How to Be a Whistleblower: Filing, Awards & Retaliation Protections

To become a whistleblower under federal law, you report the misconduct to the agency that regulates it, document what you know before you file, and, for most programs, do it with an attorney so you preserve both your anonymity and your right to an award. The path splits by subject matter: securities fraud goes to the SEC, tax cheating goes to the IRS, fraud against federal programs goes to the Department of Justice through a qui tam lawsuit, and workplace safety and many other retaliation claims go to OSHA. Awards can reach 30% of what the government collects, but they only exist in specific programs, and each program has its own form, deadline, and rules about staying anonymous.

Match the Misconduct to the Right Agency

Filing with the wrong office does more than slow your case down. It can mean investigators with authority to act never see your information.

Securities fraud and investment scams: The Securities and Exchange Commission handles insider trading, false financial reporting, market manipulation, and any other violation of federal securities laws.¹
Tax fraud: The IRS Whistleblower Office takes reports about individuals or businesses that underpay their taxes.²
Government contract fraud and billing schemes: The Department of Justice pursues fraud against federal programs, including defense contractors delivering defective products, healthcare providers overbilling Medicare, and companies exploiting disaster relief.³
Workplace safety violations: OSHA investigates unsafe conditions and enforces more than twenty whistleblower protection statutes.⁴
Commodities and futures fraud: The Commodity Futures Trading Commission handles manipulation, insider trading, and fraud in derivatives markets.⁵
Environmental violations: Complaints under the Clean Water Act, Clean Air Act, and four other major environmental statutes are filed through OSHA.⁶

If the misconduct straddles categories, start with the agency closest to the subject matter. Agencies refer cases when they land in the wrong office.

Prepare Your Evidence Before You File

The quality of your documentation is what separates tips that trigger investigations from tips that sit in a queue. Investigators want specifics: dates, names, dollar amounts, account numbers, transaction records. Vague suspicion goes nowhere.

Before you file, gather what you reasonably can. Internal emails, financial records, contracts, and memos are the strongest evidence. Write a timeline: what happened, when, and who was involved. If coworkers witnessed the conduct, note their names and roles so investigators can reach them.

Store your copies somewhere outside your employer’s systems. A personal phone, a home computer, or your attorney’s office all beat your work email; if your employer discovers you’re reporting and cuts your access, you lose your evidence. Be careful how you obtain documents, though. Taking classified materials or breaking legitimate confidentiality obligations can create legal problems of their own, and a whistleblower attorney can help you find those lines before you cross them.⁷

How to File Your Report

Filing an SEC Tip

The SEC uses Form TCR (Tip, Complaint, or Referral) for every whistleblower submission. You can file online through the SEC’s Tips, Complaints and Referrals Portal, by mail to the Office of the Whistleblower at 100 F Street NE, Washington, DC 20549, or by fax. The online portal is fastest because it returns an instant submission number you can use to track the case.⁸ Describe the violation in detail, identify everyone involved, and include any account numbers or transaction IDs you have.⁹

You can file anonymously, but with a condition. To stay anonymous and remain eligible for an award, you must be represented by an attorney who submits the tip and serves as the contact point until an award is ready to be paid.⁸

Filing an IRS Claim

For tax fraud, file Form 211 (Application for Award for Original Information) with the IRS Whistleblower Office. The IRS now offers a digital version you can submit online; mail and fax are still available.¹⁰ You must sign under penalty of perjury that the information is accurate, and you cannot be a current Treasury Department employee.¹¹ Explain how you obtained the information and why it shows a violation. Fill in every field; incomplete forms get rejected at intake.

