How to File a Whistleblower Complaint: Agencies, Evidence, and Deadlines

To file a whistleblower complaint, identify the federal agency with jurisdiction over the specific misconduct, gather documentary evidence of what happened, and submit that agency’s intake form before its filing deadline runs out. The Whistleblower Protection Act covers federal employees who disclose legal violations, gross mismanagement, waste, abuse of authority, or dangers to public health and safety.¹ Private-sector employees have parallel protections under statutes like the Dodd-Frank Act and Sarbanes-Oxley, and several programs pay awards of up to 30 percent of what the government collects.

Match the Wrongdoing to the Right Agency

The biggest early mistake is filing with an agency that has no jurisdiction over the conduct you’re reporting. Deadlines keep running while your paperwork sits in the wrong inbox, so this choice comes first.

Workplace Safety and Retaliation

The Occupational Safety and Health Administration handles unsafe working conditions and employer retaliation under more than 20 federal statutes covering workplace safety, environmental protection, transportation, nuclear energy, and financial reform.² If you were fired, demoted, or disciplined after raising a safety concern or reporting a violation, OSHA is the destination.

Securities Fraud

The Securities and Exchange Commission investigates insider trading, fraudulent accounting, Ponzi schemes, and other violations of federal securities laws by publicly traded companies and investment professionals. Its whistleblower program pays awards when enforcement actions produce sanctions above $1 million.³

Tax Fraud

The IRS Whistleblower Office reviews reports of individuals or businesses underpaying taxes or running abusive avoidance schemes. The mandatory award program under 26 U.S.C. § 7623(b) applies when the tax, penalties, and interest in dispute exceed $2 million, and where the target is an individual, their gross income must also exceed $200,000 in at least one year at issue.⁴

Government Contract Fraud

If a contractor overbills the federal government, delivers substandard products, or misuses grant funds, the False Claims Act lets you sue on the government’s behalf. These qui tam actions are filed under seal in federal district court rather than submitted to an agency intake office, and you’ll need an attorney.⁵

Commodities and Derivatives Fraud

The Commodity Futures Trading Commission takes fraud involving futures contracts, swaps, cryptocurrency commodities, carbon markets, and derivatives manipulation like spoofing.⁶ Its award structure mirrors the SEC’s: 10 to 30 percent of collected sanctions above $1 million.

Employment discrimination based on race, sex, age, disability, religion, or national origin follows a separate track. Those cases go to the Equal Employment Opportunity Commission as a charge of discrimination, not a whistleblower complaint, and the EEOC also handles retaliation for reporting discrimination internally.⁷

Evidence to Gather Before You File

Strong evidence separates a complaint that opens an investigation from one that sits in a queue. Before filing, collect what you can without putting yourself at legal risk:

Full names, job titles, and departments of the people involved.
Specific dates the misconduct occurred or when you first learned of it. Investigators use timelines to establish patterns and to confirm your complaint falls within the filing window.
Documents that corroborate the account: internal emails, financial records, contracts, invoices, photographs, or screenshots.
An explanation of how you learned about the violation and your relationship (current or former) to the organization.

Stick to facts you can demonstrate. Speculation weakens a complaint and investigators can tell the difference immediately. Be aware that attorney-client privileged material generally does not qualify as “original information” for SEC whistleblower awards; the main exception is the crime-fraud doctrine, which strips the privilege from communications made to further an ongoing crime or fraud.

The Intake Forms

Each agency runs its own intake. The SEC uses Form TCR (Tip, Complaint, or Referral), which asks you to describe the alleged violation, explain how you obtained the information, and identify supporting documents in your possession.⁸ The IRS uses Form 211 (Application for Award for Original Information), which requires a written description of the alleged noncompliance and supporting documentation.⁹ OSHA requires no specific form: you can file online, by phone, by mail, or in person at any OSHA office.¹⁰ For a False Claims Act case, there is no intake form; your attorney files a sealed complaint in federal district court and serves a written disclosure of the evidence on the Department of Justice.⁵

Deadlines You Cannot Miss

Whistleblower deadlines are unforgiving. Missing yours forfeits both the claim and any potential award, no matter how strong the evidence is.

OSHA retaliation complaints: 30 to 180 days from the retaliatory action, depending on which statute applies. Workplace safety retaliation under Section 11(c) of the OSH Act gives you just 30 days.¹¹
Sarbanes-Oxley retaliation: 180 days from the retaliatory action, filed with the Secretary of Labor.¹²
SEC retaliation claims: up to 6 years from the violation, or 3 years from when you knew or should have known about it, with an absolute outer limit of 10 years.³
False Claims Act qui tam suits: 6 years from the fraudulent act, or 3 years from when the government knew or should have known about it, whichever is later.

