What is the simplest checklist for a potential AML whistleblower before filing a tip?

2026-11-05T11:39:44Z

Jose.hill: Created page with "<html><p> If you suspect a bank, payments firm or other business is violating US anti-money laundering (AML) law, pausing to organise what you know can make a tip clearer and safer. It can also help you decide whether to report internally, contact a regulator, or seek legal advice first.</p> <p> The US Bank Secrecy Act (BSA) whistleblower programme was substantially overhauled in 2022. It can provide awards and protection against retaliation, but neither is automatic. A..."

<html><p> If you suspect a bank, payments firm or other business is violating US anti-money laundering (AML) law, pausing to organise what you know can make a tip clearer and safer. It can also help you decide whether to report internally, contact a regulator, or seek legal advice first.</p> <p> The US Bank Secrecy Act (BSA) whistleblower programme was substantially overhauled in 2022. It can provide awards and protection against retaliation, but neither is automatic. A tip does not guarantee an investigation, a financial award or a successful retaliation claim. The details of the information, the sanctions collected and the circumstances of your disclosure matter.</p> <p> This checklist is general information, not legal advice. The programme’s rules and your position may depend on the facts. Consider speaking with a lawyer experienced in whistleblower matters before taking action, especially if you work in compliance or have access to confidential records.</p> <h2> The short checklist</h2> <ol> <li> <strong> Identify the suspected violation.</strong> What conduct may have breached the BSA or another relevant law, who was involved, and when?</li> <li> <strong> Run an original information check.</strong> Is what you can provide based on your own knowledge or independent analysis, rather than simply repeating public allegations?</li> <li> <strong> Make a documentation checklist.</strong> Record dates, people, systems, transactions and the location of relevant records. Do not take or disclose suspicious activity reports (SARs) or other material you are not authorised to share.</li> <li> <strong> Compare reporting routes.</strong> Understand the difference between your employer’s internal compliance channels and an external submission to a regulator. Internal reporting is not necessarily a prerequisite to an external tip.</li> <li> <strong> Consider timing and safety.</strong> Preserve your own lawful notes, assess retaliation risks and get advice before alerting people who may destroy evidence or expose your identity.</li> <li> <strong> Understand the award threshold.</strong> The BSA programme provides for awards where qualifying monetary sanctions exceed $1 million, subject to statutory conditions and the regulator’s assessment.</li> <li> <strong> Keep a careful record.</strong> Note what you submitted, when, through which channel and any response. Protect your identity and confidential information.</li> </ol> <h2> What changed in 2022?</h2> <p> The Anti-Money Laundering Act of 2020 created a BSA whistleblower framework. Congress then strengthened it through the 2022 whistleblower legislation, including changes intended to make awards more meaningful and retaliation protections more effective.</p> <p> In broad terms, the programme can reward an individual who voluntarily provides original information that leads to successful enforcement of a BSA violation. The relevant agencies include the US Department of the Treasury and the Department of Justice. The programme is not a general reward for reporting poor management, weak controls or conduct that feels suspicious: the information needs to relate to a covered legal violation and meet the programme’s requirements.</p> <p> The 2022 changes established a mandatory award structure when the statutory conditions are met. That does not mean every person who sends a tip receives money. There must be a qualifying enforcement outcome and more than $1 million in monetary sanctions collected. Eligibility, the contribution of the information and the amount of any award remain important.</p> <h2> Do an original information check</h2> <p> “Original information” is a central question. Before filing, write down what you know from first-hand experience and what you worked out through your own analysis. Separate that from material you heard from others, saw in the press or found in public records.</p><p> <iframe src="https://www.youtube.com/embed/ju2I9J31SQg" width="560" height="315" style="border: none;" allowfullscreen="" ></iframe></p> <h3> Ask yourself these questions</h3> <ul> <li> Did I observe the conduct, participate in relevant work, or review records in the ordinary course of my duties?</li> <li> Can I explain how I reached my conclusion, rather than simply stating that a firm “has weak AML controls”?</li> <li> Is the information already known to the relevant authorities? If so, can I add significant detail or independent analysis?</li> <li> Is my account specific enough to be checked: dates, products, teams, transaction patterns, decisions or control failures?</li> </ul> <p> A useful tip distinguishes evidence from inference. For example, “I saw a review queue repeatedly closed without the required escalation between March and June” is more useful than “the company ignores money laundering”. Explain what you observed and why you believe it matters, while avoiding claims you cannot support.</p><p> <img src="https://images.pexels.com/photos/38933571/pexels-photo-38933571.jpeg?auto=compress&cs=tinysrgb&h=650&w=940" style="max-width:500px;height:auto;" ></img></p> <p> Do not assume that information becomes ineligible simply because some related facts are public. The rules can treat public information and independent analysis differently. A lawyer can help assess whether your contribution is sufficiently original and whether any exclusions apply.</p> <h2> Build a documentation checklist without mishandling records</h2> <p> Good preparation is not the same as copying files. Make a factual chronology and identify where relevant records are held. Do not access systems you are not authorised to use, alter records, forward confidential material to a personal account or remove documents in breach of law or policy.</p> <h3> Record these details</h3> <ul> <li> <strong> People and roles:</strong> who raised, approved, escalated or dismissed the concern.</li> <li> <strong> Dates and sequence:</strong> when the conduct occurred, when you reported it and what happened next.</li> <li> <strong> Transactions or activity:</strong> the relevant patterns, products, customers or processes, described as precisely as you can.</li> <li> <strong> Control context:</strong> what checks, monitoring, escalation or remediation should have happened, if you know.