The facts
The GAO’s October 2026 report notes that the National Institutes of Health (NIH) awarded about $35.3 billion in extramural funding in FY 2025, roughly 73 % of its total budget. NIH relies heavily on self‑reported information from researchers and institutions and generally does not verify disclosures unless a foreign‑interference allegation arises. From 2017‑2025 the agency received 697 allegations, identifying disclosure violations in 264 cases. In seven GAO case studies, outside sources uncovered undisclosed foreign affiliations, including a principal investigator with five honorary professorships at Chinese universities. NIH does not use the Department of Defense’s risky‑institution list. While NIH conducts an annual risk‑inventory that considers fraud, it has not performed a documented fraud‑risk assessment tailored to its extramural research program, nor developed a stand‑alone antifraud strategy. GAO recommends regular, documented assessments; NIH concurred.
Our take
The National Institutes of Health sits on a $35.3 billion annual grant pool and polices foreign interference with the subtlety of a pinky promise. Their playbook? Trust the researchers to self‑report any foreign ties and only dig deeper when someone blows the whistle. That sounds noble until you read the numbers: 697 allegations over nine years, 264 disclosure violations, and a handful of case studies where investigators uncovered hidden Chinese affiliations that the NIH paperwork never mentioned. The fucking agency’s own risk‑inventory mentions fraud, but it’s a broad, annual sweep - not a focused, documented assessment of fraud risks in the extramural program. In other words, NIH admits it has never done a program‑specific fraud‑risk assessment, even though it acknowledges the need for one. This gap leaves a massive, loosely‑checked funding stream vulnerable to exploitation. When violations are found, the response is often a slap on the wrist - prohibitions that can be lifted once the compliance case closes, allowing the same researchers to resume work and even collaborate with institutions flagged by the Pentagon. The GAO’s recommendation for regular, documented fraud‑risk assessments was met with a polite “concurred,” but without a concrete plan, the status quo persists. The result is a system that treats national research security like a game of “I Spy” played with its eyes closed. It’s a recipe for bad actors to slip through the cracks, leveraging taxpayer dollars for foreign advantage. The NIH’s reliance on honor and self‑reporting may feel efficient, but it’s a dangerous shortcut that trades accountability for convenience. Until the agency builds a real, documented antifraud strategy, the billions it disperses will remain a tempting target for anyone willing to game the honor system. The GAO’s findings are a wake‑up call, but without decisive action, the NIH will continue to gamble with America’s scientific future.
