Opinion by Judge REINHARDT.
Ronald Keith Baker and Robert Majors each pleaded guilty to one count of being an accessory after the fact to the making of a false statement on a loan application they submitted to California First Bank. See 18 U.S.C. §§ 3, 1014. The district court sentenced Baker and Majors to three years of probation. Pursuant to the Victim and Witness Protection Act, 18 U.S.C. § 3663, the district court ordered each of them to pay $20,000 in restitution to Union Bank, the successor to California First. Baker and Majors appeal only the restitution award. They claim that the district court erred in ordering that restitution be paid to Union, because Union was not a “victim” within the meaning of the Victim and Witness Protection Act. In addition, Majors argues that the *1454 district court erred by failing to conduct a sufficient inquiry into his ability to pay, as well as by ordering restitution beyond the loss attributable to the specific offense of conviction. We vacate the restitution awards and remand for further proceedings.
I.
On September 9, 1992, a grand jury returned an eight-count indictment against Baker, Majors, and three others. The indictment alleged that in 1985 the defendants had participated in a scheme to commit fraud against California First Bank by fraudulently obtaining several loans from the bank and subsequently defaulting on them. The indictment charged both Baker and Majors (and the three other eodefendants) in Count One with participating in a scheme and artifice to commit bank fraud. See 18 U.S.C. §§ 2, 1344. Baker was also charged in Counts Two and Three with making false statements on a loan application. See 18 U.S.C. § 1014. Count Two alleged that as a result of these statements Baker had received a $20,000 payment from the bank on March 12, 1985. Count Three alleged that he had received $10,000 on March 26, 1985. Counts Four and Five charged Majors with making false statements on a loan application. The indictment alleged that Majors had received a $5,000 payment from the bank on April 18, 1985 (Count Four) and a $15,000 payment on May 8 (Count Five).
Baker and Majors entered into plea agreements on March. 11, 1993. They each pleaded guilty to one count of being an accessory after the fact to the making of a false statement on a loan application. Baker agreed to plead guilty to Count Two (amended to charge the lesser offense). The government promised to recommend — in lieu of a prison sentence — probation, $20,000 in restitution, and a fine. Majors agreed to plead guilty to Count Five (also amended to charge the lesser offense). The government made the same promises to Majors as it had to Baker. The agreements were executed in open court, and the court then dismissed the other pending charges on the government’s oral motion.
At sentencing, the government recommended that each defendant be ordered to pay $20,000 restitution. Because Union Bank of California had taken over California First Bank between the time of the bad loans and the time of sentencing, the government recommended that the restitution be paid to Union. Although both Baker and Majors objected that Union was not the “victim” of their conduct (in part because California First had written off the loans as uncollectible before the takeover), the district court ordered that Baker and Majors each pay $20,000 restitution to Union pursuant to the Victim and Witness Protection Act, 18 U.S.C. § 3663. The district court also sentenced Baker and Majors to three years probation, but it did not impose any fine or prison term. Baker and Majors appeal only to the restitution order. The district court had jurisdiction pursuant to 18 U.S.C. § 3231, and we have jurisdiction pursuant to 28 U.S.C. § 1291.
II.
Both Baker and Majors challenge the district court’s order that restitution be paid to Union Bank of California. Because California First Bank — the bank which suffered direct losses from the defendants’ fraud— had written off the loans to Baker and Majors as uncollectible before Union Bank acquired it, Baker and Majors argue that Union suffered no loss as a result of their conduct. They claim that Union was not a “victim” for purposes of the VWPA, and that the district court therefore had no authority to order that restitution be paid to Union. Because the government did not carry its burden of establishing that Union was the “victim” of the defendants’ conduct, we vacate the awards and remand for a determination of whether the loss from the bad loans to Baker and Majors (or the right to collect on these loans) passed from California First to Union in the takeover. 1
*1455
The VWPA authorizes a district court to order
only
“that the defendant make restitution
to any victim
of such offense.” 18 U.S.C. § 3663(a)(1) (emphasis added). For the district court’s restitution order to be valid, then, Union must have been a “victim” of Baker’s and Majors’s offenses.
2
The Act does not define the term “victim.” However, we have held that any person or entity is a “victim” if it suffered injury — directly or indirectly — as a result of the conduct underlying the defendant’s specific offense of conviction.
