Do I Need a Lawyer to File an AML/BSA Whistleblower Report?

No. An attorney is not required to submit information about a possible violation of the Bank Secrecy Act (BSA) or related anti-money-laundering (AML) laws to the Financial Crimes Enforcement Network (FinCEN). But legal advice can be useful when you are deciding what information to share, how to protect confidential material, whether you may qualify for an award, and how to handle possible retaliation or workplace restrictions.

This is an important distinction: filing a whistleblower submission is not the same as filing a Suspicious Activity Report (SAR). A SAR is a confidential report that certain financial institutions must file with FinCEN. A whistleblower provides information to https://bizzmarkblog.com/what-counts-as-original-information-for-an-aml-whistleblower/ the government about possible violations. You generally should not take, share, or disclose a SAR—or reveal whether one was filed—without authorization. You may be able to report the underlying conduct without disclosing SAR information.

This guide explains the AML/BSA whistleblower program, who may qualify, what “original information” means, and when an attorney may offer practical advantages. Program rules and submission procedures can change, so check the current information on FinCEN.gov before taking action.

What Is the AML/BSA Whistleblower Program?

The AML/BSA whistleblower program is a federal program for individuals who voluntarily provide original information about certain violations of the BSA and related laws. FinCEN is the Treasury bureau responsible for administering key aspects of the program and receiving whistleblower information. Information may also be relevant to investigations or enforcement actions by other government agencies.

The law provides for possible monetary awards when qualifying information leads to a successful enforcement action resulting in more than $1 million in monetary sanctions. The statutory award range is generally 10% to 30% of monetary sanctions collected in qualifying actions. An award is not guaranteed: the government determines whether the information qualifies, whether it contributed to an action, and whether an award is payable.

The program is not a general complaint line for every financial dispute. It is aimed at information about potential violations of AML and financial-transparency laws. The facts, the source of the information, when and how it is submitted, and whether it helps lead to an enforcement action can all matter.

Legal Origin and Timeline

Congress established the AML/BSA whistleblower incentives in the Anti-Money Laundering Act of 2020, which was enacted as part of the National Defense Authorization Act for Fiscal Year 2021. The program’s statutory framework was later amended by the Anti-Money Laundering Whistleblower Improvement Act, enacted on December 23, 2022, as part of the National Defense Authorization Act for Fiscal Year 2023.

The December 2022 legislation expanded and clarified aspects of the framework, including the award structure and protections associated with whistleblower activity. The program is distinct from other federal whistleblower programs, such as those administered by the Securities and Exchange Commission. Do not assume that another agency’s forms, deadlines, confidentiality rules, or award procedures apply here.

FinCEN’s website is the practical starting point for current instructions, forms, and program updates. Read the latest guidance carefully; do not rely only on an old article, a workplace rumor, or another agency’s process.

Who May Be Eligible?

In general, an individual—not only a current employee—may provide information. Depending on the facts, potential sources may include current or former employees, contractors, consultants, or people outside the institution who learned about suspected misconduct. The program’s rules and exclusions can affect eligibility, so a person’s role, how they obtained the information, and any participation in the conduct should be reviewed individually.

People sometimes assume they must work for a bank or other financial institution to report a BSA issue. That is not necessarily so. The key question is whether the person can provide information that meets the program’s requirements and concerns a potentially covered violation.

What Does “Original Information” Mean?

“Original information” generally refers to information based on an individual’s independent knowledge or independent analysis that is not already known to the government from a disqualifying source. Simply repeating a public news story or passing along a rumor may not be enough. Information may still be valuable when it connects records, explains how a control failure worked, or identifies conduct the government has not already uncovered.

For example, a bank employee might know that a group of customer accounts repeatedly received transfers just below an internal review threshold. The employee’s firsthand knowledge of how the transactions were processed, which alerts were suppressed, and who directed the practice may add information beyond a public description of the bank’s AML controls.

Originality is not the same as personally witnessing every event. A person may have relevant knowledge from work records, meetings, data, or an analysis of transactions. But the way that information was obtained—and whether sharing it would violate a legal restriction—still matters. An attorney can help distinguish a useful factual account from protected or improperly obtained material.

What Conduct May Qualify?

The program may concern a range of BSA or related violations. The following examples are not exhaustive, and a control weakness by itself does not necessarily establish a legal violation.

