Is there a public FinCEN whistleblower annual report like the SEC publishes?
Short answer: not in the same familiar form. The US Securities and Exchange Commission (SEC) publishes a regular whistleblower programme annual report with statistics on tips and awards. The Financial Crimes Enforcement Network (FinCEN), which administers the Bank Secrecy Act (BSA) whistleblower programme for the US Treasury Department, has not established an equivalent, readily accessible public report that gives readers the same year-by-year picture.
That matters because the BSA programme was substantially expanded in 2022. It now provides for mandatory awards in qualifying cases, with an award range of 10 to 30 per cent of monetary sanctions collected. But the legal framework and the public information available about its operation are separate questions. A statutory award entitlement does not, by itself, tell the public how many tips have arrived, how many have led to enforcement, or how much has been paid.
This article explains what changed, what the award rules mean, where FinCEN transparency currently falls short of the SEC model, and how whistleblowers should think about internal compliance reporting channels versus external submissions to regulators.
Why compare FinCEN with the SEC?
The SEC’s whistleblower programme is a useful comparison because its reporting is visible and structured. The SEC is required by law to report to Congress annually on its whistleblower programme. Its reports include figures such as the number of tips received, awards made and amounts awarded. That gives the public, potential whistleblowers and compliance teams a regular basis for assessing programme activity.
FinCEN is a different agency administering a different legal regime. Its whistleblower programme concerns violations of the BSA and related anti-money-laundering requirements, rather than securities-law violations. A direct comparison should therefore be cautious. But the practical question remains: can a reader find a single public FinCEN annual report that provides comparable programme statistics? At the time of writing, there is no obvious, established public annual report of that kind.
Information may appear across agency announcements, rulemaking materials, congressional documents and other public records. Those sources can be useful, but they do not necessarily provide a consistent annual series or answer basic questions in one place. For researchers and the regulated sector, that makes it harder to assess programme activity and progress.
What changed in the 2022 overhaul?
The BSA whistleblower provisions were significantly strengthened by legislation enacted in December 2022: the Anti-Money Laundering Whistleblower Improvement Act, included in the Consolidated Appropriations Act, 2023. The changes built on the BSA amendments made by the Anti-Money Laundering Act of 2020.
The overhaul addressed an important weakness in the earlier scheme. The prior award provision gave the Treasury Secretary discretion to pay an award, but did not offer the same clear, meaningful minimum award structure that whistleblower programmes are often understood to require. The amended law provides for awards where the statutory conditions are met and sets a defined range.
The programme applies to people who provide original information about certain violations of the BSA or related requirements to the Treasury Department, including through FinCEN, or to the Department of Justice. It is not a general reward programme for reporting every kind of financial misconduct. The legal requirements about eligible information, the person’s role and the enforcement outcome matter.
When does the $1 million sanctions trigger apply?
The award provision is linked to a successful enforcement action that results in monetary sanctions exceeding $1 million. In practical terms, the threshold is about the outcome of the enforcement action, not simply the seriousness of an allegation or the number of documents a person supplies.
A tip may be valuable to investigators without ultimately producing an action that meets the statutory threshold. Equally, an enforcement case may meet the threshold but still require an assessment of whether the information qualifies and whether the person is eligible for an award. The threshold should not be read as a promise that every report producing a penalty will result in payment to its source.
The statute also allows related actions to be considered together in relevant circumstances. Whether the threshold is met depends on the facts and the legal treatment of the enforcement actions; it is not something a potential whistleblower can reliably establish just by looking at an initial announcement.
What does the 10 to 30 per cent award range mean?
For a qualifying whistleblower, the amended BSA provision generally requires an award of not less than 10 per cent and not more than 30 per cent of the monetary sanctions collected in the covered action or related actions. The word “collected” is important: the award is tied to money recovered, not merely the amount of a penalty announced or ordered.
The range gives the government discretion over the size of an award within its statutory boundaries. It is not a fixed 30 per cent payment, and it does not mean a whistleblower will receive a share of every financial penalty in a case. The amount can depend on factors such as the significance of the information, the assistance provided and the person’s contribution to the enforcement result.
The award mechanism is therefore best understood as a conditional statutory entitlement, not a CFTC whistleblower program guaranteed financial outcome. Eligibility disputes, the enforcement result, amounts actually collected and the award determination can all affect what happens. Anyone considering a submission should seek advice from a lawyer experienced in whistleblower matters before relying on a particular estimate.
Why FinCEN programme statistics matter
Public programme statistics help people understand whether a legal scheme is operating as intended. A useful annual report could, for example, distinguish between the number of submissions received, matters referred for investigation, enforcement actions influenced by whistleblower information and awards paid. It could also explain processing times and provide anonymised examples without exposing confidential information.
