Is Reporting to a Federal Agency Protected for Anti-Money Laundering Whistleblowers?

Often, yes. U.S. law can protect people who report suspected Bank Secrecy Act (BSA) violations—including potential money laundering, failures involving Suspicious Activity Reports (SARs), and certain sanctions violations—to the Treasury Department, the Department of Justice, or another appropriate federal agency. The law may also protect some internal reports and participation in investigations.

But protection is not automatic. It depends on what you reported, how you reported it, your role, and whether an employer retaliated because of your protected activity. The anti-money-laundering (AML) whistleblower program also has rules about eligibility and information that may qualify for an award. This article explains the basics, not what will happen in any particular case.

What Is the AML/BSA Whistleblower Program?

The BSA is the federal law that requires financial institutions to help detect and report certain financial crimes. Its requirements include maintaining records, establishing anti-money-laundering controls, and reporting specified suspicious activity. The AML whistleblower program provides a way for eligible people to submit information about possible BSA violations to the federal government and, in qualifying cases, seek a monetary award.

The program is administered by the Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Department of the Treasury. FinCEN’s website, fincen.gov, provides program information and instructions for submitting a whistleblower tip. A tip is not the same as a SAR: financial institutions generally file SARs, while a whistleblower can report information or evidence about suspected violations to the government.

Legal Origin and Timeline

Congress created the BSA whistleblower framework through the Anti-Money Laundering Act of 2020, enacted as part of the National Defense Authorization Act for Fiscal Year 2021. The program was later strengthened by the Anti-Money Laundering Whistleblower Improvement Act, included in the National Defense Authorization Act for Fiscal Year 2023, signed on December 23, 2022.

The 2022 law changed important parts of the program, including its award provisions and protections against retaliation. The main statutory framework is found in 31 U.S.C. § 5323. Because the program and its implementation can evolve, check FinCEN’s current guidance before submitting a claim or relying on a particular procedure.

Is Reporting to a Federal Agency Protected Activity?

Under the BSA’s anti-retaliation provisions, certain lawful actions to provide information about a possible BSA violation can be protected activity. The statute covers providing information to the employer, the Treasury Department, the Department of Justice, or another appropriate federal agency. It also addresses participation in proceedings or investigations relating to possible BSA violations.

In practical terms, directly reporting suspected misconduct to a federal agency may be protected even if you did not first report it internally. Internal reporting may also be protected. The key question is whether the activity falls within the statute and whether an employer took adverse action because of it.

Retaliation can include firing, demotion, suspension, threats, harassment, or other discrimination affecting the terms or conditions of work. The details matter: a poor performance review after a report, for example, is not automatically unlawful retaliation. The timing, stated reasons, treatment of comparable employees, and other evidence may all be relevant.

What Counts as a Federal Agency Report?

A report may involve a tip, documents, an interview, or information provided during an investigation. A person does not necessarily need to use legal terminology or prove a violation before reporting a concern. However, a vague complaint unrelated to a possible BSA violation may not qualify under this particular law. Keep the report factual: describe what you observed, when it happened, who was involved, and what records may support it.

Do not assume that sending information to any government office automatically satisfies every requirement for a BSA whistleblower award. Protection against retaliation and eligibility for an award are related but distinct questions. Follow FinCEN’s current submission instructions, and consider getting legal advice before providing sensitive material.

Who May Be Eligible—and What Is “Original Information”?

The program is intended to receive useful information from people who may know about misconduct, including current or former employees, contractors, and other individuals. Eligibility for an award depends on the statute and the circumstances; simply submitting a tip does not guarantee an award.

“Original information” generally means information derived from a person’s independent knowledge or independent analysis that is not already known to the government from another source or otherwise disqualified under the statute. A person may still have original information even if some facts are public, but merely repeating a public news story or information the government already has may not be enough. bank secrecy act reporting The source, timing, specificity, and usefulness of the submission can matter.

The law also has exclusions and limitations that may affect particular people or information. For example, rules may apply to people whose professional responsibilities involve investigating or reporting violations, and there are exceptions to some exclusions. Do not assume that working in compliance automatically makes you ineligible—or that it guarantees eligibility. FinCEN’s rules and the facts of the submission need to be considered.

