What should I include in a whistleblower submission to show I was directly involved?
A strong whistleblower submission does more than say, “I was part of the team.” It explains what you personally did, what you observed, when it happened, and how your knowledge connects to suspected violations of the Bank Secrecy Act (BSA). Specific, supportable detail can help investigators assess whether your information is credible and useful.
But there is an important distinction: the BSA whistleblower programme does not require you to have personally carried out the conduct you report. Direct involvement evidence can strengthen a submission, but first-hand knowledge may also come from reviewing records, escalating concerns, or observing how decisions were made. The aim is to provide original information—not to overstate your role or claim credit for work you did not do.
This article explains how to present your involvement, distinguish internal compliance reports from external submissions, and understand the award and anti-retaliation framework. It is general information, not legal advice. The rules and procedures can change, and anyone considering a report should discuss their circumstances with a qualified US attorney.
What changed in the BSA whistleblower programme?
In 2022, legislation overhauled the BSA whistleblower programme. The changes were enacted in the Anti-Money Laundering Act of 2020, included in the National Defence Authorisation Act for Fiscal Year 2021, and took effect in 2022. They created a stronger financial incentive for people who provide useful information about violations of the BSA and related anti-money laundering laws.
One central change was to make awards mandatory when statutory conditions are met, rather than leaving an award entirely to the government’s discretion. A key threshold is that the successful enforcement action must result in monetary sanctions exceeding $1 million. Where the conditions are satisfied, the award is generally between 10 and 30 per cent of the monetary sanctions collected, subject to the programme’s rules.
The programme is administered by the US Department of the Treasury, with the Financial Crimes Enforcement Network (FinCEN) playing a central role. It is not a promise of payment for every report. The information must meet statutory requirements, contribute to a successful action, and satisfy the applicable award criteria.
What does “directly involved” mean in a submission?
There is no need to present yourself as the architect of suspected wrongdoing. Your submission should instead separate what you personally know from what you infer or learned from other people. Investigators can then assess the evidence without having to untangle inflated or ambiguous claims.
Direct involvement evidence may include your role in a process, the work you performed, the decisions you attended, the records you handled, or the concerns you raised. It can also include the steps you took after noticing a problem. For example, you might have reviewed transaction alerts, prepared an internal escalation, asked a manager to explain an override, or tested whether monitoring controls were working as described.
Describe your role precisely
Give your job title, team, relevant responsibilities, and the period during which you held them. If your title does not convey your access or responsibilities, explain those in plain language. Identify whether you had direct access to the relevant systems, records, meetings, or decisions.
Then describe your personal actions. Use clear verbs: “I reviewed”, “I approved”, “I escalated”, “I attended”, or “I queried”. Avoid statements such as “we all knew” unless you can explain who knew what and how you know. If another person performed an important step, identify that as information about someone else rather than presenting it as your own action.
Build a timeline
A timeline helps show how your knowledge developed. Include approximate dates where exact dates are unavailable, and say when a date is an estimate. Record the sequence of the event, your involvement, any internal reporting, and what happened afterwards.
For example: “In March, I reviewed a group of alerts relating to the same customer. I observed repeated manual closures by the same team. On 14 March, I raised the pattern with my manager in the case-management system. In April, I was asked to stop including these examples in the monthly review.” The value of this account comes from its detail and testability, not from the conclusion that it proves a violation.
Include non-public operational details
Non-public operational details can help investigators understand how a suspected problem worked in practice. Relevant details might include how alerts were generated or suppressed, who could override a control, how exceptions were recorded, or how a particular escalation route operated. Explain what you observed and why it matters, while avoiding technical jargon that obscures the point.
Be careful to distinguish facts from interpretation. “The alert was closed using reason code X” is different from “the alert was deliberately hidden”. If you believe a control was circumvented, explain the facts supporting that view and identify any alternative explanation you considered.
Useful supporting material may include records you lawfully possess or can identify for investigators, such as dated emails, meeting notes, case references, system logs, policy versions, or escalation records. Do not access systems without authorisation, remove records you are not entitled to take, alter documents, or breach legal restrictions to obtain evidence. Preserve material lawfully and seek legal advice before sharing confidential or sensitive information.
Original information: what to explain
“Original information” is a statutory concept, not simply information that is new to you. In broad terms, the programme looks for information that is derived from your independent knowledge or analysis, is not already known to the government from another source, and is not based exclusively on certain public disclosures. The precise treatment depends on the law and applicable rules.
Explain how you came to know the information. Did you observe an event, analyse records as part of your job, or connect separate facts in a way that revealed a pattern? Identify what is based on your own work and what comes from a colleague, a public source, or an assumption. If you are supplementing a matter that may already be under investigation, explain what additional information you can provide.
