Whistleblower Guide
Understand your protections, report safely, and know your rights
Whistleblower Protection Finder
Answer the questions below to identify which whistleblower laws may protect you and whether financial rewards may be available.
Step 1: What type of wrongdoing are you aware of?
Select the category that best describes what you want to report.
How to Report Safely
Reporting wrongdoing requires careful preparation. These are general guidelines for protecting yourself through the process.
Before You Report: Gather Documentation
Documentation is critical. Before making any report, quietly gather and preserve evidence.
- What to collect: Emails, memos, reports, financial records, internal communications, policies, and any documents that show the wrongdoing.
- How to collect safely: Make copies of documents you have legitimate access to in the normal course of your work. Do not hack systems, access files you are not authorized to view, or take proprietary information beyond what is needed to support your report.
- Where to store: Keep copies in a secure personal location (not on work devices). Consider a personal USB drive stored at home, a personal email account, or a secure cloud service.
- Write a contemporaneous account: While events are fresh, write a detailed narrative of what you observed, when, and who was involved. Date your notes.
Internal vs. External Reporting
Internal reporting (to your employer, compliance department, or ethics hotline) can be appropriate when:
- You believe the company will genuinely investigate and correct the issue.
- The wrongdoing is by a rogue employee, not systemic.
- The relevant whistleblower law requires or rewards internal reporting first (Sarbanes-Oxley requires it; Dodd-Frank does not).
External reporting (to a government agency) may be better when:
- The wrongdoing involves senior management or the compliance function itself.
- Internal reporting has failed or would be futile.
- You fear immediate retaliation.
- A financial reward is available for reporting to the agency (SEC, IRS, CFTC).
Anonymous Reporting Options
Many agencies accept anonymous tips, but anonymity can limit the investigation and your ability to claim rewards.
- SEC: Accepts anonymous tips but you must have an attorney file on your behalf to claim a reward.
- IRS: Does not accept fully anonymous tips for reward claims.
- OSHA: Accepts anonymous safety complaints. Your name will not be shared with the employer.
- FBI: Accepts anonymous tips online (tips.fbi.gov).
- Company ethics hotlines: Many offer anonymous reporting, but be cautious -- true anonymity may be difficult depending on the specifics of your report.
General Operational Security
- Do not use work devices to research whistleblower protections, communicate with attorneys, or prepare your report. Use personal devices on personal networks.
- Do not discuss your plans with coworkers until you have consulted an attorney. Even well-meaning colleagues may inadvertently alert the wrongdoers.
- Consult a whistleblower attorney BEFORE reporting. Initial consultations are typically free and confidential. An attorney can advise on the best reporting channel, help maximize protections, and assist with reward claims.
- Keep a personal log of all events, conversations, and changes in your work situation from the point you decide to report.
- Preserve your own performance record. Make personal copies of positive reviews, awards, and accomplishments. If retaliation occurs, you will need to demonstrate your prior good standing.
Important Cautions
- Do not remove documents you are not authorized to possess. Taking trade secrets or classified information can expose you to criminal liability, even if you are reporting genuine wrongdoing.
- Do not record conversations without understanding your state's consent laws (one-party vs. two-party consent).
- Do not assume all reporting is protected. Some reports to the media, for example, may not be protected under certain whistleblower statutes.
- Do not delay unnecessarily. Many whistleblower protections have strict deadlines.
Template: Anonymous Tip to Relevant Agency
A general template for reporting wrongdoing. Customize for your specific situation and agency.
Understanding Whistleblower Retaliation
Retaliation against whistleblowers is illegal under virtually every whistleblower protection law. Knowing what to watch for and how to document it is essential.
What Counts as Retaliation
Retaliation includes any adverse action taken because you reported wrongdoing. It can be obvious or subtle.
Being fired after reporting wrongdoing is the most blatant form of retaliation.
Being moved to a less desirable position, losing responsibilities, or being removed from key projects.
Having your pay cut, bonus reduced, or being passed over for a promotion you otherwise would have received.
Being moved to undesirable shifts, having hours reduced, or losing schedule flexibility.
Being ostracized, excluded from meetings, subjected to increased scrutiny, given impossible tasks, or treated with open hostility by management.
Receiving suddenly negative evaluations after a history of positive ones, especially if the timing correlates with your report.
Being given negative references or having your former employer interfere with your ability to find new employment.
Direct or indirect threats related to your employment, career, or legal action for reporting.
Making working conditions so intolerable that a reasonable person would feel compelled to resign. This is legally treated as a firing.
How to Document Retaliation
- Create a timeline: Document every adverse action with dates, what happened, who was involved, and who witnessed it. Note the timing relative to your whistleblower report.
