Anonymous Whistleblowing

SEC Whistleblower Program: Anonymous Whistleblowing

Often the best protection against professional and personal blowback is to report misconduct anonymously.

One of the best ways to prevent blacklisting and retaliation is to report misconduct anonymously. Recognizing this reality, the SEC made anonymous reporting a key pillar of the whistleblower program.

According to SEC data, consistently more than 80% of whistleblowers who receive awards filed their initial tips anonymously through counsel. In fiscal year 2024, that number reached 84%. This demonstrates that anonymous reporting is a well-established and frequently used feature of the program.

Why Anonymous Reporting Matters

Reporting securities violations can put whistleblowers at significant professional and personal risk. Concerns about retaliation, career damage, and workplace relationships often prevent individuals from coming forward with critical information about misconduct. The SEC recognized that allowing anonymous reporting would encourage more high-quality tips from individuals who might otherwise remain silent.

The SEC Whistleblower Program and Anonymous Submissions

The Securities and Exchange Commission’s Whistleblower Program, established under the Dodd-Frank Wall Street Reform and Consumer Protection Act, allows eligible whistleblowers to report anonymously while maintaining eligibility for whistleblower awards. This critical feature of the program enables individuals with independent knowledge of securities law violations to submit information without immediately disclosing their identity to the SEC Office or other government agencies.

Under program rules, individuals who choose to file an SEC whistleblower anonymous submission must comply with specific requirements. The whistleblower’s attorney must submit the information on the whistleblower’s behalf using the SEC’s online portal or hard-copy Form TCR, completing required attorney certification.

This anonymous whistleblowing process ensures the whistleblower’s identity remains confidential during the SEC investigation and any subsequent enforcement action, while the attorney serves as the sole point of contact with SEC staff.

Attorney Representation Requirements

For an anonymous SEC whistleblower filing, the law requires that the whistleblower must have an attorney represent them to remain eligible for a whistleblower award. The whistleblower’s attorney plays multiple critical roles: verifying the whistleblower’s identity prior to submission, ensuring the whistleblower submission meets all regulatory requirements, managing communications with the Securities and Exchange Commission, and protecting the identity of the whistleblower throughout the process.

The attorney must retain a signed Form TCR in his or her records and produce documents upon request by the SEC. This attorney certification process helps maintain the integrity of anonymous submissions while allowing the federal government to verify that such information comes from credible sources.

Legal counsel experienced in securities violations can also help evaluate whether the whistleblower’s information about possible securities violations meets, among other things, the program’s “original information” standard and advise on the strength of possible violations and strategic reporting options.

How Can Whistleblowers Remain Anonymous?

Those of us at the SEC who played a part in shaping the whistleblower program knew that providing whistleblowers with an avenue to report misconduct anonymously would provide a greater sense of safety and security. To do so, a whistleblower must be represented by an attorney and must provide the attorney a copy of the whistleblower submission signed under the penalty of perjury. The attorney will verify the identity of the whistleblower before any information is submitted to the SEC; serve as an intermediary between the SEC and whistleblower during any investigation and related enforcement action; and, in the case of a successful enforcement action, advocate for the highest potential monetary award.

The attorney-client relationship provides an additional layer of protection beyond anonymity itself. Communications between the whistleblower and their attorney are protected by the attorney-client privilege. The attorney manages all communications with the SEC, ensuring that no identifying information is inadvertently disclosed during the investigation process. This is particularly important during extended investigations that may span multiple years and involve numerous exchanges with SEC staff.

Disclosure Requirements and Award Eligibility

While whistleblowers can submit anonymous tips and remain anonymous throughout the investigation, they must disclose their identity prior to receiving any whistleblower award. The requirement to disclose identity before receiving an award serves important administrative and legal purposes including, among other things: the SEC must verify eligibility, process required tax forms with information like the whistleblower’s social security number or driver’s license, ensure compliance with confidentiality and other program rules, and confirm the individual performed a lawful act in reporting the fraud.

The timing of this disclosure is strategically favorable for whistleblowers. Identity disclosure typically occurs only after a successful enforcement action has concluded and total monetary sanctions have been determined—often years after the initial anonymous submission. By that point, in the vast majority of cases, the misconduct has been publicly addressed through administrative or court proceedings, enforcement actions have been filed, and the whistleblower’s tip has already led to regulatory entities taking action against wrongdoers, reducing many of the risks the whistleblower initially faced, including retaliation.

Once an SEC whistleblower provides this identifying information to the SEC, the Commission is required by law to make every effort to protect this sensitive information.

The SEC’s confidentiality obligations are taken seriously. Under Section 21F(h)(2) of the Securities Exchange Act, the SEC is prohibited from disclosing information that could reasonably be expected to reveal the identity of the whistleblower, except in limited circumstances such as when disclosure is required by law or when the whistleblower consents. Unauthorized disclosure of whistleblower identity can result in serious consequences for the individuals responsible.

Confidentiality Protections and Limitations

The Securities and Exchange Commission is committed to keeping the identity confidential to the fullest extent possible under the law. The agency will not disclose whistleblower identities in response to Freedom of Information Act requests or to news media inquiries. However, whistleblowers should understand that in certain circumstances, the SEC’s ability to protect identity has limits.

