What does “mandatory monetary awards” mean under the 2022 changes?

The phrase “mandatory monetary awards” sounds straightforward: if a whistleblower helps the government secure a sufficiently large financial penalty, the whistleblower must receive a share. But the rule is not an automatic payment for making a report. Eligibility, the quality of the information, the outcome of the enforcement action and the amount actually collected all matter.

The change came through the Anti-Money Laundering Whistleblower Improvement Act of 2022, enacted as part of the Consolidated Appropriations Act, 2023. It amended the Bank Secrecy Act (BSA) whistleblower programme, which Congress had established through the Anti-Money Laundering Act of 2020. The reform replaced a much weaker awards framework with a statutory award range and a requirement to pay qualifying awards.

This article explains what “mandatory” means in practice, how the US$1 million sanctions trigger works, and how whistleblower reporting differs from an institution’s suspicious activity reporting obligations. It also outlines the anti-retaliation protections, without suggesting that an award or a safe outcome is guaranteed.

What changed under the 2022 reform?

Before the reform, the BSA programme allowed awards for eligible whistleblowers but capped them at US$150,000. The 2022 legislation removed that cap and established a range tied to monetary sanctions collected in a successful covered enforcement action.

Under the amended law, the Secretary of the Treasury must pay an award to an eligible whistleblower whose original information leads to a successful enforcement action resulting in monetary sanctions exceeding US$1 million. The award must fall between 10 and 30 per cent of the monetary sanctions collected in that action or in qualifying related actions.

That is the core of the phrase mandatory awards: when the statutory conditions are met, the government is required to pay an award within the statutory range. It is not free to decide that no award will be made simply because it prefers not to pay one.

But “mandatory” does not mean that every person who contacts a regulator receives money. Nor does it mean the whistleblower receives 10 per cent automatically. The law still requires the person to meet the programme’s eligibility rules, and the government determines the award percentage within the permitted range.

How the US$1 million sanctions trigger works

The trigger is based on monetary sanctions resulting from a successful enforcement action—not on the size of the suspected misconduct, the amount mentioned in a report, or an initial penalty announced by the government.

In practical terms, a whistleblower should not treat the US$1 million threshold as a simple estimate of potential exposure. The relevant question is whether an enforcement action meets the statutory conditions and produces more than US$1 million in monetary sanctions. The award is calculated by reference to sanctions collected, so an assessed penalty that is never collected may not translate into an award of the same amount.

The BSA framework can cover qualifying actions brought by the Treasury Department and certain other authorities. The programme also allows related actions to be considered in determining an award. The precise treatment depends on the facts and the law governing the action; a person should not assume that every connected case or recovery will count.

Question Practical meaning What triggers the award requirement? A qualifying, successful enforcement action based on the whistleblower’s original information, with monetary sanctions exceeding US$1 million. What is the award base? Monetary sanctions collected in the covered action and, where applicable, qualifying related actions. Is payment automatic when the threshold is crossed? No. The whistleblower must be eligible, the information must satisfy the statutory requirements, and the award must be determined. Is the percentage fixed at 10 per cent? No. The statutory award range is 10 to 30 per cent; the precise percentage is determined under the programme.

What the 10 to 30 per cent statutory award range means

The statutory award range sets the minimum and maximum percentage for a qualifying award. It gives the government room to assess the whistleblower’s contribution while preventing an award from falling below 10 per cent or exceeding 30 per cent of the relevant collected sanctions, subject to the programme’s rules.

The amount within that range may depend on factors such as how significant the information was, how much it helped the authorities, and whether the whistleblower provided ongoing assistance. The government may also consider factors that reduce an award, including a person’s role in the conduct or interference with an investigation. The precise outcome is fact-specific.

For illustration only, if an action produces US$10 million in monetary sanctions that are collected, an award within the statutory range would be between US$1 million and US$3 million. That example is not a prediction: the underlying action must qualify, the individual must be eligible, and the award decision must be made under the applicable rules.

The reform therefore makes the programme more meaningful financially, but it does not create a fixed commission. Nor should potential whistleblowers assume that a large reported loss will result in a comparable government recovery. Investigations can take years, enforcement decisions are uncertain, and sanctions may be reduced, contested or uncollected.

Who may qualify—and what counts as useful information?

The programme is designed for individuals who voluntarily provide original information to the relevant authorities. “Original” generally refers to information derived from the person’s independent knowledge or analysis and not already known to the government, subject to statutory qualifications. The rules contain exclusions and restrictions, including for certain people whose professional roles, conduct or access to information fall within specified categories.