See United States v. Smith,
In Smith, the defendant defrauded a savings and loan into making him several high risk loans totalling over $12,000,000. He eventually defaulted on these loans, and the savings and loan collapsed. The. Federal Savings and Loan Insurance Corporation, which had insured the savings and loan’s accounts, subsidized another financial institution’s purchase of the savings and loan’s assets and liabilities. In return, the FSLIC received the savings and loan’s claims against the defendant and others. Following his bank fraud conviction, the district court ordered that the defendant pay restitution to the FSLIC, and we affirmed. See id. at 620-22. Although the FSLIC was not the party directly victimized by the defendant’s actions, we concluded that it did suffer injury as a result of his conduct (presumably because of the subsidy it paid to the purchaser of the savings and loan). We held that the FSLIC “may receive restitution under the Act when, as in this case, it has acquired the claims of a defunct savings and loan.” Id. at 622.
If in the process of the takeover Union acquired all of California First’s claims, Union clearly qualified as a victim under
Smith.
However, it is the government’s burden to establish the loss sustained by a victim.
See United States v. Angelica,
III.
Majors also challenges the amount of the restitution order. Majors pleaded guilty to Count Five of the indictment, which charged him with being an accessory after the fact to the supplying of false information on a loan application. The indictment al
*1456
leged that the loss resulting from the conduct charged in Count Five was $15,000. However, the district court ordered Majors to pay $20,000 in restitution, to cover the losses alleged in Count Five as well as the losses alleged in Count Four (which the government dismissed at the time the parties executed the plea agreement).
4
Because the VWPA only authorizes a district court to order restitution for the losses caused by the specific conduct underlying the offense of conviction, and because the exception to this principle recognized in
United States v. Soderling,
A.
In the district court, Majors’s counsel only challenged the court’s designation of Union Bank as a “victim” under the VWPA. He did not challenge the
amount
of restitution at all.
6
Citing
United States v. Mondello,
At least one of the exceptions to the general rule applied in
Mondello
applies here. We have held that we will consider a claim raised for the first time on appeal “when the issue is purely one of law.”
Kimball,
B.
In
Hughey v. United States,
Our opinion in
United States v. Garcia,
At first glance, the principle set forth in Hughey appears to invalidate the restitution award in this case. Indeed, the facts of this case are quite similar to those in Garcia. Majors pleaded guilty to Count Five of the indictment. This count (as amended) alleged that Majors had been an accessory after the fact to the making of a false statement on a loan application. Specifically, it alleged that Majors received $15,000 on May 8,1985, as a result of this loan application. The government dismissed Count Four of the indictment, which alleged that Majors had received $5,000 from the bank on April 18, 1985, as a result of the fraudulent loan application-. Yet the district court ordered restitution in the amount of $20,000, apparently to cover the losses resulting from both counts. Although Majors may have received the entire $20,000 as a result of the same scheme, the conduct underlying the specific offense of conviction — the receipt of $15,000 on May 8,1985— caused only a $15,000 loss. By ordering Majors to repay the $5,000 loss resulting from the conduct alleged in Count Four, the district court appeared to violate the principles enunciated in Hughey, Garcia, and Sharp.
However, we have recognized an exception to these principles in cases involving plea bargains. As we explained in
Soderling,
a district court may order restitution “for losses stemming from offenses other than those on which there was a conviction
if the
defendant agrees to such in a plea bargain in return for a promise by the government to drop or not pursue the other offenses.”
Soderling,
Nowhere in the plea agreement does Majors agree that the court may impose restitution beyond the losses caused by the offense of conviction. The agreement’s only mention of the amount of restitution comes in paragraph 11, which sets forth the promises made by the
government.
This paragraph states that the government “will specifically recommend that the court order restitution be paid in the amount of $20,000 to Union Bank.” By its literal terms, this paragraph simply informs Majors of the sentence the government will recommend. It does not state that
Majors
agrees that the court may impose such a sentence. Moreover, no provision of the agreement states that Majors agrees to a level of restitution beyond the loss caused by the offense of conviction “in return for a promise by the government to drop or not pursue the other offenses.”
Soderling,
In interpreting plea agreements, “the government is to be held to the literal terms of the agreement, and ordinarily must bear responsibility for any lack of clarity.”
United States v. Anderson,
We reversed. In holding that the district court erred in admitting the confession, we relied on the fact that no specific term in the agreement allowed the government to use any confession obtained pursuant to the agreement if the defendant breached the agreement and went to trial.
