Whistleblower Programs

The whistleblower architecture

The modern federal financial-markets whistleblower architecture was built principally by the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, which established the Securities and Exchange Commission and Commodity Futures Trading Commission whistleblower programs. It was substantially expanded by the Anti-Money Laundering Act of 2020 and the Anti-Money Laundering Whistleblower Improvement Act of 2022, which together built the Financial Crimes Enforcement Network whistleblower program. The Department of Justice Criminal Division’s Corporate Whistleblower Awards Pilot Program, launched in 2024 and expanded in 2025, addresses corporate-crime areas not covered by the other programs.

Each program addresses specific subject-matter jurisdiction. The SEC program covers violations of federal securities laws. The CFTC program covers violations of the Commodity Exchange Act. The FinCEN program covers Bank Secrecy Act and OFAC sanctions violations. The DOJ pilot program covers gaps in the others. A whistleblower’s choice of program — or programs, because concurrent submissions are often appropriate — depends on subject matter, identity of the wrongdoer, the nature of the violation, and procedural posture.

SEC Whistleblower Program

The SEC program was established by Section 922 of the Dodd-Frank Act, codified at Section 21F of the Securities Exchange Act (15 U.S.C. § 78u-6). Implementing rules appear at 17 C.F.R. § 240.21F-1 through 21F-18.

The program covers violations of the federal securities laws, including the Securities Act of 1933, the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, and the Sarbanes-Oxley Act. A whistleblower may be eligible for an award if voluntarily providing original information to the Commission that leads to a successful enforcement action resulting in monetary sanctions exceeding $1 million.

Awards range from 10 to 30 percent of monetary sanctions collected, with the specific percentage determined in the Commission’s discretion based on factors including the significance of information, the assistance provided, the agency’s programmatic interest, and any participation by the whistleblower in the wrongdoing. Submissions are made via Form TCR (Tip, Complaint, or Referral) through the SEC website. Anonymous submission is permitted when the whistleblower is represented by counsel.

Section 21F(h) prohibits retaliation against whistleblowers and provides a private right of action for double back pay and other remedies. In Digital Realty Trust, Inc. v. Somers, 583 U.S. 149 (2018), the Supreme Court held that the Dodd-Frank anti-retaliation provision protects only those who report to the SEC, not those who report solely internally. The gap left by Digital Realty is partially filled by Section 806 of the Sarbanes-Oxley Act (18 U.S.C. § 1514A), which protects employees of publicly traded companies (and their subsidiaries and certain contractors) who report securities-law violations either to the SEC or internally through company channels. Coverage, filing deadlines, and remedies differ between the two statutes, and many whistleblowers preserve both pathways by reporting to the Commission while also raising the matter internally.

CFTC Whistleblower Program

The CFTC program was established by Section 748 of the Dodd-Frank Act, codified at Section 23 of the Commodity Exchange Act (7 U.S.C. § 26). Implementing rules appear at 17 C.F.R. Part 165.

The program covers violations of the Commodity Exchange Act, including manipulation, spoofing, wash trading, false reporting, and registration violations affecting futures, options on futures, swaps, and certain retail foreign exchange activities. Eligibility, award structure, and confidentiality provisions parallel the SEC program: original information leading to enforcement with sanctions exceeding $1 million, awards of 10 to 30 percent of sanctions collected, anonymous submission permitted through counsel.

Submissions are made via Form TCR through the CFTC’s whistleblower portal. Section 23(h) anti-retaliation provisions parallel those of the SEC program. The CFTC program has been particularly significant in spoofing and market-manipulation enforcement; its largest single award to date is approximately $200 million, paid in October 2021. (Across all federal financial-markets whistleblower programs, the largest single award is the SEC’s approximately $279 million award paid in May 2023.)

FinCEN/OFAC AML Whistleblower Program

The Financial Crimes Enforcement Network whistleblower program was established by Section 6314 of the Anti-Money Laundering Act of 2020, codified at 31 U.S.C. § 5323. The program was significantly expanded by the Anti-Money Laundering Whistleblower Improvement Act of 2022, enacted as part of the Consolidated Appropriations Act, 2023 (Pub. L. 117-328).

The program covers violations of the Bank Secrecy Act (31 U.S.C. § 5311 et seq.) and U.S. economic sanctions laws — principally the International Emergency Economic Powers Act, the Trading with the Enemy Act, and the Foreign Narcotics Kingpin Designation Act — administered by the Office of Foreign Assets Control. The 2022 amendments broadened coverage to include OFAC sanctions violations alongside BSA violations, established a minimum award (10 percent of sanctions collected), and created a dedicated funding source.

Eligibility requires original information leading to a successful judicial or administrative action with monetary sanctions exceeding $1 million. Awards may be up to 30 percent of monetary sanctions collected. Anti-retaliation provisions at 31 U.S.C. § 5323(g) provide protections similar to those of the SEC and CFTC programs, with adaptations specific to financial institutions covered by the BSA.

FinCEN published a Notice of Proposed Rulemaking implementing the program on April 1, 2026. Final rules remain pending, and FinCEN has indicated that awards will not be processed until the implementing regulations are issued in final form.

