How Do Whistleblower Attorneys Keep You Anonymous During Filing?

If you report suspected money laundering or other financial misconduct, you may want regulators to hear what you know without immediately learning your identity. Under the federal Anti-Money Laundering (AML) whistleblower program, an attorney can act as an intermediary during the initial reporting process. That can help protect your identity from public disclosure while a report is submitted and reviewed.

But “anonymous” has limits. A lawyer cannot promise that nobody will work out who you are, and anonymity at filing does not necessarily mean anonymity forever. The law generally requires a whistleblower who seeks an award to provide identifying information to the government before an award is paid. What an attorney can do is help control how and when your identity is shared, use secure communication practices, and avoid preventable disclosures.

This guide explains the program, what information may qualify, and how the attorney-as-intermediary process works. It is general information, not legal advice about your situation.

What Is the AML/BSA Whistleblower Program?

The Bank Secrecy Act (BSA) is a federal law requiring financial institutions and certain other businesses to maintain records and meet anti-money-laundering obligations. The U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) administers many BSA requirements. The AML/BSA whistleblower program allows people with original information about certain violations to report it to the government and, if statutory conditions are met, potentially seek an award.

attorney contingency fee

Congress strengthened the program through the Anti-Money Laundering Act of 2020. The National Defense Authorization Act (NDAA) for Fiscal Year 2023, signed on December 23, 2022, further amended the BSA whistleblower provisions. The amendments expanded the framework for monetary awards and protections and authorized a fund for awards. The program is not a promise of payment: eligibility, the government’s use of the information, any monetary sanctions, and other legal requirements all matter.

FinCEN provides program information and reporting resources on its official website, fincen.gov. Because forms, procedures, and guidance can change, check FinCEN’s current whistleblower materials rather than relying on an old copy or a third-party summary.

What Does “Anonymous Filing” Mean?

In this context, anonymity usually means that a person submits information through an attorney without putting their own name on the initial filing. The attorney identifies themselves as counsel and serves as the contact point for regulator communications. The government may be able to ask follow-up questions through the lawyer without immediately receiving the whistleblower’s identity.

This is sometimes called an “anonymous period”: the time between an initial submission made through counsel and any later stage when the whistleblower’s identity must be disclosed. The term describes a practical phase, not a guarantee that anonymity will last for a fixed length of time. Its duration can depend on the investigation, the filing process, eligibility for an award, and the government’s requirements.

What the Attorney as Intermediary Can Do

Submit information in the attorney’s name as counsel. The initial report can identify the attorney as the representative and keep the whistleblower’s name out of the submission, where the process permits.
Receive regulator communications. Questions, requests for clarification, or other regulator communications can generally be routed through the attorney, who can discuss responses with the client.
Review the report for identity clues. A lawyer can look for unnecessary details that could identify the source, such as a unique job title, a narrow reporting line, or a description that names only one person with access.
Explain when identity may have to be disclosed. Counsel can advise about the program’s requirements, including the distinction between an anonymous initial report and providing identity information before an award.
Help preserve a clear record. Counsel can document what was submitted, when it was submitted, and how later communications were handled.

An attorney cannot control every part of an investigation. Regulators may infer a source’s identity from the details, the timing, or the small number of people who knew about an event. The employer may also suspect who reported an issue, even if the government has not confirmed it.

Who May Be Eligible, and What Is “Original Information”?

The program is aimed at people who voluntarily provide original information about covered violations. “Original information” generally means information derived from the person’s independent knowledge or independent analysis, rather than information already known to the government or obtained from certain public sources. The statutory rules contain qualifications and exceptions, so the label is not something a reporter can determine just by calling information “new.”

Information can still be useful if some facts are known but the reporter adds meaningful detail, documents, analysis, or a connection between events that was not previously apparent. For example, a bank employee might know that a customer made repeated cash deposits just below a reporting threshold. The more useful information could be a set of transaction records showing the pattern, an internal escalation timeline, and evidence that a manager directed staff not to review it. Whether that information qualifies depends on best aml whistleblower attorney the facts and legal requirements.

Potential sources may include current or former employees, contractors, customers, or others with firsthand knowledge. Eligibility can be affected by how the information was obtained, the person’s role, whether they participated in the misconduct, and other statutory restrictions. Do not assume that access to internal information automatically makes a person eligible—or that participation automatically rules them out. Get advice before submitting sensitive material.

What Violations May Qualify?