Original information does not have to mean that no one else has ever seen the same records. But a bare repetition of public allegations, or a vague claim that “management was involved”, is unlikely to help investigators evaluate your independent contribution. Point to the specific facts, documents, or analysis that make your account informative.
Internal compliance channels and external submissions
Internal reporting channels and external whistleblower submissions serve different purposes. An internal channel—such as a compliance hotline, an anti-money laundering (AML) team, or an ethics office—reports a concern within the organisation. An external submission provides information to a government authority, such as Treasury or the Department of Justice (DOJ), through the applicable process.
Internal reporting can create a record of when you raised a concern and what the organisation did next. It may also help the firm identify and address a problem. But an internal report is not automatically an external whistleblower submission, and it does not itself guarantee eligibility for a government award. Nor should you assume that making an internal report is always required before approaching a regulator. The relevant programme rules and your circumstances matter.
Know the difference between a compliance report and a Suspicious Activity Report (SAR). A SAR is a confidential report that certain financial institutions must file with the government when legal reporting criteria are met. It is not the same thing as an employee’s whistleblower submission. Do not disclose the existence or contents of a SAR if doing so would breach confidentiality restrictions. Instead, describe the underlying conduct you personally observed and let your lawyer or the authorities advise on how to handle any protected material.
Before using either channel, consider retaliation and timing. Record relevant events, follow applicable preservation rules, and get legal advice promptly if you fear discipline, dismissal, threats, or pressure to change your account. Do not delay solely to assemble a perfect submission: an attorney can help distinguish essential facts from material that can be supplied later.
How the award range works
Under the amended programme, a qualifying award is generally 10 to 30 per cent of monetary sanctions collected in a successful enforcement action where the statutory threshold—more than $1 million in sanctions—is met. The percentage is not automatically 30 per cent, and the amount depends on the rules and the facts, including the value and significance of the information and the whistleblower’s assistance.
The threshold is not a minimum payment to the whistleblower. It is a condition linked to sanctions in a successful action. An enforcement action that does not meet the threshold may not qualify for an award under this programme, even if the underlying conduct is serious. Get advice on eligibility rather than relying on a headline description of the percentage range.
Anti-retaliation protections—and their limits
The BSA provides anti-retaliation protections for certain whistleblowers who report information through covered channels. The law also provides a federal cause of action in specified circumstances. Depending on the facts and the applicable process, remedies may include reinstatement, double back pay with interest, special damages, and legal costs and attorneys’ fees.
These protections do not mean that retaliation cannot happen, or that every workplace dispute qualifies as unlawful retaliation. The reporting route, timing, employment relationship, and reason for the employer’s action can all matter. Keep a contemporaneous record of changes to your duties, performance reviews, discipline, threats, or other treatment that may be connected to reporting. Preserve relevant communications lawfully and avoid making accusations you cannot support.
Because procedural deadlines and requirements can be strict, speak to a US employment or whistleblower lawyer as early as possible if you believe you have faced retaliation. An attorney can assess whether the federal cause of action applies and explain the steps and deadlines for pursuing it.
A practical submission checklist
Before submitting information, organise your account so that investigators can follow it and test its accuracy:
- Your identity and role: State your job title, responsibilities, relevant access, and dates of employment or involvement.
- Your own actions: Explain what you reviewed, observed, decided, questioned, or reported.
- A clear timeline: Give dates, or label estimates, and describe what happened in sequence.
- Specific conduct: Identify the process, transactions, controls, or decisions at issue without overstating what they prove.
- Original information: Explain how you independently obtained or analysed the facts and what is not simply public information.
- Supporting material: Identify records and witnesses, and explain where relevant material can be found. Do not obtain or share it unlawfully.
- Internal reporting: Say whether you used an internal channel, when you did so, and what response followed.
- Uncertainties: Mark what you know first-hand, what you have been told, and what you infer.
- Retaliation concerns: Record relevant events and seek advice about protecting your rights and meeting deadlines.
Credibility matters more than claiming credit
The strongest submission is candid about the whistleblower’s role. If you were directly involved, show it through specific actions, dates, and non-public operational details. If your knowledge is indirect, say so and identify its source. A careful account of original lawyer-monthly.com information is more useful than a sweeping accusation—and safer than claiming personal involvement you cannot substantiate.
The 2022 overhaul created a meaningful award framework and a federal route to challenge certain retaliation. Neither guarantees a financial reward or an easy remedy. Focus first on preserving a truthful, well-organised account, protecting confidential information, and getting advice about the right reporting route and timing.