Who runs the BSA whistleblower programme: FinCEN or DOJ?

Short answer: the US Treasury Department administers the Bank Secrecy Act (BSA) whistleblower programme, with the Financial Crimes Enforcement Network (FinCEN) handling its day-to-day operation. The Department of Justice (DOJ) is not the programme’s administrator. But DOJ may investigate or prosecute conduct reported by a whistleblower, and its cases can contribute to an award.

That division matters. A person deciding whether to report https://bizzmarkblog.com/do-whistleblower-awards-pay-out-on-imposed-sanctions-or-collected-sanctions/ suspected money laundering or another BSA violation needs to distinguish the office that receives and administers a whistleblower claim from the agencies that investigate and enforce the law. They also need to distinguish an external submission to a regulator from a report made through their employer’s internal compliance channels.

Who does what?

The BSA is the principal US law requiring financial institutions and other covered businesses to keep specified records and report certain financial activity. Its requirements include suspicious activity reporting. A Suspicious Activity Report (SAR) is a confidential report submitted to the government when a covered institution detects activity that meets applicable reporting criteria. The BSA whistleblower programme concerns information about possible violations; it does not replace an institution’s SAR obligations.

Body Role in the whistleblower framework Treasury Department Administers the statutory programme and determines whether an eligible whistleblower will receive an award. FinCEN A Treasury bureau that operates the programme and has important BSA regulatory and civil enforcement responsibilities. DOJ Investigates and prosecutes federal crimes, including relevant criminal BSA violations, and may bring related enforcement actions.

So, calling FinCEN a FinCEN enforcement agency is broadly understandable, but incomplete if it suggests FinCEN is the only agency that can act on a BSA disclosure. FinCEN has regulatory and civil enforcement functions. DOJ has a separate role in criminal enforcement and may pursue related cases. Other agencies may also have relevant responsibilities depending on the conduct and the institution involved.

What changed in the 2022 overhaul?

The major statutory changes came through the Anti-Money Laundering Whistleblower Improvement Act, enacted as part of the National Defense Authorization Act for Fiscal Year 2023 in December 2022. The changes strengthened the BSA whistleblower framework by providing for awards, setting a monetary threshold for qualifying actions, and creating an express anti-retaliation cause of action.

Before the changes, the BSA did not offer the same clear, substantial award structure now set out in law. The revised programme was intended to make reporting more meaningful, particularly where a whistleblower provides original information that helps the government bring a significant enforcement action.

The Treasury Department, acting through FinCEN, administers this award framework. That does not mean FinCEN must bring every case itself. Information may lead to action by DOJ or another relevant authority, and an enforcement action brought by another agency can potentially be connected to a whistleblower’s submission under the statute.

When can an award be paid?

The statute provides for an award where the required conditions are met. In general terms, the information must be original and sufficiently useful to contribute to a successful enforcement action involving a BSA violation or another covered violation. The action must result in monetary sanctions exceeding $1 million.

The $1 million threshold is important, but it is not a promise that a particular report will lead to an award. It is a statutory threshold for the relevant enforcement action or related actions. The government must still establish a qualifying violation and obtain the required result, and the whistleblower must satisfy the programme’s eligibility requirements. A report that prompts an investigation, but does not lead to a qualifying monetary outcome, may not produce an award under this framework.

“Original information” generally means information derived from the whistleblower’s independent knowledge or analysis and not already known to the government, subject to the statute’s detailed rules and exceptions. It is not enough simply to repeat a public allegation. The value of the information and its contribution to the government’s action matter.

The law also sets limits and exclusions. For example, some people whose work gives them access to information—such as certain compliance, audit, or legal personnel—may face restrictions on using that information for an award, subject to exceptions. Eligibility is fact-specific. A person should not assume that their job title either automatically bars them or guarantees eligibility.

What does the 10 to 30 per cent range mean?

Where the statutory conditions are met, the Treasury Secretary is to pay an award of between 10 and 30 per cent of the monetary sanctions collected in the covered action or related actions. The statute describes the award as mandatory for an eligible whistleblower in a qualifying case, but the amount within the range is not automatic.

The percentage is determined by the Secretary, taking account of factors that include the significance of the information, the assistance provided, and the programme’s applicable rules. The figure is calculated by reference to sanctions collected—not simply the headline amount announced in a settlement or judgment. If an announced penalty is not collected, that can affect the amount available as the basis for an award.