See id.
at 571 (“The government is ‘held to the literal terms of the agreement,’ and there is no provision in the agreement authorizing any such use.”) (citations omitted) (quoting
United States v. Packwood,
*1459
We have applied the same principles in cases involving awards of restitution. For example, in
United States v. Ramilo,
As in
Ramilo,
an agreement that Majors would pay restitution for Counts Four and Five in exchange for the government’s dropping Counts One and Four “would have read quite differently” from the agreement Majors and the government actually executed. Instead of the
government
promising to request $20,000 in restitution,
Majors
would have promised not to object to that amount. Instead of being silent on Counts One and Four, the fully integrated agreement would have included an explicit promise on the part of the government to drop those Counts. In short, an agreement complying with
Soder-ling
would have closely tracked the language this court used in that case: “the defendant agrees to [pay restitution for unconvicted counts] ... in return for a promise by the government to drop or not pursue the other offenses.”
Soderling,
IV.
We vacate the restitution orders and remand for reconsideration. On remand, the district court should only award restitution on behalf of a person or entity if the government demonstrates that the person or entity has suffered as a result of the conduct underlying the defendants’ convictions. Any restitution order addressed to Majors shall not exceed $15,000. Because the district court is to reconsider its prior orders of restitution, we need not address Majors’s argument that the district court in its earlier proceeding gave insufficient consideration to his ability to pay.
VACATED and REMANDED.
Notes
. "The legality of a restitution order is reviewed de novo. An order complying with the statutory framework, however, is reviewed for an abuse of discretion."
United States v. McHenry,
. The government suggests that the district court was not required to have a specific statutory basis for ordering restitution. In an apparent effort to avoid the limits on a district court's power to order restitution under the VWPA, the government states that "the district court had the option of ordering restitution not only under 18 U.S.C. § 3663, as it did here, but also as part of its overall sentencing objectives.” However, it is settled law that "[flederal courts have no inherent power to order restitution.”
United States v. Snider,
. But see 18 U.S.C. § 3663(d) (stating that the district court may decline to make a restitution order if it determines that "the complication and prolongation of the sentencing process” outweighs the need to provide restitution).
. Baker pleaded guilty to Count Two, which alleged a $20,000 loss. The district court ordered him to pay $20,000 in restitution, to cover the losses alleged in that count alone.
. In his reply brief. Majors claims for the first time in this case that the restitution order imper-missibly treated him as a principal rather than an accessory by requiring him to pay full restitution. Majors relies on 18 U.S.C. § 3, which provides that "[e]xcept as otherwise expressly provided by any Act of Congress, an accessory after the fact shall be imprisoned not more than one-half the maximum term of imprisonment or fined not more than one-half the maximum fine prescribed for the punishment of the principal, or both.” We reject this argument, both because Majors failed to present it sooner and because it lacks merit. By its terms, § 3 serves only to halve the maximum fine or term of. imprisonment. The provision does not speak of restitution at all. If Congress had intended for § 3 to have any effect on the district court’s authority to order full restitution in appropriate cases, it would have said so.
. Majors's counsel stated, "I understand that with respect to Mr. Majors it doesn’t do anything, and he’s willing to repay that $20,000. I bring that up only as to whether it should be in the form of a fine or restitution because of the nature of the victim.”
. In 1990, five years after the conduct constituting the offense in this case, Congress amended the Victim and Witness Protection Act. Among other amendments, Congress added § 3663(a)(2), which states that:
For the purposes of restitution, a victim-of an offense that involves as an element a scheme, a conspiracy, or a pattern of criminal activity means any person directly harmed by the defendant's criminal conduct in the course of the scheme, conspiracy or pattern.
18 U.S.C. § 3663(a)(2) (enacted November 29, 1990). Although a footnote in a per curiam opinion of this court included dicta stating that the addition of § 3663(a)(2) overruled
Sharp, see Soderling,
. The,
Soderling
court relied on our consistent interpretation — both before and after
Hughey
— of the “nearly identical” restitution provisions in the Federal Probation Act.
Id.
at 532-33. Because a long line of precedent in this circuit allowed a district court to enforce a'plea bargain by ordering restitution under the FPA beyond the losses caused by the offense of conviction, and because this circuit had also recognized that, absent such an agreement, restitution under the FPA must be limited to the offense of conviction,
*1458
the
Soderling
court felt compelled to recognize a similar exception for plea agreements under the VWPA.
See id.
Although Congress amended the VWPA after
Hughey
specifically to allow a court to order restitution beyond the offense of conviction pursuant to a plea agreement,
see
18 U.S.C. § 3663(a)(3) (added November 29, 1990), we concluded that this amendment worked no change in the law. Rather, we held that the amendment merely resolved uncertainties in the interpretation of the statute.
See Soderling,
. See
United States v. Floyd,