In appropriate circumstances, the SEC may be required to disclose a whistleblower’s identity to outside persons or regulatory entities. For example, in an administrative or court proceeding, the Commission may be compelled by court order to produce documents or provide testimony that could reveal who submitted the original whistleblower’s tip. Additionally, when the SEC shares information with other government agencies investigating related action cases, those agencies become subject to similar confidentiality requirements.

The public interest in deterring violations and making awards to whistleblowers must sometimes be balanced against the practical limitations on maintaining absolute anonymity. When the whistleblower’s information involves false or misleading statements in financial statements, insider trading, fraud, or other violations requiring detailed evidence, the enforcement staff may need to reference specific documents or testimony during investigations that could indirectly identify the source.

Maintaining Anonymity Throughout The Process

Anonymous whistleblowers must remain vigilant about protecting their identity at every stage of the process:

During Initial Submission: All documents and information provided to the SEC must be carefully reviewed to remove identifying details such as email signatures, document metadata, unique phrasing or writing style, and references to specific roles or responsibilities that could narrow down the whistleblower’s identity.

During the investigation, As the SEC investigation progresses, the Enforcement Division may request additional information or documents from the whistleblower. Each response must be similarly scrubbed of identifying information. This is where experienced counsel is invaluable in preventing inadvertent disclosure.

During Testimony: If the SEC requests testimony or interviews, the attorney arranges these sessions in a manner that protects the whistleblower’s identity while still providing the Commission with necessary information.

Do you use secure means of communication between prospective whistleblowers and attorneys?

SEC Whistleblower Advocates can communicate with clients and others through secure, encrypted applications such as Signal, Telegram, and WhatsApp.

In addition to encrypted communications, whistleblowers should take precautions when initially reaching out to counsel. This includes using personal devices rather than employer-provided equipment, avoiding employer networks or email systems, and being mindful of when and where initial contact is made. Even before formally retaining an attorney, prospective whistleblowers should protect their confidentiality. To give our clients comfort, our attorneys have sometimes held in neutral locations, like churches.

Confidential Consultations and Independent Analysis

Before filing, potential SEC whistleblowers should seek a confidential consultation with experienced securities law counsel. During this consultation, attorneys can evaluate whether the information constitutes original information about possible securities violations derived from their independent knowledge or independent analysis of publicly available data. They can also assess whether the information would likely lead to a successful enforcement resulting in monetary sanctions collected exceeding $1 million, which would qualify the whistleblower for an award ranging from 10 to 30 percent of the sanctions.

Attorneys can also advise on whether reporting to the SEC directly is appropriate or whether the whistleblower should also consider internal reporting, reporting to other agency whistleblower programs, and/or cooperating with other government agencies. The goal is to ensure the whistleblower’s information reaches appropriate regulatory authorities while maximizing protections against retaliation, preserving award eligibility, and increasing the probability and size of any future whistleblower award.

Can I file an SEC Whistleblower Program tip without legal counsel?

Anyone can report possible securities violations to the SEC directly without hiring a lawyer. However, if a whistleblower wishes to remain anonymous, pursuant to the program rules, they must retain a lawyer.

Beyond the anonymity requirement, legal representation provides significant practical advantages. Experienced SEC whistleblower counsel can help evaluate the strength of the potential case, gather and organize evidence in a way that is most useful to investigators, navigate the complexities of the program rules, and advocate for the whistleblower throughout the investigation and award determination process. While representation is not required for non-anonymous tips, it substantially increases the likelihood of a successful outcome and a larger award.

Is there evidence I should not share with the SEC?

SEC whistleblowers who wish to remain anonymous must carefully eliminate potentially identifying information from all SEC communications and filings. Even if the initial whistleblower submission was anonymous, subsequent disclosures of potentially identifying information may make it difficult or impossible for the SEC Staff to protect a whistleblower’s identity. Several years ago, a whistleblower’s identity was unintentionally revealed when, during an SEC investigation, a company executive was presented with documentation and recognized the whistleblower’s handwriting. These are the kinds of amateur mistakes that we have experience avoiding.

Common identifying information that must be removed or redacted includes:

• Personal metadata in electronic documents (author names, edit histories, file paths)
• Distinctive handwriting or handwritten notes
• Internal company document markings or reference numbers unique to specific departments
• References to specific meetings, projects, or initiatives that only a limited number of people attended
• Unique phrasing, terminology, or communication styles that could identify the source
• Time-stamped communications or documents that reveal when the whistleblower had access to information

Experienced counsel reviews all materials before submission to identify and address these potential disclosure risks.

The Award Application Process for Anonymous Whistleblowers

When the SEC publishes a Notice of Covered Action showing that sanctions collected exceeded $1 million, anonymous whistleblowers have 90 days to submit an award application (Form WB-APP) to the SEC Office of the Whistleblower. The assistance provided by the whistleblower’s information is evaluated to determine the appropriate award percentage within the statutory 10-30% range.

Factors considered in making awards include the significance of the information provided, the assistance provided to the SEC during the investigation, the SEC’s interest in deterring violations and other violations of securities law, and whether the whistleblower reported through appropriate internal compliance channels before filing externally. Even anonymous filers must submit complete award applications within the deadline, as this is a strict requirement under program rules that is rarely waived.

For more information, visit our FAQ page.