For illustration, if a qualifying action collects $10 million in monetary sanctions, the statutory range would be $1 million to $3 million, subject to the award determination and other rules. This is not a prediction of what any individual will receive. The actual outcome depends on the facts, the government’s collection, eligibility and the value of the information.

The word “mandatory” therefore needs careful handling. It describes the government’s obligation to pay a qualifying award within the statutory framework; it does not mean that every person who submits information receives money, or that the whistleblower chooses the percentage.

FinCEN reporting and DOJ enforcement are different steps

A whistleblower’s external submission is not the same thing as an internal report to an employer. An employee might raise a concern with a supervisor, an ethics hotline, the compliance team, or the board. Those channels can help an organisation investigate and address a problem, and may be important for its own BSA controls. But an internal report is not, by itself, a submission to the Treasury Department under the whistleblower programme.

Conversely, the BSA whistleblower statute does not generally require a person to report internally before making an external submission. Someone considering an external report should check the current FinCEN process and the statutory requirements rather than assume that an internal escalation is a prerequisite. Internal reporting can also affect how quickly an employer learns of the concern, so a person should consider the practical and legal risks before choosing a sequence.

These routes serve different purposes:

• Internal channels send concerns to the organisation, which may investigate, remediate, or make required regulatory reports.
• External submissions provide information to the government and may support an investigation or enforcement action.
• SAR obligations remain the institution’s legal responsibility. An employee’s report does not transfer that responsibility to the employee or replace a required SAR.

A whistleblower should also avoid disclosing a SAR or information that would reveal its existence unless the disclosure is legally authorised. SAR confidentiality rules are separate from the whistleblower award provisions and can create serious issues if handled carelessly. Getting advice from a lawyer familiar with BSA reporting before sharing sensitive records may help clarify what can lawfully be submitted and how.

Anti-retaliation protection and a federal claim

The 2022 changes added an express federal anti-retaliation cause of action for people who provide information under the statutory programme or engage in protected activity described by the law. Retaliation may include discharge, demotion, suspension, threats, harassment, or other discrimination connected Discover more here to protected reporting.

This is a significant protection, but it is not a guarantee against workplace consequences. A person may still face pressure, exclusion, reputational harm, or a dispute over the employer’s stated reason for an employment decision. Timing, documentation, and the precise nature of the disclosure can become important if retaliation is alleged.

The statute provides a process for bringing a retaliation complaint. In general, a complainant must first file with the Secretary of Labor within 180 days of the alleged violation. If the Department of Labor has not issued a final decision within 180 days after filing, the complainant may be able to bring an action in federal district court, subject to the statute’s conditions. The law provides remedies that can include reinstatement, double back pay with interest, litigation costs, expert fees, and reasonable attorneys’ fees.

Deadlines and procedural details can determine whether a claim proceeds. Anyone who believes they have faced retaliation should promptly seek advice from a qualified US employment or whistleblower lawyer. Waiting for an internal investigation to finish may put a statutory deadline at risk.

Practical points before making a report

A potential whistleblower should separate what they know first-hand from what they have heard, preserve relevant material lawfully, and avoid taking records they are not authorised to access. They should not assume that copying documents to a personal account is protected simply because they believe misconduct occurred.

1. Identify the conduct. Note the suspected BSA or related violation, the people or business units involved, and the period in which it occurred.
2. Keep a factual record. Record dates, events, and the source of each piece of information. Avoid speculation or exaggeration.
3. Understand confidentiality limits. SARs and information that could identify a SAR may be subject to strict protections.
4. Consider retaliation risk and timing. Think through who will learn of the report, whether internal channels are appropriate, and whether any legal deadlines apply.
5. Get independent legal advice. A lawyer can assess eligibility, submission requirements, confidentiality, employment protections, and whether a particular document can be shared.

The bottom line

The Treasury Department runs the BSA whistleblower programme, and FinCEN administers it. DOJ does not run the programme, but its investigations and prosecutions can form part of the enforcement landscape in which whistleblower information is used.

The 2022 overhaul created a stronger award framework: qualifying whistleblowers may be entitled to 10 to 30 per cent of sanctions collected when the statutory conditions—including the $1 million threshold—are met. It also added an express federal anti-retaliation cause of action. Those protections are meaningful, but eligibility, confidentiality, evidence handling, award calculations, and deadlines all require care. A submission to the government is not the same as an internal compliance report, and neither relieves a covered institution of its own SAR duties.