The program concerns violations within the BSA’s scope. Examples may involve failures to meet anti-money-laundering obligations or to maintain required records. The substance of the conduct matters; using a familiar compliance label does not by itself establish a covered violation.

Issue Example of potentially relevant information Important caution Suspicious Activity Reports (SARs) Evidence that a covered institution failed to file a required SAR, filed it late, or used a process that systematically prevented required reporting. SARs are confidential. Do not disclose a SAR or information that would reveal its existence except as authorized by law. Ask counsel how to report underlying facts safely. Structuring Records or instructions showing transactions were broken into smaller amounts to evade applicable reporting requirements, or that an institution knowingly facilitated such conduct. A transaction pattern alone may have an innocent explanation. Context and evidence of intent can matter. Customer Due Diligence (CDD) Evidence of failures in required customer identification, beneficial ownership, or ongoing monitoring processes. Not every policy weakness or missed step is necessarily a whistleblower-program violation. Records and reporting Evidence that required records were not created, retained, or made available as required, or that reporting obligations were evaded. Preserve only materials you are legally entitled to access and share. Do not take records in violation of law or workplace rules without legal advice. Sanctions-related conduct Information about conduct that may overlap with BSA obligations, such as suspicious transactions involving sanctioned persons. Sanctions violations are often handled under separate authorities, including by the Office of Foreign Assets Control (OFAC). A sanctions concern is not automatically a covered BSA whistleblower claim.

How the Filing Process Can Protect Your Identity

Speak privately with a qualified attorney. Look for counsel familiar with whistleblower submissions, AML investigations, and the BSA program. Ask how the attorney handles conflicts, confidentiality, and secure documents.
Build a factual timeline. Note what happened, when, who was involved, what you personally observed, and how you know it. Separate firsthand facts from conclusions or rumors.
Identify supporting evidence carefully. Tell counsel what records exist and where they are. Do not alter, delete, or remove records or access systems you are not authorized to use. A lawyer can advise on what may be provided and how.
Review identity risks before filing. Even without your name, details such as a unique role, a distinctive meeting, or a one-person reporting channel can point to you. Counsel can assess whether details should be explained differently without making the report misleading.
Submit through the appropriate channel. The attorney can prepare and submit the report under the applicable process, identify themselves as counsel, and provide contact details for follow-up.
Route follow-up through counsel. If regulators request more information, the attorney can discuss the request with you and help prepare a truthful, consistent response.
Address identity disclosure if needed. If pursuing an award, be prepared for the program’s identity-verification requirements. Counsel can explain when disclosure is required and to whom.

What Anonymity Does Not Protect You From

An attorney-mediated filing can reduce direct disclosure, but it does not make a report untraceable. Documents may contain author names, timestamps, comments, or other metadata. A description may reveal who had access to an event. Regulators may need additional facts to investigate, and a whistleblower seeking an award may have to provide identifying information before payment.

It also does not prevent an employer from independently suspecting you or from taking action for reasons it claims are unrelated to a report. Federal law includes anti-retaliation protections for certain whistleblowers, but coverage and remedies depend on the facts and applicable law. If you experience a demotion, discipline, threats, or termination after raising concerns, record the timeline and consult counsel promptly. Do not assume every workplace dispute is covered by the same protection.

SAR Confidentiality: A Critical Warning

A Suspicious Activity Report is not simply an ordinary internal memo. Federal rules generally protect the SAR itself and information that would reveal its existence. A whistleblower report about possible SAR failures is different from handing over a SAR. Do not attach, forward, photograph, or describe a SAR in a way that could violate confidentiality requirements without first getting legal advice.

You can often explain the underlying conduct in factual terms—such as the transactions, internal controls, or instructions you observed—without disclosing a confidential SAR. The right approach depends on the documents and your role. FinCEN’s website is a useful starting point for official program information, but it is not a substitute for advice about what you may lawfully share.

What to Do Next

Write a private, dated timeline based on your own observations.
Keep a list of potentially relevant records, but do not take or copy materials without advice.
Do not disclose a SAR or information that could reveal one unless counsel confirms a lawful path.
Contact a whistleblower attorney using a personal device and account—not your employer’s laptop, email, or network.
Ask counsel about anonymous filing, the anonymous period, award eligibility, identity disclosure, and secure regulator communications.
Check the current whistleblower guidance at fincen.gov.

An attorney can serve as an important intermediary between a whistleblower and regulators, especially during the initial filing and follow-up. The practical goal is not to promise perfect secrecy; it is to make a careful, lawful report while limiting unnecessary exposure and understanding when identity disclosure may become necessary.