Those figures would not prove that a programme is successful or unsuccessful on their own. A low number of awards might reflect the time needed to investigate complex cases, rather than a lack of useful tips. A rise in Additional reading submissions might reflect greater awareness, not necessarily better-quality information. But consistent data would give Congress and the public a firmer basis for asking those questions.
At present, the absence of an SEC-style public annual report makes it difficult to build that picture from public information alone. This is the practical gap in FinCEN transparency: the law provides a stronger award framework, while programme statistics are not presented in the same regular, consolidated format familiar to SEC observers.
SAR duties are not the same as whistleblowing
Financial institutions have obligations to identify and report suspicious activity under the BSA. A Suspicious Activity Report (SAR) is a report made by a covered institution to the government when the applicable reporting requirements are met. It is part of the institution’s regulatory compliance system; it is not the same thing as an employee’s personal whistleblower submission.
That distinction matters. An employee who spots possible misconduct may raise it through an internal compliance reporting channel, such as a manager, an internal hotline or the compliance function. Separately, the employee may consider reporting information externally to a regulator or law-enforcement agency. The employer’s SAR process and an individual’s whistleblower rights should not be confused.
SARs are subject to strict confidentiality rules. Employees should not take or disclose a SAR, or reveal that one has been filed, without proper legal advice. A whistleblower can report relevant facts without treating confidential SAR material as a document to circulate. Handling restricted information carelessly can create legal and employment risks, even where the person’s underlying concern is genuine.
Internal channels versus external submissions
Internal reporting can give a firm the opportunity to investigate and address a problem. It may also create a useful record of what was reported and when. But internal reporting is not automatically a substitute for contacting a regulator, and a person should not assume that raising a concern internally will preserve every possible right or meet every external deadline.
External submissions may be made to the relevant government authority, subject to the programme’s rules. The BSA whistleblower framework does not generally make an internal report a prerequisite to an external submission. That does not mean every employee should bypass internal processes, or that internal reporting is risk-free. The right approach depends on the facts, the person’s role, the possibility of evidence being lost, and the risk of retaliation or other adverse treatment.
Timing deserves particular attention. A person weighing internal and external routes should consider whether there is an ongoing investigation, whether records may be altered or destroyed, and whether employment decisions could follow. They should also avoid unauthorised access to systems or documents. A lawyer can help plan a lawful report, preserve relevant evidence and assess whether a particular disclosure is protected.
Anti-retaliation protection and a federal cause of action
The BSA amendments include anti-retaliation protections for covered whistleblowers. In broad terms, employers may not retaliate against a person for specified lawful reporting or cooperation concerning a BSA violation. The protection is intended to cover qualifying conduct involving, among others, the Treasury Department and the Department of Justice, as well as certain internal disclosures.
The law also provides a federal cause of action for a whistleblower who believes they have suffered prohibited retaliation. Depending on the circumstances and the legal requirements, remedies may include reinstatement, double back pay with interest, and payment of litigation costs and reasonable legal fees. These remedies are not automatic: a claimant must establish the elements of a claim, and procedural rules and time limits apply.
Protection should not be mistaken for a guarantee that retaliation will not occur. A report can affect workplace relationships, job security and future employment prospects, real estate transaction transparency rules even where the law prohibits retaliation. The timing of a report, the way it is made and the records kept about subsequent treatment may all become important. Prompt legal advice is particularly valuable if adverse action has already started or appears imminent.
What should a potential whistleblower do?
- Write down what you know. Separate first-hand observations from assumptions, and record dates and relevant people while memories are fresh.
- Do not remove restricted material. Avoid taking confidential customer data, SARs or other protected records without authority. Get advice on how to preserve evidence lawfully.
- Assess internal and external routes. Consider whether an internal channel is appropriate, whether an external submission is needed, and whether urgent risks affect the timing.
- Get specialist advice before submitting. A lawyer can help assess eligibility, confidentiality, anti-retaliation issues and any deadlines. Advice is especially important if you are involved in the conduct being reported.
- Keep expectations realistic. A submission does not guarantee an investigation, an enforcement action, an award or protection from all workplace consequences.
The bottom line
The BSA whistleblower programme is materially stronger after the 2022 legislative overhaul. It provides for mandatory awards in qualifying cases that meet the $1 million sanctions trigger, with awards generally ranging from 10 to 30 per cent of monetary sanctions collected. It also provides anti-retaliation protection and a federal cause of action for eligible claimants.
But those legal improvements do not answer the transparency question. FinCEN does not offer the same well-established, consolidated public annual report and programme statistics that readers associate with the SEC. For now, anyone assessing the programme should distinguish between what the statute promises and what public data shows in practice. And anyone considering a report should treat the award as uncertain, protect confidential information and take retaliation risk and timing seriously.
