What If My Employer Processed Transactions for Sanctioned Entities?

Discovering that your employer may have processed transactions for a sanctioned person, company, or country can raise serious questions: Was the transaction authorized? Did screening fail? Should you report it—and how can you do that without mishandling confidential information or putting yourself at risk?

The answers depend on the facts. A transaction involving a sanctioned party is not automatically proof that your employer broke the law: licenses, exceptions, ownership rules, and the exact transaction details can matter. But a pattern of missed alerts, deliberate workarounds, or inaccurate records may warrant escalation. U.S. law also provides whistleblower channels for certain financial-crime violations, including violations of the Bank Secrecy Act (BSA). This guide explains the main issues and practical next steps.

Start by separating sanctions concerns from AML concerns

Sanctions screening is the process of checking customers, counterparties, and transactions against applicable sanctions restrictions. In the United States, the Office of Foreign Assets Control (OFAC), part of the Department of the Treasury, administers many economic sanctions programs. A potential match needs careful review: similar names, indirect ownership, licenses, and the type of property or service involved can all affect the analysis.

Anti-money laundering (AML) controls serve a related but different purpose. They are intended to identify and report certain suspicious activity, maintain required records, and assess customer and transaction risk. A sanctions concern may overlap with AML issues—for example, if a customer uses shell companies to obscure a blocked party’s involvement—but a possible sanctions violation is not automatically a BSA violation.

That distinction matters when considering the AML/BSA whistleblower program. It is designed for information about covered violations of the BSA and related requirements. Do not assume that every possible sanctions violation qualifies for an award through that program. The applicable reporting authority and legal framework depend on the conduct.

What is the AML/BSA whistleblower program?

The BSA requires covered financial institutions to maintain certain AML controls, keep records, and report specified suspicious activity to the government. A Suspicious Activity Report (SAR) is a confidential report that a financial institution files with the Financial Crimes Enforcement Network (FinCEN) when required by law. FinCEN administers the BSA and operates the whistleblower program for eligible reports of covered violations.

The program can provide a financial award to qualifying whistleblowers whose original information leads to successful enforcement action and monetary sanctions. Under the statute, an award may generally be 10% to 30% of monetary sanctions collected in a qualifying action involving more than $1 million in sanctions. An award is not automatic: eligibility, the quality of the information, the outcome of the enforcement action, and statutory requirements all matter.

The program also provides anti-retaliation protections in specified circumstances. Those protections do not mean every workplace dispute is covered or that retaliation claims are simple to resolve. A person considering a report should consult a lawyer experienced in whistleblower matters to understand the relevant rules and preserve deadlines.

Legal origin and timeline

Congress created BSA whistleblower incentives in the Anti-Money Laundering Act of 2020, part of the National Defense Authorization Act for Fiscal Year 2021. The program was intended to encourage people with meaningful information about financial-crime violations to report it.

On December 23, 2022, Congress enacted the National Defense Authorization Act for Fiscal Year 2023. It included changes to the BSA whistleblower framework, addressing issues such as awards and protections. The program is therefore rooted in federal law, but its procedures and application depend on the statute and current FinCEN guidance. Check FinCEN’s website for current program information rather than relying on an old article or a company policy summary.

These BSA provisions should not be confused with every other federal whistleblower program. A report about sanctions, securities fraud, tax issues, or another type of misconduct may fall under a different agency or legal framework. Some facts may support more than one kind of report, but that is a question for qualified counsel.

Who may be eligible—and what counts as “original information”?

Eligibility is fact-specific. People who may have relevant information include current or former employees, contractors, compliance staff, auditors, and others who learned about potential violations through their work or other sources. An employer’s job title does not, by itself, determine whether someone can report. However, statutory exclusions and limitations may apply to certain people or circumstances.

“Original information” generally means information derived from a person’s independent knowledge or analysis that is not already known to the government from another source, subject to the statute’s detailed rules. It is not simply a conclusion such as “our screening is weak.” Useful information may include the specific transactions, dates, internal control failures, instructions to suppress alerts, or records that help investigators understand what happened.

For example, an employee might have observed repeated payments routed through an intermediary after sanctions-screening alerts were cleared without a documented reason. That observation could be more useful than a general suspicion—but it still needs to be reported lawfully and accurately. Do not exaggerate, speculate about people’s motives, or treat a name match as proof of a violation.

What kinds of conduct may involve the BSA?

Depending on the facts, potential BSA issues may involve failures in reporting, recordkeeping, customer due diligence, or controls designed to detect suspicious activity. The examples below are not legal conclusions. A particular incident may involve a technical error, a permitted transaction, a compliance failure, or intentional misconduct; the details matter.