A report must also be more than a general suspicion if it is to assist an investigation. Specific, credible detail can help authorities assess what happened, who was involved, how the conduct worked and where supporting records may be found. A person considering a report should preserve information lawfully and avoid taking documents or accessing systems without authorisation.

Confidentiality and privilege require particular care. For example, the BSA’s suspicious activity report (SAR) rules generally restrict disclosure of a SAR itself and information that would reveal its existence. A financial institution’s employees should not copy, forward or disclose a SAR merely because they are considering a whistleblower submission. The rules governing the underlying facts and the SAR document are not the same; obtaining legal advice can help distinguish them.

Internal compliance channels are not the same as regulator submissions

Financial institutions have their own BSA and anti-money-laundering (AML) obligations. Among other things, they may be required to monitor activity and file SARs with the government when legal criteria are met. That institutional reporting duty belongs to the regulated entity. It is not the same as an individual making a whistleblower submission to a regulator.

An employee may raise concerns through an internal compliance CFTC whistleblower award percentage channel, such as an AML officer, an ethics hotline or a board-level reporting route. That can alert the organisation to a problem and create a record of the concern. But an internal report is not itself a submission to the Treasury Department or another relevant government authority, and it should not be assumed to qualify the employee for a whistleblower award.

Conversely, the BSA whistleblower programme does not generally require a person to report internally first or exhaust internal channels before making an external submission. The right sequence depends on the facts, the risk of evidence being altered or destroyed, confidentiality duties, and the possibility of retaliation. Internal reporting may be useful in some cases; in others, it may create risks or affect timing.

A person weighing the options should consider getting independent legal advice before reporting, particularly where the person has access to SAR-related material, privileged information or confidential business records. Advice can help identify a lawful reporting route and avoid unnecessary disclosure.

Anti-retaliation protection and a federal cause of action

The 2022 changes also strengthened the anti-retaliation framework. The law prohibits covered employers from taking specified adverse actions against a whistleblower because the person provided information to the government under the BSA programme, or engaged in certain protected activities. The precise scope depends on the statutory language and the circumstances.

The protection matters because reporting can carry real workplace risks. Retaliation may take the form of dismissal, demotion, threats, harassment or other adverse treatment. But legal protection is not the same as practical immunity: a person may still face workplace pressure, and a dispute about the reason for an employer’s decision can be difficult to prove.

The statute provides a federal route to challenge retaliation. In general, a whistleblower must first file a complaint with the US Department of Labor within 180 days of the alleged retaliation. If the Department has not issued a final decision within 180 days, and the delay is not due to the whistleblower’s bad faith, the law allows the person to bring an action in federal district court.

Available remedies can include reinstatement, back pay with interest, special damages, and payment of costs and reasonable legal fees. These remedies depend on the claim and the outcome; they are not guaranteed simply because a complaint is filed. Strict deadlines make early legal advice important.

What “mandatory” does—and does not—promise

• It does mean that the government must make an award when the statutory eligibility and enforcement conditions are met.
• It does mean that the award must fall within the 10 to 30 per cent statutory award range, subject to the governing rules.
• It does not mean that every report produces an investigation, a successful action or a payment.
• It does not mean that the whistleblower automatically receives 10 per cent, or that the amount is based on alleged losses rather than sanctions collected.
• It does not remove eligibility restrictions, confidentiality obligations, evidential challenges or retaliation risk.

Practical points before making a report

1. Separate what you know from what you suspect. Record dates, transactions, people and documents that support your account, without embellishment.
2. Do not take or disclose material unlawfully. SARs and other confidential or privileged material require special care.
3. Distinguish internal reporting from an external submission. An internal hotline may not satisfy the requirements for a government whistleblower claim.
4. Think carefully about timing. Delay can affect evidence and legal options; an internal report may also alert people involved. There is no universal best sequence.
5. Get independent advice where possible. A US attorney familiar with the BSA programme can assess eligibility, submission procedures, confidentiality and retaliation deadlines.

The bottom line

The NDAA 2022 reform made the BSA whistleblower programme substantially stronger by replacing a low award cap with mandatory awards in qualifying cases. Where original information leads to a successful covered action with more than US$1 million in monetary sanctions, an eligible whistleblower may receive 10 to 30 per cent of the sanctions collected.

“Mandatory” describes the government’s duty to pay once the legal conditions are satisfied. It does not promise a particular percentage, a successful prosecution or protection from every workplace consequence. Understanding the difference between an institution’s SAR obligations, internal compliance channels and an external regulatory submission is central to making an informed decision.