DOJ Corporate Whistleblower Awards Pilot Program

The Department of Justice Criminal Division’s Corporate Whistleblower Awards Pilot Program was launched on August 1, 2024, and is designed to fill gaps in the existing federal whistleblower programs. Unlike the SEC, CFTC, and FinCEN programs, the DOJ pilot is not statutory; it operates under the Department’s general enforcement authorities and is detailed in published program guidance. The program was substantially expanded by Criminal Division guidance issued in May 2025, which both broadened existing categories and added six new ones.

As originally constituted, the program covered four specific categories of corporate misconduct, all identified by the Department as gaps in existing whistleblower programs: (1) violations by financial institutions and abuse of the financial system not covered by FinCEN’s program, including obstruction or defrauding of financial regulators, failure to register money transmitting businesses, and fraud against U.S. financial institutions; (2) foreign corruption schemes not covered by the SEC program, including Foreign Corrupt Practices Act and Foreign Extortion Prevention Act violations that do not involve issuers; (3) domestic corruption schemes committed by or through companies; and (4) federal health care offenses not covered by the False Claims Act (originally limited to fraud involving private insurers, a limitation removed by the May 2025 update). The May 2025 expansion added six further categories: cartels and transnational criminal organizations (including money laundering, narcotics, and Controlled Substances Act violations); federal immigration violations; material support of terrorism; sanctions offenses; trade, tariff, and customs fraud; and procurement and federal program fraud.

Eligibility requires original and truthful information leading to a successful prosecution that includes criminal or civil forfeiture exceeding $1 million. The award structure differs from other programs in that awards are calculated on net forfeited proceeds: up to 30 percent of the first $100 million in net proceeds forfeited, and up to 5 percent of the next $400 million.

Submission is made via the Whistleblower Intake Form emailed to [email protected]. Anonymous submission is permitted when the whistleblower is represented by counsel; identity must be disclosed to the Department before any award is paid, and the Department reserves the right to require disclosure at any point in the process. Awards are made in the Department’s sole discretion.

The pilot program incentivizes internal reporting while preserving award eligibility: a whistleblower who reports internally to a company must report to the Department within 120 days of the internal report to remain eligible for an award. Companies that voluntarily self-report within 120 days of receiving an internal whistleblower report may qualify for a presumption of declination under the Criminal Division’s Corporate Enforcement and Voluntary Self-Disclosure Policy, provided self-disclosure occurs before the Department contacts the company.

Although the pilot program does not itself create new statutory anti-retaliation protections, the Department considers retaliation by employers as a factor in assessing cooperation or obstruction by the company, with potential consequences including reduced cooperation credit and enforcement action for obstruction. Existing statutory protections under Dodd-Frank, Sarbanes-Oxley, and the AML statutes remain available if separately invoked.

Anti-retaliation protections

Anti-retaliation provisions apply across the federal whistleblower programs but vary in scope and remedies. The Dodd-Frank anti-retaliation provision (15 U.S.C. § 78u-6(h)) provides a private right of action for double back pay, reinstatement, litigation costs, and attorneys’ fees, but applies only to those who report to the SEC. The Sarbanes-Oxley anti-retaliation provision (18 U.S.C. § 1514A) reaches more broadly, covering employees of publicly traded companies and protecting internal reporting; remedies are pursued first administratively through OSHA. The CFTC anti-retaliation provision (7 U.S.C. § 26(h)) parallels Dodd-Frank’s SEC provision. The FinCEN anti-retaliation provision (31 U.S.C. § 5323(g)) parallels but with refinements specific to financial institutions.

Practice considerations

Several themes recur in financial-markets whistleblower practice. Choice of forum is often not exclusive: a spoofing scheme involving both securities and futures products may generate eligibility for both SEC and CFTC awards, and counsel typically file with each program for which the conduct potentially qualifies, with appropriate cross-references. Internal reporting before government reporting is incentivized by each program; the DOJ pilot program explicitly preserves award eligibility for 120 days after an internal report. Anonymous submission is permitted by all four programs when the whistleblower is represented by counsel. Documentation contemporaneous with the alleged violation strengthens the eligibility argument that the whistleblower provided original information rather than information already in the agency’s possession. Information about an existing investigation can still qualify for an award if the whistleblower’s contribution materially and significantly advanced the investigation. Award determinations follow the underlying enforcement action’s resolution, including all forfeiture and appeal processes; this typically takes a number of years.

How this Foundation connects

Whistleblower work intersects with several other Foundations on this resource. Foundation Two (Trading Conduct & Supervision) describes the substantive duties whose breach often gives rise to whistleblower complaints. Foundation Three (Disputes & Enforcement) describes the enforcement procedures that follow. Foundation Six (Futures, FX & Trading Conduct) describes the market-conduct violations — manipulation, spoofing, false reporting — that are common subjects of CFTC whistleblower submissions. The Whistleblower and Dodd-Frank entries in the Glossary provide quick reference; the FAQ addresses related procedural questions on enforcement and statute of limitations.