Area Example of a possible concern Why the details matter SARs and AML reporting Potentially suspicious activity is repeatedly ignored or required reports are not filed. Reporting duties depend on the institution, activity, applicable thresholds, and facts. Employees generally should not file or disclose an employer’s SAR themselves. Structuring Transactions are divided or arranged to evade reporting or recordkeeping requirements. Multiple transactions are not automatically structuring; intent and circumstances are important. Customer due diligence (CDD) Required customer information or beneficial-ownership procedures appear to be bypassed or falsified. Requirements vary by institution and situation. A missing document alone does not establish a violation. Records and controls Transaction records are altered, required records are not maintained, or alerts are disabled without a proper basis. Relevant records can help establish what the institution knew, when it knew it, and how it responded. Sanctions-related activity A possible sanctions-screening alert is repeatedly overridden or a transaction is routed to conceal a restricted party. Sanctions rules may arise under authorities separate from the BSA. A lawyer can help identify the right reporting route.

What to do if you suspect transactions involved sanctioned entities

Separate what you know from what you suspect. Write down, in your own words, the dates, transaction references, alert outcomes, and instructions you personally observed. Identify what you learned firsthand and what came from someone else. Avoid making accusations you cannot support.
Use appropriate internal channels if safe and suitable. Your organization may have an AML officer, sanctions compliance team, ethics hotline, or designated escalation process. Follow applicable procedures, but consider getting independent legal advice first if you fear retaliation, suspect senior management involvement, or are unsure how to handle confidential material.
Do not remove or expose protected information. Do not email customer records to a personal account, download files you are not authorized to access, or take documents from work systems. SARs and information that would reveal a SAR’s existence are subject to strict confidentiality rules. Ask counsel how to describe your observations and what information may lawfully be shared.
Keep a careful, lawful record of your own actions. Note when you raised a concern, whom you contacted, and what response you received. Do not secretly record conversations unless you have first obtained legal advice about the law where you are located and your workplace rules.
Consider the right government channel. FinCEN’s website, fincen.gov, provides information about BSA requirements and the whistleblower program. A sanctions concern may also require a separate reporting path. An attorney can help assess where the facts fit and whether a formal submission is appropriate.
Get advice before making public disclosures. Posting allegations online, contacting customers, or sharing internal documents with the media can create legal and employment risks and may compromise an investigation. Confidential reporting channels and legal counsel are generally safer starting points.

openclassactions.com

Important limits around SARs and AML reporting

Employees sometimes assume they should personally prepare or transmit a SAR when they see suspicious activity. In most cases, SAR filing is the responsibility of the financial institution under its procedures and legal obligations. The SAR itself—and information that would reveal whether one was filed—must be handled carefully. A whistleblower can report suspected misconduct through an appropriate channel without publicly disclosing a SAR or its contents.

Likewise, not every sanctions alert should result in a blocked transaction or government report. A possible match may be resolved after review, and some transactions may be authorized. The concern becomes more serious when the institution appears to ignore required controls, conceal a party’s identity, falsify records, or repeatedly override alerts without a defensible basis.

What not to expect from the whistleblower program

A report does not guarantee an investigation, an enforcement action, protection from every workplace consequence, or a monetary award. Awards depend on legal criteria and successful enforcement with qualifying monetary sanctions. The government decides whether and how to act; the whistleblower does not control that process.

Nor does the existence of a whistleblower program make it lawful to take confidential files or violate access restrictions. Preserving evidence matters, but so does preserving it appropriately. If you are asked to destroy records, alter a report, or mislead investigators, seek prompt legal advice and avoid taking steps that could worsen your situation.

Quick checklist: what to do next

Record the specific facts you personally observed, including dates and transaction references.
Distinguish a possible sanctions-screening issue from a potential BSA or AML violation.
Do not copy, remove, or disclose SARs or customer information without legal guidance.
Review FinCEN’s current information at fincen.gov.
Speak with an independent whistleblower attorney before making a sensitive external report or public disclosure.

The bottom line

If your employer may have processed transactions for sanctioned entities, focus on the evidence and the legal distinction between sanctions rules and BSA obligations. A screening failure may be a serious compliance concern, but it is not automatically proof of a violation. The AML/BSA whistleblower program may be relevant when original information points to a covered BSA violation; a sanctions-only issue may require a different route. Handle records carefully, avoid unauthorized disclosure, and get advice tailored to the facts before deciding what to do.

This article is general information, not legal advice. The applicable rules and reporting options depend on the facts and current law.