Filing a Qui Tam Lawsuit

When the fraud targets federal money, the False Claims Act lets you file your own lawsuit on behalf of the United States. These “qui tam” cases are the single largest source of federal fraud recoveries. The DOJ recovered over $6.8 billion through False Claims Act cases in fiscal year 2025, and most were initiated by whistleblowers.¹²

The mechanics are different from filing a tip. You hire an attorney and file a complaint under seal in federal district court. The complaint stays sealed for at least 60 days while the DOJ investigates and decides whether to take over the case.¹³ One trap to watch: the “public disclosure bar.” If your information was already revealed through a federal hearing, government report, or news media, a court can dismiss the case unless you qualify as an “original source” — someone who either disclosed the information to the government before it became public or has knowledge that independently adds to what’s out there.

What Happens After You File

Both the SEC and IRS assign a submission number when they receive your report. Initial review typically takes several months as staff decide whether to open a full investigation. IRS cases can take years because the underlying audit or enforcement action has to play out before any award is calculated.

What You Can Earn

The federal government pays whistleblowers, and the numbers are substantial when the underlying case is large.

An SEC tip that leads to enforcement sanctions of more than $1 million qualifies you for an award of 10% to 30% of what’s collected, with no cap on the dollar amount. Where you fall in the range depends on how significant your information was, how much you cooperated, and whether the SEC would have found the violation without you.¹

The IRS runs two tracks. For cases where the disputed tax, penalties, and interest exceed $2 million (or the taxpayer is an individual with at least $200,000 in gross income), the award is mandatory at 15% to 30% of what the IRS collects.¹⁴ For smaller cases, the Whistleblower Office has discretion to pay a lesser amount.¹⁵

False Claims Act whistleblowers earn 15% to 25% when the government takes over the case, and 25% to 30% when they proceed on their own. The court also awards reasonable attorney fees and costs, paid by the defendant.¹³

Plan for taxes. Federal courts have consistently held that a whistleblower award is a payment for services, taxed as ordinary income rather than capital gains. On a large award, the tax bill is significant.

An NDA Does Not Block You from Going to the SEC

If you signed a non-disclosure agreement, severance agreement, or employment contract with a confidentiality clause, you may assume you’re legally barred from reporting. You are not. SEC Rule 21F-17(a) makes it illegal for anyone to take action that prevents you from communicating with the SEC about a possible securities violation, including enforcing or threatening to enforce a confidentiality agreement.¹⁶ The SEC has brought enforcement actions against companies that used overly broad confidentiality provisions in severance packages. An employer telling you an NDA blocks you from a regulator is likely violating federal law.

Protection Against Retaliation

Retaliation is what keeps most potential whistleblowers silent: firings, demotions, reassignment to nothing work, frozen-out promotions. Several federal statutes address it, and the protections differ.

Sarbanes-Oxley Act

If you work for a publicly traded company and report fraud involving securities, mail, wire, or bank transactions, Sarbanes-Oxley prohibits your employer from firing, demoting, suspending, threatening, or harassing you. Protection covers reports to federal regulators, law enforcement, or Congress, and participation in related proceedings.¹⁷ SOX claims start with a Department of Labor complaint, not a lawsuit. If the DOL hasn’t issued a final decision within 180 days, you can then sue in federal court.

A successful SOX claim entitles you to reinstatement with the seniority you would have had, back pay with interest, and compensation for special damages, litigation costs, expert witness fees, and reasonable attorney fees.¹⁷

Dodd-Frank Act

Dodd-Frank protects people who report securities violations to the SEC and lets them file retaliation lawsuits directly in federal court, skipping the DOL step.¹⁸ Remedies include reinstatement, double back pay with interest, and litigation costs and attorney fees.¹⁹ Dodd-Frank does not provide damages for emotional distress or reputational harm.

Critical limit: the Supreme Court held in Digital Realty Trust, Inc. v. Somers that Dodd-Frank’s anti-retaliation provisions only cover people who actually reported to the SEC. Internal reporting to a compliance department, without an SEC report, does not qualify.²⁰

False Claims Act

The False Claims Act protects any employee, contractor, or agent retaliated against for pursuing a qui tam action or for taking steps to stop fraud against the government. Courts have read the protection broadly to include internal complaints and investigative efforts before a lawsuit is filed. Remedies include reinstatement, double back pay with interest, and special damages, litigation costs, and attorney fees.¹³

State Protections

Most states have their own whistleblower laws, though coverage varies: some protect only government employees while others reach the private sector. Many states also recognize a common-law claim for wrongful termination in violation of public policy, which can help when no specific statute applies. If your situation doesn’t fit a federal statute cleanly, ask an attorney about your state’s protections.