- Keep "before and after" evidence: Compare your treatment before and after reporting. Save performance reviews, emails, and communications from both periods.
- Document the contrast: Note if employees who did not report are treated differently in similar situations.
- Save communications: Keep all emails, texts, and written communications from management. Do not delete anything.
- Note witnesses: Record who was present during each retaliatory act.
- Report the retaliation: File a formal internal complaint about the retaliation itself. This creates additional protected activity and documentation.
When Protections Kick In
Whistleblower protections generally begin from the moment you engage in protected activity. This includes:
- Reporting the wrongdoing internally (to a supervisor, compliance, or ethics hotline).
- Filing a complaint with a government agency.
- Participating in or cooperating with a government investigation.
- Refusing to participate in illegal activity.
- In some cases, simply gathering information about potential wrongdoing in preparation for a report.
Good faith requirement: Most laws require that you had a reasonable, good-faith belief that the activity you reported was illegal. You do not need to be correct -- you just need to have had a reasonable basis for your belief.
Time Limits for Filing Retaliation Claims
Deadlines vary by the applicable law. These are strict -- missing the deadline by even one day can bar your claim.
| Law | Deadline | File With |
|---|---|---|
| Sarbanes-Oxley | 180 days | OSHA |
| Dodd-Frank (SEC) | 6 years | Federal court |
| False Claims Act | 3 years | Federal court |
| OSHA Safety | 30 days | OSHA |
| Clean Air / Clean Water Act | 30 days | OSHA |
| Title VII Retaliation | 180/300 days | EEOC |
| State Laws | Varies (30 days - 3 years) | State agency / court |
Whistleblower Resources
Key organizations, agencies, and programs for whistleblowers.
SEC Office of the Whistleblower
For reporting violations of federal securities laws (accounting fraud, insider trading, market manipulation, Ponzi schemes, etc.).
Rewards: 10-30% of sanctions collected over $1 million. The SEC has awarded over $1.7 billion to whistleblowers since 2012.
How to file: Submit Form TCR (Tip, Complaint, or Referral) online at sec.gov/whistleblower.
Protections: Dodd-Frank provides strong anti-retaliation protections with 6-year statute of limitations for retaliation claims. You can file anonymously through an attorney.
IRS Whistleblower Office
For reporting tax fraud and underpayment of taxes.
Rewards: 15-30% of collected proceeds for claims involving over $2 million. Discretionary awards for smaller cases.
How to file: Submit Form 211 (Application for Award for Original Information) to the IRS Whistleblower Office.
Note: You must provide specific and credible information. Tax cases can take years to resolve, but rewards can be substantial.
CFTC Whistleblower Program
For reporting violations of the Commodity Exchange Act (commodities fraud, market manipulation, spoofing).
Rewards: 10-30% of sanctions collected over $1 million.
How to file: Submit Form TCR online at cftc.gov/whistleblower.
False Claims Act / Qui Tam
For reporting fraud against the federal government (false billing, kickbacks, defective products sold to government, etc.). The False Claims Act allows private citizens to file lawsuits on behalf of the government (qui tam actions).
Rewards: 15-30% of recovered funds. Government recoveries under the FCA have exceeded $70 billion since 1986, with qui tam whistleblowers receiving billions in awards.
How to file: A qui tam lawsuit must be filed under seal in federal court. You MUST have an attorney. The government then decides whether to intervene and take over the case.
State False Claims Acts: Many states have their own false claims acts for fraud against the state government, often with similar reward structures.
National Whistleblower Center (NWC)
A nonprofit organization dedicated to supporting whistleblowers, promoting whistleblower policies, and providing legal resources.
Services: Legal referrals, educational resources, policy advocacy, and a whistleblower resource center.
Government Accountability Project (GAP)
A nonprofit that provides legal representation and strategic advice to whistleblowers. They have decades of experience protecting whistleblowers across many industries.
OSHA Whistleblower Protection Programs
OSHA administers more than 20 whistleblower statutes covering a wide range of industries: safety, environmental, transportation, financial, food safety, nuclear, and more.
How to file: File a retaliation complaint online at osha.gov or call 1-800-321-OSHA. Deadlines vary from 30 to 180 days depending on the statute.
Finding a Whistleblower Attorney
Whistleblower cases are specialized. Look for attorneys who specifically handle whistleblower/qui tam cases.
- National Employment Lawyers Association (NELA): nela.org -- find member attorneys by specialty.
- Taxpayers Against Fraud (TAF): taf.org -- directory of qui tam / False Claims Act attorneys.
- National Whistleblower Center: Provides attorney referrals at whistleblowers.org.
- Contingency fees: Most whistleblower attorneys work on contingency, especially for qui tam and SEC/IRS reward cases. They only get paid if you receive a reward or settlement.