</li> <li> <strong> Evidence locations:</strong> system names, case references, team folders or record types, without taking unauthorised copies.</li> <li> <strong> Prior reports:</strong> whether you raised the matter internally or with an authority, when, and any response received.</li> </ul> <p> <strong> Take particular care with Suspicious Activity Reports (SARs).</strong> Financial institutions have legal duties concerning SARs, including restrictions on disclosing a SAR or information that would reveal its existence. A whistleblower should not assume that sending a SAR, or details that identify one, to an outside party is permitted. Do not attach a SAR to a tip unless qualified counsel has advised that the disclosure is lawful and appropriate. You can usually describe the underlying conduct in your own words without revealing protected SAR material.</p><p> <img src="https://images.pexels.com/photos/4792288/pexels-photo-4792288.jpeg?auto=compress&cs=tinysrgb&h=650&w=940" style="max-width:500px;height:auto;" ></img></p> <h2> Internal compliance channels and external submissions</h2> <p> An internal report may be appropriate, especially where the organisation can stop ongoing harm or correct a control failure. Channels may include a line manager, compliance, an ethics hotline, legal or an audit committee. Check the firm’s policy, but do not assume that an internal process is independent or that it will preserve your anonymity.</p> <p> An <a href="https://www.lawyer-monthly.com/2026/10/bsa-whistleblower-program-policies-for-2027/">lawyer-monthly.com</a> external submission goes to a regulator or other authority, rather than the employer. Depending on the facts, a person may consider contacting the Treasury’s Financial Crimes Enforcement Network (FinCEN), the Department of Justice or another relevant agency. The right recipient depends on the suspected violation and the programme’s current procedures.</p> Route What it may offer What to consider Internal compliance channel Potentially faster access to the organisation’s investigation and remediation process. Confidentiality may be limited; the employer may not act; retaliation risk may arise. External regulator or authority Independent assessment and, where eligible, access to a statutory whistleblower process. Submission rules, confidentiality and eligibility vary. A tip does not guarantee enforcement or an award. <p> For the BSA award programme, internal reporting is not generally a condition that must be completed before an external submission. But internal reporting can affect the evidence, timing and practical risks in a particular case. Do not delay an external report merely because you expect an internal process to succeed; equally, do not make a rushed disclosure without considering confidentiality, safety and legal obligations.</p> <h2> What does the $1 million sanctions trigger mean?</h2> <p> The BSA programme’s award framework applies where the relevant monetary sanctions collected exceed $1 million and the other statutory requirements are met. The threshold concerns sanctions collected in a qualifying enforcement matter, not the amount of suspected suspicious activity, the company’s revenue or a whistleblower’s estimate of potential penalties.</p> <p> Where the conditions are satisfied, the statutory award range is generally 10 to 30 per cent of the monetary sanctions collected. The award is not 10 to 30 per cent of every dollar involved in the alleged conduct, and it is not a guaranteed payment for filing a tip.</p> <p> The amount within the range depends on factors such as the significance of the information and the whistleblower’s assistance. A strong, timely contribution may help an investigation, but the authorities decide whether the legal conditions are met and what award is appropriate. A tip that does not lead to a qualifying enforcement action, or where sanctions collected do not cross the threshold, may produce no award under this provision.</p> <h2> Retaliation: protections and practical precautions</h2> <p> The BSA provides anti-retaliation protections for qualifying whistleblowers. The 2022 changes also strengthened the route for bringing a federal retaliation claim. In general terms, a worker who faces prohibited retaliation for protected whistleblowing may have a cause of action in federal court and may seek available legal remedies.</p> <p> Protection is not a promise that retaliation will not happen, nor does every workplace dispute qualify. The facts, the type of disclosure, the person’s employment status and compliance with procedural requirements can matter. Strict deadlines may apply to a retaliation claim, so obtain legal advice promptly if you are dismissed, demoted, threatened, harassed or otherwise penalised after reporting.</p> <p> Before reporting, consider who can access your work devices, email and records. Keep a contemporaneous log of relevant events using a lawful, secure method. Do not secretly record conversations unless you have checked the applicable law. If you fear immediate harm to your job or personal safety, speak with a lawyer before discussing your plans with colleagues.</p> <h2> Timing considerations before you file</h2> <ul> <li> <strong> Do not wait for a perfect case.</strong> Authorities can investigate; your role is to provide a clear, truthful account and identify useful leads.</li> <li> <strong> Do not rush the facts.</strong> Check dates, names and your own recollection. Mark uncertain points as uncertain.</li> <li> <strong> Think about ongoing conduct.</strong> If activity is continuing or records may soon be lost, explain the urgency through an appropriate channel.</li> <li> <strong> Get advice before tipping off the subject.</strong> An internal report or confrontation may affect evidence and expose your identity.</li> <li> <strong> Act quickly if retaliation occurs.</strong> A whistleblower claim can have procedural deadlines. Do not assume that an internal grievance pauses them.</li> </ul> <h2> A final pre-filing check</h2> <p> Before submitting, read your account once more and ask: Is it factual? Is it specific? Have I separated what I know from what I infer? Have I avoided protected SAR information and unauthorised records? Have I considered whether an internal channel, an external authority or both are appropriate? Have I thought about retaliation and timing?</p> <p> A careful tip is not necessarily a long one. A concise chronology, a clear explanation of the suspected BSA violation and reliable leads to supporting evidence can be more useful than a large bundle of unexplained files. The safest next step for a potential whistleblower will depend on the facts, so consider confidential legal advice before filing.</p></html>

Wiki Spirit - User contributions [en]

What is the simplest checklist for a potential AML whistleblower before filing a tip?