Issue Example of potentially relevant conduct Important caution SARs Knowingly failing to report suspicious activity when required, or interfering with a required reporting process. SARs are confidential. Do not disclose a SAR or confirm that one exists; report the underlying facts instead. Structuring Breaking up cash transactions to evade reporting or recordkeeping requirements, or knowingly helping others do so. A transaction pattern can have innocent explanations. Explain what you observed and avoid overstating conclusions. Customer due diligence (CDD) Misrepresenting or bypassing required customer-identification, beneficial-ownership, or risk-review steps. Not every incomplete file is a violation. Relevant details may include what was required, what was omitted, and who knew. Records and controls Falsifying, destroying, or concealing required records, or deliberately evading BSA recordkeeping obligations. Preserve information lawfully; do not alter, remove, or access records outside your authorization. Sanctions-related conduct Potentially related conduct involving transactions designed to evade sanctions or conceal the parties to a transaction. Sanctions violations may involve separate authorities and laws. FinCEN or another agency may be relevant depending on the facts.

Is an Attorney Required?

No. Attorney not required means you can make a submission without hiring counsel. It does not mean that filing is risk-free or that a lawyer cannot help. A person with a straightforward account and lawfully held, nonconfidential supporting information may decide to contact FinCEN directly using its current instructions.

Legal advice may be especially useful if you are unsure whether you qualify, have signed a confidentiality or separation agreement, are still employed by the institution, may have participated in the conduct, or possess documents that could contain SAR information, customer data, trade secrets, or privileged material. An attorney can help you think through what to provide and what not to provide.

Practical Advantages of Counsel

• Submission strategy: Counsel can help organize a clear timeline, identify the most material facts, and explain why the information may concern a covered violation.
• Confidentiality review: A lawyer can help flag SAR-related material, customer information, privileged communications, and other sensitive records before they are shared.
• Anonymous submissions: The law permits an individual to submit anonymously when represented by counsel, subject to program requirements. Identity must be provided as required before an award can be paid. Confirm the current process with FinCEN.
• Eligibility questions: Counsel can assess issues such as originality, voluntariness, prior government requests, or the individual’s own role in the conduct.
• Workplace concerns: An attorney can discuss potential retaliation protections and practical steps if you fear discipline, termination, or pressure to stay silent.
• Coordination: If the facts may involve more than one agency or a separate reporting obligation, counsel can help avoid inconsistent or unnecessary disclosures.

Hiring a lawyer does not guarantee an award, anonymity in every circumstance, or protection from every workplace consequence. It is also important to choose counsel familiar with whistleblower matters and financial-regulatory issues—not simply assume that any general practice attorney knows the program’s rules.

Protect SAR Confidentiality and Other Sensitive Information

Financial institutions generally have strict rules against disclosing a SAR or revealing whether a SAR has been filed. The confidentiality obligation can apply even when the person believes the disclosure would support a whistleblower report. Do not attach a SAR, quote its contents, or tell a customer or coworker that a SAR was filed unless you have received appropriate legal guidance and authorization.

Instead, https://dlf-ne.org/what-does-it-mean-when-a-site-says-it-is-not-a-law-firm/ focus on what you personally observed: transactions, instructions, monitoring practices, control overrides, or recordkeeping decisions. Describe the underlying conduct in your own words. Do not download or remove records you are not authorized to access, forward confidential files to a personal account, or use a work laptop for sensitive personal communications. Keep notes of your own recollections in a secure, lawful manner, and seek advice before preserving or sharing workplace documents.

What to Do Next: A Practical Checklist

1. Write down the facts. Note dates, people or roles involved, the process used, and what you personally know versus what you inferred. Be accurate about uncertainty.
2. Identify the possible legal issue. Consider whether the concern involves SAR obligations, structuring, CDD, records, sanctions, or another BSA-related matter. You do not need to prove a violation before reporting a concern.
3. Check the current FinCEN instructions. Visit fincen.gov and review the current whistleblower information and submission requirements.
4. Screen for sensitive material. Do not disclose a SAR or confirm its existence. Be cautious with customer data, privileged communications, and records you did not lawfully obtain.
5. Consider legal advice. Consult an attorney if anonymity, eligibility, confidentiality, possible personal exposure, or retaliation is a concern. If you want to submit anonymously, legal representation is part of the statutory process.
6. Use the designated channel. Follow FinCEN’s current process rather than sending sensitive allegations broadly to coworkers, customers, or the media.
7. Keep a record of your submission. Preserve confirmation details and copies of materials you lawfully submitted, without retaining confidential records improperly.

The Bottom Line

You do not need a lawyer to file an AML/BSA whistleblower report. The program is designed to receive original information about potential violations, and FinCEN is the place to check for current submission instructions. Still, the decisions around what to disclose, how to protect SAR confidentiality, and whether you meet the program’s requirements can be consequential.

If the facts are sensitive or your employment, identity, or eligibility is at stake, a lawyer can provide practical advantages in planning the submission. Whether you proceed with counsel or on your own, be factual, use authorized channels, protect confidential information, and do not treat a possible award as assured.