What BSA Violations Can Qualify?

Potentially relevant conduct can include violations of the BSA and related anti-money-laundering requirements. The examples below are not a complete list, and a suspicious-looking transaction is not necessarily proof of a violation.

Issue Example of information a whistleblower might report SARs A financial institution allegedly failed to file required SARs, filed them late, or used a process that suppressed suspicious activity reports. Structuring Transactions were allegedly divided or arranged to evade reporting or recordkeeping requirements, or staff knowingly facilitated that conduct. Customer due diligence Required customer due diligence (CDD), including applicable beneficial-ownership procedures, was ignored, falsified, or applied inconsistently. Records and controls Required records were allegedly not maintained, altered, concealed, or made unavailable, or controls were knowingly bypassed. Sanctions Transactions potentially involving sanctions evasion or prohibited parties were concealed or processed despite relevant warnings.

Sanctions issues can involve separate laws and enforcement authorities in addition to the BSA. A report about possible sanctions evasion may be important, but the precise legal basis for a whistleblower protection or award depends on the facts and applicable statutes.

SAR Confidentiality: What You Should—and Should Not—Share

SARs are confidential. A financial institution generally may not disclose a SAR or reveal that one was filed to the person involved in the reported activity. Whistleblowers should not casually forward an actual SAR, disclose its existence to a customer or subject, or assume they are authorized to remove confidential records from an employer’s systems.

You can often describe the underlying conduct you observed without distributing a SAR. For example, you might explain that transactions appeared to be split to avoid reporting thresholds, identify dates and accounts through authorized records, or describe an internal instruction to ignore alert activity. Whether a particular document can lawfully be shared is fact-specific. Avoid accessing records without authorization or taking files that you are not entitled to possess.

Protection Is Not the Same as an Award

The anti-retaliation rules and the monetary-award program serve different purposes. A person may have a retaliation concern even if their information does not result in a qualifying enforcement action or award. Conversely, submitting information that may support an award does not by itself establish that an employer retaliated unlawfully.

Under the program, awards may be available in qualifying enforcement actions that result in monetary sanctions above the statutory threshold. The law provides for awards within a specified percentage range of collected sanctions, subject to eligibility rules and the government’s determination. There is no guaranteed payment, and a tip alone does not establish that an award will be made.

What to Do Next: A Practical Checklist

1. Write down what you personally know. Record dates, people, transactions, systems, and instructions while your recollection is fresh. Separate firsthand observations from assumptions or information you heard from others.
2. Preserve evidence lawfully. Do not hack, bypass access controls, alter records, or take confidential files without authorization. Ask a lawyer how to handle documents, especially SARs and customer information.
3. Review FinCEN’s current instructions. Start at fincen.gov and look for the whistleblower program and submission guidance. Use official channels rather than sending sensitive details to an unverified address.
4. Consider independent legal advice. A lawyer familiar with whistleblower and employment law can help assess eligibility, confidentiality, and retaliation risks. Do not use an employer’s laptop, email, or network for sensitive communications.
5. Keep a retaliation timeline. Record work changes, threats, discipline, or other adverse treatment, including dates and the employer’s stated reasons. Keep lawful copies of relevant employment records.
6. Act promptly if retaliation occurs. BSA retaliation claims have procedural requirements and deadlines. The statute generally requires a complaint to the Secretary of Labor within 180 days of the alleged violation. Confirm the current process and deadline with a qualified lawyer or the Department of Labor.

Bottom Line

Reporting to a federal agency can be protected activity for an AML whistleblower when the report concerns a possible BSA violation and meets the law’s requirements. The BSA’s protections can cover certain direct reports to federal authorities as well as internal reporting and participation in investigations. But protection and award eligibility are not automatic, and SAR confidentiality, document handling, and filing deadlines require care.

If you are considering a report, focus on accurate firsthand facts, use FinCEN’s current guidance, and avoid sharing confidential records without advice. A lawyer can help you evaluate how the law applies to your role and the specific information you have.