Deadlines That Can End Your Case

Missing a filing deadline is the fastest way to lose a retaliation claim, and these deadlines are shorter than most people expect.

OSHA workplace safety complaints: 30 days from the retaliatory action. Other OSHA-enforced statutes run up to 180 days depending on the law.²¹
Sarbanes-Oxley retaliation: 180 days from the retaliatory action or from when you became aware of it.²²
Dodd-Frank retaliation: Six years from the violation or three years from when you knew or should have known the key facts, whichever comes first. No case can be brought more than ten years after the violation.¹⁸
False Claims Act retaliation: Three years from the date of the retaliatory action.¹³

The 30-day OSHA deadline catches people most often. Between processing a firing, consulting friends, and searching for a lawyer, a month vanishes. If you believe you’ve been retaliated against for a protected report, contact the relevant agency immediately, even before you’ve retained an attorney. OSHA can accept a late filing under extenuating circumstances, but counting on that is a gamble.²¹

Whether You Need a Lawyer

You don’t legally need an attorney to file most whistleblower tips, but the practical reality is that an attorney significantly increases your chances. For SEC and IRS tips, a lawyer makes sure the submission meets every technical requirement and frames your information the way investigators find useful. For a False Claims Act case, an attorney is required because the matter is filed as a lawsuit in federal court. To stay anonymous with the SEC while remaining eligible for an award, a lawyer is also required.

Many whistleblower attorneys work on contingency, taking a percentage of any award rather than charging upfront hourly fees, which makes representation accessible even if you can’t pay out of pocket. Given the short retaliation deadlines and the differences between programs, getting legal advice early is one of the few pieces of guidance that applies to every type of whistleblower case.

1
U.S. Securities and Exchange Commission. Whistleblower Program
2
Internal Revenue Service. Whistleblower Office
3
United States Department of Justice. Civil Division Fraud Section
4
Occupational Safety and Health Administration. OSHA Whistleblower Protection Program
5
CFTC. CFTC Enforcement Division Issues Prediction Markets Advisory
6
US EPA. Whistleblower Protection
7
Office of the Whistleblower Ombuds. Whistleblower Survival Tips
8
U.S. Securities and Exchange Commission. Information About Submitting a Whistleblower Tip
9
Securities and Exchange Commission. Form TCR Tip, Complaint or Referral
10
Internal Revenue Service. Whistleblower Office Announces New Digital Form 211
11
Internal Revenue Service. Submit a Whistleblower Claim for Award
12
United States Department of Justice. False Claims Act Settlements and Judgments Exceed $6.8B in Fiscal Year 2025
13
Office of the Law Revision Counsel. 31 USC 3730 – Civil Actions for False Claims
14
Office of the Law Revision Counsel. 26 USC 7623 – Expenses of Detection of Underpayments and Fraud
15
Internal Revenue Service. Whistleblower Office at a Glance
16
U.S. Securities and Exchange Commission. Whistleblower Protections
17
Office of the Law Revision Counsel. 18 USC 1514A – Civil Action to Protect Against Retaliation in Fraud Cases
18
Office of the Law Revision Counsel. 15 USC 78u-6 – Securities Whistleblower Incentives and Protection
19
Securities and Exchange Commission. Dodd-Frank Wall Street Reform and Consumer Protection Act – Section 922
20
Justia U.S. Supreme Court Center. Digital Realty Trust, Inc. v. Somers
21
Occupational Safety and Health Administration. OSHA Online Whistleblower Complaint Form
22
U.S. Department of Labor. Sarbanes Oxley Act (SOX)