These deadlines govern retaliation claims and qui tam lawsuits. The SEC’s tip program does not set a specific statute of limitations for submitting a tip, but the underlying securities violations still have enforcement time limits. When in doubt, file sooner. Waiting rarely helps.

How to Submit

Most agencies accept electronic submissions, and for most filers that’s the fastest route. The SEC’s online Tips, Complaints, and Referrals portal accepts Form TCR with PDF or Excel attachments and a digital signature, and returns a tracking number on submission.⁸ The IRS takes Form 211 through its online portal or by mail to the IRS Whistleblower Office in Washington, D.C.⁹ OSHA takes complaints by phone, online form, fax, email, or in person at any regional or area office.¹³

If you mail anything, use certified mail so you have proof of delivery and a dated record. That matters if a deadline dispute comes up later. Whichever method you use, follow up within a week or two to confirm the agency received your materials and opened a file.

Anonymous vs. Confidential Filing

Anonymous and confidential are not the same thing. Confidential means the agency knows who you are but protects your identity from the target. Anonymous means the agency itself does not know who you are, which is only possible through an attorney intermediary. Decide which level of protection you actually need before submitting.

The SEC allows anonymous submissions, but only if an attorney files on your behalf. The attorney submits Form TCR through the portal or by mail and completes a required certification, and you provide the attorney with a signed hard copy of the form under penalty of perjury.¹⁴ To stay anonymous and still pursue an award, hiring counsel is not optional. The CFTC program works the same way. The IRS does not permit fully anonymous award submissions; you must identify yourself on Form 211, though the agency is required to protect that information from disclosure. OSHA keeps your name confidential to the extent the law allows, but a formal investigation often makes the source apparent.

Protection Against Retaliation

Fear of retaliation is why many people stay silent, and federal law addresses it directly. Multiple statutes prohibit employers from firing, demoting, suspending, threatening, or otherwise punishing employees who report violations or cooperate with investigations.

Under the Dodd-Frank Act, an employer that retaliates against an SEC whistleblower can be sued in federal court. Remedies include reinstatement with the same seniority, double back pay with interest, and attorney fees and litigation costs.¹⁵ Double back pay means the employer pays twice what you would have earned during a wrongful termination or demotion.

Sarbanes-Oxley protects employees of publicly traded companies who report securities fraud, mail fraud, wire fraud, or bank fraud to a federal agency, to Congress, or to a supervisor. Retaliation complaints go to the Secretary of Labor, and if no final decision issues within 180 days, you can move the case to federal court.¹²

Federal employees are covered by the Whistleblower Protection Act, which prohibits retaliation for disclosing legal violations, gross mismanagement, waste, abuse of authority, or substantial dangers to public health and safety.¹⁶ Those complaints go to the Office of Special Counsel, which can seek corrective action through the Merit Systems Protection Board.

Retaliation cases turn on proof that the adverse action was caused by your protected disclosure rather than an unrelated performance issue or business decision. From the moment you first consider reporting, document everything: save emails, note conversations with dates and witnesses, and keep copies of performance reviews showing your work was satisfactory before you blew the whistle. That contemporaneous record is often what carries a retaliation claim.

1
Office of the Whistleblower. Whistleblower Protection Act Fact Sheet
2
Occupational Safety and Health Administration (OSHA). OSHA Whistleblower Protection Program
3
Office of the Law Revision Counsel. 15 USC 78u-6 – Securities Whistleblower Incentives and Protection
4
Office of the Law Revision Counsel. 26 USC 7623 – Expenses of Detection of Underpayments and Fraud
5
Office of the Law Revision Counsel. 31 USC 3730 – Civil Actions for False Claims
6
CFTC. Whistleblower Alerts
7
U.S. Equal Employment Opportunity Commission. How to File a Charge of Employment Discrimination
8
U.S. Securities and Exchange Commission. Form TCR – Tip, Complaint or Referral
9
IRS. Form 211 – Whistleblower Office
10
Occupational Safety and Health Administration. OSHA Online Whistleblower Complaint Form
11
Office of the Law Revision Counsel. 29 USC 660 – Judicial Review
12
U.S. Department of Labor. Sarbanes-Oxley Act (SOX) Whistleblower Protection Provision
13
United States Department of Labor. How to File a Whistleblower Complaint
14
U.S. Securities and Exchange Commission. Whistleblower Frequently Asked Questions
15
U.S. Securities and Exchange Commission. Section 922 – Whistleblower Protection of the Dodd-Frank Act
16
Federal Trade Commission Office of Inspector General. Whistleblower Protection