fiscal liability are not the same thing, they are not investigated by the same body and they are not triggered by the same complaint. Add to that the criminal route and a fourth mechanism that is not an oversight body at all but a citizen's right: citizen oversight. When somebody spots something odd in a contract at their town hall — a contractor who never appears on site, an obvious cost overrun, bidding documents cut to measure — the question is not "where do I report this?" but "which of the four doors is the right one?". Knocking on the wrong one delays the answer by months and, in some cases, lets the matter lapse on the route that actually applied.
The first door is citizen oversight, regulated since 2003 by Law 850, the Statutory Law on Citizen Oversight Groups. It is not an oversight body: it is a participation mechanism any citizen or organisation can activate, with or without formal registration, to monitor a contract or project both preventively and afterwards. It does not impose sanctions; its strength lies in access to information and in building the factual record that later underpins a well-founded disciplinary complaint, fiscal report or criminal complaint. The right of petition under Law 1755 of 2015 makes that oversight operational and is usually the first step before going to an oversight body.
The second door is the disciplinary one, and its target is the public servant, not the contract. The Procuraduría — or the entity's internal disciplinary control office, or the municipal ombudsman — investigates whether an official breached their duties: failing to publish on SECOP, neglecting supervision, favouring a bidder. The General Disciplinary Code, Law 1952 of 2019, defines these offences. It is the right route when the failure lies in the conduct of a person holding public office, and its typical consequence is to sanction the servant — from a reprimand to dismissal and disqualification — not to recover public money or annul the contract.
The third door, the one most often confused with the second, is the fiscal route. When the substance is damage to public funds — an overpayment, payment for something never delivered, a lost advance — the competent body is the Contraloría, through the fiscal liability procedure of Law 610 of 2000. This procedure does not seek to punish: it seeks to have whoever caused the loss pay it back, with joint liability between the servant who authorised the payment and the contractor who received it where there was bad faith. The Contraloría also maintains the register of persons found fiscally liable, which every entity must consult before contracting: anyone listed there cannot contract or take up public office until the debt is settled. This is the "where did the money go?" door, not the "who behaved badly?" one.
The fourth door, the criminal one, applies where the facts amount to a standalone offence — bribery, improper interest in the award of contracts, embezzlement; the competent body is the Fiscalía and, unlike the other three, it can end in prison. The four routes are not mutually exclusive: a phantom contractor can simultaneously give rise to a disciplinary investigation of the supervisor who checked nothing, a fiscal procedure over money paid for work never done, and a criminal investigation for embezzlement. External Circular 002 of 2026 from Colombia Compra Eficiente reminds entities that they must report to the Procuraduría, to the chambers of commerce and on SECOP every declaration of termination for default, fine or breach against a contractor, precisely because that report triggers the other control routes.
The case of inter-administrative contracts illustrates why it pays to know the legal terrain before reporting. Through 2025 the National Public Procurement Agency maintained that the electoral guarantees law's prohibition (Law 996 of 2005) on inter-administrative agreements also extended to inter-administrative contracts. The Consejo de Estado disagreed: in a judgment of 17 October 2025, later confirmed in Opinion C-1703 of 2025, it annulled that extension, because article 38 of Law 996 mentions only agreements, and an agreement and an inter-administrative contract are distinct instruments: a contract involves consideration in money, an agreement rests on cooperation between entities. Reporting that conduct without first checking the Consejo de Estado's ruling would have meant pursuing something that turned out to be lawful.
The lesson for watchdogs, journalists and citizens monitoring public procurement is twofold. First, document before reporting: dates, amounts, SECOP reference numbers and, if possible, the entity's response to a right-of-petition request, because oversight bodies ask for concrete facts, not suspicions. Second, there is no need to pick a single door: where the irregularity is serious, the sensible course is to file the complaint with the Procuraduría or the municipal ombudsman and, if there is any sign of damage to public funds, a parallel report to the Contraloría, letting each body define its own jurisdiction. The risk score and the per-entity contracting history LuxIA offers replace none of these four routes, but they help you decide, before writing the first line of a complaint, whether what you are looking at is a repeated pattern or an isolated event.